last executing test programs:

1.742160261s ago: executing program 1 (id=5401):
r0 = socket$netlink(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c005e80080005003000000039872d5374947c8da36fb10d927fc693eb61935f3f7b08bcc497f8285f2dc6"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fcdbdf251c00000008000310", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8010) (async)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x40) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0}) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r7, 0x0, 0xe, 0x0, &(0x7f0000000580)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r6, 0x25, 0x8, @void}, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x10) (async)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001dc0)={0x5, 0x1d, &(0x7f00000019c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x9a}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6}]}, 0x0, 0x0, 0xd2, &(0x7f0000001b40)=""/210, 0x40f00, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001c80)={0x5, 0x2, 0x7, 0x8000}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001cc0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001d00)=[{0x4, 0x3, 0x2, 0x8}, {0x2, 0x5, 0xc, 0x1}, {0x1, 0x4, 0x6, 0xc}, {0x1, 0x5, 0x5, 0x3}, {0x1, 0x5, 0xa, 0x5}, {0x0, 0x3, 0x0, 0x8}, {0x3, 0x2, 0x2, 0x2}, {0x4, 0x5, 0x6, 0xb}, {0x2, 0x3, 0xe, 0x4}], 0x10, 0x100}, 0x94)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) (async)
ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f00000003c0)={<r11=>r5}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'lo\x00', <r12=>0x0})
setsockopt$MRT6_ADD_MIF(r11, 0x29, 0xca, &(0x7f00000005c0)={0x1, 0x0, 0x7, r12, 0x8}, 0xc) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001fc0)={r10, 0xffffffffffffffff, 0x22, 0x0, @val=@uprobe_multi={&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)=[0x5, 0x3, 0x8], &(0x7f0000001f00)=[0x0, 0x5, 0x2, 0x4, 0x4, 0x0, 0x1, 0x3, 0x0], 0x3be4, 0x3, 0x1}}, 0x40) (async)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffbfff7f}, 0xc) (async)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000002140)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002100)={&(0x7f0000000440)={0xd0, 0x0, 0x22, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x5c39}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x81}}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc080}, 0xc845)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000035000701fe01000000000000807c00000c0001aa123f894f765233479e5fc558bb7b278fea7e501e5b48e68d63bfe64d74bfaedb54850b3be3b4118289036cdda913c423991b093554ebd812ac158252e9bfeeb9876b344d4f26cf959f69322446d3108acf74170c6da8f32d4ba9421e53d8"], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

1.612137801s ago: executing program 1 (id=5406):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x207)
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c010100", @ANYRES16=0x0, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x26000004)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0xb, 0xfff1}, {0x6, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) (async)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r7=>0x0)
readv(r4, &(0x7f0000000680)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0)

1.530815489s ago: executing program 0 (id=5410):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x44, 0x800000, 0x8, 0x7, 0x2})
write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6)
recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0xef61caf084274b56}, 0x0)
r2 = socket(0x2c, 0x3, 0x0)
pipe(&(0x7f0000000240)={<r3=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0x9, 0x5)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, &(0x7f00000001c0)={'broute\x00', 0x0, 0x3, 0xed, [0x4, 0xfffffffffffffffe, 0x38f, 0x2, 0x7ff, 0x7], 0x1, &(0x7f0000000180)=[{}], &(0x7f00000004c0)=""/237}, &(0x7f0000000040)=0x78)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14006b742500190326bd03000080000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r5)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4)
close(0x3)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x16, &(0x7f00000000c0)=0xfffffffa, 0x4)
sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0)

802.210363ms ago: executing program 2 (id=5419):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
recvfrom$llc(r3, 0x0, 0x0, 0x10000, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x40, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8840)

801.413587ms ago: executing program 2 (id=5420):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_batadv\x00'}]}, 0x44}}, 0x44)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e22, 0xd, @private2, 0x1}}, @sadb_address={0x3, 0x6}]}, 0x50}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r9, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040801}, 0x40804)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0xfffffffffffffe94, &(0x7f00000000c0)={&(0x7f0000000180)={0x48, r9, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfe}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffc}]}, 0x48}}, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x74, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x44, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x58}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x74}}, 0x0)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r2)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r11, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080080}, 0x20008080)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0xffffffff, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xfffffffffffffd22}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000de6800e97804c476b8c133159d7c624dc3222100000000000000000a0000000000000000000000c30c78ccd93bdb7c191bbee870a2f6c9b90d3bf6eea11d5f74310ce212c92a7e7542ae39758b6d21ca752c54961c4249ee8b3b72f2380fbc6a0d4a4286f3009a923ea045926d"], 0x1c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0)
getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000200), &(0x7f0000000280)=0x4)

692.743674ms ago: executing program 1 (id=5421):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000400)=0x4, 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000003c0)=0x8b4, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000100)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c200a0000000d0085a168d0bf46d32345653600648d0a001200021cb26f5d4f8db227c274000a0006005ade4a460c89b6ec0cff3959547f507558ba86c902000000004a32000400160005000a0000000000e000e218", 0x78, 0x20040880, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0)

690.358207ms ago: executing program 2 (id=5422):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xfffd, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="000088640000030000000100000011000fc000000283"], 0xfce)
r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0)
recvfrom$llc(r2, &(0x7f0000000080)=""/32, 0x20, 0x100, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

632.780574ms ago: executing program 0 (id=5423):
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b80)=@newlink={0x58, 0x10, 0x401, 0x1fffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0x1c}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendmsg$nl_route_sched(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=@gettaction={0x88, 0x32, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000540)={<r7=>0xffffffffffffffff})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x58, r9, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x52, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r7, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x9000002}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x23c, r9, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1ff}, {0x6, 0x16, 0x200}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1ff}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xf8}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x5}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x97}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x1}, {0x5}, {0x6}, {0x8, 0xb, 0x400}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0x4000}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1ff}, {0x8, 0xb, 0x80000000}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40010042)
write$tun(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET(r11, &(0x7f0000000980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, 0x1401, 0x10, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008080}, 0x800)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
socket$pppoe(0x18, 0x1, 0x0)
ioctl$TUNSETSNDBUF(r12, 0x400454d4, &(0x7f00000002c0)=0x100000)
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c00018008000100", @ANYRES32=r4], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x0)

