last executing test programs:

1.081200995s ago: executing program 1 (id=1200):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[], &(0x7f0000000000)=""/222, 0x33, 0xde, 0x1}, 0x28)
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x84, &(0x7f0000000000), 0x90) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x3000008, 0x13, r3, 0x1000) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)={0x2}) (async)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030007602c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046)

988.925192ms ago: executing program 1 (id=1203):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000140), 0x100000006)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r0, 0x0, 0x0, @void}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r4, r3, 0x4, r3}, 0x6)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0xfffffffffffffe51, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRES8=r2], 0xb0}}, 0x20004841)
unshare(0x40400)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000001a00000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000008caa5dfc9c35a9e57e1be42a9bc5f6c600000000000000000000000000ffffffff00000000"]}, 0x118)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'})

910.571403ms ago: executing program 1 (id=1206):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd8, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xd}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x40}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x4084)
setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x4, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x70bd29, 0xffffffff, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x30}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

851.703488ms ago: executing program 1 (id=1207):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00020b, 0xd, 0x0, &(0x7f00000007c0)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7d15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280), 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x1004)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r4 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="3222f0476ed4765dc271a2c4fc02", 0xe}], 0x1, &(0x7f0000001a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000801}], 0x1, 0x40)
recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x1, 0x2101, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000314230c7adcb5776f4958ec32ecc4c30f06000000300000080041007278336b1500e9ffffffff0800020073797aea88310400000008004100736977001400330076657468305f746f5f626fd050"], 0x60}, 0x1, 0x0, 0x0, 0x48845}, 0xc000)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2a, 0x6b, &(0x7f0000000080)="5fab413d270cec0465f5fc3f6da4cae37472246135260602e30ec7dc16531b8d0bb99da3dc71504f2176", &(0x7f0000000900)=""/107, 0x5, 0x0, 0xd4, 0x85, &(0x7f0000000a40)="5ae2bb912e49a234ba239fc69950ee7c06cf06fcdffe9a605d42aad4404830fd4ce0fe4bc5499f59528b69eaf04fa334fbe5e0beb95e2fd2b3c199eace71e075a9d5184c34c2f7a7b3a1ece9a4568f9b72cb8e0f4a65a1f0cdfe77586d32064da9e3185148d9431b610b558c094f28185e3187660483528fdcb5a8ae90534537aa1037a34730e02afc2c2c455978ecb0ad06f87fec2b214184ff07c9500cca477061d86a1431c6e5f307d8aeee58cf5928a8fb218d805435663ed681d39f98f7a9dae2def68ad04c413d12e5bd06bf81198841f0", &(0x7f0000000540)="2f4c3e58e889f32f1bb7278987b83562bd5903f37c2239c15ed8c4b48e9d8e6f43efd6306dabbb596e328aa06632c43a7b9e05d89f32957c47bb97f7cfbf4f5cef3c78b318856f1ce78466e4376ace142367efa489f0c8d1ef00cbae898d81cd2e01b9da31a420fb74045e18ff6476e2f6136982a9c59bbadc53b5628cc656f62abfa14fc3", 0x0, 0x0, 0x7f}, 0x50)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bdad, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="2d6e657420a6e2572a25e0fe16b2aef06760c84c205ff6a0dbb65094cc71367e73f68b88004e3f01195371ba5957584ad0697c3cc9c36d6b34e4b524"], 0x5)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff", 0x9}], 0x1}], 0x1, 0x40800)
connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0xa}, 0x6e)
unshare(0x26020480)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0xc, 0x9, 0x7, 0x14096, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xc}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x3, r9}, 0x38)
sendmsg$nl_route(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r6, @ANYRES16=r5], 0x134}, 0x1, 0x0, 0x0, 0x4040010}, 0x20048094)
socket$nl_netfilter(0x10, 0x3, 0xc)

611.080582ms ago: executing program 2 (id=1211):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x10}, 0xc)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e000900275f7848a641da9890bd7800000000000400000048031180ae", @ANYBLOB="a5e6"], 0x35c}, 0x1, 0x0, 0x0, 0x400a800}, 0x44891)

540.522167ms ago: executing program 2 (id=1212):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a010400000000000000000a0600010900010073797a31000000000900020073797a3200000000780004806400018009000100686173680000000054000280080007400000000108000540000000070800024000000004080003400000007e0800014000000010080006400000000c08000740000000000800064000000005080002400000000c080004"], 0xcc}}, 0x24000840)

456.027144ms ago: executing program 2 (id=1213):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500200012800800010067747000140002800800030001000700080001"], 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x80)
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r1, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_FAMILY={0x5, 0xd, 0x28}, @GTPA_LINK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8003}, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50)
socket$kcm(0x2, 0x3, 0x2)
syz_emit_ethernet(0xc6, &(0x7f00000004c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x15, 0x4, 0x0, 0x1a, 0xb8, 0x67, 0x0, 0xd, 0x11, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x12}, {[@end, @cipso={0x86, 0x3e, 0x3, [{0x1, 0x3, "8b"}, {0x7, 0x2}, {0x6, 0x7, "43e27af5d8"}, {0x7, 0xc, "d8f7748f52fd139e87af"}, {0x5, 0x8, "4a9c2724bcae"}, {0x7, 0xc, "09ccaded7c000d6e6684"}, {0x5, 0xc, "c93b20c7ca1568b69d37"}]}]}}, {0x4e20, 0x4e1d, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x2, "3768447981f9cd04ee4b2cce8bf8ee8b87578ee611ba12764e01247645cf2e8e", "0e1fe890cdbed2df7836d4e29d04d774", {"7b9d17cf8b0ff9cd64b189472262e6ef", "dc9b49bcf9af0c1b12a899970af7bc05"}}}}}}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000630002000000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0xcd, &(0x7f0000000140)=""/205, 0x0, 0x5}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'hsr0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x18, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4850)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7)
sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r8, 0x701, 0x0, 0x25dfdbfc, {0x41}}, 0x14}}, 0x24000040)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$LINK_DETACH(0x22, 0x0, 0x0)

311.381654ms ago: executing program 2 (id=1215):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r2=>0x0}) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x7, 0x5b, "0681df"}]}, 0x1c}}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6)
sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "cf"}]}, 0x24}}, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x2}, 0x1c) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f0000000d00)={'syztnl0\x00', <r11=>0x0, 0x20, 0x80, 0x8000, 0x45b2, {{0x1c, 0x4, 0x2, 0x4, 0x70, 0x67, 0x0, 0x25, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp_addr={0x44, 0x5c, 0xe2, 0x1, 0x7, [{@broadcast, 0xc}, {@empty, 0x5}, {@remote}, {@empty, 0xfffffff3}, {@multicast2, 0xf9ab}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x5}, {@multicast1, 0x5}, {@remote, 0x7}, {@local, 0x2}, {@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}]}}}}}) (rerun: 32)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000007c0)={<r12=>0xffffffffffffffff, &(0x7f00000006c0)='y*#@/\xb1[\\@{-\x00', 0x181100, &(0x7f0000000700)={@align=0x200, {0x7, 0xe, 0x3, 0x1}}, 0xfffffffb, &(0x7f0000000740)={@_ha_fsid}, &(0x7f0000000780)=0x3}) (async)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1e, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000050000000000000010000000180100002020782500000000002020207b1af8ff0000000007010000f8ffffffb702000008000000b70300005f0b00008500000006000000182b000004b2deb1895af90bd76cea2d1cf20837ad22f1f79f532162eeb6cba7d4ecbf9464ff01d2bbef5e36ed99be196d5276a008e6afea6403721864f42fded97a0c0568ee874133ac6f59d3c2464b2b789c99af658f10000000000800000000", @ANYRES32, @ANYBLOB="00000000030000009500000000000000"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x20, &(0x7f0000000900)=""/32, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0x1, 0x9, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000009c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000a00)=[{0x0, 0x1, 0x10, 0xb}, {0x0, 0x1, 0x3, 0x1}, {0x3, 0x1, 0x0, 0x4}], 0x10, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3e23e319126e8e3f, 0x200001b0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0xfffffffe, 0xe6, &(0x7f0000000340)=""/230, 0x21700, 0x30, '\x00', r11, @fallback=0xf, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x1, 0x2010, 0x10001, 0xb0}, 0x10, 0xffffffffffffffff, r13, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) (async)
r14 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001900000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
accept(r14, 0xfffffffffffffffc, &(0x7f0000000140))
r15 = socket$key(0xf, 0x3, 0x2)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r14, 0xc0385868, &(0x7f0000000280)={<r16=>r15, &(0x7f0000000180)='y*#@/\xb1[\\@{-\x00', 0x220000, &(0x7f00000001c0)={@align=0x7, {0xcf8b, 0xa, 0x7, 0x2}}, 0x5, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)}) (async)
r17 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r17, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003e40)=ANY=[@ANYBLOB="1400000043004844b2fddbdf"], 0x14}, 0x1, 0xba01}, 0x0) (async)
ioctl$VHOST_GET_VRING_ENDIAN(r16, 0x4008af14, &(0x7f00000002c0)={0x2, 0x10})

309.361057ms ago: executing program 0 (id=1217):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x108, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x6119a0e2}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x3f4e}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffff001}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xc7}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xad, 0x0, 0x7, 0x0, 0x8, 0x9, 0x2}}, {0x8, 0x2, [0x0, 0xa93]}}, {{0x1c, 0x1, {0x9, 0x4, 0x7, 0x400, 0x3, 0x4, 0x8, 0x7}}, {0x12, 0x2, [0x8228, 0x3ff, 0x9, 0x9e, 0xff, 0x0, 0x0]}}, {{0x1c, 0x1, {0x49, 0xe5, 0x8, 0x5, 0x0, 0x8000, 0x6, 0x3}}, {0xa, 0x2, [0xf22d, 0xd201, 0xe]}}]}]}, 0x108}}, 0x2004c004)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r5=>0x0})
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r6)
r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4048044)
r11 = socket(0x2d, 0x2, 0x0)
bind$xdp(r11, &(0x7f0000000080)={0x2d, 0x0, r3, 0xc}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x80, 0x20, 0x1, 0x5, {{0x16, 0x4, 0x0, 0x2e, 0x58, 0x64, 0x0, 0x6, 0x4, 0x0, @loopback, @remote, {[@lsrr={0x83, 0x7, 0xb6, [@empty]}, @end, @cipso={0x86, 0x2e, 0x3, [{0x1, 0x6, '$1sc'}, {0x6, 0xf, "f722b58f4a88e4821e7212c431"}, {0x2, 0x9, "4ca934e922741c"}, {0x2, 0xa, "d51d392deefbbfbc"}]}, @generic={0x44, 0xa, "7c0e7c7b9412f93f"}, @ra={0x94, 0x4, 0x1}]}}}}})
r12 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r14, &(0x7f00000000c0)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r15, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
bind$packet(r12, &(0x7f0000000040)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @remote}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x40, 0x1, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, 0x7, 0xf920, 0x7, 0x7000000}})
sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000480)={&(0x7f0000000000), 0xc, &(0x7f0000000440)={&(0x7f0000000840)=ANY=[@ANYBLOB="a8000000", @ANYRES8=r13, @ANYBLOB="000804000000ffdbdf2517000000200001801400020062726964676530000000000000000000080003000200000030000180140002006d616373656330000000000000000000080003000000000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0400018040000180080003000200000008000100", @ANYRES32=r5, @ANYBLOB="080001207ea6a59ce61e18f5a7df931d8ffe0b54a23b7a21909498469727bb291c5454e1e80437b95b37d9e7b630d02ebd705a5184578556de9f2d923e3b100d52832f9be46861660305d2f1e7d70ade1f9681afc9a87e50eafead1356421b3641af4f588af2baf03544e60a57562cbc70c185c2a86d807aafa22f9b5ee92e49c6bfb59c30be6d6d7f8cc51f1eca60de213029cd28113a37cc96f73f364a20f3eda5d0", @ANYRES16=r14, @ANYBLOB="0800ec0f21461403e25b70baf00d0100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES16=r2, @ANYBLOB="14000200766972745f7769666930000000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x24004010}, 0x8080)

240.210498ms ago: executing program 2 (id=1218):
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc080)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0)
socket(0x21, 0x2, 0x0) (async)
socket(0x21, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}], 0x1, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0x2}]}]}}, &(0x7f0000000f40)=""/4089, 0x42, 0xff9, 0x1}, 0x28)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)

171.368434ms ago: executing program 0 (id=1219):
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='#@#\\-!]&%{!\x00', 0x80200, &(0x7f0000000040)={@_ha_fsid={[0x2, 0xdb]}, {0x401, 0x1, 0x7fffffff, 0x9}}, 0x5, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x40})
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000140))
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x28ce)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x64, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x79}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xa8}, @ETHTOOL_A_COALESCE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x9}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x1000}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x20040004)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000380)={'team0\x00', @multicast})
r2 = accept4$bt_l2cap(r0, &(0x7f00000003c0)={0x1f, 0x0, @none}, &(0x7f0000000400)=0xe, 0x80800)
connect$bt_l2cap(r2, &(0x7f0000000440)={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xe1a4, 0x2}, 0xe)
connect$802154_dgram(r0, &(0x7f0000000480)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14)
ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0))
sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xa000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@newtclass={0x34, 0x28, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xfff3, 0xb}, {0xffff, 0xffff}}, [@tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80c4}, 0x4008080)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000600)=[@in6={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}], 0x1c)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000640)={0xfffffffa, 0x0, 0x9, 0x80000000}, 0x10)
r3 = openat$cgroup_ro(r0, &(0x7f0000000680)='memory.stat\x00', 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f00000006c0)={'tunl0\x00', <r4=>0x0, 0x80, 0x7f09, 0x3, 0x4, {{0x2c, 0x4, 0x1, 0x1, 0xb0, 0x67, 0x0, 0x81, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@timestamp_prespec={0x44, 0x24, 0x91, 0x3, 0x6, [{@loopback}, {@remote, 0x9}, {@multicast2, 0xc5e}, {@private=0xa010101, 0xa3b8}]}, @timestamp={0x44, 0xc, 0xad, 0x0, 0x3, [0x2, 0xf]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x11, "a54b75e99c81cf368a423565a7fc58"}, @timestamp={0x44, 0x14, 0xd6, 0x0, 0x7, [0x4, 0x3, 0x6, 0x9]}, @lsrr={0x83, 0x7, 0x10, [@multicast1]}, @rr={0x7, 0x2b, 0xb3, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3e}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xdc, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x18, 0x8, 0x1, 0x7, 0x20000, r3, 0xffff8001, '\x00', r4, r0, 0x0, 0x1, 0x4}, 0x50)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000880)={<r5=>0x0, 0x93, 0x6, [0x5, 0x7ff, 0x2721, 0x40, 0x8, 0x7]}, &(0x7f00000008c0)=0x14)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000900)={r5, 0x2}, 0x8)
r6 = accept4$unix(r2, &(0x7f0000000940), &(0x7f00000009c0)=0x6e, 0x800)
r7 = accept4$unix(r6, &(0x7f0000000a00), &(0x7f0000000a80)=0x6e, 0x800)
ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000000ac0)={{0x0, 0x10000, 0x4, 0x80, 0x6, 0x0, 0xf12c, 0x5, 0x7f, 0xffffffff, 0x5, 0x7, 0x7, 0x9, 0x32e}})
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001b00), r0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x48, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_macvtap\x00'}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7b}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c0}, 0x80)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001c40)=0x3ff, 0x4)
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001f80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001cc0)={0x248, 0x13, 0x100, 0x70bd2d, 0x25dfdbfc, {0x3, 0x5, 0xa1, 0x9, {0x4e21, 0x4e22, [0xa, 0x5, 0xfffffffa, 0x80], [0x1, 0x10000, 0x2, 0xfffffffd], r4, [0xfff, 0xffffff00]}, 0x0, 0xff}, [@INET_DIAG_REQ_BYTECODE={0xe6, 0x1, "f4c5399c17615d77e66b0242957fc444e0f24c289713447fec7dd09199eecada7f6a57c2b4aa7515c898c044d2f192ffbc257afc17c447170775853611fe7e858ff95a7ea23dcb3363e78c17a21077e6848f0537423c182dd5ceffee82be76c73ae7de1e47dc32110e806288dd2edbc67269daf72333e7d0d41fe6f5dac44452692467831fdafaf0f4f25b383d236d3f37e89e33d125887cc3cbb92022c1cc203b74eb8f6b52c52a1ffb1463c00e36ae2ddb2debe89d41316d17e2ffff953ce5c2c62e98154a8a8f22c873ecc801e5dac9f42c168f6f212dcaead5879c8436deb1c9"}, @INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "40775f6715c6f77d3202f0d918accd3d12f685c7d99a8cf6fc334db0236e4030b838e64a3a19892dde4949f2b9c30a70565d9e90a681adeaa19ffab855cf9754a3ddd49b3cdca05b2e889e0565538e21263dcd4df30757c9f6be34055a883f014560263ab28e3c10e424f77009e0fbad312dc69503c56cf5fa381d7b5c50e1753382368ec80566668dfddf750e160542e84816dfe30793ba7431d1a9372b05c1c7ec1c7e"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "a562cae261b47b8f56fa03682b02e2748117e9f26661e7c32528abe15be324ab1bda5117f9e278e6ce9594e0e0fb2d1147f6ced51a46f051764181683de09a48578cd63b51f3dd8f772ad3eb4b012f4739eb60ae5026738e9f6342e531f59b60298d61f8c16c06c8"}]}, 0x248}, 0x1, 0x0, 0x0, 0x80c0}, 0x80)
connect$inet6(r3, &(0x7f0000001fc0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x10}, 0x1c)
openat$cgroup_ro(r3, &(0x7f0000002000)='cpuset.effective_cpus\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002140)={&(0x7f0000002080)={0x88, 0x0, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7fffffff}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x33}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x408f4}, 0x1)

170.212339ms ago: executing program 0 (id=1220):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x3403, 0x829}}, 0x20}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'pimreg\x00'})

167.634416ms ago: executing program 2 (id=1221):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f00000001c0)=0x8)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$inet6_sctp(0xa, 0x6, 0x84)
setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000480)={0x0, 0x0, 0x7, 0x2b, @vifc_lcl_addr=@local, @broadcast}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e657269"], 0xe0}}, 0x0)
sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4004080}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030073797a320000000083df0a63f183422e4215036c08a6377775327d731a22565a505990290b084f38d7af564b530c79f51a3b1c74ad86292d882cae"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$bt_hci(r8, &(0x7f0000000040), 0x6)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10)
listen(r5, 0x3)
sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085)
socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000380)="d6", 0x1}], 0x1)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000540)="480000001400190d09004b87000000000000006080ffe00600004e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000000001895a9eab28438823aba7f9b2dc4274390ccf715f256a710e20fe9c4a026e9c7b304238b7f73829772c86f85480cb58e78186648f9f583", 0xab}], 0x1)
sendfile(r0, r3, 0x0, 0x20000000002)