631.787841ms ago: executing program 1 (id=5424):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) (async)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40243, 0x0) (async, rerun: 64)
r3 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async, rerun: 64)
r5 = socket$unix(0x1, 0x2, 0x0) (rerun: 64)
bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (rerun: 32)
connect$unix(r6, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x2d, 0x20040040) (async)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r7, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0) (async)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r8, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r10], 0x3c}}, 0x8000) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) (async)
socket$nl_route(0x10, 0x3, 0x0)

522.846494ms ago: executing program 2 (id=5425):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x10, 0x7de, 0x74, 0xe, 0xdc, [{0x2, 0x1b74, 0x5, 0x6}, {0x2, 0x7, 0xaad, 0x4}, {0x8, 0xa8f1, 0x8, 0x4}, {0x1, 0x9, 0x3, 0x1}, {0x3, 0xfff, 0x6, 0xfffffffc}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20040800)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x10)
writev(r6, &(0x7f0000000040), 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28010000070a0103"], 0x128}, 0x1, 0x0, 0x0, 0x200440d5}, 0x4000)
recvmmsg(r7, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x122, 0x0)
r8 = socket(0x10, 0x803, 0x0)
bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffb, {0x0, 0x0, 0x0, r9, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r9, @ANYBLOB="08001b"], 0x30}}, 0x0)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r12 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r12, 0x400448c8, &(0x7f0000000400)={r11, r10, 0x6, 0x0, 0x0, 0x9, 0x0, 0xc48, 0x7f, 0xc6, 0x1, 0x0, 'syz0\x00'})
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x58, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x58}}, 0x0)

486.156023ms ago: executing program 0 (id=5426):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800a001a"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000024af6b6927b5dc29ff00000000037c00000401428010f4030000000000080702"], 0x30}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400bc001000ffff28bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="320a05002308000024001280090001007866726d000000001400028008000200010000000800010002000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
syz_emit_ethernet(0x0, 0x0, 0x0)
r4 = socket$phonet(0x23, 0x2, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x8044)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r4}, 0x8)
r6 = socket$pppoe(0x18, 0x1, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000540)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x2}, 0xe)
connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'gre0\x00'}}, 0x1e)
sendmmsg(r6, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRES8=r3], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r4, 0x58, &(0x7f0000000440)}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

322.46799ms ago: executing program 1 (id=5427):
r0 = socket$inet6(0xa, 0xa, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xf05, @mcast2, 0x9}, 0x1c)
getsockopt$inet6_int(r0, 0x29, 0x78476f2f4e8d79d5, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x80)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000240)={0x2a8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x75, 0x2a, [@random={0x2, 0x2a, "b2364c655ceb5c526240b93eb7845722a82484a7abf612a2a15f99767131b33aa322735e0998d5fe1b8b"}, @random={0x4, 0x43, "67d53f16b4c948d9f758ee44687f957389b27fb12d1c0bc7f00184b61c899baa464278ed84aad2887a9e923fd5e7adab13f9e824630a664f7faeb2a2d6479243d33b41"}]}, @NL80211_ATTR_IE={0x118, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x1, 0xac}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x6, 0x4, @device_a, 0x6, 0x3, 0x3}}, @challenge={0x10, 0x1, 0x97}, @fast_bss_trans={0x37, 0xe9, {0x9, 0x7, "ba926ebf443eb692a54de4aaff5066f7", "51a76f26026dd10826b28eae860ad0200bdb356c7a01c86c7a0fe65b2b36d59a", "19069cfcaa19d5732620ff6f992c9cb68d3f8f4026b54daa1ab4cbcd48a2762a", [{0x4, 0x22, "29e3aee8c8d15828122c2602bc85870bf0a26eef063539f981ba25b84555069507a5"}, {0x3, 0xb, "e5bcf3e9804b7d4ceecbf0"}, {0x3, 0x20, "3f38fb1873f1c42756bf32b221ceb1601d7d0897d35750a4e30a53228fe08266"}, {0x3}, {0x1, 0x26, "687577cfd337984fa079277e286af132326dabeb1acdb77840e388ed6a60e5aaec803ffe9f66"}, {0x2, 0xd, "eee3200a0f439ba8ab4a93d00f"}, {0x4, 0x9, "c37e96fcb0b11d62e0"}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, 0x81, 0x49}}]}, @NL80211_ATTR_IE={0xfb, 0x2a, [@chsw_timing={0x68, 0x4, {0x3, 0x3}}, @random={0x9, 0xe1, "80a750d6d07ac7b30c21f375e4f81ec07458f6f3290c0e1097f23f4fdd36d99f510caa53f7e50925c62fa3ac836351db9d780c68365909fad5d4952cbbf9f37b242232b69a9290a002b0f7b5c27d1f0a18b43e4cdc36d9d0c4d562519da10f61733c67d157edb4d83b246ec1a05776dd04f6268aad0c8c5fed8e9be7538449b552d0bfad5108e24a41ff0cc74cb80987b92a0f65ab4ed8b09a9318efd5d65c6b5c72b2966b82e63fcb4f8b91e430ac8cf2253b790684ee5539ce6f458be8c0ef90f62634642bbf906d72fa4c467ffc6ac4cb7fc71ab13a93deb77fce214915bab5"}, @mesh_chsw={0x76, 0x6, {0x4, 0x8, 0x2d, 0x22}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ssid={0x0, 0x1, @random="90"}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4000804}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r1, &(0x7f0000000580)="19de59b82b4cbd0c987fac03b8eee515b39217e0a55037cd8f314b1aadf5a11f955c5bc6805de085cf29e9f9b15e1cb471bf4bd6f50945", &(0x7f00000005c0)=""/150}, 0x20)
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x78, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x21}}}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x7, 0x24, [{0x5, 0x1}, {0xb, 0x1}, {}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HIDDEN_SSID={0xb, 0x7e, @random="da7bc9f97d35d9"}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xe9e}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x78}, 0x1, 0x0, 0x0, 0x4000015}, 0x40891)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000800)={0x0, 0x0, {0x0, @struct, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000c00)={r3, 0x8, 0xca, 0xb9a27deddbff915d})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001140)={0xffffffffffffffff, 0x20, &(0x7f0000001100)={&(0x7f0000001000)=""/180, 0xb4, <r4=>0x0, &(0x7f00000010c0)=""/3, 0x3}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001180)=r4, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001200)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001240)={'vxcan0\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000001300)={'syztnl1\x00', &(0x7f0000001280)={'syztnl1\x00', <r7=>0x0, 0x2f, 0x9, 0x37, 0x2, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x8000, 0xffff, 0x7}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001340)={'team0\x00', <r8=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000001380)={'ip_vti0\x00', <r9=>0x0, 0x0, 0x7800, 0x2, 0x9, {{0x35, 0x4, 0x3, 0x22, 0xd4, 0x64, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010102, @multicast1, {[@noop, @timestamp_addr={0x44, 0x3c, 0xbb, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x3}, {@broadcast, 0x7}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0x200}, {@local}, {@broadcast, 0x9}]}, @generic={0x89, 0xd, "091fce1413d7cc0bfe86b5"}, @ssrr={0x89, 0x23, 0xb7, [@loopback, @local, @local, @dev={0xac, 0x14, 0x14, 0x44}, @empty, @multicast2, @broadcast, @empty]}, @rr={0x7, 0xf, 0xc5, [@multicast1, @broadcast, @loopback]}, @end, @rr={0x7, 0x1f, 0xa6, [@broadcast, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @dev={0xac, 0x14, 0x14, 0x3e}]}, @generic={0x94, 0xb, "4e77db0c2700dc4961"}, @ssrr={0x89, 0xb, 0x73, [@local, @loopback]}, @rr={0x7, 0xb, 0x58, [@loopback, @private=0xa010102]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001580)={'ip6_vti0\x00', &(0x7f0000001500)={'ip6tnl0\x00', <r11=>0x0, 0x2f, 0x6, 0x50, 0x3ff, 0x10, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x710, 0x80000001, 0x6}})
getpeername$packet(r1, &(0x7f00000015c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001600)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001980)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f0000001640)={0x2e0, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r10}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x400d5}, 0x40000804)
sendmsg$nl_generic(r1, &(0x7f0000001d00)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001a00)={0x2b0, 0x13, 0x300, 0x70bd2a, 0x25dfdbff, {0x14}, [@nested={0x117, 0xe1, 0x0, 0x1, [@generic="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", @nested={0x4, 0xf8}, @typed={0x8, 0xd1, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0xb7, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xe9}]}, @typed={0x8, 0x94, 0x0, 0x0, @u32=0x2}, @generic="f5f3cba0182b6d784787a72ca8a4336f8b270f37928cb6f4fd46d363023d5ac3d67c13a667659bd8d50f91bc4724ac7e1e36a79ee4a5f0688cdc60f58a8559480a8c6c449348d5e314d96b790a5cbad860adf8f34f2bbebe76a0578f7c1d8af50b13f477ebc53c802fe7e0e0846fe9b7e26867bd0290405822cf6335efbf32c11cf3ec856cf7605d81a4090a34bf347310ccc5fb638fb0", @generic="95364dc09889cd03f0e46e5d90923adc3015584bf22a68f995ec5b42fc9425e04a90dc19636c6958744614e8c1826b1214161d59c40b1bc47fbc7daa31f6feab8318d04c38791c23e69b5e17fa68a90fa583e66abe1a47dfc98d3c18d20c3e79e979bda28938b7b4c73e98098c5a058f4767afa937bee4adf7e42bcdc06826b81cdb588bf548d29470372f2fe9cd1b82660f3afa2238669fc4221c61540b418c1e4220315043d8e16442c381d901a970fc277e328cf2437a45fe16cdc03e6a7081140de911ea8ce2954d205ba02f495923", @typed={0x14, 0x90, 0x0, 0x0, @ipv6=@private2}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x40010}, 0x4)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001d40)={{{@in6=@private2, @in=@empty}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000001e40)=0xe8)
r13 = openat$cgroup_ro(r1, &(0x7f0000001e80)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r13, 0x84, 0x16, &(0x7f0000001ec0)={0x1, [0x893]}, 0x6)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r13, 0x8983, &(0x7f0000001f00))
socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001f80)={'gretap0\x00', &(0x7f0000001f40)={'erspan0\x00', r11, 0x10, 0x1, 0x5, 0xe9, {{0x6, 0x4, 0x0, 0x37, 0x18, 0x68, 0x0, 0x9, 0x0, 0x0, @rand_addr=0x64010102, @private=0xa010102, {[@noop]}}}}})

321.449735ms ago: executing program 2 (id=5428):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58)
bind$alg(r4, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x6800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xfffffffffffffe2b}]}}}]}, 0x9c}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94)
r7 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x0, @multicast2}, @in6={0xa, 0x0, 0xd7d9, @loopback}, @in={0x2, 0x4e21, @dev}], 0x58)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r6}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)=ANY=[@ANYRES64=0x0, @ANYRES64=r10, @ANYBLOB="1f00"], 0x20)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r12, @ANYBLOB="08000500060000000c0017"], 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
r13 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r13, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa0, 0x3, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x3c}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x1000}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2234}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20040044}, 0x40)
socket$inet_sctp(0x2, 0x1, 0x84)

243.166268ms ago: executing program 0 (id=5429):
syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote, {[@timestamp={0x44, 0x4, 0xe2}]}}, @timestamp={0xd, 0x0, 0x0, 0x9, 0x2, 0x672d, 0x1, 0x9}}}}}, 0x0)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x891c)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, <r2=>0x41424344}, 0x7ff, 0xb)
syz_emit_ethernet(0x92, &(0x7f0000000040)={@local, @local, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x6, 0x0, 0x3}}, {@mpls_mc={0x8848, {[{0x1, 0x0, 0x1}], @ipv4=@tcp={{0x10, 0x4, 0x1, 0x5, 0x78, 0x65, 0x0, 0x8e, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @local, {[@lsrr={0x83, 0x1b, 0x91, [@broadcast, @remote, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010102]}, @rr={0x7, 0xb, 0xe9, [@private=0xa010101, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4e20, r2, 0x41424344, 0x0, 0x0, 0x9, 0x4, 0x7, 0x0, 0x9, {[@fastopen={0x22, 0xb, "4bcf426d521c299fb7"}, @sack_perm={0x4, 0x2}]}}, {"057a23ab9147f69a222ee6281a409cc3b7a9493d"}}}}}}}, &(0x7f0000000100)={0x0, 0x3, [0x1f4, 0x4d2, 0x10a, 0xce]})