90.880261ms ago: executing program 0 (id=1222):
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000800)='//', 0x2}], 0x1) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async, rerun: 64)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') (async, rerun: 64)
close(r0) (async)
pipe(&(0x7f0000000500)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="300000001aeb0100000000000000000002000000000000000000000014000500ff01000000000000000000f768260a011b75d8855b29b9b1ffeda1deb8e1b0eb015f98b01a3b6d05539b68e1db351667ad6ffa2e2e"], 0x30}, 0x1, 0x0, 0x0, 0x60080c1}, 0x0) (async)
splice(r3, 0x0, r1, 0x0, 0xffffffbfffff8000, 0x8) (async, rerun: 32)
close(r4) (rerun: 32)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}]}, 0x4c}}, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = epoll_create1(0x0) (async)
r9 = socket(0x1d, 0x2, 0x6)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1a000, r9, &(0x7f0000000000)={0x10000000})
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r9, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000840)={0x74, r10, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xffff}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x10}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40804) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x5]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) (async, rerun: 64)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r12) (async)
r14 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r14, 0x10f, 0x87, &(0x7f0000000000)={0x800042, 0x0, 0x3}, 0x10) (async)
close(r14) (async, rerun: 64)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x74, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee213459a7a00"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dda68b670d43ccc4132a38faeb274cffdacd3ad22243a4c365077f42e9e6280b"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}]}]}, 0x74}}, 0x40000) (rerun: 64)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"/334], 0x170}}, 0x4084)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0)

90.428003ms ago: executing program 0 (id=1223):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000200)=0x7, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff3}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff3}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_int(r1, 0x1, 0x5, 0x0, &(0x7f0000000280)) (async)
getsockopt$sock_int(r1, 0x1, 0x5, 0x0, &(0x7f0000000280))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0x2}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x68800}, 0x80)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r4=>0x0})
pipe(&(0x7f0000000c00)) (async)
pipe(&(0x7f0000000c00)={<r5=>0xffffffffffffffff})
r6 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f00000004c0)={0xe0000012}) (async)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f00000004c0)={0xe0000012})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r4, @ANYRESDEC=r9, @ANYRES32=r3, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r5, 0x89e5, &(0x7f0000000000)={0x41, "058e452eb078f6013da9cc6c31cd09c62f5ff6f02de4f7f0947675d7242bd31ae8835453020391afdc9e78067936616788204e9e56a6406a0567802dcae65034456a4c293d4347735854be8b64e3a96dadb9f477d716e124e41a5cb339971d3b7d1671032ef5dee086a1145b49526b3639c4f74c768873c596e500713e301054"})

1.434551ms ago: executing program 1 (id=1224):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000700000000000000fdffffff850000002700000085000000a000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0}) (async)
ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000002c0)={<r5=>0xffffffffffffffff, &(0x7f00000000c0)='taprio\x00', 0x400, &(0x7f0000000200)={@_ha_fsid={[0x8, 0x6]}, {0x0, 0x80, 0x9, 0x4}}, 0xfffffff2, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x6}) (async, rerun: 64)
syz_extract_tcp_res(&(0x7f0000000340), 0x7, 0x4a80) (async, rerun: 64)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8, 0x1b, 0xb}]}, 0x30}}, 0x0) (async)
close(0x3) (async)
syz_extract_tcp_res(&(0x7f0000000380)={0x41424344, <r8=>0x41424344}, 0x7, 0x0)
write$tun(r5, &(0x7f0000000840)={@val={0x0, 0x201}, @val={0x2, 0x0, 0x0, 0x7, 0x7, 0xb}, @ipv6=@tcp={0x6, 0x6, "f1bcf1", 0x32d, 0x6, 0xff, @mcast1, @empty, {[@dstopts={0x2f, 0x5, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @pad1]}, @routing={0x32, 0x10, 0x0, 0x3, 0x0, [@private2, @remote, @loopback, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @mcast2, @remote]}, @dstopts={0xc, 0xf, '\x00', [@hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x40, {0x2, 0xe, 0xa0, 0x1, [0x0, 0x0, 0x425ea370, 0x4, 0x3, 0x1ff, 0xc90c]}}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @ra={0x5, 0x2, 0x6}]}, @fragment={0x3c, 0x0, 0xff, 0x1, 0x0, 0x1c, 0x65}, @srh={0x33, 0x2, 0x4, 0x1, 0xd5, 0x8, 0xb697, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @hopopts={0x5e, 0x6, '\x00', [@hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x20, {0x1, 0x6, 0xb, 0x81, [0x8, 0x42570a94, 0x2]}}]}, @routing={0x0, 0xc, 0x2, 0x8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2b}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @remote, @mcast1, @empty]}], {{0x4e23, 0x4e20, r8, r8, 0x0, 0x0, 0x16, 0x10, 0x10c, 0x0, 0xfff, {[@window={0x3, 0x3, 0x9}, @sack={0x5, 0x16, [0x8, 0x0, 0x8, 0x3ff, 0x0]}, @eol, @sack_perm={0x4, 0x2}, @mss={0x2, 0x4, 0x6}, @window={0x3, 0x3, 0x40}, @generic={0xfe, 0x9, "dc6090a747e74b"}, @mss={0x2, 0x4, 0xb}, @md5sig={0x13, 0x12, "60de20dbf22f786e38f0b4f092d4d8f3"}, @eol]}}, {"95b0a48ac97a3ccff723c8ac96fa435fe98c101d2610c6eb3b46669ca1a93c82168f27eb18653bee9146f180db92a543bd18410ca9dd6cf236b8f557ccaec73d1b9b50f7ac2ac7b8ed8a7c476fb2b287431061a809c9b19e349edc8afc0712b02cee1213b901aa6b26fc96027a57d4bffd06f8862fdf553b212d1d5a0c11eb2eb9109a0436a583633b1718411e058c9fcf0d80f6ea26c2fbd00c0b8f80d14237d932a7772b1417a0a8854cd0b7b63536d4a9298bc1f26de21ee007c6368d8f0a8bdaf5e253"}}}}}, 0x363) (async, rerun: 64)
r9 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r10 = socket$kcm(0x29, 0x0, 0x0) (async)
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 32)
setsockopt$packet_fanout_data(r11, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x1d, 0x0, 0x1, 0xfffff034}, {0xb1}, {0x6, 0x0, 0x0, 0x7}]}, 0x10) (rerun: 32)
read(r10, &(0x7f0000000040)=""/68, 0x44) (async)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xc4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1], 0x1, [0x5, 0x4, 0x2, 0x0, 0x401, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x63a, 0x0, 0xfff8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x5}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x19e, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0xc4}}, 0x0) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000500)=[@in={0x2, 0x4e21, @multicast1}, @in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0xff}, @in6={0xa, 0x4e24, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}], 0x48) (async, rerun: 64)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x44}}, 0x0) (rerun: 64)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742d123e8680d85ff0082762f", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000400000007b8af8ff00000000bfa000000000000007020000f8ffffffb703000008000000b704000000000000850000000c00000095"], &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x100a, &(0x7f0000001e40)=""/4106, 0x0, 0xc}, 0x94)

716.31µs ago: executing program 0 (id=1225):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x401, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9b, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x7aac, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x401, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x401, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9b, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x7aac, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x401, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x200000000000011, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async)

0s ago: executing program 1 (id=1226):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x801, 0x0, 0x0, {0xf}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSET={0x514, 0x9, 0xa, 0x301, 0x0, 0x0, {0x4}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_USERDATA={0x53, 0xd, 0x1, 0x0, "c42bced4b8b68d7802ecd29896bfa7e35dbe6cd1994aa8366a80a65a3dde14ffe93b712c86dc82dc0d2f2a89557e437fb2a5ac4f1b7ae2c08f563ba654533dfef1b6ddca3522c8b38e704bf1854d1f"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x98, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x64, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DESC={0x3e4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x120, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xab68}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x68}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x293}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc037}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x300}]}]}, @NFTA_SET_DESC_CONCAT={0xdc, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xeb0e}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x79a}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3e01}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0xe4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6a}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x100, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x225a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfbe}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}]}], {0x14}}, 0x558}}, 0x40085)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000640)={0x0, 0x1, 0x6, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000680)='wg1\x00', 0x4)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x100010, r0, 0x630a1000)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
vmsplice(r1, &(0x7f00000008c0)=[{&(0x7f00000006c0)="c1def3053f0cd9aafabbc0e3b01ad4a5b01cb7e517b6b584f42b88f7aed41bbaf08d1d7c5e6c468e043ef39362a6daa8e363f02ef8e7ef306d322bf439c821115f1f1d3513ff23e2afede3f42c112ba5d733b5807b120089dc75d35ae7cc1df15c6043bbea89d1aff728c941a7c5feb7b7aad18968b823571081463fcaafa689b46a804ca1b747eed6f7bba40d8bc7b40cd067b445bc2a4ff33b8c51cdb272c8b184cc9d7bc398c21aa3d263caf311626b425cbc4e", 0xb5}, {&(0x7f0000000780)="c31421208d2b914100d59c9178ebf0ebbaa8dc1d41805a86b50934192cb67f63c3963875ecc1f3c6ffa5c07eac4686b139ebc152ab095efb206bf9d5a6c373e42424ffdc323880fb43409831c32a3a344ac57cc6de8c9631de9cf23db8566fdeeb03d72b931ca20d31838b40f39b6275f4947746618e2db5b0bfb468a9ec9d576fe28acf0af7aae72f07094e231f99158312136b9dfb63ef48f8466fe95bae932c2e46d059bc535604004cec0fb1a767d06912aeca68dc8741dcf6554bb5ef5ee27a9f8aa3645134f2b99375fad1c92eff9b84ac9841123a0b16d2e097c7b82020b4b16b2e3599f4f723d8ec63", 0xed}, {&(0x7f0000000880)="793bb75d14b8", 0x6}], 0x3, 0x0)
r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000900), &(0x7f0000000940)=0x10)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
sendmsg(r0, &(0x7f0000000fc0)={&(0x7f0000000980)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a00)="2d450a97ea51089d066b2c0287f1eead047d9e055010c48577ccf6d53bb4cbae46782bfd9d523bda734abb332d79a2d65b7e724f37a22151d726f8aaf874e85af890f706fc4b6e2a219a96467d3912a6ea51d89133d5df9461343958f78671e0d825400b6cc9864fead2", 0x6a}, {&(0x7f0000000a80)="2a794f9f318cbbcd", 0x8}, {&(0x7f0000000ac0)="27afc0109de48918794961378b17b124ce3cfe867cc305a84eec12f7ea2d610372bce563a2c4359b925860", 0x2b}, {&(0x7f0000000b00)="22cc145f5854c29244f39dd60e02317e0d3497e3e78c5cea0137602b90be75ba52725a294be6dfbba9680e04a9de7d5ada7028aca353fe64ea207c4c969e2931a917a12cb569e350253560c04fa2505c3f3e0dd7438fbba87e21bf97ba485f38f06ba823f56e3f40eda362e8ea1723b105156d6e1f72beb140e1e890ce6bb7c3d8760a446a7298d477e55219dcf6f1aeb4a61ccf070911ca6666eb7c9eff7ac8e3212673b77196e85fa302d5ae388756d1233356b4c3fcfd9cd63d23c7c553279cdf3921b2e69e7d38abcc9977ec15cbc4a6bae4a8783d7b0f9d749f0ebff44d9ba66cc0e0", 0xe5}, {&(0x7f0000000c00)="19d3def6103fc322488fc0c079b6dceca1f0ac2618a6138d3b9386fefcd9fe053a2a30099fc24fb09ad28cc9c8014060e9b3d628a618fadc663d3ba1310babf6ff854973962db9d8aa9b6aa19935418e4fd69654d5029ad0b0df717499b304a5cbba898efb600605b8ebf39782011ed2ae08af004bf207a19132f7a04c3e6085d67ebd434453897273fc817b038d36f8610e571454194dbca6fc38465a83d303b8b91d9feee2247204c170899ee8e8d50b6ef34ca43a7d7811ba6043d38c302207b8e1692c3067310687caf3fcb16f63538de80c6c988a", 0xd7}], 0x5, &(0x7f0000000d80)=[{0x28, 0x119, 0xd641, "ad14ab30f7ee9a692c7f24f797143e50a537f17517d6f1"}, {0x80, 0x116, 0xb3fe, "d9f924321264d5fd0c8b324d6a2a5706f7efef938b4285b74c7cf3219cc7c056f46070e6124f71150b8bd50085a55e43d02cb9af89e563e473b85d088decfcb1cfef340f79ceaaaa22446afc78d8692715f846379dc2a94bbf30fcd4239b57d83c783a415d13ea4f7e45"}, {0xc0, 0x1ed, 0xfffffe00, "4d01ba0edce4ce25cd61e349df606f1201f2d173272dcea9db9959e7bd233506b43d1714ce89a5ed26f282380e0a6c2e42eff497bdb61e91a4d28f34af43c7509bb28c69579caeabc0623cf25c06b575d22490498fa56146aed217edf5cc92312147e0dbaf8eb75815a28fc2124f7f9800ee88c3f3f7c207f87f29a058463de6bae6680d4536c5e684d500c158c735e7120e84625d5581c0de1a03f48cc5d0af094a0b7418d25abe7a"}, {0x90, 0xff, 0xb1c, "ba694dd6814b3b572328f322d8c05304744dcd81eda70808ed70deea6e448dfabd38511f03029937e3c4db4f5f4c6b8f5b229830d641b2647167b2ad9e2fe0fc5f96134e2ba47d169c7485d6fc58d75212ca47ead89f28e706aa407abb92b8784f6fbe02a37198b5f7c4e7038da224069f43428e9dfeb377adc301"}, {0x20, 0x1, 0x6, "55e717ba6d7a34f69628efadbfdde332"}], 0x218}, 0x4040)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001440)={'batadv0\x00', <r3=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0x58, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001540)={'vxcan0\x00', <r5=>0x0})
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000001000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000001040)="a61ba6afea311f046b52df70fe40f6fe8b65ce8042cc3c3a6c00d4ae5805da84af4ca81027a613eb4d9913cd01b9e2354564", 0x32}, {&(0x7f0000001080)="4254aa98145635e4e1191acfee9f2d18acd7202123212c7d8ab669415e9e183faa43db9d7b7c886c308123c7629da67309163984ee5ec5d1d8b8a67a11d91b6cc36deb75a091f724143f490ff3952579687c27cb526e08571b788c914627c5b3e37dbd38732f65a1bdd9e37ae55407fbff58f98e5a60653f0e7c16d90daea2b6b15462bf258f3050b896d4fae9a93678a010a7338a7748a1f61b7e07d740108b9812805a6def9a04c928b4bc731b34", 0xaf}, {&(0x7f0000001140)="f6a60b6c51058cec860b94d142d74d0c4ffd18e3ab79eb8b92967894c37d5fbc9b5f997abf35b940fa1a633edbb59e6f371939db845d2533793699703baf84bb31d229b7f340fcd86ab95f8f6f61c3599f54a436c278c11b1f28a26bca5b8267e4f428b9b87c93b43108c4bb325f3a", 0x6f}, {&(0x7f00000011c0)="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", 0xfc}, {&(0x7f00000012c0)="31e4b497601dc55a4cae73a5637e3f5f0adb40b0197b91b8abfad3f1e9ed7a04cc743fca446ae95ff76c30d081a0193d195a9826dd8f8bf31d7db9885156286a06a408dbf4d21dfe31ddc9d113aca3d4aabc10a2537d3b03cc9d42a185b556de2310115b1a50135bbdcc5caf814628a71f18a72fad6cb30a7a97fd82607f80116439444461a8ebe88d6cb99af5767bbbc262a772ede3c6b838e87fef95f5fb7e24e09f0b0c0afb9239ad4185b80175dec6b0e39d8d976350d2d4d63289417987ed71e5e0ebb00ce818ad65a62d970d97d5b5cc41101df74eb5", 0xd9}], 0x5, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010102, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}], 0xa8}, 0x40000)
pipe(&(0x7f0000001680)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001700), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{r6, <r9=>0xffffffffffffffff}, &(0x7f00000016c0), &(0x7f0000001740)=r8}, 0x20)
r10 = socket$netlink(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_QGROUP_CREATE(r8, 0x4010942a, &(0x7f00000017c0))
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000001800)=0x400, 0x4)
r11 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$sock_SIOCBRADDBR(r11, 0x89a0, &(0x7f0000001840)='syzkaller1\x00')
ioctl$BTRFS_IOC_SCRUB_CANCEL(r7, 0x941c, 0x0)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000001880)=0x9, 0x4)
sendmsg$nl_route(r10, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)=@ipv4_newroute={0x2c, 0x18, 0x20, 0x70bd28, 0x25dfdbfb, {0x2, 0x20, 0x0, 0x9, 0xff, 0x2, 0xc8, 0x5, 0x100}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_GATEWAY={0x8, 0x5, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41)
write(r10, &(0x7f00000019c0)="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", 0x1000)
getsockname$packet(r0, &(0x7f00000029c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002a00)=0x14)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r9, &(0x7f0000002a40)={0x50000009})
connect$can_bcm(r6, &(0x7f0000002a80), 0x10)

kernel console output (not intermixed with test programs):