242.5045ms ago: executing program 1 (id=5430):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x3512c0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000780)=ANY=[@ANYBLOB="a0000000", @ANYRES32=r0, @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRESHEX=r0, @ANYBLOB="dca718a49f"], 0xa0}, 0x1, 0x0, 0x0, 0xaddf11c998560ddf}, 0x24040084)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="41040000015001001800128008000100677470000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0)
close(0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000002c0004802800018007000100637400001c0002800800014000000015050003000000000008000241000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xc8}}, 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="180150b99180fe"], 0x118}], 0x1, 0x0, 0x0, 0x44801}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40))
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1808000000000000000000000000000018115d003eff1548ba1fecd9dc7497c7a6c4930c8bab77decd675e00cab1d9e8d9b741694673c7ea30bda44903fde725c0deb65873adc96c9be48d6ac69fc23b472eea624a15d0d32786e55204ec2d59680cf2081e7fd5c2f9a86052704f87b43642298775c379859a6baa7a82f4e4fcdfa5993310e79e785448b22db9286f26cb7812afee130b8a7982cb0b10223696c855db7cd48009976e51f185b975572177641f4af71faaafb20b9bb250271b29f3ecd7873406927e13f566571188fb4279ed0be5aeceef12ee579fd485fb3ea4f9ab7d11cf6d62c5cd84d1e7133aa056997d1e3e065e00", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09000000000000260901000000000095000000000000009c68000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r7, &(0x7f0000000240)="8a", 0x1, 0x8d1, &(0x7f0000000080)={0xa, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c)
listen(r7, 0x1)
r8 = accept4(r7, 0x0, 0x0, 0x80800)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a)
sendfile(r8, r9, 0x0, 0xffffffff000)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'bond0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r11=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRESOCT=r4, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r11, @ANYRESDEC=r6, @ANYRESDEC=r1, @ANYBLOB="08000200", @ANYRES32=r11, @ANYBLOB="6b410b61632fc0ac381950fe54b7fee5b092a9ba9f166ba1c20120dea8b4f7639d59768666fdbe99722b677cc878cd3810887183bc6dbdadf8cc4537a484cf7f5c3c8ad8b28ade2f9b45b5e11cc46b7420e407983c05549da15ffe840f399406850a7ebc8d7d020000000000f11f08546afa0c76527252700002459c8af1129f1bad7538f8b314e9417491f672679b81ac73a0b65397ad029b838f2075e34c8783a58b4178753810f90ee01d157e4c808a040561157637489c6ea372be3996f6fae61c029aaaf0ad78cdc2f3a67a34750b769c8ea5c7b5bcc644b7e0c216b8a54e798b6f2905ed6573e4af963ddc4169d952857979cf"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000500)={'wlan1\x00'})

178.324881ms ago: executing program 0 (id=5431):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x31}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x8000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x58}}, 0x0)