50:50:50
[   64.329549][ T3385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.336316][ T3385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.517814][ T5681] IPVS: starting estimator thread 0...
[   64.526684][ T5745] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   64.576223][ T5747] Zero length message leads to an empty skb
[   64.584786][ T5753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'.
[   64.590157][ T5753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'.
[   64.601710][ T5753] netlink: 6 bytes leftover after parsing attributes in process `syz.2.8'.
[   64.618998][ T5746] IPVS: using max 85 ests per chain, 204000 per kthread
[   64.621027][ T5756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'.
[   64.627064][ T5753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'.
[   64.630642][ T5753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8'.
[   64.633935][ T5753] netlink: 6 bytes leftover after parsing attributes in process `syz.2.8'.
[   64.771496][ T5774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'.
[   64.775125][ T5774] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13'.
[   64.785588][ T5774] netlink: 'syz.0.13': attribute type 11 has an invalid length.
[   64.893093][ T5782] IPVS: length: 24 != 1272
[   64.902088][ T5782] IPVS: length: 24 != 1272
[   64.904311][ T5782] IPVS: length: 24 != 1272
[   64.905972][ T5782] IPVS: length: 24 != 1272
[   64.908910][ T5782] IPVS: length: 24 != 1272
[   64.911889][ T5782] IPVS: length: 24 != 1272
[   64.917452][ T5782] IPVS: length: 24 != 1272
[   64.922587][ T5782] IPVS: length: 24 != 1272
[   64.926713][ T5782] IPVS: length: 24 != 1272
[   64.932643][ T5782] IPVS: length: 24 != 1272
[   64.935799][ T5782] IPVS: length: 24 != 1272
[   64.937707][ T5782] IPVS: length: 24 != 1272
[   64.942797][ T5782] IPVS: length: 24 != 1272
[   64.949350][ T5782] IPVS: length: 24 != 1272
[   64.952919][ T5782] IPVS: length: 24 != 1272
[   64.957476][ T5782] IPVS: length: 24 != 1272
[   64.965396][ T5782] IPVS: length: 24 != 1272
[   64.970464][ T5782] IPVS: length: 24 != 1272
[   64.978814][ T5782] IPVS: length: 24 != 1272
[   64.989569][ T5782] IPVS: length: 24 != 1272
[   64.997858][ T5782] IPVS: length: 24 != 1272
[   65.004790][ T5782] IPVS: length: 24 != 1272
[   65.014548][ T5782] IPVS: length: 24 != 1272
[   65.020136][ T5782] IPVS: length: 24 != 1272
[   65.025290][ T5782] IPVS: length: 24 != 1272
[   65.031463][ T5782] IPVS: length: 24 != 1272
[   65.036331][ T5782] IPVS: length: 24 != 1272
[   65.041165][ T5782] IPVS: length: 24 != 1272
[   65.046869][ T5782] IPVS: length: 24 != 1272
[   65.057028][ T5782] IPVS: length: 24 != 1272
[   65.072437][ T5782] IPVS: length: 24 != 1272
[   65.077167][ T5787] syz.0.17 uses obsolete (PF_INET,SOCK_PACKET)
[   65.083742][ T5787] syzkaller1: entered promiscuous mode
[   65.085694][ T5787] syzkaller1: entered allmulticast mode
[   65.091803][ T5782] IPVS: length: 24 != 1272
[   65.093562][ T5782] IPVS: length: 24 != 1272
[   65.111639][ T5782] IPVS: length: 24 != 1272
[   65.117832][ T5782] IPVS: length: 24 != 1272
[   65.119669][ T5782] IPVS: length: 24 != 1272
[   65.122728][ T5782] IPVS: length: 24 != 1272
[   65.124422][ T5782] IPVS: length: 24 != 1272
[   65.126916][ T5782] IPVS: length: 24 != 1272
[   65.131048][ T5782] IPVS: length: 24 != 1272
[   65.134365][ T5782] IPVS: length: 24 != 1272
[   65.136674][ T5782] IPVS: length: 24 != 1272
[   65.144001][ T5782] IPVS: length: 24 != 1272
[   65.148177][ T5782] IPVS: length: 24 != 1272
[   65.151240][ T5782] IPVS: length: 24 != 1272
[   65.153049][ T5782] IPVS: length: 24 != 1272
[   65.155029][ T5782] IPVS: length: 24 != 1272
[   65.156869][ T5782] IPVS: length: 24 != 1272
[   65.159712][ T5782] IPVS: length: 24 != 1272
[   65.161181][ T5782] IPVS: length: 24 != 1272
[   65.162626][ T5782] IPVS: length: 24 != 1272
[   65.164111][ T5782] IPVS: length: 24 != 1272
[   65.165579][ T5782] IPVS: length: 24 != 1272
[   65.167054][ T5782] IPVS: length: 24 != 1272
[   65.170283][ T5782] IPVS: length: 24 != 1272
[   65.171977][ T5782] IPVS: length: 24 != 1272
[   65.173509][ T5782] IPVS: length: 24 != 1272
[   65.175096][ T5782] IPVS: length: 24 != 1272
[   65.176691][ T5782] IPVS: length: 24 != 1272
[   65.178613][ T5782] IPVS: length: 24 != 1272
[   65.180258][ T5782] IPVS: length: 24 != 1272
[   65.181842][ T5782] IPVS: length: 24 != 1272
[   65.183352][ T5782] IPVS: length: 24 != 1272
[   65.185805][ T5782] IPVS: length: 24 != 1272
[   65.187344][ T5782] IPVS: length: 24 != 1272
[   65.272142][ T5791] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.289146][ T5791] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.355290][ T5793] netlink: 'syz.1.20': attribute type 1 has an invalid length.
[   65.860285][ T5622] Bluetooth: hci0: command tx timeout
[   65.863015][   T54] Bluetooth: hci1: command tx timeout
[   65.863017][ T5623] Bluetooth: hci2: command tx timeout
[   66.119596][ T5820] warning: `syz.1.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.131345][ T5820] dvmrp6: entered allmulticast mode
[   66.173775][ T5820] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   66.271131][ T5825] netlink: 'syz.1.31': attribute type 10 has an invalid length.
[   66.275898][ T5825] openvswitch: netlink: Flow key attr not present in new flow.
[   66.550441][ T5837] tipc: Started in network mode
[   66.558539][ T5837] tipc: Node identity ac14140f, cluster identity 4711
[   66.573506][ T5837] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   66.702997][ T5841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.906219][ T5844] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[   66.951378][ T5852] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[   67.010191][ T5862] ip6tnl1: entered allmulticast mode
[   67.697091][   T10] cfg80211: failed to load regulatory.db
[   67.723196][ T5889] syz_tun: entered allmulticast mode
[   67.851756][ T5479] nci: nci_ntf_packet: unknown ntf opcode 0x132
[   67.940789][ T5622] Bluetooth: hci2: command tx timeout
[   67.941007][   T54] Bluetooth: hci0: command tx timeout
[   67.942902][ T5623] Bluetooth: hci1: command tx timeout
[   67.959760][ T5901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.027683][ T5902] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   68.033448][ T5902] bond1 (unregistering): Released all slaves
[   70.018713][   T54] Bluetooth: hci0: command tx timeout
[   70.028266][   T54] Bluetooth: hci1: command tx timeout
[   70.028387][ T5623] Bluetooth: hci2: command tx timeout
[   70.629556][ T5889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   70.715676][  T799] IPVS: starting estimator thread 0...
[   70.828410][ T5906] IPVS: using max 84 ests per chain, 201600 per kthread
[   70.863100][ T5913] __nla_validate_parse: 10 callbacks suppressed
[   70.863112][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'.
[   70.871079][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.50'.
[   70.882578][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.51'.
[   70.940280][ T5911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   70.945579][ T5917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   70.946633][ T5921] netlink: 'syz.0.53': attribute type 3 has an invalid length.
[   71.053145][ T5924] netlink: 44 bytes leftover after parsing attributes in process `syz.2.56'.
[   71.062122][ T5924] netlink: 43 bytes leftover after parsing attributes in process `syz.2.56'.
[   71.065854][ T5924] netlink: 'syz.2.56': attribute type 5 has an invalid length.
[   71.074689][ T5924] netlink: 43 bytes leftover after parsing attributes in process `syz.2.56'.
[   71.214188][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'.
[   71.277494][ T5937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.448190][ T5950] netlink: 32 bytes leftover after parsing attributes in process `syz.0.63'.
[   71.500746][ T5954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.64'.
[   71.636349][ T5961] netlink: 96 bytes leftover after parsing attributes in process `syz.2.65'.
[   71.641692][ T5962] netlink: 'syz.0.66': attribute type 3 has an invalid length.
[   71.646424][ T5961] vlan2: entered allmulticast mode
[   71.649779][ T5961] gretap0: entered allmulticast mode
[   72.231668][ T5997] gtp0: entered promiscuous mode
[   72.233942][ T5997] gtp0: entered allmulticast mode
[   72.911109][ T6029] netlink: 'syz.0.81': attribute type 4 has an invalid length.
[   73.044372][ T6034] batman_adv: batadv0: Adding interface: dummy0
[   73.057492][ T6034] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.079872][ T6034] batman_adv: batadv0: Interface activated: dummy0
[   73.127584][ T6034] batadv0: mtu less than device minimum
[   73.137694][ T6034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.142492][ T6034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.147059][ T6034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.151201][ T6034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.155202][ T6034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.159634][ T6034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.163537][ T6034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.167179][ T6034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.170887][ T6034] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.365709][ T6057] team0: entered allmulticast mode
[   73.375782][ T6057] team_slave_0: entered allmulticast mode
[   73.407713][ T6057] team_slave_1: entered allmulticast mode
[   73.524948][ T6059] team0 (unregistering): left allmulticast mode
[   73.529751][ T6059] team_slave_0: left allmulticast mode
[   73.534851][ T6059] team_slave_1: left allmulticast mode
[   73.561176][ T6059] team0 (unregistering): Port device team_slave_0 removed
[   73.592998][ T6059] team0 (unregistering): Port device team_slave_1 removed
[   74.490213][ T6108] netlink: 'syz.1.93': attribute type 3 has an invalid length.
[   74.494295][ T6106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   74.497062][ T6106] syzkaller0: entered promiscuous mode
[   74.502233][ T6106] syzkaller0: entered allmulticast mode
[   74.545532][ T6106] tipc: Resetting bearer <eth:syzkaller0>
[   74.553509][ T6105] tipc: Resetting bearer <eth:syzkaller0>
[   74.566116][ T6105] tipc: Disabling bearer <eth:syzkaller0>
[   74.703887][ T6115] vlan2: entered promiscuous mode
[   74.705821][ T6115] bridge0: entered promiscuous mode
[   74.833619][ T6122] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.836508][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.946552][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.953695][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.030539][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.033970][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.043048][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.054030][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.095754][ T6139] batman_adv: batadv0: Interface deactivated: dummy0
[   75.103858][ T6138] block nbd1: not configured, cannot reconfigure
[   75.227439][ T6150] netlink: 'syz.1.106': attribute type 1 has an invalid length.
[   75.287917][ T6150] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.462891][ T6161] trusted_key: syz.1.107 sent an empty control message without MSG_MORE.
[   75.470333][ T6156] netlink: 'syz.0.105': attribute type 7 has an invalid length.
[   75.563035][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.566064][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.573428][ T6168] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.575661][ T6168] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.578886][ T6168] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.581074][ T6168] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.587513][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.589963][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.800327][ T6180] : entered promiscuous mode
[   75.863707][ T6182] vlan3: entered promiscuous mode
[   75.865616][ T6182] bridge0: entered promiscuous mode
[   76.527105][ T6195] netlink: 'syz.0.119': attribute type 1 has an invalid length.
[   76.626621][ T6195] __nla_validate_parse: 23 callbacks suppressed
[   76.626634][ T6195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.119'.
[   76.632973][ T6195] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.660016][ T6195] netlink: 44 bytes leftover after parsing attributes in process `syz.0.119'.
[   76.664047][ T6200] netlink: 'syz.2.120': attribute type 8 has an invalid length.
[   76.771329][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[   76.788434][ T6208] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[   76.833734][ T6214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.124'.
[   76.951077][ T6218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.126'.
[   76.984304][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.126'.
[   77.056682][ T6223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.127'.
[   77.061460][ T6223] netlink: 64 bytes leftover after parsing attributes in process `syz.0.127'.
[   77.140200][ T6225] bond2: invalid ARP target 0.0.0.0 specified for addition
[   77.143285][ T6225] bond2: option arp_ip_target: invalid value (0)
[   77.148566][ T6225] bond2 (unregistering): Released all slaves
[   77.459546][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'.
[   77.485825][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'.
[   77.536560][ T6251] xt_connbytes: Forcing CT accounting to be enabled
[   77.561477][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'.
[   77.585543][ T6247] ip6tnl1: entered allmulticast mode
[   77.754724][ T6258] syzkaller0: entered promiscuous mode
[   77.761341][ T6258] syzkaller0: entered allmulticast mode
[   77.823705][ T6261] block nbd1: not configured, cannot reconfigure
[   78.224937][ T6288] vcan0: tx drop: invalid sa for name 0x0000000000000003
[   78.469028][ T6295] netlink: 'syz.0.149': attribute type 1 has an invalid length.
[   78.483396][ T6295] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.650534][ T6298] Driver unsupported XDP return value 0 on prog  (id 22) dev N/A, expect packet loss!
[   78.666729][ T6302] IPVS: set_ctl: invalid protocol: 188 0.0.0.0:20003
[   78.668129][ T6298] netlink: 'syz.0.150': attribute type 4 has an invalid length.
[   78.673642][ T6302] IPVS: set_ctl: invalid protocol: 188 0.0.0.0:20003
[   78.684520][ T6302] IPVS: set_ctl: invalid protocol: 188 0.0.0.0:20003
[   78.936731][ T6321] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   78.990175][ T6323] Bluetooth: MGMT ver 1.23
[   79.754747][ T6338] netlink: 'syz.0.163': attribute type 3 has an invalid length.
[   79.766781][ T6338] nbd: must specify a size in bytes for the device
[   79.794708][ T6338] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.800284][ T6338] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.928642][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.932263][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.945876][ T6338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   79.949587][ T6338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.955957][ T6338] veth1_vlan: left promiscuous mode
[   79.959095][ T6338] veth0_vlan: left promiscuous mode
[   79.961610][ T6338] veth0_vlan: entered promiscuous mode
[   79.966097][ T6338] veth1_vlan: entered promiscuous mode
[   79.973318][ T6338] veth1_macvtap: left promiscuous mode
[   79.975761][ T6338] veth0_macvtap: left promiscuous mode
[   79.979667][ T6338] veth0_macvtap: entered promiscuous mode
[   79.982530][ T6338] veth1_macvtap: entered promiscuous mode
[   79.989844][ T6338] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   79.994311][ T6338] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   80.000548][ T6338] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   80.003457][ T6338] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   80.012546][ T6338] ip6tnl1: left allmulticast mode
[   80.018729][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.020995][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.025180][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.027562][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.040193][ T6351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.059961][ T6351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.066014][ T6351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   80.070537][ T6351] xt_hashlimit: size too large, truncated to 1048576
[   80.072813][ T6351] xt_hashlimit: invalid interval
[   80.085412][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   80.088952][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.098346][ T6352] veth0_macvtap: left promiscuous mode
[   80.160977][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   80.163719][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.166602][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   80.173404][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.191143][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   80.196472][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.293013][ T6360] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   80.715630][ T6369] unsupported nlmsg_type 40
[   80.934671][ T6389] veth1_to_bond: entered allmulticast mode
[   80.960915][ T6388] veth1_to_bond (unregistering): left allmulticast mode
[   80.970721][ T6388] bond0: (slave bond_slave_1): Releasing backup interface
[   81.252998][ T6402] syzkaller0: entered promiscuous mode
[   81.258249][ T6402] syzkaller0: entered allmulticast mode
[   81.273799][ T6402] net_ratelimit: 11 callbacks suppressed
[   81.275651][ T6402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.582371][ T6410] netlink: 'syz.2.181': attribute type 1 has an invalid length.
[   81.702767][ T6420] __nla_validate_parse: 76 callbacks suppressed
[   81.702779][ T6420] netlink: 224 bytes leftover after parsing attributes in process `syz.0.183'.
[   81.921531][ T6425] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   81.939613][ T6425] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   82.084028][ T3046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.091627][ T3046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.123997][ T6433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.988287][ T5623] Bluetooth: hci2: command tx timeout
[   83.273878][ T6459] netlink: 48 bytes leftover after parsing attributes in process `syz.1.194'.
[   83.284486][ T6463] netlink: 48 bytes leftover after parsing attributes in process `syz.1.194'.
[   83.371055][ T6469] netlink: 'syz.2.196': attribute type 6 has an invalid length.
[   83.635037][ T6474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.749299][ T6476] bridge0: port 3(vlan2) entered blocking state
[   83.754120][ T6476] bridge0: port 3(vlan2) entered disabled state
[   83.760192][ T6476] vlan2: entered allmulticast mode
[   83.763098][ T6476] geneve0: entered allmulticast mode
[   83.765834][ T6476] vlan2: entered promiscuous mode
[   83.767697][ T6476] geneve0: entered promiscuous mode
[   84.314299][ T6503] netlink: 104 bytes leftover after parsing attributes in process `syz.2.205'.
[   84.327389][ T6504] netlink: 104 bytes leftover after parsing attributes in process `syz.2.205'.
[   84.498905][ T6513] netlink: 34 bytes leftover after parsing attributes in process `syz.1.207'.
[   84.518591][ T6516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.876116][ T6531] xt_cgroup: invalid path, errno=-2
[   84.991637][ T6528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.212'.
[   85.389736][ T6555] : renamed from dummy0
[   85.669668][ T6575] netlink: 'syz.0.220': attribute type 1 has an invalid length.
[   85.696087][ T6575] bond3: (slave bridge1): Enslaving as a backup interface with an up link
[   85.705611][ T6576] macvlan2: entered promiscuous mode
[   85.707678][ T6576] macvlan2: entered allmulticast mode
[   85.710402][ T6576] bond3: entered promiscuous mode
[   85.712432][ T6576] bridge1: entered promiscuous mode
[   85.715924][ T6576] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   85.721605][ T6576] bond3: left promiscuous mode
[   85.727471][ T6576] bridge1: left promiscuous mode
[   85.761102][ T6575] macvlan2: entered promiscuous mode
[   85.762975][ T6575] macvlan2: entered allmulticast mode
[   85.765338][ T6575] bond3: entered promiscuous mode
[   85.766980][ T6575] bridge1: entered promiscuous mode
[   85.773887][ T6575] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   85.780007][ T6575] bond3: left promiscuous mode
[   85.782851][ T6575] bridge1: left promiscuous mode
[   85.793672][ T6581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.221'.
[   86.108389][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'.
[   86.184947][ T6602] netlink: 'syz.0.228': attribute type 1 has an invalid length.
[   86.187513][ T6603] netlink: 'syz.0.228': attribute type 1 has an invalid length.
[   86.197914][ T6602] netlink: 'syz.0.228': attribute type 2 has an invalid length.
[   86.204068][ T6603] netlink: 'syz.0.228': attribute type 2 has an invalid length.
[   86.223604][ T6601] netlink: 'syz.0.228': attribute type 12 has an invalid length.
[   86.522859][ T6618] sock: sock_set_timeout: `syz.1.231' (pid 6618) tries to set negative timeout
[   86.525161][ T6616] sock: sock_set_timeout: `syz.1.231' (pid 6616) tries to set negative timeout
[   86.695024][ T6631] netlink: 'syz.2.234': attribute type 1 has an invalid length.
[   86.734496][ T6631] bond4: entered promiscuous mode
[   86.746043][ T6631] 8021q: adding VLAN 0 to HW filter on device bond4
[   86.926043][ T6631] 8021q: adding VLAN 0 to HW filter on device bond4
[   86.933091][ T6631] bond4: (slave vti0): The slave device specified does not support setting the MAC address
[   86.941711][ T6631] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode
[   86.955298][ T6631] bond4: (slave vti0): making interface the new active one
[   86.959263][ T6631] vti0: entered promiscuous mode
[   86.974592][ T6631] bond4: (slave vti0): Enslaving as an active interface with an up link
[   87.131857][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'.
[   87.172351][ T6649] syz_tun (unregistering): left allmulticast mode
[   87.201578][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'.
[   87.205148][ T6654] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[   88.250606][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'.
[   88.381347][ T6711] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.565837][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'.
[   88.591339][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'.
[   88.615972][ T6729] netlink: 'syz.1.244': attribute type 14 has an invalid length.
[   88.630762][ T6729] netlink: 'syz.1.244': attribute type 11 has an invalid length.
[   88.851623][ T6737] netlink: 68 bytes leftover after parsing attributes in process `syz.2.245'.
[   88.871359][ T6737] netlink: 64 bytes leftover after parsing attributes in process `syz.2.245'.
[   89.197893][ T6743] netlink: 'syz.1.246': attribute type 12 has an invalid length.
[   89.271796][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'.
[   89.367603][ T6763] netlink: 'syz.2.250': attribute type 1 has an invalid length.
[   89.399288][ T6764] netlink: 'syz.2.250': attribute type 1 has an invalid length.
[   89.470729][ T6766] openvswitch: netlink: Message has 4 unknown bytes.
[   89.477888][ T6766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.596867][ T6777] syzkaller0: entered promiscuous mode
[   89.600936][ T6777] syzkaller0: entered allmulticast mode
[   91.214906][ T6799] netlink: 'syz.1.263': attribute type 1 has an invalid length.
[   91.224800][ T6799] netlink: 'syz.1.263': attribute type 2 has an invalid length.
[   91.266399][ T6799] syzkaller1: entered promiscuous mode
[   91.269984][ T6799] syzkaller1: entered allmulticast mode
[   91.415329][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'.
[   91.770753][ T6820] netlink: 36 bytes leftover after parsing attributes in process `syz.2.266'.
[   92.032760][ T6835] netlink: 'syz.1.271': attribute type 1 has an invalid length.
[   92.120278][ T6835] bond2: entered promiscuous mode
[   92.123546][ T6835] bond2: entered allmulticast mode
[   92.127873][ T6835] 8021q: adding VLAN 0 to HW filter on device bond2
[   92.136550][ T6839] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   92.241899][ T6850] __nla_validate_parse: 1 callbacks suppressed
[   92.242035][ T6850] netlink: 52 bytes leftover after parsing attributes in process `syz.2.276'.
[   92.259239][ T6850] netlink: 52 bytes leftover after parsing attributes in process `syz.2.276'.
[   92.265983][ T6850] netlink: 52 bytes leftover after parsing attributes in process `syz.2.276'.
[   92.320876][ T6854] netlink: 840 bytes leftover after parsing attributes in process `syz.1.275'.
[   92.467136][ T6857] syzkaller0: entered promiscuous mode
[   92.469658][ T6857] syzkaller0: entered allmulticast mode
[   92.480009][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'.
[   93.220474][ T6862] netlink: 36 bytes leftover after parsing attributes in process `syz.2.279'.
[   93.941689][ T6860] bond4 (unregistering): Released all slaves
[   93.974002][ T6863] : renamed from dummy0 (while UP)
[   94.117065][ T6869] netlink: 'syz.2.281': attribute type 1 has an invalid length.
[   94.257443][ T6876] netlink: 52 bytes leftover after parsing attributes in process `syz.0.283'.
[   94.275184][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.277872][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.355362][ T6878] bridge0: port 3(veth0_virt_wifi) entered blocking state
[   94.365508][ T6878] bridge0: port 3(veth0_virt_wifi) entered disabled state
[   94.375653][ T6878] veth0_virt_wifi: entered allmulticast mode
[   94.390130][ T6878] veth0_virt_wifi: entered promiscuous mode
[   94.497930][ T6878] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.498957][ T6884] x_tables: ip6_tables: sctp match: only valid for protocol 132
[   94.656796][ T6878] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.755872][ T6878] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.837383][ T6889] dvmrp0: entered allmulticast mode
[   94.885099][ T6878] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.119859][ T5479] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.141603][ T5479] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.174544][ T6903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'.
[   95.191908][ T5479] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.245446][ T5479] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.481755][ T6915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.291'.
[   95.488659][ T6915] nbd: must specify a device to reconfigure
[   95.654418][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'.
[   95.809718][ T6927] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   95.816672][ T6927] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   95.906879][ T6939] bridge2: entered promiscuous mode
[   96.532476][ T6963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.751823][ T6974] ip6tnl2: entered allmulticast mode
[   96.831066][ T6975] syzkaller1: entered promiscuous mode
[   96.833353][ T6975] syzkaller1: entered allmulticast mode
[   96.971556][ T6975] veth4: entered allmulticast mode
[   97.410163][ T6989] netlink: 'syz.1.314': attribute type 7 has an invalid length.
[   97.593333][ T6991] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.723389][ T6991] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.803562][ T6991] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.881127][ T6991] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.925197][ T5479] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.936720][ T5479] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.946550][ T5479] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.982237][ T5479] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.072885][ T6995] __nla_validate_parse: 6 callbacks suppressed
[   98.072899][ T6995] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.315'.
[   98.082407][ T6995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.315'.
[   98.249313][ T6990] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   98.253544][ T6990] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   98.310727][ T7005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.319'.
[   98.315072][ T7005] netlink: 'syz.0.319': attribute type 1 has an invalid length.
[   98.317599][ T7005] netlink: 'syz.0.319': attribute type 11 has an invalid length.
[   98.321140][ T7005] netlink: 224 bytes leftover after parsing attributes in process `syz.0.319'.
[   98.326616][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.319'.
[   98.475555][ T7007] bridge2: left promiscuous mode
[   98.593149][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.321'.
[   98.867455][ T7027] netlink: 104 bytes leftover after parsing attributes in process `syz.1.325'.
[   98.885088][ T7027] netlink: 'syz.1.325': attribute type 1 has an invalid length.
[   98.891358][ T7027] netlink: 224 bytes leftover after parsing attributes in process `syz.1.325'.
[   98.995059][ T7034] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.328'.
[   99.000626][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'.
[   99.036692][ T7037] netlink: 'syz.1.329': attribute type 8 has an invalid length.
[   99.044608][ T7037] bond0: entered promiscuous mode
[   99.046677][ T7037] bond_slave_0: entered promiscuous mode
[   99.053739][ T7037] bond_slave_1: entered promiscuous mode
[   99.064603][ T7037] gretap0: entered promiscuous mode
[   99.070258][ T7037] team0: entered promiscuous mode
[   99.073437][ T7037] team_slave_0: entered promiscuous mode
[   99.075636][ T7037] team_slave_1: entered promiscuous mode
[   99.081301][ T7037] hsr1: entered promiscuous mode
[   99.105502][ T7035] netlink: 'syz.0.326': attribute type 1 has an invalid length.
[   99.432140][ T7054] netlink: 'syz.0.333': attribute type 12 has an invalid length.
[   99.831892][ T7085] netlink: 'syz.0.339': attribute type 6 has an invalid length.
[   99.834899][ T7085] IPv6: NLM_F_CREATE should be specified when creating new route
[  100.114514][ T7105] netlink: 'syz.0.344': attribute type 21 has an invalid length.
[  100.117052][ T7105] netlink: 'syz.0.344': attribute type 22 has an invalid length.
[  101.978870][ T7130] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  102.609612][ T7175] tipc: Started in network mode
[  102.614072][ T7175] tipc: Node identity , cluster identity 4711
[  102.616241][ T7175] tipc: Failed to obtain node identity
[  102.621145][ T7175] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  103.411481][ T7181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.471527][ T6680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  103.474695][ T6680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  103.623775][ T7195] __nla_validate_parse: 9 callbacks suppressed
[  103.623788][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'.
[  103.632029][ T7195] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y
[  103.632029][ T7195] 3UH5rBn
[  103.674154][ T7193] block nbd1: not configured, cannot reconfigure
[  103.703253][ T7187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.361'.
[  103.775594][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.365'.
[  103.778622][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'.
[  103.781439][ T7198] validate_nla: 9 callbacks suppressed
[  103.781447][ T7198] netlink: 'syz.2.365': attribute type 14 has an invalid length.
[  103.785983][ T7198] netlink: 'syz.2.365': attribute type 11 has an invalid length.
[  103.803484][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'.
[  103.907433][ T7205] netlink: 'syz.2.367': attribute type 1 has an invalid length.
[  103.949999][ T7205] netlink: 52 bytes leftover after parsing attributes in process `syz.2.367'.
[  103.954562][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'.
[  103.966175][ T7205] veth3: entered promiscuous mode
[  103.969740][ T7205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.367'.
[  103.973727][ T7205] 8021q: adding VLAN 0 to HW filter on device bond6
[  104.016570][ T7209] netlink: 'syz.2.368': attribute type 1 has an invalid length.
[  104.117739][ T7212] bond4: invalid ARP target 0.0.0.0 specified for addition
[  104.125223][ T7212] bond4: option arp_ip_target: invalid value (0)
[  104.135997][ T7212] bond4 (unregistering): Released all slaves
[  104.156319][ T7215] : entered promiscuous mode
[  104.187499][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.371'.
[  104.194310][ T7219] block nbd0: not configured, cannot reconfigure
[  104.247337][ T7223] netlink: 24 bytes leftover after parsing attributes in process `syz.2.372'.
[  104.338909][ T7225] netlink: 'syz.2.374': attribute type 7 has an invalid length.
[  104.589810][ T7237] netlink: 'syz.1.378': attribute type 1 has an invalid length.
[  104.613026][ T7237] bond3: entered promiscuous mode
[  104.616421][ T7237] 8021q: adding VLAN 0 to HW filter on device bond3
[  104.892028][ T7264] netlink: 'syz.2.380': attribute type 21 has an invalid length.
[  104.896146][ T7264] netlink: 'syz.2.380': attribute type 19 has an invalid length.
[  104.980995][ T7264] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  105.254819][ T7283] netlink: 'syz.2.385': attribute type 12 has an invalid length.
[  105.257767][ T7283] netlink: 'syz.2.385': attribute type 11 has an invalid length.
[  106.265559][ T7335] 8021q: adding VLAN 0 to HW filter on device bond7
[  106.340734][ T7335] bond7: (slave gretap0): Enslaving as a backup interface with an up link
[  106.373535][ T6408] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  106.511417][ T6408] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  106.628915][   T12] bond7: (slave gretap0): link status up again after 0 ms
[  106.648430][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  106.735625][ T5623] Bluetooth: hci2: link tx timeout
[  106.741256][ T5623] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  106.753296][   T54] Bluetooth: hci2: link tx timeout
[  106.755457][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  106.769606][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  106.878234][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  106.989541][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  107.108195][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  107.524801][ T7384] nftables ruleset with unbound chain
[  107.626920][ T7389] bond4: option resend_igmp: invalid value (2878)
[  107.630815][ T7389] bond4: option resend_igmp: allowed values 0 - 255
[  107.634610][ T7389] bond4 (unregistering): Released all slaves
[  107.659952][ T6408] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.665332][ T6408] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.669649][ T6408] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.672870][ T6408] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.872934][   T54] Bluetooth: hci2: link tx timeout
[  107.875230][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.879175][   T54] Bluetooth: hci2: link tx timeout
[  107.881290][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.887087][   T54] Bluetooth: hci2: link tx timeout
[  107.891157][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.895286][   T54] Bluetooth: hci2: link tx timeout
[  107.897308][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.902087][   T54] Bluetooth: hci2: link tx timeout
[  107.904234][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.907483][   T54] Bluetooth: hci2: link tx timeout
[  107.908228][ T7394] erspan0: entered promiscuous mode
[  107.909781][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.916144][   T54] Bluetooth: hci2: link tx timeout
[  107.918797][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.922404][ T7394] macvlan0: entered promiscuous mode
[  107.925177][   T54] Bluetooth: hci2: link tx timeout
[  107.927368][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.930791][   T54] Bluetooth: hci2: link tx timeout
[  107.933027][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.936401][   T54] Bluetooth: hci2: link tx timeout
[  107.938983][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.942120][   T54] Bluetooth: hci2: link tx timeout
[  107.944247][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.947515][   T54] Bluetooth: hci2: link tx timeout
[  107.948710][ T7394] macvlan0: entered allmulticast mode
[  107.949910][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.955436][   T54] Bluetooth: hci2: link tx timeout
[  107.957092][ T7394] erspan0: entered allmulticast mode
[  107.957562][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.965390][   T54] Bluetooth: hci2: link tx timeout
[  107.967663][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.970993][   T54] Bluetooth: hci2: link tx timeout
[  107.973071][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.978300][   T54] Bluetooth: hci2: link tx timeout
[  107.980489][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.983922][   T54] Bluetooth: hci2: link tx timeout
[  107.986046][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.989148][   T54] Bluetooth: hci2: link tx timeout
[  107.991562][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  107.994637][   T54] Bluetooth: hci2: link tx timeout
[  107.996666][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.000062][   T54] Bluetooth: hci2: link tx timeout
[  108.002240][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.007626][   T54] Bluetooth: hci2: link tx timeout
[  108.009846][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.012850][   T54] Bluetooth: hci2: link tx timeout
[  108.014956][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.017966][   T54] Bluetooth: hci2: link tx timeout
[  108.020651][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.023778][   T54] Bluetooth: hci2: link tx timeout
[  108.025809][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.030334][   T54] Bluetooth: hci2: link tx timeout
[  108.032490][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.035629][   T54] Bluetooth: hci2: link tx timeout
[  108.037687][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.041297][   T54] Bluetooth: hci2: link tx timeout
[  108.043502][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.046472][   T54] Bluetooth: hci2: link tx timeout
[  108.049016][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.052251][   T54] Bluetooth: hci2: link tx timeout
[  108.054330][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.058251][   T54] Bluetooth: hci2: link tx timeout
[  108.060402][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.063461][   T54] Bluetooth: hci2: link tx timeout
[  108.065556][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.068857][   T54] Bluetooth: hci2: link tx timeout
[  108.071072][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.074143][   T54] Bluetooth: hci2: link tx timeout
[  108.076234][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.079852][   T54] Bluetooth: hci2: link tx timeout
[  108.082057][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.439381][   T13] net_ratelimit: 10 callbacks suppressed
[  108.439448][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  108.641316][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  108.654650][ T7426] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 0, id = 0
[  108.760821][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  108.820581][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  108.871060][ T7316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  108.880410][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  108.999753][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  109.130173][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  109.248331][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  109.376633][ T7462] syzkaller0: entered promiscuous mode
[  109.388456][ T7462] syzkaller0: entered allmulticast mode
[  109.399560][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  109.508226][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  109.630995][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  109.650793][ T7475] __nla_validate_parse: 35 callbacks suppressed
[  109.650807][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'.
[  109.939736][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'.
[  109.948886][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'.
[  109.953146][ T7484] validate_nla: 6 callbacks suppressed
[  109.953155][ T7484] netlink: 'syz.0.444': attribute type 14 has an invalid length.
[  109.959491][ T7484] netlink: 32 bytes leftover after parsing attributes in process `syz.0.444'.
[  109.963368][ T7484] netlink: 80 bytes leftover after parsing attributes in process `syz.0.444'.
[  110.109093][ T7492] netlink: 'syz.2.446': attribute type 10 has an invalid length.
[  110.133056][ T7492] veth0_vlan: left promiscuous mode
[  110.139189][ T7492] veth0_vlan: entered promiscuous mode
[  110.145055][ T7492] team0: Device veth0_vlan failed to register rx_handler
[  110.170611][ T7492] syz.2.446 (7492) used greatest stack depth: 20232 bytes left
[  110.544276][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'.
[  110.547440][ T7507] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.551073][ T7507] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.959518][ T7523] netlink: 'syz.1.453': attribute type 8 has an invalid length.
[  110.967342][ T7523] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.453'.
[  111.024331][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'.
[  111.069740][ T7528] netlink: 300 bytes leftover after parsing attributes in process `syz.2.457'.