100.975535ms ago: executing program 0 (id=5432):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c80)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x0, 0x1b0, 0x2e8, 0x1b0, 0x3d8, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x4}, {0xffff, 0x2}, {0xffffffffffffffff, 0x0, 0x4}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00, 0x0, 0xff, 0xff], [0xffffff00, 0x0, 0x0, 0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x9, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@private2, 0x27, 0x28, 0x1}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], 'nr0\x00', 'syzkaller0\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x6, 0x4, 0xd}}}, {{@ipv6={@mcast2, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xff, 0xff], 'pim6reg1\x00', 'geneve1\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@srh1={{0x90}, {0x21, 0x2, 0xe, 0x4, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [0xff, 0x0, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 0x1481, 0x201}}]}, @HL={0x28, 'HL\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690)
r2 = socket$netlink(0x10, 0x3, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x15)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
sendmmsg(r3, &(0x7f00000033c0)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x2, 0x4, 0x4, {0xa, 0x4e24, 0x10000, @remote, 0x6}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)="c0a9c19d9a194c1c5d28919a968838c5f511f138c23a944c", 0x18}, {&(0x7f0000000340)="6ebf9637ff35d096cc2eb7453a8dc73a45f47343d75c0f13fa9aeaf56be05838ff40d6ff31936995bde989fbca3da25cc1736f9b05e694e31be313be8f07d605bcf671b07ac2b5b66d24aebdf84523dde4451ae5a2fd1fe4c645b5865810e926a5bb566f77e2c5064f6f0a3932f88eeb0c19e2c35da48e10bc3d070f265fe7e97aefe7725f9d0bd99c60bd45ba10d87d06b541d37c8853f002a6010f", 0x9c}], 0x2, &(0x7f0000000980)=[{0x110, 0x112, 0xe37b, "700f139155f0a05aaef4b50c91dacae9bc186c8f0c75ac131eaa1ef2ad4a69b979532ead98520abde21f54bbdacce1e2c129b0dfad837371335b9d96f6bd0072afd80f9a036362b5ba237f849730c31b2ab0a2b206919fb76e9f7949c846c6cc6dcefee516966cdf224098fe763c178316299c286fb5b565b05bfbca99aa85ca0a9cc9489b352c187249d565979cd7f5d2b115d26ac385e0f286144f4eb24f34e2018df4739c7d07d4ef36b99fa6e275b4e8a732cc4ab42f0ce5af1d220e581a07ee5d3f0134bdab7b674e48b2f104c062a06fb77e15ad01aa44e89b9d9e2bffe8601df415497f040523baa20173da89ee1fc0291e0996b675604a46d6"}, {0xc8, 0x102, 0x7, "136ef0d3cb43a898708a264938e3540e354925dd234c541af1cf02834a3eff99749dc7e6bc4ec792c58c4001f90ff56e289db46bda54d62cafab872c03a11a5a1c8d85c24381e334b1c9842548155f50810bf39c3656080ca38b17d0a2310514f6631a5effe405d49c3104f6f088c5e30f49faf66358623e20eed759fc4c2fca91a62d29ae080fcc3c511a86d9d8bb4eedc234e66f7ee4b8351d644cac5ba3897af1e3bfd789e2fe8a557f6f4c8bab9bb3d76abc6571"}, {0x50, 0x111, 0x101, "20e04a08187a38733fed9e1600655115102437d1adbb4163bf62e2261a1a93958d60cbae5b2e33d5ed1c1366c6c342b9bb91df51be6c20accc04064403ac93"}, {0x48, 0x84, 0x8, "b69c29a1af99d8754042d67cdb90ff7533621aa7b2b2c459e21b2a5c7b7ad9b87d7231b05f37807763477a9382a39e0a47"}, {0x1010, 0x10c, 0x9, "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"}, {0xf8, 0x10e, 0x10, "748cdafa16df7fcfc0a7220d28ca85506bc76ed22b432a80cee12e8e93f11bf01d01e40ce824ff025a33d1aa6680c28e6f18cf2a647e2b810f42fe968d32c8afadad4fc56c59710898c2d9918ba9c608533a88fc8b0eb2f0d55d92e292e435c069b8b594a2320b8f675c7cc867e41d873459c04b7ce520eac385294fe05699bec458da0463ddbb2e2b47ef952f64d0379f51d84e284fa43ec8a7d1bbd1892458edc5aaec16ea3471d012412c3703fefec15c7c9e6478a2fb07ccb879e4506739e8cbaf5652c1cada9fe7a2f58167a270374663f4afd72c57b7bac53861057ef343481f"}, {0x18, 0x10c, 0x5, "2bfc60"}, {0xb8, 0x117, 0x6, "324caed91a1664d187d682b8718b9efd582e45dac5fe2842b8e34406b4618658c4d42866dccb83125e89fed089019671d6ab37c5070df476abe90af170268babd12f19160a0cfe07eeedb29fe39e311a158cd7095f19fc57e0a121e679fed194af4f0ba6de09b7ae0a9616ae28383150bdee05b1ea0c3c542fe180dd7cb4cf53e0bd8925120713a275a69b07a8266d7b65a49a22c1e1bfbebd9c612f6e2381d67992e98004"}, {0xf0, 0x104, 0xfff, "e61bf5177c242a63fdccc092b4a413f57d10c4a4b2d36a6183c896895345e8d14b4395ca148759a31ac113070445e52c0e154de5cfc1d193d0631b3377e8d0a653d61a5c0d7c22bed08dafa323aae53ac852433925b5a79d96b40d84c421799a16d53047f2358524796f32bd3716002ca095a9c9508f67ab5e01cb7c689863203fd4fbde118806d93342172ed510dc99788d9a3a58e8ca93032d2ce033c40869e195e8fc2733f698ea2115093f10a59d01c3d2edd4a5d752f780a0b53aa6f4a2d71991f64ad1268035da412ef71960de51df20a1080e216117"}], 0x1538}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001ec0)="fd473e4bb4811fe3ccda24c688b7686b11f3d763d16f8e0e832af6d23807e55b67043baf885826330c8576823986774c7c6bca51b58034d9bf0530d850fa1020dc5d622e4bd80c94b6dd68e9814dd86e38b2a2dd548e6d615d07f77c42324c357a5c72e58485209a20bb1f085afb1eba8b78ddfb7249d2260fd4bac1217335ec1272cc5142fb813146020e56088c90daf37f663c6a30bee5db763a3a0c5c1fb9", 0xa0}, {&(0x7f0000001f80)="381a0196f25c5a35", 0x8}, {&(0x7f0000001fc0)="225e9c814453ee215aa8d088c50d23452cc3069ca48afa6fe754302422d63a6bd9f65518bbaffe60f8bacd1aa292a0a73c69d3e3", 0x34}, {&(0x7f0000002000)="15165dba96fd34023c936ac8cb3ef55c795d30af7f066342c568f00c1516e62e957fba0a6c0876a66b82b9cf165e4858b2890dd07e790764bad27ef8e9fd367ccec76fb0a51170d10a9b95aa73ab19b9400630ca23339fba6ad6353a821db55ef1d563bb40e3ac8c1f4ef1de668374355e7a813a52e5110feec83e12d2d463bf134d2afebf37669fc309c5c764dc77d030951901ef03d0211396f8a0a76df47797743624dc954d76c6872b69233671031566e2b40e9897a94d74622637143151f18a62ff9c8a423f52414cc70afbee07", 0xd0}], 0x4, &(0x7f0000002140)=[{0x88, 0x115, 0x6, "9ca0616b4418795d386930cd2b668c58e0ddafb01684eae431a69a5ce5730d2a4902a233e51c333d4c60cab7a7680a698ca5d9607dc2bcbc617a9c9ba0b3aa9dc61c07e5803663f297343853a1026899af513f176012bd3798e8a96b74eb9a65ff5b6f8ba921f7f2948347755f6f80bcbbea"}, {0x50, 0x104, 0x7fff, "6cc404a1648b668766a4646296d4cbb58619a2bebd6d12377bc1c0c38375c04b391cb137f65542475b5f186dc8785ada32e935a6d34e22d055f5916f6d85"}, {0x78, 0x1a, 0x1, "6af92375ac71333c55b4e54787e66388cb51814a0faa1cc01df71ae482bbac14c81468bfbe53e869f719cc758b87bca83aef7f732775f3e6e2c8cf64c4c58f418f6d0fea349254ed331f5adc66ba3dd959aa22d930e15c86f83b39332b36d9f37466b333"}, {0x28, 0x104, 0x6, "12a1a6a77052da1cf2eb84aebff93c35eef1b43e618e"}, {0xc0, 0x116, 0x0, "c0276c9036df0ed3548362c9035614fdbb6846763b9a85352a83df32525c458cff218060b0656548033ee2c709abba611bc1bb16076d08a727ffc4d7cb9d00d1543c271da38338672e062e8f6297650ae97f6212c5d5677d279bf752c32f20b2749abed27666656379091acae5751dcda5d7272ec5d2172ba72ecd9a94811f57154a102c731f0241059579c5ca0b4087e0c591e56ea62e0608adc1ce7fe92cd37c0de952a7a15db9907e"}, {0x1010, 0x112, 0x51, "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"}], 0x1248}}], 0x2, 0x800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003010101"], 0x38}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)

0s ago: executing program 2 (id=5433):
r0 = socket(0x2a, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x4000, 0x4, 0x200, 0x3, 0x8, 0x0, 0x10000000, 0x4, <r1=>0x0}, &(0x7f0000000040)=0x20)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r1, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25fe8800051a0000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005b07350008000000"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r9)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) (async)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) (async)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) (async)
r11 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r11, 0x29, 0xd4, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xf, 0xc}, {}, {0x1c, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xf7}}]}, 0x84}, 0x1, 0x0, 0x0, 0x41bd31d4576420eb}, 0x8851) (async)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