[  111.134176][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.160097][ T7519] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[  111.302965][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.315865][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.324566][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.332112][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.340591][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.349138][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.357766][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.370526][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.382559][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.397520][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.409992][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.422479][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.432043][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.445370][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.456625][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.475306][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.484957][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.495092][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.503248][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.507142][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.511875][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.516526][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.521101][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.524952][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.603105][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.609287][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.617129][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.627336][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.633164][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.642354][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.649513][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.658564][ T7532] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  111.796236][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'.
[  111.800727][ T7544] pim6reg: entered allmulticast mode
[  111.809513][ T7546] netlink: 'syz.2.462': attribute type 1 has an invalid length.
[  111.813155][ T7543] pim6reg: left allmulticast mode
[  111.925490][ T7550] tipc: Started in network mode
[  111.927191][ T7550] tipc: Node identity c6e10aed7051, cluster identity 4711
[  111.929902][ T7550] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.934685][ T7550] syzkaller0: entered promiscuous mode
[  111.936666][ T7550] syzkaller0: entered allmulticast mode
[  111.961862][ T7550] tipc: Resetting bearer <eth:syzkaller0>
[  111.974995][ T7547] tipc: Resetting bearer <eth:syzkaller0>
[  111.987207][ T7547] tipc: Disabling bearer <eth:syzkaller0>
[  113.538406][ T6408] net_ratelimit: 30 callbacks suppressed
[  113.538422][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  113.648556][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  113.758285][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  113.868253][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  113.978269][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  114.088204][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  114.198254][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  114.308277][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  114.418442][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  114.528190][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  118.608443][ T5479] net_ratelimit: 36 callbacks suppressed
[  118.608465][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  118.718694][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  118.828440][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  118.938264][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  119.048242][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  119.158495][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  119.278719][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  119.388725][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  119.508248][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  119.620387][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  123.688218][ T5479] net_ratelimit: 36 callbacks suppressed
[  123.688234][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  123.798260][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  123.908278][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  124.018813][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  124.128357][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  124.238398][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  124.348306][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  124.458214][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  124.568543][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  124.678304][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  126.908795][ T7568] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.963967][ T7568] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.061546][ T7568] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.211234][ T7568] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.265336][ T7584] netlink: 'syz.0.470': attribute type 12 has an invalid length.
[  127.293093][ T5479] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.303024][ T5479] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.313868][ T6408] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.322461][ T6408] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.537284][ T7600] __nla_validate_parse: 1 callbacks suppressed
[  127.537293][ T7600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.474'.
[  127.563616][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.476'.
[  127.584018][ T7602] 8021q: adding VLAN 0 to HW filter on device bond4
[  127.772609][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'.
[  127.776187][ T7615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.479'.
[  127.937412][ T7617] netlink: 80 bytes leftover after parsing attributes in process `syz.0.480'.
[  128.361190][ T7620] bond0: (slave bond_slave_1): Releasing backup interface
[  128.364271][ T7620] bond_slave_1: left promiscuous mode
[  128.708479][ T6408] net_ratelimit: 35 callbacks suppressed
[  128.708494][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  128.898722][ T7626] : renamed from veth0_to_bond (while UP)
[  128.918465][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  129.050161][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  129.073219][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'.
[  129.077677][ T7633] netlink: 'syz.0.485': attribute type 13 has an invalid length.
[  129.081776][ T7633] netlink: 'syz.0.485': attribute type 17 has an invalid length.
[  129.146593][ T7633] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  129.159417][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  129.213950][ T7633] netlink: 44 bytes leftover after parsing attributes in process `syz.0.485'.
[  129.268345][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  129.390772][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  129.430891][ T7641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'.
[  129.482983][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.489'.
[  129.508497][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  129.587775][ T7650] netlink: 108 bytes leftover after parsing attributes in process `syz.1.491'.
[  129.600055][ T7650] hma(kX: entered promiscuous mode
[  129.619852][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  129.738408][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  130.006528][ T7673] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.009757][ T7673] syzkaller0: entered promiscuous mode
[  130.011736][ T7673] syzkaller0: entered allmulticast mode
[  130.048308][ T7673] tipc: Resetting bearer <eth:syzkaller0>
[  130.070479][ T7672] tipc: Resetting bearer <eth:syzkaller0>
[  130.104866][ T7672] tipc: Disabling bearer <eth:syzkaller0>
[  130.133708][ T7675] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  130.137263][ T7676] netlink: 'syz.1.499': attribute type 4 has an invalid length.
[  130.417187][ T7693] netlink: 'syz.1.505': attribute type 21 has an invalid length.
[  130.420011][ T7693] netlink: 'syz.1.505': attribute type 4 has an invalid length.
[  130.459783][ T7701] netlink: 'syz.0.506': attribute type 12 has an invalid length.
[  130.505809][ T7706] syzkaller0: entered promiscuous mode
[  130.507608][ T7706] syzkaller0: entered allmulticast mode
[  130.855183][ T7723] syz_tun: entered allmulticast mode
[  130.883373][ T7723] syz_tun (unregistering): left allmulticast mode
[  131.232481][ T7732] netlink: 'syz.0.515': attribute type 12 has an invalid length.
[  131.305291][ T7736] sctp: [Deprecated]: syz.0.516 (pid 7736) Use of int in max_burst socket option.
[  131.305291][ T7736] Use struct sctp_assoc_value instead
[  131.637930][ T7753] netlink: 'syz.0.522': attribute type 11 has an invalid length.
[  133.116799][ T7786] gtp0: entered promiscuous mode
[  133.123123][ T7786] gtp0: entered allmulticast mode
[  133.167077][ T7789] netlink: 'syz.1.533': attribute type 1 has an invalid length.
[  133.198960][ T7789] ip6gre1: entered promiscuous mode
[  133.201154][ T7789] ip6gre1: entered allmulticast mode
[  133.274765][ T7791] __nla_validate_parse: 13 callbacks suppressed
[  133.274782][ T7791] netlink: 36 bytes leftover after parsing attributes in process `syz.1.535'.
[  133.350420][ T7791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.467488][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.536'.
[  133.586123][ T7810] netlink: 228 bytes leftover after parsing attributes in process `syz.2.540'.
[  133.633269][ T7814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.541'.
[  133.637206][ T7814] netlink: 28 bytes leftover after parsing attributes in process `syz.2.541'.
[  133.732352][ T7817] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  133.774139][ T7819] xt_hashlimit: size too large, truncated to 1048576
[  133.798389][   T12] net_ratelimit: 33 callbacks suppressed
[  133.798403][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  133.896756][ T7826] netlink: 68 bytes leftover after parsing attributes in process `syz.2.545'.
[  133.928127][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  133.996657][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'.
[  134.013805][ T7837] netlink: 'syz.1.549': attribute type 13 has an invalid length.
[  134.120032][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  134.202502][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.546'.
[  134.245022][ T7834] netlink: 168 bytes leftover after parsing attributes in process `syz.2.548'.
[  134.258430][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  134.352276][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.553'.
[  134.364398][ T7851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.368821][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  134.394996][ T7853] Cannot find del_set index 14804 as target
[  134.421761][ T7851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.478977][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  134.562694][ T7859] netlink: 'syz.0.556': attribute type 13 has an invalid length.
[  134.565385][ T7859] netlink: 'syz.0.556': attribute type 17 has an invalid length.
[  134.581435][ T7859] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  134.588333][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  134.698492][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  134.714459][ T7866] netlink: 'syz.2.558': attribute type 4 has an invalid length.
[  134.819047][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  134.877346][ T7872] netlink: 'syz.2.560': attribute type 9 has an invalid length.
[  135.020488][ T7877] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  135.023166][ T7877] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  135.411375][ T7883] netlink: 'syz.0.563': attribute type 2 has an invalid length.
[  135.913827][ T7906] netlink: 'syz.1.570': attribute type 5 has an invalid length.
[  136.145964][ T7912] ip6tnl2: entered allmulticast mode
[  136.153193][ T6408] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  136.163966][ T6408] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  136.178211][ T5077] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  136.628499][   T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  136.898865][ T5077] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  137.130868][ T7937] vlan4: entered promiscuous mode
[  137.439336][ T7946] bridge_slave_0: left allmulticast mode
[  137.441463][ T7946] bridge_slave_0: left promiscuous mode
[  137.443769][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.466464][ T7946] bridge_slave_1: left allmulticast mode
[  137.472185][ T7946] bridge_slave_1: left promiscuous mode
[  137.474255][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.477674][ T7946] vlan2: left promiscuous mode
[  137.479911][ T7946] geneve0: left promiscuous mode
[  137.485772][ T7946] bond0: (slave bond_slave_0): Releasing backup interface
[  137.497795][ T7946] bond0: (slave bond_slave_1): Releasing backup interface
[  137.505791][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.509168][ T7946] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.512926][ T7946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.515604][ T7946] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.197438][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  138.868337][ T6408] net_ratelimit: 35 callbacks suppressed
[  138.868359][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  138.978783][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  139.088306][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  139.198347][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  139.308260][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  139.418204][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  139.528268][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  139.638342][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  139.748309][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  139.858385][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  140.178224][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  143.948309][   T13] net_ratelimit: 36 callbacks suppressed
[  143.948331][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  144.058265][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  144.168255][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  144.278294][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  144.388331][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  144.498222][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  144.608246][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  144.718241][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  144.828301][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  144.938235][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  148.418583][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  149.008234][   T13] net_ratelimit: 36 callbacks suppressed
[  149.008258][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  149.118211][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  149.228237][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  149.338256][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  149.448296][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  149.558320][   T13] bond7: (slave gretap0): failed to get link speed/duplex
[  149.668316][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  149.778304][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  149.888252][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  149.998294][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  150.143548][ T7980] netlink: 'syz.0.590': attribute type 12 has an invalid length.
[  150.190281][ T7980] raw_sendmsg: syz.0.590 forgot to set AF_INET. Fix it!
[  150.251227][ T7992] netlink: 'syz.0.590': attribute type 9 has an invalid length.
[  150.515133][ T8003] syzkaller0: entered promiscuous mode
[  150.518872][ T8003] syzkaller0: entered allmulticast mode
[  152.300528][ T8044] __nla_validate_parse: 8 callbacks suppressed
[  152.300540][ T8044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.605'.
[  152.345848][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.607'.
[  154.014890][ T8057] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.609'.
[  154.041005][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.610'.
[  154.073833][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.612'.
[  154.099407][ T6408] net_ratelimit: 7 callbacks suppressed
[  154.099505][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  154.139169][ T8069] IPVS: sed: FWM 3 0x00000003 - no destination available
[  154.142043][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'.
[  154.185664][ T8070] netlink: 'syz.1.611': attribute type 10 has an invalid length.
[  154.208393][ T8075] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.616'.
[  154.239415][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  154.370489][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  154.468616][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'.
[  154.469645][ T8096] netlink: 'syz.0.618': attribute type 4 has an invalid length.
[  154.475429][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'.
[  154.478178][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  154.499554][ T8096] netlink: 'syz.0.618': attribute type 4 has an invalid length.
[  154.509777][ T8096] netlink: 'syz.0.618': attribute type 1 has an invalid length.
[  154.512934][ T8096] netlink: 'syz.0.618': attribute type 2 has an invalid length.
[  154.588567][ T5479] bond7: (slave gretap0): failed to get link speed/duplex
[  154.637641][ T8100] IPVS: length: 35 != 12792
[  154.718613][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  154.829147][ T6408] bond7: (slave gretap0): failed to get link speed/duplex
[  154.968482][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  155.088235][   T12] bond7: (slave gretap0): failed to get link speed/duplex
[  155.520422][ T8128] netlink: 'syz.2.627': attribute type 4 has an invalid length.
[  155.543155][ T8128] netlink: 'syz.2.627': attribute type 4 has an invalid length.
[  156.351040][ T6408] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  156.361256][ T6408] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.371035][ T6408] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  156.371256][ T8128] syz.2.627 (8128) used greatest stack depth: 20064 bytes left
[  156.382944][ T6408] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.386901][ T6408] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  156.394053][ T6408] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.403631][ T6408] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  156.410411][ T6408] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.465255][ T8138] vlan4: entered promiscuous mode
[  156.824888][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.633'.
[  157.454435][ T8169] netlink: 180 bytes leftover after parsing attributes in process `syz.0.639'.
[  157.631492][ T8174] netlink: 72 bytes leftover after parsing attributes in process `syz.0.641'.
[  157.674725][ T8176] vlan3: entered promiscuous mode
[  157.681073][ T8176] bridge0: entered promiscuous mode
[  157.686696][ T8176] vlan2: entered promiscuous mode
[  157.690748][ T8176] geneve0: entered promiscuous mode
[  158.320457][ T8186] netlink: 'syz.2.645': attribute type 21 has an invalid length.
[  158.323862][ T8186] netlink: 128 bytes leftover after parsing attributes in process `syz.2.645'.
[  158.327712][ T8186] netlink: 'syz.2.645': attribute type 4 has an invalid length.
[  158.331461][ T8186] netlink: 3 bytes leftover after parsing attributes in process `syz.2.645'.
[  158.549773][ T8178] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  158.827673][ T8212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.652'.
[  158.908352][ T8216] team0 (unregistering): left promiscuous mode
[  158.910746][ T8216] team_slave_0: left promiscuous mode
[  158.913071][ T8216] team_slave_1: left promiscuous mode
[  158.919714][ T8216] team0 (unregistering): Port device team_slave_0 removed
[  158.924913][ T8216] team0 (unregistering): Port device team_slave_1 removed
[  158.972750][ T8223] IPv6: NLM_F_CREATE should be specified when creating new route
[  159.009226][ T8225] ip6tnl0: Caught tx_queue_len zero misconfig
[  159.783591][ T8266] netlink: 'syz.0.662': attribute type 4 has an invalid length.
[  159.805158][ T8266] netlink: 'syz.0.662': attribute type 4 has an invalid length.
[  159.812429][   T34] audit: type=1107 audit(1778903313.410:2): pid=8272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  159.890713][ T8269] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  159.900858][ T8280] netlink: 72 bytes leftover after parsing attributes in process `syz.2.667'.
[  159.972756][ T8282] : renamed from dummy0
[  160.096117][ T8284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.668'.
[  160.345988][ T8293] IPv6: sit2: Disabled Multicast RS
[  160.571632][ T8302] xt_CT: You must specify a L4 protocol and not use inversions on it
[  160.774013][ T5077] IPVS: starting estimator thread 0...
[  160.856191][ T8316] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20003
[  160.898454][ T8312] IPVS: using max 83 ests per chain, 199200 per kthread
[  160.911735][ T8320] netlink: 'syz.2.679': attribute type 1 has an invalid length.
[  160.915538][ T8317] bond4: entered promiscuous mode
[  160.918980][ T8317] bond4: entered allmulticast mode
[  160.923921][ T8322] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.680'.
[  160.924543][ T8317] 8021q: adding VLAN 0 to HW filter on device bond4
[  160.956018][ T8320] 8021q: adding VLAN 0 to HW filter on device bond9
[  160.965974][ T8320] netlink: 'syz.2.679': attribute type 10 has an invalid length.
[  160.969351][ T8320] netlink: 40 bytes leftover after parsing attributes in process `syz.2.679'.
[  160.972702][ T8320] : entered promiscuous mode
[  161.041691][ T8325] netlink: 60 bytes leftover after parsing attributes in process `syz.0.680'.
[  161.063617][ T8325] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  161.068957][ T8325] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  161.134816][ T8327] vlan4: entered promiscuous mode
[  161.459405][ T8338] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  161.528704][ T8341] xt_TCPMSS: Only works on TCP SYN packets
[  161.532490][ T8341] bridge0: port 4(erspan0) entered blocking state
[  161.536502][ T8341] bridge0: port 4(erspan0) entered disabled state
[  161.539809][ T8341] erspan0: entered allmulticast mode
[  161.542619][ T8341] erspan0: entered promiscuous mode
[  161.549435][ T8341] erspan0: left allmulticast mode
[  161.551101][ T8341] erspan0: left promiscuous mode
[  161.553791][ T8341] bridge0: port 4(erspan0) entered disabled state
[  161.646123][ T8345] netlink: 'syz.1.688': attribute type 1 has an invalid length.
[  161.648896][ T8345] netlink: 'syz.1.688': attribute type 2 has an invalid length.
[  161.657900][ T8345] macsec2: entered promiscuous mode
[  161.666490][ T8345] virt_wifi0: entered promiscuous mode
[  161.691542][ T8348] netlink: 'syz.2.689': attribute type 1 has an invalid length.
[  161.950415][ T8361] vlan0: entered promiscuous mode
[  162.114965][ T8371] xt_hashlimit: size too large, truncated to 1048576
[  162.285471][ T8381] tipc: Started in network mode
[  162.289569][ T8381] tipc: Node identity 4, cluster identity 8
[  162.297883][ T8381] tipc: Node number set to 4
[  162.322046][ T8381] tipc: Cannot configure node identity twice
[  162.631862][ T8400] netlink: 'syz.0.705': attribute type 5 has an invalid length.
[  162.834821][ T8406] __nla_validate_parse: 2 callbacks suppressed
[  162.834838][ T8406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.708'.
[  162.877161][ T8406] netlink: 48 bytes leftover after parsing attributes in process `syz.0.708'.
[  162.881155][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.708'.
[  162.937875][ T8413] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.711'.
[  162.974606][ T8415] netlink: 'syz.0.712': attribute type 58 has an invalid length.
[  162.977825][ T8415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.712'.
[  163.135997][ T8424] netlink: 36 bytes leftover after parsing attributes in process `syz.0.715'.
[  163.145139][ T8425] netlink: 36 bytes leftover after parsing attributes in process `syz.0.715'.
[  163.198813][ T8424] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  163.238935][ T8426] bond5: entered promiscuous mode
[  163.241175][ T8426] 8021q: adding VLAN 0 to HW filter on device bond5
[  163.778447][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  163.841085][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'.
[  163.873422][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'.
[  164.016171][ T8451] netlink: 'syz.0.721': attribute type 11 has an invalid length.
[  164.023464][ T8451] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.721'.
[  164.188307][ T8459] netlink: 'syz.0.722': attribute type 1 has an invalid length.
[  164.208689][ T5613] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  164.238274][ T5613] CPU: 0 UID: 0 PID: 5613 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  164.238289][ T5613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.238294][ T5613] Call Trace:
[  164.238297][ T5613]  <TASK>
[  164.238302][ T5613]  dump_stack_lvl+0xe8/0x150
[  164.238317][ T5613]  dump_header+0xd3/0x4c0
[  164.238330][ T5613]  oom_kill_process+0x3ab/0x970
[  164.238343][ T5613]  out_of_memory+0x106c/0x1410
[  164.238351][ T5613]  ? try_charge_memcg+0xbb9/0x1570
[  164.238363][ T5613]  ? __pfx___mutex_lock+0x10/0x10
[  164.238378][ T5613]  ? __pfx_out_of_memory+0x10/0x10
[  164.238406][ T5613]  ? do_raw_spin_unlock+0x4d/0x210
[  164.238420][ T5613]  try_charge_memcg+0xc77/0x1570
[  164.238436][ T5613]  ? __pfx_try_charge_memcg+0x10/0x10
[  164.238445][ T5613]  ? percpu_ref_tryget+0x15/0x180
[  164.238462][ T5613]  ? charge_memcg+0x23/0x2b0
[  164.238473][ T5613]  charge_memcg+0x1a2/0x2b0
[  164.238483][ T5613]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  164.238491][ T5613]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  164.238502][ T5613]  __swap_cache_prepare_and_add+0xdc/0x700
[  164.238513][ T5613]  ? page_rmappable_folio+0x9a/0x170
[  164.238528][ T5613]  swap_cache_alloc_folio+0xf1/0x240
[  164.238537][ T5613]  swap_cluster_readahead+0x355/0x670
[  164.238547][ T5613]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  164.238560][ T5613]  ? get_vma_policy+0x27b/0x3c0
[  164.238571][ T5613]  swapin_readahead+0x196/0xc50
[  164.238580][ T5613]  ? swap_table_get+0x1e/0x260
[  164.238589][ T5613]  ? __pfx_swapin_readahead+0x10/0x10
[  164.238597][ T5613]  ? swap_table_get+0x1e/0x260
[  164.238604][ T5613]  ? swap_table_get+0x1e/0x260
[  164.238610][ T5613]  ? swap_table_get+0x1e/0x260
[  164.238617][ T5613]  ? swap_table_get+0x216/0x260
[  164.238624][ T5613]  ? swap_cache_get_folio+0x2e4/0x2f0
[  164.238634][ T5613]  do_swap_page+0x555/0x5120
[  164.238645][ T5613]  ? __pte_offset_map+0x29/0x240
[  164.238653][ T5613]  ? __pte_offset_map+0x29/0x240
[  164.238670][ T5613]  ? do_swap_page+0x128/0x5120
[  164.238677][ T5613]  ? __pfx_do_swap_page+0x10/0x10
[  164.238684][ T5613]  ? __pte_offset_map+0x1ae/0x240
[  164.238692][ T5613]  ? pte_offset_map_rw_nolock+0xea/0x160
[  164.238701][ T5613]  handle_mm_fault+0x12d4/0x3170
[  164.238715][ T5613]  ? handle_mm_fault+0xee/0x3170
[  164.238726][ T5613]  ? __pfx_handle_mm_fault+0x10/0x10
[  164.238733][ T5613]  ? lock_vma_under_rcu+0x45a/0x500
[  164.238752][ T5613]  do_user_addr_fault+0xa73/0x1340
[  164.238763][ T5613]  ? rcu_is_watching+0x15/0xb0
[  164.238772][ T5613]  ? trace_page_fault_user+0x84/0x1e0
[  164.238780][ T5613]  exc_page_fault+0x6a/0xc0
[  164.238791][ T5613]  asm_exc_page_fault+0x26/0x30
[  164.238798][ T5613] RIP: 0033:0x7f42ab95d68e
[  164.238807][ T5613] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  164.238813][ T5613] RSP: 002b:00007ffd5dabd4c8 EFLAGS: 00010246
[  164.238821][ T5613] RAX: 0000000000000000 RBX: 000055556b339500 RCX: 00007f42ab95d68e
[  164.238825][ T5613] RDX: 00007ffd5dabd520 RSI: 0000000000000000 RDI: 0000000000000000
[  164.238829][ T5613] RBP: 00007ffd5dabd58c R08: 0000000000000000 R09: 0000000000000000
[  164.238833][ T5613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  164.238837][ T5613] R13: 00000000000927c0 R14: 0000000000027e26 R15: 00007ffd5dabd5e0
[  164.238849][ T5613]  </TASK>
[  164.242604][ T5613] memory: usage 307200kB, limit 307200kB, failcnt 3292
[  164.456814][ T5613] memory+swap: usage 303200kB, limit 9007199254740988kB, failcnt 0
[  164.465825][ T5613] kmem: usage 300340kB, limit 9007199254740988kB, failcnt 0
[  164.477192][ T5613] Memory cgroup stats for /syz1:
[  164.477419][ T5613] cache 0
[  164.486241][ T5613] rss 40960
[  164.487281][ T5613] rss_huge 0
[  164.497730][ T5613] shmem 0
[  164.502191][ T5613] mapped_file 0
[  164.506341][ T5613] dirty 0
[  164.507267][ T5613] writeback 0
[  164.515422][ T5613] workingset_refault_anon 14
[  164.524901][ T5613] workingset_refault_file 0
[  164.526281][ T5613] swap 159744
[  164.536075][ T5613] swapcached 286720
[  164.537302][ T5613] pgpgin 17662
[  164.544557][ T5613] pgpgout 17649
[  164.545692][ T5613] pgfault 37291
[  164.566913][ T5613] pgmajfault 8
[  164.568149][ T5613] inactive_anon 0
[  164.573937][ T5613] active_anon 49152
[  164.575184][ T5613] inactive_file 0
[  164.590319][ T5613] active_file 0
[  164.591464][ T5613] unevictable 0
[  164.603081][ T5613] hierarchical_memory_limit 314572800
[  164.616930][ T5613] hierarchical_memsw_limit 9223372036854771712
[  164.628133][ T5613] total_cache 0
[  164.629343][ T5613] total_rss 40960
[  164.643848][ T5613] total_rss_huge 0
[  164.645090][ T5613] total_shmem 0
[  164.656767][ T5613] total_mapped_file 0
[  164.665284][ T5613] total_dirty 0
[  164.679627][ T5613] total_writeback 0
[  164.680884][ T5613] total_workingset_refault_anon 14
[  164.718194][ T5613] total_workingset_refault_file 0
[  164.719897][ T5613] total_swap 159744
[  164.721102][ T5613] total_swapcached 286720
[  164.722469][ T5613] total_pgpgin 17662
[  164.723692][ T5613] total_pgpgout 17649
[  164.724979][ T5613] total_pgfault 37291
[  164.742838][ T5613] total_pgmajfault 8
[  164.744100][ T5613] total_inactive_anon 0
[  164.763006][ T5613] total_active_anon 49152
[  164.765342][ T5613] total_inactive_file 0
[  164.766679][ T5613] total_active_file 0
[  164.777275][ T5613] total_unevictable 0
[  164.783294][ T5613] anon_cost 0
[  164.784392][ T5613] file_cost 0
[  164.790085][ T5613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.716,pid=8431,uid=0
[  164.806250][ T5613] Memory cgroup out of memory: OOM victim 8431 (syz.1.716) is already exiting. Skip killing the task
[  165.156583][ T8480] net_ratelimit: 36 callbacks suppressed
[  165.156596][ T8480] openvswitch: netlink: Actions may not be safe on all matching packets
[  165.249838][ T8480] 8021q: adding VLAN 0 to HW filter on device bond6
[  165.362451][ T8493] ieee802154 phy1 wpan1: encryption failed: -22
[  165.583957][ T8501] netlink: 'syz.1.733': attribute type 30 has an invalid length.
[  165.657456][ T8501] bond6: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  165.670262][ T8501] bond6 (unregistering): Released all slaves
[  165.914852][ T5623] Bluetooth: hci2: link tx timeout
[  165.918983][ T5623] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  166.082857][ T8510] bond6: entered promiscuous mode
[  166.318291][ T8525] netlink: 'syz.2.739': attribute type 6 has an invalid length.
[  166.328155][ T8525] netlink: 'syz.2.739': attribute type 5 has an invalid length.
[  166.469248][ T8535] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  166.591171][ T8532] lo: Caught tx_queue_len zero misconfig
[  166.696734][ T8554] m1Ie5n: entered promiscuous mode
[  166.703629][ T8554] gtp0: entered promiscuous mode
[  166.705485][ T8554] gtp0: entered allmulticast mode
[  167.126335][ T8577] netlink: 'syz.0.751': attribute type 3 has an invalid length.
[  167.679938][ T8607] netlink: 'syz.1.759': attribute type 13 has an invalid length.
[  167.682684][ T8607] netlink: 'syz.1.759': attribute type 17 has an invalid length.
[  167.766806][ T8607] batman_adv: batadv0: Interface activated: 
[  167.770017][ T8607] batadv0: mtu less than device minimum
[  167.772355][ T8607] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  167.776663][ T8607] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  167.782003][ T8607] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  167.787144][ T8607] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  167.792408][ T8607] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  167.796918][ T8607] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  167.801205][ T8607] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  167.804819][ T8607] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  167.842807][ T8610] ip6tnl3: entered allmulticast mode
[  167.860803][ T8610] syzkaller1: tun_chr_ioctl cmd 1074025677
[  167.862826][ T8610] syzkaller1: linktype set to 260
[  167.940675][ T5623] Bluetooth: hci2: command 0x0406 tx timeout
[  168.120433][ T8617] __nla_validate_parse: 14 callbacks suppressed
[  168.120446][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'.
[  168.130255][ T8618] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  168.138767][ T8618] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20003
[  168.669116][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.767'.
[  168.700330][ T8660] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.770'.
[  169.033403][ T8678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.050586][ T8678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.233796][ T8678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  169.237135][ T8678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.382480][ T8707] netlink: 'syz.2.776': attribute type 11 has an invalid length.
[  169.388289][ T8707] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.776'.
[  170.125052][ T8678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  170.133432][ T8678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.172810][ T8711] batman_adv: batadv0: Adding interface: gretap2
[  170.175238][ T8711] batman_adv: batadv0: The MTU of interface gretap2 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  170.194041][ T8711] batman_adv: batadv0: Interface activated: gretap2
[  170.200980][ T8711] net_ratelimit: 12 callbacks suppressed
[  170.200991][ T8711] batadv0: mtu less than device minimum
[  170.208325][ T8711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  170.214981][ T8711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  170.220516][ T8711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  170.226213][ T8711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  170.231718][ T8711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  170.237090][ T8711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  170.242900][ T8711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  170.250690][ T8711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  170.259520][ T8711] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  170.375028][ T8678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  170.380299][ T8678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.662086][ T8730] tipc: New replicast peer: 255.255.255.255
[  170.671057][ T8730] tipc: Enabled bearer <udp:syz2>, priority 10
[  170.682601][   T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  170.750193][    T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  170.778795][    T9] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  170.855809][ T5694] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  170.861751][ T5694] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.877012][ T5694] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  170.883765][ T5694] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.897504][ T5694] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  170.902314][ T5694] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.922863][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'.
[  170.928455][ T5694] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  170.934001][ T5694] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.025343][ T8743] Unsupported ieee802154 address type: 0
[  171.245321][ T8758] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.253450][ T8758] 8021q: adding VLAN 0 to HW filter on device team0
[  171.319619][ T8758] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  171.328274][ T8758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  171.345032][ T6680] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.349075][ T6680] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.367184][ T6680] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.369484][ T6680] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.386918][ T6680] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  171.389893][ T6680] bridge0: port 3(veth0_virt_wifi) entered forwarding state
[  171.566493][ T8772] netlink: 76 bytes leftover after parsing attributes in process `syz.2.789'.
[  171.783592][ T8781] netlink: 'syz.2.790': attribute type 3 has an invalid length.
[  171.991753][ T8783] vlan0: entered promiscuous mode
[  172.205560][ T8789] netlink: 'syz.1.793': attribute type 10 has an invalid length.
[  172.227489][ T8785] bond7: entered promiscuous mode
[  172.231517][ T8785] 8021q: adding VLAN 0 to HW filter on device bond7
[  172.240367][ T8789] netlink: 'syz.1.793': attribute type 4 has an invalid length.
[  172.287948][ T8789] netlink: 'syz.1.793': attribute type 4 has an invalid length.
[  172.330110][ T8789] ieee802154 phy1 wpan1: encryption failed: -22
[  172.450902][ T8794] pimreg: entered allmulticast mode
[  172.486699][ T8798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.797'.
[  172.490952][ T8798] netlink: 'syz.0.797': attribute type 1 has an invalid length.
[  172.673783][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'.
[  172.682702][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'.
[  172.844029][ T8819] netlink: 48 bytes leftover after parsing attributes in process `syz.2.801'.
[  172.949920][ T8829] veth1_to_batadv: entered allmulticast mode
[  173.357069][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.359682][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.372083][ T8859] batman_adv: batadv0: Interface deactivated: 
[  173.423588][ T8859] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.432479][ T8859] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.497033][ T8859] erspan0: left allmulticast mode
[  173.504944][ T8859] virt_wifi0: left promiscuous mode
[  173.507728][ T8859] batman_adv: batadv0: Interface deactivated: gretap2
[  173.514430][ T5694] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.518142][ T5694] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.521529][ T5694] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.531495][ T5694] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  173.541561][ T8855] bridge_slave_0 (unregistering): left allmulticast mode
[  173.544035][ T8855] bridge_slave_0 (unregistering): left promiscuous mode
[  173.546430][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.660982][ T8866] __nla_validate_parse: 2 callbacks suppressed
[  173.660994][ T8866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.811'.
[  173.936858][ T8888] netlink: 68 bytes leftover after parsing attributes in process `syz.2.815'.
[  173.976569][ T8891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'.
[  173.980637][ T8891] gretap0: Device is already in use.
[  174.045786][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.818'.
[  174.100413][ T8897] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  174.103201][ T8897] syzkaller0: entered promiscuous mode
[  174.105743][ T8897] syzkaller0: entered allmulticast mode
[  174.110341][ T8897] netem: change failed
[  174.115988][ T8897] tipc: Resetting bearer <eth:syzkaller0>
[  174.130948][ T8896] tipc: Resetting bearer <eth:syzkaller0>
[  174.156413][ T8896] tipc: Disabling bearer <eth:syzkaller0>
[  174.175518][ T8903] netlink: 'syz.0.820': attribute type 1 has an invalid length.
[  175.050952][ T8917] vlan0: entered promiscuous mode
[  175.145051][ T8919] netlink: 44 bytes leftover after parsing attributes in process `syz.0.825'.
[  175.148055][ T8919] netlink: 35 bytes leftover after parsing attributes in process `syz.0.825'.
[  175.150916][ T8919] netlink: 'syz.0.825': attribute type 5 has an invalid length.
[  175.153370][ T8919] netlink: 'syz.0.825': attribute type 6 has an invalid length.
[  175.155822][ T8919] netlink: 35 bytes leftover after parsing attributes in process `syz.0.825'.
[  175.230574][ T8925] netlink: 'syz.2.827': attribute type 1 has an invalid length.
[  175.244658][ T8925] bond10: entered promiscuous mode
[  175.246842][ T8925] 8021q: adding VLAN 0 to HW filter on device bond10
[  175.255156][ T8925] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  175.259263][ T8925] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  175.262777][ T8925] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  175.395497][ T8933] bond11: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  175.399842][ T8933] bond11 (unregistering): Released all slaves
[  175.475070][ T8938] bond8: entered promiscuous mode
[  175.477133][ T8938] 8021q: adding VLAN 0 to HW filter on device bond8
[  175.522172][ T8946] batadv1: entered promiscuous mode
[  175.534918][ T8946] batadv1: entered allmulticast mode
[  175.586348][ T8953] netlink: 52 bytes leftover after parsing attributes in process `syz.2.835'.
[  175.592354][ T8953] net_ratelimit: 14 callbacks suppressed
[  175.592371][ T8953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  175.658249][ T8955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.668516][ T8955] syzkaller0: entered promiscuous mode
[  175.671883][ T8955] syzkaller0: entered allmulticast mode
[  175.794604][ T8955] netlink: 'syz.0.836': attribute type 1 has an invalid length.
[  175.797595][ T8966] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20001
[  175.879799][ T8954] tipc: Resetting bearer <eth:syzkaller0>
[  175.907327][ T8954] tipc: Disabling bearer <eth:syzkaller0>
[  176.434230][ T9032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.848'.
[  176.490358][ T9034] netlink: 165 bytes leftover after parsing attributes in process `syz.2.849'.
[  176.504264][ T9036] vlan0: entered promiscuous mode
[  176.878610][ T9083] vlan0: entered promiscuous mode
[  176.969035][ T9093] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  176.980112][ T9093] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  176.980112][ T9093] Please contact the netfilter-devel mailing list or update your nftables rules.