link: 'syz.1.3789': attribute type 1 has an invalid length.
[  356.334396][T19118] netlink: 'syz.1.3789': attribute type 1 has an invalid length.
[  356.898755][T19156] netlink: 'syz.0.3799': attribute type 1 has an invalid length.
[  356.901591][T19158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.939553][T19156] 8021q: adding VLAN 0 to HW filter on device bond38
[  357.068468][T19176] netlink: 'syz.0.3804': attribute type 1 has an invalid length.
[  357.092703][T19176] bond40: entered promiscuous mode
[  357.095489][T19176] 8021q: adding VLAN 0 to HW filter on device bond40
[  357.257271][T19192] tunl0: Caught tx_queue_len zero misconfig
[  357.536635][T19207] bond41: option packets_per_slave: invalid value (1048582)
[  357.539045][T19207] bond41: option packets_per_slave: allowed values 0 - 65535
[  357.543512][T19207] bond41 (unregistering): Released all slaves
[  357.565229][T19209] bridge40: entered promiscuous mode
[  357.567968][T19209] bridge40: entered allmulticast mode
[  357.571518][T19210] mac80211_hwsim hwsim5 ;: renamed from wlan0
[  357.733001][T19215] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  358.080873][T19242] sctp: [Deprecated]: syz.0.3821 (pid 19242) Use of struct sctp_assoc_value in delayed_ack socket option.
[  358.080873][T19242] Use struct sctp_sack_info instead
[  358.116001][T19232] veth0_macvtap: Caught tx_queue_len zero misconfig
[  358.318768][T19256] __nla_validate_parse: 18 callbacks suppressed
[  358.318778][T19256] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3828'.
[  358.616165][T19279] netlink: 'syz.1.3834': attribute type 16 has an invalid length.
[  358.760292][T19290] ip6tnl0: Caught tx_queue_len zero misconfig
[  358.791979][T19292] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3837'.
[  358.899464][T19271] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3831'.
[  359.093141][T19315] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  359.096735][T19315] gretap3: entered allmulticast mode
[  359.116032][T19317] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3838'.
[  359.168639][T19321] veth1_to_hsr: entered promiscuous mode
[  359.199976][T19326] syzkaller0: entered promiscuous mode
[  359.201960][T19326] syzkaller0: entered allmulticast mode
[  359.435356][T19330] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3846'.
[  359.767675][T19338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3849'.
[  359.807173][T19338] netlink: 'syz.2.3849': attribute type 2 has an invalid length.
[  360.059624][T19356] bond31: (slave vxcan3): The slave device specified does not support setting the MAC address
[  360.066199][T19356] bond31: (slave vxcan3): Error -95 calling set_mac_address
[  360.073075][T19363] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3854'.
[  360.096822][T19363] bond31: (slave bridge42): Enslaving as an active interface with a down link
[  360.106644][T19363] ip6gretap1: entered promiscuous mode
[  360.108366][T19363] ip6gretap1: entered allmulticast mode
[  360.112502][T19363] bond31: (slave ip6gretap1): making interface the new active one
[  360.117893][T19363] bond31: (slave ip6gretap1): Enslaving as an active interface with an up link
[  360.122859][T19364] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3856'.
[  360.297414][T19382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3860'.
[  360.302591][ T5500] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  360.306020][T19382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3860'.
[  360.309388][ T5500] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  360.315773][ T5500] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  360.320794][ T5500] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  360.719686][T19400] validate_nla: 1 callbacks suppressed
[  360.719697][T19400] netlink: 'syz.1.3866': attribute type 1 has an invalid length.
[  360.741597][T19400] 8021q: adding VLAN 0 to HW filter on device bond44
[  360.788469][T19400] bond44: (slave veth31): Enslaving as an active interface with a down link
[  360.818779][T19400] bond44: (slave veth33): Enslaving as an active interface with a down link
[  360.896813][T19400] bond44: entered allmulticast mode
[  364.008327][T19408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  364.178262][T19430] xt_ecn: cannot match TCP bits for non-tcp packets
[  364.213549][T19442] syzkaller0: entered promiscuous mode
[  364.219613][T19442] syzkaller0: entered allmulticast mode
[  364.227406][T19442] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  364.234091][T19438] __nla_validate_parse: 3 callbacks suppressed
[  364.234138][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3876'.
[  364.266865][T19438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3876'.
[  364.340050][T19450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3879'.
[  364.363473][T19446] tun0: tun_chr_ioctl cmd 1074025672
[  364.366265][T19446] tun0: ignored: set checksum disabled
[  364.798925][T19485] netlink: 'syz.2.3889': attribute type 1 has an invalid length.
[  364.825322][T19485] 8021q: adding VLAN 0 to HW filter on device bond32
[  364.862625][T19485] bond32: (slave veth19): Enslaving as an active interface with a down link
[  364.868832][T19485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3889'.
[  364.917138][T19489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3891'.
[  364.981894][T19492] veth1_to_hsr: left promiscuous mode
[  365.108540][T19499] netlink: 'syz.1.3893': attribute type 10 has an invalid length.
[  365.117460][T19499] team0: entered allmulticast mode
[  365.119846][T19499] macvlan4: entered allmulticast mode
[  365.122473][T19499] vlan0: entered allmulticast mode
[  365.198366][T19499] team0 (unregistering): left allmulticast mode
[  365.200486][T19499] macvlan4: left allmulticast mode
[  365.202288][T19499] vlan0: left allmulticast mode
[  365.207704][T19499] team0 (unregistering): Port device macvlan4 removed
[  365.211269][T19499] team0 (unregistering): Port device vlan0 removed
[  365.525520][T19473] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  365.669348][T19506] netlink: 'syz.0.3896': attribute type 4 has an invalid length.
[  365.687534][T19506] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3896'.
[  365.836037][T19524] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3902'.
[  365.922072][T19532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3905'.
[  366.081646][T19534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3904'.
[  366.138623][T19544] xt_hashlimit: size too large, truncated to 1048576
[  366.183758][T19541] syzkaller1: entered promiscuous mode
[  366.185844][T19541] syzkaller1: entered allmulticast mode
[  366.591465][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3909'.
[  366.596570][T19552] netlink: 'syz.2.3909': attribute type 5 has an invalid length.
[  366.611461][T19552] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  366.869995][T19556] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  367.383098][T19593] batman_adv: batadv0: Adding interface: gretap0