[  176.994174][ T9093] validate_nla: 6 callbacks suppressed
[  176.994193][ T9093] netlink: 'syz.2.865': attribute type 13 has an invalid length.
[  177.161543][ T9093] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  177.164457][ T9093] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.166888][ T9093] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.621124][ T9114] : renamed from lo (while UP)
[  177.651033][ T9118] netlink: 'syz.0.874': attribute type 21 has an invalid length.
[  177.653933][ T9118] IPv6: NLM_F_CREATE should be specified when creating new route
[  177.656914][ T9117] netlink: 'syz.1.872': attribute type 1 has an invalid length.
[  177.709632][ T9117] 8021q: adding VLAN 0 to HW filter on device bond7
[  177.723697][ T9117] macvlan1: entered promiscuous mode
[  177.725941][ T9117] macvlan1: entered allmulticast mode
[  177.729844][ T9117] bond7: entered promiscuous mode
[  177.732846][ T9117] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  177.740490][ T9117] bond7: left promiscuous mode
[  177.750171][ T9127] netlink: 'syz.0.875': attribute type 13 has an invalid length.
[  177.753335][ T9127] netlink: 'syz.0.875': attribute type 17 has an invalid length.
[  177.766957][ T9127] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  177.881221][ T9136] vlan0: entered allmulticast mode
[  177.888302][ T9136] bond0: entered allmulticast mode
[  177.893682][ T9136] bond_slave_0: entered allmulticast mode
[  177.956297][ T9141] batadv_slave_1: entered promiscuous mode
[  177.967254][ T9141] batadv_slave_1 (unregistering): left promiscuous mode
[  178.752616][ T9199] __nla_validate_parse: 9 callbacks suppressed
[  178.752633][ T9199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.882'.
[  178.766741][ T9199] netlink: 176 bytes leftover after parsing attributes in process `syz.0.882'.
[  178.845773][ T9199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.882'.
[  178.861848][ T9199] netlink: 'syz.0.882': attribute type 4 has an invalid length.
[  178.945262][ T9224] netlink: 36 bytes leftover after parsing attributes in process `syz.1.885'.
[  178.948575][ T9224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  179.075007][ T9238] netlink: 'syz.2.888': attribute type 10 has an invalid length.
[  179.087144][ T9238] tap0: tun_chr_ioctl cmd 1074025677
[  179.092498][ T9238] tap0: linktype set to 773
[  179.242887][ T9257] netlink: 176 bytes leftover after parsing attributes in process `syz.2.894'.
[  179.249729][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'.
[  179.252530][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'.
[  179.429170][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.899'.
[  179.575346][ T9291] netlink: 244 bytes leftover after parsing attributes in process `syz.2.904'.
[  179.636268][ T9291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.904'.
[  179.672964][ T9296] netlink: 'syz.0.905': attribute type 4 has an invalid length.
[  179.682091][ T9296] netlink: 'syz.0.905': attribute type 4 has an invalid length.
[  180.036573][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  180.039290][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  180.043553][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  180.046318][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  180.213624][ T9337] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  180.217653][ T9337] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  180.636754][ T9340] bridge5: entered promiscuous mode
[  180.638605][ T9340] bridge5: entered allmulticast mode
[  180.887572][ T9344] infiniband syz0: set active
[  180.890006][ T9344] infiniband syz0: added bridge_slave_1
[  180.907768][ T9344] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  180.912729][ T9344] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  180.918422][ T9344] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  180.936890][ T9344] RDS/IB: syz0: added
[  180.938688][ T9344] smc: adding ib device syz0 with port count 1
[  180.940852][ T9344] smc:    ib device syz0 port 1 has no pnetid
[  180.987264][ T9360] Cannot find del_set index 14804 as target
[  180.996638][ T9360] bond7: (slave gretap0): Removing an active aggregator
[  181.009596][ T9360] bond7: (slave gretap0): Releasing backup interface
[  181.013744][ T9360] bridge_slave_0: left allmulticast mode
[  181.018694][ T9360] bridge_slave_0: left promiscuous mode
[  181.023580][ T9360] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.032189][ T9360] bridge_slave_1: left allmulticast mode
[  181.036366][ T9360] bridge_slave_1: left promiscuous mode
[  181.040899][ T9360] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.055764][ T9360] bond0: (slave bond_slave_0): Releasing backup interface
[  181.068353][ T9360] team0: Port device team_slave_0 removed
[  181.076329][ T9360] team0: Port device team_slave_1 removed
[  181.079692][ T9364] netlink: 'syz.1.923': attribute type 1 has an invalid length.
[  181.079816][ T9360] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  181.374387][ T9384] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.393697][ T9385] syzkaller0: entered promiscuous mode
[  181.395820][ T9385] syzkaller0: entered allmulticast mode
[  181.406247][ T9384] batman_adv: batadv0: Removing interface: 
[  181.415650][ T9384] : entered promiscuous mode
[  181.417362][ T9384] : entered allmulticast mode
[  181.426219][ T9382] tipc: Resetting bearer <eth:syzkaller0>
[  181.445622][ T9382] tipc: Disabling bearer <eth:syzkaller0>
[  181.646479][ T9391] syzkaller0: entered promiscuous mode
[  181.648377][ T9391] syzkaller0: entered allmulticast mode
[  181.774347][ T9398] ipt_rpfilter: unknown options
[  182.147285][ T9412] validate_nla: 1 callbacks suppressed
[  182.147300][ T9412] netlink: 'syz.2.938': attribute type 13 has an invalid length.
[  183.490920][ T9451] netlink: 'syz.1.947': attribute type 1 has an invalid length.
[  183.654942][ T9468] syzkaller0: entered promiscuous mode
[  183.660731][ T9468] syzkaller0: entered allmulticast mode
[  184.087256][ T9479] __nla_validate_parse: 18 callbacks suppressed
[  184.087270][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.955'.
[  184.255590][ T9492] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  184.304379][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'.
[  184.304843][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'.
[  184.309667][ T9498] netlink: 'syz.2.961': attribute type 15 has an invalid length.
[  184.314761][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'.
[  184.321403][ T9498] netlink: 'syz.2.961': attribute type 15 has an invalid length.
[  184.324697][ T9499] netlink: 'syz.2.961': attribute type 15 has an invalid length.
[  184.329773][ T9495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.960'.
[  184.362218][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'.
[  184.365928][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.962'.
[  184.370721][ T9502] netlink: 'syz.2.962': attribute type 1 has an invalid length.
[  184.374561][ T9502] x_tables: duplicate underflow at hook 1
[  184.507310][ T9515] tipc: New replicast peer: 0.0.0.0
[  184.511987][ T9515] tipc: Enabled bearer <udp:syz2>, priority 10
[  184.552813][ T9516] netlink: 32 bytes leftover after parsing attributes in process `syz.2.965'.
[  184.560434][ T9516] netlink: 72 bytes leftover after parsing attributes in process `syz.2.965'.
[  184.572116][ T9517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.966'.
[  184.718851][ T9525] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  184.865918][ T9529] netlink: 'syz.0.968': attribute type 1 has an invalid length.
[  184.878411][ T9529] netlink: 'syz.0.968': attribute type 2 has an invalid length.
[  185.524716][ T9546] netlink: 'syz.2.973': attribute type 39 has an invalid length.
[  185.641008][   T10] tipc: Node number set to 2886997007
[  186.119648][  T799] syz0: Port: 1 Link DOWN
[  186.119699][ T9560] bridge_slave_1: entered allmulticast mode
[  186.123372][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.131033][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.134797][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.137938][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.140888][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.143524][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.146221][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  186.150540][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.169446][ T9564] netlink: 'syz.0.979': attribute type 13 has an invalid length.
[  186.338359][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  186.622002][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  186.627256][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  186.635043][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  186.640007][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  186.963307][ T9592] 8021q: adding VLAN 0 to HW filter on device bond9
[  186.983447][ T9592] bond9: (slave veth9): Enslaving as an active interface with a down link
[  186.992918][ T9598] syzkaller0: entered promiscuous mode
[  186.995143][ T9598] syzkaller0: entered allmulticast mode
[  187.384943][ T9616] 0: renamed from hsr0
[  187.390295][ T9616] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  187.393624][ T9616] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  187.397025][ T9616] 0: entered allmulticast mode
[  187.398982][ T9616] hsr_slave_0: entered allmulticast mode
[  187.400781][ T9616] hsr_slave_1: entered allmulticast mode
[  187.403243][ T9616] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  187.433191][ T9621] lo: Caught tx_queue_len zero misconfig
[  187.449816][ T9621] validate_nla: 5 callbacks suppressed
[  187.449829][ T9621] netlink: 'syz.2.993': attribute type 1 has an invalid length.
[  187.481487][ T9623] netlink: 'syz.2.994': attribute type 1 has an invalid length.
[  187.485089][ T9623] netlink: 'syz.2.994': attribute type 4 has an invalid length.
[  187.489505][ T9623] netlink: 'syz.2.994': attribute type 1 has an invalid length.
[  187.491983][ T9623] netlink: 'syz.2.994': attribute type 4 has an invalid length.
[  187.532011][ T9625] netlink: 'syz.2.995': attribute type 1 has an invalid length.
[  187.534589][ T9625] nbd: illegal input index 871591272
[  187.547877][ T9625] netlink: 'syz.2.995': attribute type 1 has an invalid length.
[  187.678828][ T9631] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  187.687938][ T9633] netlink: 'syz.1.999': attribute type 9 has an invalid length.
[  187.691477][ T9633] netlink: 'syz.1.999': attribute type 9 has an invalid length.
[  187.734819][ T9639] netlink: 'syz.1.1001': attribute type 4 has an invalid length.
[  187.782741][ T9643] xt_policy: output policy not valid in PREROUTING and INPUT
[  187.903511][ T9660] macvtap0: entered promiscuous mode
[  187.907468][ T9660] macvtap0: entered allmulticast mode
[  187.909630][ T9660] veth1_vlan: entered allmulticast mode
[  187.919477][ T9660] macvtap1: entered promiscuous mode
[  187.921613][ T9660] macvtap1: entered allmulticast mode
[  187.965640][ T9664] syzkaller0: entered promiscuous mode
[  187.968123][ T9664] syzkaller0: entered allmulticast mode
[  188.097064][ T9671] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.357054][ T9688] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  188.671406][ T9696] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.674937][ T9696] tipc: Resetting bearer <eth:syzkaller0>
[  188.679532][ T9695] tipc: Disabling bearer <eth:syzkaller0>
[  188.771000][ T9698] nbd: nbd64 already in use
[  189.537045][ T9720] __nla_validate_parse: 41 callbacks suppressed
[  189.537063][ T9720] netlink: 540 bytes leftover after parsing attributes in process `syz.1.1027'.
[  189.548589][ T9721] netlink: 540 bytes leftover after parsing attributes in process `syz.1.1027'.
[  189.616726][ T9725] tc_dump_action: action bad kind
[  189.725751][ T9730] : left promiscuous mode
[  189.741524][ T9730] team0: Port device  added
[  189.837388][ T9743] team0: Port device  removed
[  190.008470][ T9730] nbd0: detected capacity change from 0 to 63
[  190.017674][   T55] block nbd0: Receive control failed (result -32)
[  190.018269][ T9371] block nbd0: Send control failed (result -32)
[  190.020893][ T9751] block nbd0: Receive control failed (result -32)
[  190.023800][ T9371] block nbd0: Request send failed, requeueing
[  190.039406][   T97] block nbd0: Dead connection, failed to find a fallback
[  190.043871][   T97] block nbd0: shutting down sockets
[  190.047802][   T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  190.053588][   T97] Buffer I/O error on dev nbd0, logical block 0, async page read
[  190.062233][ T9749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1033'.
[  190.068202][ T9371] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  190.080448][ T9371] Buffer I/O error on dev nbd0, logical block 1, async page read
[  190.096639][ T9371] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  190.101045][ T9371] Buffer I/O error on dev nbd0, logical block 2, async page read
[  190.105828][ T9371] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  190.111352][ T9371] Buffer I/O error on dev nbd0, logical block 3, async page read
[  190.114881][ T9371] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  190.119202][ T9371] Buffer I/O error on dev nbd0, logical block 0, async page read
[  190.122692][ T9371] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  190.126299][ T9371] Buffer I/O error on dev nbd0, logical block 1, async page read
[  190.135297][ T9371] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  190.144336][ T9371] Buffer I/O error on dev nbd0, logical block 2, async page read
[  190.156188][ T9371] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  190.163286][ T9371] Buffer I/O error on dev nbd0, logical block 3, async page read
[  190.167053][ T9371] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  190.171901][ T9371] Buffer I/O error on dev nbd0, logical block 0, async page read
[  190.176167][ T9764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1035'.
[  190.182245][ T9371] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  190.186186][ T9371] Buffer I/O error on dev nbd0, logical block 1, async page read
[  190.195294][ T9755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  190.200874][ T9371] ldm_validate_partition_table(): Disk read failed.
[  190.215402][ T9371] Dev nbd0: unable to read RDB block 0
[  190.222632][ T9371]  nbd0: unable to read partition table
[  190.285843][ T9371] ldm_validate_partition_table(): Disk read failed.
[  190.289212][ T9371] Dev nbd0: unable to read RDB block 0
[  190.291788][ T9371]  nbd0: unable to read partition table
[  190.306286][ T9767] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1036'.
[  190.402620][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'.
[  190.407824][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1040'.
[  190.421325][ T9783] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1040'.
[  190.425818][ T9783] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1040'.
[  190.425968][ T9786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1041'.
[  190.470451][ T9790] openvswitch: netlink: Invalid VLAN frame
[  190.513519][ T9793] erspan0: left promiscuous mode
[  190.544172][ T9793] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.545681][ T9798] sctp: [Deprecated]: syz.2.1046 (pid 9798) Use of struct sctp_assoc_value in delayed_ack socket option.
[  190.545681][ T9798] Use struct sctp_sack_info instead
[  190.550232][ T9793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.585825][ T9793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.593160][ T9793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  190.599430][ T9793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  190.605487][ T9793] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  190.638599][ T8998] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.641349][ T8998] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.822736][ T9813] batadv_slave_0: entered promiscuous mode
[  190.849967][ T9816] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  191.017908][ T9832] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  191.037386][ T9813] netlink: 'syz.1.1050': attribute type 11 has an invalid length.
[  191.042751][ T9812] batadv_slave_0: left promiscuous mode
[  191.077841][ T9834] veth1_vlan: left allmulticast mode
[  191.771979][ T5479] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.779728][ T5479] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.823981][ T9849] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.855490][ T9849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.871141][ T9849] bridge_slave_1: left allmulticast mode
[  191.888778][ T9849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  191.892753][ T9849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  191.901716][ T9849] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  191.907042][ T5479] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.911010][ T5479] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.007935][   T31] syz0: Port: 1 Link ACTIVE
[  192.015981][ T9852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.633483][ T9878] validate_nla: 7 callbacks suppressed
[  192.633495][ T9878] netlink: 'syz.2.1065': attribute type 9 has an invalid length.
[  192.639141][ T9878] netlink: 'syz.2.1065': attribute type 11 has an invalid length.
[  192.675648][ T9880] tunl0: entered promiscuous mode
[  192.681067][ T9880] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  193.428597][ T9888] netlink: zone id is out of range
[  193.430951][ T9888] netlink: zone id is out of range
[  193.433270][ T9888] netlink: zone id is out of range
[  193.435551][ T9888] netlink: zone id is out of range
[  193.437777][ T9888] netlink: zone id is out of range
[  193.440553][ T9888] netlink: zone id is out of range
[  193.443214][ T9888] netlink: zone id is out of range
[  193.445493][ T9888] netlink: zone id is out of range
[  193.447668][ T9888] netlink: zone id is out of range
[  193.627655][ T9894] bond9: invalid ARP target 0.0.0.0 specified for addition
[  193.630781][ T9894] bond9: option arp_ip_target: invalid value (0)
[  193.634594][ T9894] bond9 (unregistering): Released all slaves
[  193.754385][ T9905] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  193.757855][ T9905] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  193.913505][ T9922] xt_CT: No such helper "snmp_trap"
[  193.948974][ T9925] bond0: Unable to set up delay as MII monitoring is disabled
[  193.982972][ T9929] netlink: 'syz.2.1080': attribute type 4 has an invalid length.
[  194.287927][ T9943] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.334848][ T9943] netlink: 'syz.1.1084': attribute type 1 has an invalid length.
[  194.355915][ T9943] 8021q: adding VLAN 0 to HW filter on device bond9
[  194.366667][ T9943] netlink: 'syz.1.1084': attribute type 10 has an invalid length.
[  194.662534][ T9964] __nla_validate_parse: 26 callbacks suppressed
[  194.662552][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1089'.
[  194.678212][ T9964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1089'.
[  194.882564][ T9978] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1093'.
[  194.893454][ T9975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1091'.
[  194.919323][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1094'.
[  194.967319][ T9981] team_slave_1: entered promiscuous mode
[  195.011751][ T9993] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  195.014181][ T9993] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  195.021169][ T9993] netlink: 'syz.2.1096': attribute type 11 has an invalid length.
[  195.023598][ T9993] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.1096'.
[  195.035408][ T9995] netlink: 1164 bytes leftover after parsing attributes in process `syz.1.1094'.
[  195.175053][ T9999] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  195.181263][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1098'.
[  195.663828][T10004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1100'.
[  195.735403][T10008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1101'.
[  195.776953][T10008] vlan0: entered allmulticast mode
[  195.781022][T10008] macvtap0: entered allmulticast mode
[  195.902778][T10022] netlink: 'syz.0.1105': attribute type 1 has an invalid length.
[  195.918773][T10022] 8021q: adding VLAN 0 to HW filter on device bond10
[  195.955081][T10022] bond10: (slave veth11): Enslaving as an active interface with a down link
[  195.974822][T10022] bond10: entered allmulticast mode
[  196.088187][T10031] netlink: 'syz.2.1108': attribute type 1 has an invalid length.
[  196.163547][T10036] bridge7: entered promiscuous mode
[  196.166001][T10036] bridge7: entered allmulticast mode
[  196.575948][T10053] tipc: Enabled bearer <eth:gre0>, priority 27
[  196.919081][T10061] syzkaller0: entered promiscuous mode
[  196.920824][T10061] syzkaller0: entered allmulticast mode
[  196.935646][T10063] netlink: 'syz.1.1118': attribute type 1 has an invalid length.
[  198.052104][T10065] vlan1: entered promiscuous mode
[  198.109765][ T5623] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  198.138094][T10067] netlink: 'syz.2.1120': attribute type 13 has an invalid length.
[  198.141491][T10067] netlink: 'syz.2.1120': attribute type 17 has an invalid length.
[  198.183144][T10067] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.186628][T10067] 8021q: adding VLAN 0 to HW filter on device team0
[  198.214722][T10067] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  198.218351][T10067] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  198.221716][T10067] 0: left allmulticast mode
[  198.223348][T10067] hsr_slave_0: left allmulticast mode
[  198.225392][T10067] hsr_slave_1: left allmulticast mode
[  198.231127][T10067] net_ratelimit: 356 callbacks suppressed
[  198.231141][T10067] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  198.264469][ T6672] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  198.266931][ T6672] bridge0: port 3(veth0_virt_wifi) entered forwarding state
[  198.299103][T10070] syzkaller0: entered promiscuous mode
[  198.301025][T10070] syzkaller0: entered allmulticast mode
[  198.478371][T10094] syzkaller0: entered promiscuous mode
[  198.480408][T10094] syzkaller0: entered allmulticast mode
[  198.600734][T10103] netlink: 'syz.0.1130': attribute type 12 has an invalid length.
[  198.666519][T10106] netlink: 'syz.1.1131': attribute type 5 has an invalid length.
[  198.820301][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.916984][T10128] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  198.954211][T10130] netlink: 'syz.2.1138': attribute type 3 has an invalid length.
[  198.998083][T10130] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  199.015455][T10128] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.089986][T10128] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.090364][T10137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.101151][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.138235][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.181284][T10128] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  199.270194][ T6408] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  199.281956][ T6408] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  199.305852][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  199.317331][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  199.395592][T10144] IPVS: set_ctl: invalid protocol: 22 172.30.1.3:20000
[  199.630052][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  199.868851][T10163] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  199.871898][T10163] x_tables: duplicate underflow at hook 1
[  199.875175][T10163] __nla_validate_parse: 20 callbacks suppressed
[  199.875185][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'.
[  200.447161][T10187] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  200.454701][T10187] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  200.693892][T10196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1153'.
[  200.820002][ T5867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.910565][T10202] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1155'.
[  200.923750][T10205] netlink: 'syz.1.1156': attribute type 4 has an invalid length.
[  200.926545][T10205] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1156'.
[  200.940589][T10204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  200.969018][T10204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  201.011200][T10208] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1157'.
[  201.340597][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1160'.
[  201.386706][T10219] netlink: 'syz.1.1161': attribute type 10 has an invalid length.
[  201.403782][T10219] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  201.478279][T10223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.500655][T10227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  202.071319][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'.
[  202.279167][T10274] netlink: 'syz.2.1174': attribute type 12 has an invalid length.
[  202.283933][T10274] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1174'.
[  202.319188][T10278] bond10: (slave bond_slave_1): Device is not bonding slave
[  202.322311][T10278] bond10: option active_slave: invalid value (bond_slave_1)
[  202.327106][T10278] bond10 (unregistering): Released all slaves
[  202.394487][T10285] netlink: 'syz.2.1177': attribute type 1 has an invalid length.
[  202.414874][T10285] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1177'.
[  202.423135][T10285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1177'.
[  202.445157][T10285] 8021q: adding VLAN 0 to HW filter on device bond12
[  202.588181][T10296] syzkaller0: entered promiscuous mode
[  202.590528][T10296] syzkaller0: entered allmulticast mode
[  202.814884][T10314] syzkaller1: entered allmulticast mode
[  202.959078][T10323] netlink: 'syz.0.1189': attribute type 3 has an invalid length.
[  203.057249][T10329] bond10: entered promiscuous mode
[  203.059764][T10329] 8021q: adding VLAN 0 to HW filter on device bond10
[  203.084627][T10329] 8021q: adding VLAN 0 to HW filter on device bond10
[  203.088279][T10329] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  203.091593][T10329] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  203.104952][T10329] bond10: (slave ip6gre2): making interface the new active one
[  203.107560][T10329] ip6gre2: entered promiscuous mode
[  203.111488][T10329] bond10: (slave ip6gre2): Enslaving as an active interface with an up link
[  203.129175][T10335] vlan1: entered promiscuous mode
[  203.214291][T10342] hsr0: entered promiscuous mode
[  203.227753][T10341] hsr0: left promiscuous mode
[  203.329604][T10347] xt_l2tp: v2 sid > 0xffff: 8388608
[  203.347739][T10357] validate_nla: 5 callbacks suppressed
[  203.347751][T10357] netlink: 'syz.1.1200': attribute type 21 has an invalid length.
[  203.361298][T10357] netlink: 'syz.1.1200': attribute type 4 has an invalid length.
[  203.373524][T10357] netlink: 'syz.1.1200': attribute type 5 has an invalid length.
[  203.443289][T10365] netlink: 'syz.0.1202': attribute type 5 has an invalid length.
[  203.465508][T10365] vlan1: entered promiscuous mode
[  203.570107][T10375] tipc: Can't bind to reserved service type 2
[  203.661364][T10382] smc: removing ib device syz0
[  203.719026][T10382] smbdirect: ib_dev[syz0] removed
[  204.099962][  T799] net_ratelimit: 20 callbacks suppressed
[  204.099975][  T799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  204.335143][ T9751] block nbd1: Receive control failed (result -1)
[  204.496748][T10455] 
[  204.497599][T10455] ======================================================
[  204.499776][T10455] WARNING: possible circular locking dependency detected
[  204.501889][T10455] syzkaller #0 Not tainted
[  204.503412][T10455] ------------------------------------------------------
[  204.505590][T10455] syz.1.1226/10455 is trying to acquire lock:
[  204.507456][T10455] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  204.510328][T10455] 
[  204.510328][T10455] but task is already holding lock:
[  204.512632][T10455] ffff8881bad25530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50
[  204.515513][T10455] 
[  204.515513][T10455] which lock already depends on the new lock.
[  204.515513][T10455] 
[  204.518677][T10455] 
[  204.518677][T10455] the existing dependency chain (in reverse order) is:
[  204.521481][T10455] 
[  204.521481][T10455] -> #7 (&idev->mc_lock){+.+.}-{4:4}:
[  204.523975][T10455]        __mutex_lock+0x1a3/0x1550
[  204.525597][T10455]        __ipv6_dev_mc_inc+0x4e/0xa50
[  204.527301][T10455]        __ipv6_sock_mc_join+0x503/0x750
[  204.529057][T10455]        do_ipv6_mcast_group_source+0x3df/0x4c0
[  204.531718][T10455]        do_ipv6_setsockopt+0x16e9/0x3150
[  204.533560][T10455]        ipv6_setsockopt+0x59/0x170
[  204.535362][T10455]        do_sock_setsockopt+0x17c/0x1b0
[  204.537390][T10455]        __x64_sys_setsockopt+0x13d/0x1b0
[  204.539243][T10455]        do_syscall_64+0x15f/0xf80
[  204.540928][T10455]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.542968][T10455] 
[  204.542968][T10455] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  204.545470][T10455]        lock_sock_nested+0x41/0x100
[  204.547304][T10455]        inet_shutdown+0x6a/0x390
[  204.549245][T10455]        nbd_mark_nsock_dead+0x2e9/0x560
[  204.551070][T10455]        recv_work+0x1c2e/0x1d40
[  204.552638][T10455]        process_scheduled_works+0xb5d/0x1860
[  204.554582][T10455]        worker_thread+0xa53/0xfc0
[  204.556203][T10455]        kthread+0x389/0x470
[  204.557824][T10455]        ret_from_fork+0x514/0xb70
[  204.559418][T10455]        ret_from_fork_asm+0x1a/0x30
[  204.561085][T10455] 
[  204.561085][T10455] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  204.563398][T10455]        __mutex_lock+0x1a3/0x1550
[  204.565057][T10455]        nbd_queue_rq+0x37b/0x1100
[  204.566917][T10455]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  204.569154][T10455]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  204.571333][T10455]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  204.573658][T10455]        blk_mq_run_hw_queue+0x348/0x4f0
[  204.575987][T10455]        blk_mq_dispatch_list+0xd16/0xe10
[  204.578343][T10455]        blk_mq_flush_plug_list+0x48d/0x570
[  204.580794][T10455]        __blk_flush_plug+0x3ed/0x4d0
[  204.583013][T10455]        __submit_bio+0x28d/0x580
[  204.585028][T10455]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  204.587240][T10455]        block_read_full_folio+0x599/0x830
[  204.589145][T10455]        filemap_read_folio+0x137/0x3b0
[  204.590891][T10455]        do_read_cache_folio+0x358/0x590
[  204.592635][T10455]        read_part_sector+0xb6/0x2b0
[  204.594312][T10455]        adfspart_check_ICS+0xb1/0x960
[  204.596120][T10455]        bdev_disk_changed+0x817/0x1770
[  204.597751][T10455]        blkdev_get_whole+0x380/0x510
[  204.599442][T10455]        bdev_open+0x31e/0xd30
[  204.600956][T10455]        blkdev_open+0x470/0x610
[  204.602647][T10455]        do_dentry_open+0x785/0x14e0
[  204.604499][T10455]        vfs_open+0x3b/0x340
[  204.606388][T10455]        path_openat+0x2e08/0x3860
[  204.608441][T10455]        do_file_open+0x23e/0x4a0
[  204.610225][T10455]        do_sys_openat2+0x113/0x200
[  204.612118][T10455]        __x64_sys_openat+0x138/0x170
[  204.613972][T10455]        do_syscall_64+0x15f/0xf80
[  204.615812][T10455]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.617894][T10455] 
[  204.617894][T10455] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  204.620448][T10455]        __mutex_lock+0x1a3/0x1550
[  204.622058][T10455]        nbd_queue_rq+0xc6/0x1100
[  204.623626][T10455]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  204.625510][T10455]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  204.628213][T10455]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  204.630847][T10455]        blk_mq_run_hw_queue+0x348/0x4f0
[  204.633086][T10455]        blk_mq_dispatch_list+0xd16/0xe10
[  204.634874][T10455]        blk_mq_flush_plug_list+0x48d/0x570
[  204.636973][T10455]        __blk_flush_plug+0x3ed/0x4d0
[  204.638781][T10455]        __submit_bio+0x28d/0x580
[  204.640374][T10455]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  204.642476][T10455]        block_read_full_folio+0x599/0x830
[  204.644740][T10455]        filemap_read_folio+0x137/0x3b0
[  204.646537][T10455]        do_read_cache_folio+0x358/0x590
[  204.648331][T10455]        read_part_sector+0xb6/0x2b0
[  204.650207][T10455]        adfspart_check_ICS+0xb1/0x960
[  204.651951][T10455]        bdev_disk_changed+0x817/0x1770
[  204.653724][T10455]        blkdev_get_whole+0x380/0x510
[  204.655441][T10455]        bdev_open+0x31e/0xd30
[  204.657220][T10455]        blkdev_open+0x470/0x610
[  204.658830][T10455]        do_dentry_open+0x785/0x14e0
[  204.660551][T10455]        vfs_open+0x3b/0x340
[  204.662239][T10455]        path_openat+0x2e08/0x3860
[  204.664348][T10455]        do_file_open+0x23e/0x4a0
[  204.666373][T10455]        do_sys_openat2+0x113/0x200
[  204.668481][T10455]        __x64_sys_openat+0x138/0x170
[  204.670620][T10455]        do_syscall_64+0x15f/0xf80
[  204.672630][T10455]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.675275][T10455] 
[  204.675275][T10455] -> #3 (set->srcu){.+.+}-{0:0}:
[  204.678158][T10455]        __synchronize_srcu+0xca/0x300
[  204.680397][T10455]        elevator_switch+0x1e8/0x7a0
[  204.682582][T10455]        elevator_change+0x2cc/0x450
[  204.684745][T10455]        elevator_set_default+0x36c/0x430
[  204.686987][T10455]        blk_register_queue+0x3e9/0x4e0
[  204.689061][T10455]        __add_disk+0x677/0xd50
[  204.690639][T10455]        add_disk_fwnode+0xfb/0x480
[  204.692334][T10455]        nbd_dev_add+0x72c/0xb50
[  204.693943][T10455]        nbd_init+0x168/0x1f0
[  204.695472][T10455]        do_one_initcall+0x250/0x870
[  204.697264][T10455]        do_initcall_level+0x104/0x190
[  204.699036][T10455]        do_initcalls+0x59/0xa0
[  204.700585][T10455]        kernel_init_freeable+0x2a6/0x3e0
[  204.702782][T10455]        kernel_init+0x1d/0x1d0
[  204.704692][T10455]        ret_from_fork+0x514/0xb70
[  204.706792][T10455]        ret_from_fork_asm+0x1a/0x30
[  204.708676][T10455] 
[  204.708676][T10455] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  204.711473][T10455]        __mutex_lock+0x1a3/0x1550
[  204.713336][T10455]        elevator_change+0x1b3/0x450
[  204.715046][T10455]        elevator_set_none+0xb5/0x140
[  204.717056][T10455]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  204.719140][T10455]        nbd_start_device+0x17f/0xb10
[  204.721117][T10455]        nbd_genl_connect+0x165b/0x1cf0
[  204.723260][T10455]        genl_family_rcv_msg_doit+0x22a/0x330
[  204.725618][T10455]        genl_rcv_msg+0x61c/0x7a0
[  204.727604][T10455]        netlink_rcv_skb+0x232/0x4b0
[  204.729676][T10455]        genl_rcv+0x28/0x40
[  204.731397][T10455]        netlink_unicast+0x75c/0x8e0
[  204.733343][T10455]        netlink_sendmsg+0x813/0xb40
[  204.735280][T10455]        ____sys_sendmsg+0x972/0x9f0
[  204.737309][T10455]        ___sys_sendmsg+0x2a5/0x360
[  204.739178][T10455]        __x64_sys_sendmsg+0x1bd/0x2a0
[  204.741336][T10455]        do_syscall_64+0x15f/0xf80
[  204.743303][T10455]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.745594][T10455] 
[  204.745594][T10455] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  204.750129][T10455]        blk_alloc_queue+0x546/0x680
[  204.752167][T10455]        __blk_mq_alloc_disk+0x197/0x390
[  204.754327][T10455]        nbd_dev_add+0x499/0xb50
[  204.756254][T10455]        nbd_init+0x168/0x1f0
[  204.758067][T10455]        do_one_initcall+0x250/0x870
[  204.760090][T10455]        do_initcall_level+0x104/0x190
[  204.762183][T10455]        do_initcalls+0x59/0xa0
[  204.764064][T10455]        kernel_init_freeable+0x2a6/0x3e0
[  204.766252][T10455]        kernel_init+0x1d/0x1d0
[  204.768123][T10455]        ret_from_fork+0x514/0xb70
[  204.770074][T10455]        ret_from_fork_asm+0x1a/0x30
[  204.772093][T10455] 
[  204.772093][T10455] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  204.774832][T10455]        __lock_acquire+0x15a5/0x2cf0
[  204.777173][T10455]        lock_acquire+0x106/0x350
[  204.779233][T10455]        fs_reclaim_acquire+0x71/0x100
[  204.781465][T10455]        __kmalloc_cache_noprof+0x40/0x660
[  204.783656][T10455]        __ipv6_dev_mc_inc+0x44f/0xa50
[  204.785751][T10455]        ipv6_add_dev+0xe34/0x13a0
[  204.787743][T10455]        addrconf_notify+0x771/0x1050
[  204.789832][T10455]        notifier_call_chain+0x1ad/0x3d0
[  204.791985][T10455]        register_netdevice+0x18c9/0x1ec0
[  204.794184][T10455]        br_add_bridge+0xa3/0xf0
[  204.796092][T10455]        br_ioctl_stub+0x588/0xd60
[  204.798008][T10455]        sock_ioctl+0x523/0x7f0
[  204.799812][T10455]        __se_sys_ioctl+0xfc/0x170
[  204.801698][T10455]        do_syscall_64+0x15f/0xf80
[  204.803648][T10455]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.806091][T10455] 
[  204.806091][T10455] other info that might help us debug this:
[  204.806091][T10455] 
[  204.809839][T10455] Chain exists of:
[  204.809839][T10455]   fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock
[  204.809839][T10455] 
[  204.815731][T10455]  Possible unsafe locking scenario:
[  204.815731][T10455] 
[  204.818625][T10455]        CPU0                    CPU1
[  204.820785][T10455]        ----                    ----
[  204.822920][T10455]   lock(&idev->mc_lock);
[  204.824783][T10455]                                lock(sk_lock-AF_INET6);
[  204.827586][T10455]                                lock(&idev->mc_lock);
[  204.830361][T10455]   lock(fs_reclaim);
[  204.832020][T10455] 
[  204.832020][T10455]  *** DEADLOCK ***
[  204.832020][T10455] 
[  204.835294][T10455] 3 locks held by syz.1.1226/10455:
[  204.837380][T10455]  #0: ffffffff8fdb0f00 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4fa/0x7f0
[  204.840980][T10455]  #1: ffffffff8fdd0240 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60
[  204.844155][T10455]  #2: ffff8881bad25530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50
[  204.847397][T10455] 
[  204.847397][T10455] stack backtrace:
[  204.849728][T10455] CPU: 1 UID: 0 PID: 10455 Comm: syz.1.1226 Not tainted syzkaller #0 PREEMPT(full) 
[  204.849743][T10455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.849752][T10455] Call Trace:
[  204.849785][T10455]  <TASK>
[  204.849792][T10455]  dump_stack_lvl+0xe8/0x150
[  204.849808][T10455]  print_circular_bug+0x2e1/0x300
[  204.849827][T10455]  check_noncircular+0x12e/0x150
[  204.849846][T10455]  __lock_acquire+0x15a5/0x2cf0
[  204.849860][T10455]  ? rcu_is_watching+0x15/0xb0
[  204.849873][T10455]  ? trace_contention_end+0x3d/0x140
[  204.849890][T10455]  ? __mutex_lock+0x319/0x1550
[  204.849910][T10455]  ? __kmalloc_cache_noprof+0x40/0x660
[  204.849926][T10455]  lock_acquire+0x106/0x350
[  204.849938][T10455]  ? __kmalloc_cache_noprof+0x40/0x660
[  204.849952][T10455]  ? __pfx___mutex_lock+0x10/0x10
[  204.849968][T10455]  fs_reclaim_acquire+0x71/0x100
[  204.849982][T10455]  ? __kmalloc_cache_noprof+0x40/0x660
[  204.849996][T10455]  __kmalloc_cache_noprof+0x40/0x660
[  204.850009][T10455]  ? __ipv6_dev_mc_inc+0x44f/0xa50
[  204.850029][T10455]  __ipv6_dev_mc_inc+0x44f/0xa50
[  204.850043][T10455]  ? addrconf_sysctl_register+0x1a9/0x1c0
[  204.850061][T10455]  ipv6_add_dev+0xe34/0x13a0
[  204.850078][T10455]  addrconf_notify+0x771/0x1050
[  204.850095][T10455]  notifier_call_chain+0x1ad/0x3d0
[  204.850112][T10455]  register_netdevice+0x18c9/0x1ec0
[  204.850134][T10455]  ? __pfx_register_netdevice+0x10/0x10
[  204.850149][T10455]  ? alloc_netdev_mqs+0xce1/0x1210
[  204.850161][T10455]  ? __kvmalloc_node_noprof+0x393/0x8a0
[  204.850175][T10455]  ? alloc_netdev_mqs+0xe00/0x1210
[  204.850185][T10455]  br_add_bridge+0xa3/0xf0
[  204.850201][T10455]  br_ioctl_stub+0x588/0xd60
[  204.850212][T10455]  ? do_vfs_ioctl+0x1166/0x1530
[  204.850229][T10455]  ? __pfx_br_ioctl_stub+0x10/0x10
[  204.850240][T10455]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  204.850256][T10455]  ? sock_ioctl+0x4fa/0x7f0
[  204.850268][T10455]  ? do_futex+0x333/0x420
[  204.850284][T10455]  ? __pfx_br_ioctl_stub+0x10/0x10
[  204.850295][T10455]  sock_ioctl+0x523/0x7f0
[  204.850307][T10455]  ? __pfx_sock_ioctl+0x10/0x10
[  204.850318][T10455]  ? __fget_files+0x2a/0x420
[  204.850331][T10455]  ? __fget_files+0x3a0/0x420
[  204.850342][T10455]  ? __fget_files+0x2a/0x420
[  204.850355][T10455]  ? bpf_lsm_file_ioctl+0x9/0x20
[  204.850371][T10455]  ? __pfx_sock_ioctl+0x10/0x10
[  204.850381][T10455]  __se_sys_ioctl+0xfc/0x170
[  204.850397][T10455]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.850408][T10455]  do_syscall_64+0x15f/0xf80
[  204.850422][T10455]  ? trace_irq_disable+0x3b/0x140
[  204.850443][T10455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.850454][T10455] RIP: 0033:0x7f42ab99ce59
[  204.850467][T10455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.850477][T10455] RSP: 002b:00007f42ac8bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  204.850490][T10455] RAX: ffffffffffffffda RBX: 00007f42abc15fa0 RCX: 00007f42ab99ce59
[  204.850500][T10455] RDX: 0000200000001840 RSI: 00000000000089a0 RDI: 000000000000000a
[  204.850507][T10455] RBP: 00007f42aba32d6f R08: 0000000000000000 R09: 0000000000000000
[  204.850515][T10455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.850522][T10455] R13: 00007f42abc16038 R14: 00007f42abc15fa0 R15: 00007ffd5dabd1e8
[  204.850534][T10455]  </TASK>
[  204.910241][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  205.940990][ T6680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.028397][  T799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  206.579253][ T6680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  209.068560][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.698552][ T6680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  211.780075][ T6680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.099861][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  213.699143][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