[  367.387520][T19593] batman_adv: batadv0: The MTU of interface gretap0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.398282][T19593] batman_adv: batadv0: Not using interface gretap0 (retrying later): interface not active
[  367.527559][T19605] netlink: 'syz.0.3926': attribute type 1 has an invalid length.
[  367.546943][T19605] 8021q: adding VLAN 0 to HW filter on device bond41
[  367.656665][T19614] netlink: 'syz.0.3929': attribute type 1 has an invalid length.
[  367.661474][T19614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.669270][T19614] netlink: 'syz.0.3929': attribute type 1 has an invalid length.
[  367.991346][T19633] netlink: 'syz.0.3933': attribute type 30 has an invalid length.
[  368.010479][T19633] bond42: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  368.020752][T19633] bond42 (unregistering): Released all slaves
[  368.237406][T19638] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  368.441598][T19659] netlink: 'syz.1.3940': attribute type 10 has an invalid length.
[  368.795865][T19670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  368.822494][T19671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  368.923121][T19678] netlink: 'syz.1.3945': attribute type 14 has an invalid length.
[  368.926553][T19678] netlink: 'syz.1.3945': attribute type 11 has an invalid length.
[  369.060449][T19686] ip6gretap0: entered promiscuous mode
[  369.065209][T19686] vlan8: entered promiscuous mode
[  369.361288][T19712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  369.363587][T19712] IPv6: NLM_F_CREATE should be set when creating new route
[  369.366336][T19712] IPv6: NLM_F_CREATE should be set when creating new route
[  369.368628][T19712] IPv6: NLM_F_CREATE should be set when creating new route
[  369.376504][T19712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  369.487579][T19722] __nla_validate_parse: 66 callbacks suppressed
[  369.487592][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3958'.
[  369.492409][T19722] netlink: 'syz.0.3958': attribute type 9 has an invalid length.
[  369.495385][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3958'.
[  369.498490][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3958'.
[  369.501358][T19722] netlink: 'syz.0.3958': attribute type 9 has an invalid length.
[  369.503817][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3958'.
[  369.642537][T19731] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3961'.
[  369.758703][T19737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3963'.
[  369.784029][T19740] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3964'.
[  369.990004][T19756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3967'.
[  370.129208][T19765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3971'.
[  370.136088][T19760] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3969'.
[  370.194791][T19753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  370.454549][T19782] bond42: option tlb_dynamic_lb: invalid value (5)
[  370.458805][T19782] bond42 (unregistering): Released all slaves
[  371.737586][T19799] bond43: left promiscuous mode
[  371.739782][T19799] bond43: left allmulticast mode
[  371.747375][T19799] bond44: left allmulticast mode
[  371.781482][ T5500] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  371.786762][ T5500] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  371.806512][ T5500] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  371.814325][ T5500] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  371.932026][T19822] validate_nla: 7 callbacks suppressed
[  371.932090][T19822] netlink: 'syz.0.3988': attribute type 11 has an invalid length.
[  371.960942][T19820] bond33: Removing last ns target with arp_interval on
[  371.976785][T19816] bond34: Removing last ns target with arp_interval on
[  372.428814][T19849] bond42: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  372.456375][T19849] bond42 (unregistering): Released all slaves
[  372.925181][T19868] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  372.929231][T19868] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  373.277711][T19892] netlink: 'syz.2.4001': attribute type 29 has an invalid length.
[  373.280499][T19892] netlink: 'syz.2.4001': attribute type 29 has an invalid length.
[  373.283157][T19892] netlink: 'syz.2.4001': attribute type 29 has an invalid length.
[  373.286194][T19892] netlink: 'syz.2.4001': attribute type 29 has an invalid length.
[  373.288800][T19892] netlink: 'syz.2.4001': attribute type 29 has an invalid length.
[  373.291411][T19892] netlink: 'syz.2.4001': attribute type 29 has an invalid length.
[  373.293970][T19892] netlink: 'syz.2.4001': attribute type 29 has an invalid length.
[  373.297295][T19892] netlink: 'syz.2.4001': attribute type 29 has an invalid length.
[  373.299888][T19892] netlink: 'syz.2.4001': attribute type 29 has an invalid length.
[  373.320626][T19892] hsr0: entered promiscuous mode
[  373.323631][T19891] hsr0: left promiscuous mode
[  373.508682][T19893] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  374.584177][T19903] bond45: entered promiscuous mode
[  374.586508][T19903] 8021q: adding VLAN 0 to HW filter on device bond45
[  374.593218][T19903] bond45 (unregistering): Released all slaves
[  374.697137][T19913] __nla_validate_parse: 144 callbacks suppressed
[  374.697157][T19913] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4007'.
[  374.712736][T19913] netlink: Unknown conntrack attr (0)
[  374.743036][T19916] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4009'.
[  374.782118][T19919] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4008'.
[  374.788627][T19919] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4008'.
[  374.795218][T19919] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  374.798822][T19919] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  374.801731][T19921] tunl0: entered promiscuous mode
[  374.803470][T19921] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4010'.
[  374.853029][T19923] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4011'.
[  375.455603][T19942] netlink: 'syz.0.4015': attribute type 11 has an invalid length.
[  375.459004][T19942] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4015'.
[  375.900446][T19950] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4018'.
[  375.954985][T19953] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  375.962785][T19953] syzkaller0: entered promiscuous mode
[  375.967844][T19953] syzkaller0: entered allmulticast mode
[  376.179404][T19956] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4019'.
[  376.321234][T19974] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4023'.
[  376.399496][T19981] 8021q: adding VLAN 0 to HW filter on device bond42
[  376.411174][T19981] vlan1: entered promiscuous mode
[  376.412822][T19981] bond42: entered promiscuous mode
[  376.415435][T19981] vlan1: entered allmulticast mode
[  376.417024][T19981] bond42: entered allmulticast mode
[  376.961030][ T5669] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  376.966591][ T5669] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  376.969939][ T5669] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  376.973904][ T5669] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  377.901939][T20020] syz.2.4032: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  377.910606][T20020] CPU: 0 UID: 0 PID: 20020 Comm: syz.2.4032 Not tainted syzkaller #0 PREEMPT(full) 
[  377.910627][T20020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  377.910636][T20020] Call Trace:
[  377.910643][T20020]  <TASK>
[  377.910649][T20020]  dump_stack_lvl+0xe8/0x150
[  377.910670][T20020]  warn_alloc+0x249/0x340
[  377.910692][T20020]  ? stack_trace_save+0xa9/0x100
[  377.910716][T20020]  ? __pfx_warn_alloc+0x10/0x10
[  377.910739][T20020]  ? kasan_save_track+0x4f/0x80
[  377.910757][T20020]  ? kasan_save_track+0x3e/0x80
[  377.910773][T20020]  ? __kasan_kmalloc+0x93/0xb0
[  377.910791][T20020]  ? __kmalloc_cache_noprof+0x31c/0x660
[  377.910810][T20020]  ? xskq_create+0x56/0x170
[  377.910828][T20020]  ? xsk_setsockopt+0x54c/0x990
[  377.910842][T20020]  ? do_sock_setsockopt+0x17c/0x1b0
[  377.910858][T20020]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  377.910873][T20020]  ? do_syscall_64+0x15f/0xf80
[  377.910892][T20020]  __vmalloc_node_range_noprof+0x132/0x1750
[  377.910932][T20020]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  377.910954][T20020]  ? __kasan_kmalloc+0x93/0xb0
[  377.910973][T20020]  vmalloc_user_noprof+0xad/0xe0
[  377.910990][T20020]  ? xskq_create+0xbf/0x170
[  377.911006][T20020]  xskq_create+0xbf/0x170
[  377.911023][T20020]  xsk_init_queue+0x8a/0xe0
[  377.911069][T20020]  xsk_setsockopt+0x54c/0x990
[  377.911088][T20020]  ? __pfx_xsk_setsockopt+0x10/0x10
[  377.911102][T20020]  ? __pfx_aa_sk_perm+0x10/0x10
[  377.911121][T20020]  ? aa_sock_opt_perm+0xff/0x1a0
[  377.911139][T20020]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  377.911157][T20020]  ? __pfx_xsk_setsockopt+0x10/0x10
[  377.911173][T20020]  do_sock_setsockopt+0x17c/0x1b0
[  377.911200][T20020]  __x64_sys_setsockopt+0x13d/0x1b0
[  377.911220][T20020]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.911235][T20020]  do_syscall_64+0x15f/0xf80
[  377.911254][T20020]  ? trace_irq_disable+0x3b/0x140
[  377.911282][T20020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.911295][T20020] RIP: 0033:0x7fb111b9ce59
[  377.911308][T20020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.911321][T20020] RSP: 002b:00007fb1129e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  377.911337][T20020] RAX: ffffffffffffffda RBX: 00007fb111e16090 RCX: 00007fb111b9ce59
[  377.911346][T20020] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  377.911353][T20020] RBP: 00007fb111c32d6f R08: 0000000000000004 R09: 0000000000000000
[  377.911360][T20020] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  377.911368][T20020] R13: 00007fb111e16128 R14: 00007fb111e16090 R15: 00007fff40701fa8
[  377.911389][T20020]  </TASK>
[  377.911394][T20020] Mem-Info:
[  378.028668][T20020] active_anon:5330 inactive_anon:0 isolated_anon:0
[  378.028668][T20020]  active_file:15366 inactive_file:38447 isolated_file:0
[  378.028668][T20020]  unevictable:1768 dirty:64 writeback:0
[  378.028668][T20020]  slab_reclaimable:13249 slab_unreclaimable:157182
[  378.028668][T20020]  mapped:18454 shmem:2414 pagetables:1124
[  378.028668][T20020]  sec_pagetables:0 bounce:0
[  378.028668][T20020]  kernel_misc_reclaimable:0
[  378.028668][T20020]  free:1046026 free_pcp:21330 free_cma:0
[  378.046174][T20020] Node 0 active_anon:10344kB inactive_anon:0kB active_file:12236kB inactive_file:128408kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39240kB dirty:16kB writeback:0kB shmem:4976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11280kB pagetables:2748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  378.060105][T20020] Node 1 active_anon:11076kB inactive_anon:0kB active_file:49228kB inactive_file:25380kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34576kB dirty:240kB writeback:0kB shmem:4680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5332kB pagetables:1748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  378.072609][T20020] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  378.083543][T20020] lowmem_reserve[]: 0 1587 2117 2117 2117
[  378.085948][T20020] Node 0 DMA32 free:1286216kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1028kB inactive_anon:0kB active_file:1356kB inactive_file:29052kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1625312kB mlocked:0kB bounce:0kB free_pcp:28924kB local_pcp:18656kB free_cma:0kB
[  378.103749][T20020] lowmem_reserve[]: 0 0 530 530 530
[  378.106000][T20020] Node 0 Normal free:10576kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9288kB inactive_anon:0kB active_file:10880kB inactive_file:99356kB unevictable:3536kB writepending:16kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:4472kB local_pcp:4188kB free_cma:0kB
[  378.116234][T20020] lowmem_reserve[]: 0 0 0 0 0
[  378.117880][T20020] Node 1 Normal free:2871728kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11044kB inactive_anon:0kB active_file:49228kB inactive_file:25380kB unevictable:3536kB writepending:276kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:51884kB local_pcp:27924kB free_cma:0kB
[  378.128270][T20020] lowmem_reserve[]: 0 0 0 0 0
[  378.129858][T20020] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  378.139960][T20020] Node 0 DMA32: 700*4kB (UME) 158*8kB (UME) 146*16kB (UE) 129*32kB (UME) 10*64kB (U) 59*128kB (U) 41*256kB (UE) 7*512kB (UME) 18*1024kB (UME) 15*2048kB (UME) 294*4096kB (UM) = 1286176kB
[  378.149694][T20020] Node 0 Normal: 322*4kB (UM) 419*8kB (UM) 153*16kB (UM) 89*32kB (U) 10*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10576kB
[  378.159206][T20020] Node 1 Normal: 2628*4kB (UME) 1530*8kB (UME) 1157*16kB (UME) 1174*32kB (UME) 471*64kB (UME) 212*128kB (UME) 70*256kB (UME) 34*512kB (UM) 29*1024kB (UM) 26*2048kB (UM) 639*4096kB (UM) = 2871728kB
[  378.172152][T20020] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  378.179299][T20020] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  378.186221][T20020] 56197 total pagecache pages
[  378.189599][T20020] 0 pages in swap cache
[  378.192659][T20020] Free swap  = 124996kB
[  378.195881][T20020] Total swap = 124996kB
[  378.198961][T20020] 1834877 pages RAM
[  378.201886][T20020] 0 pages HighMem/MovableOnly
[  378.206296][T20020] 390250 pages reserved
[  378.209306][T20020] 0 pages cma reserved
[  378.732327][T20039] validate_nla: 68 callbacks suppressed
[  378.732348][T20039] netlink: 'syz.2.4036': attribute type 1 has an invalid length.
[  378.783107][T20043] tunl0: left promiscuous mode
[  378.789903][T20043] batman_adv: batadv0: Interface activated: gretap0
[  378.818996][T20043] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.915126][T20043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  378.919462][T20043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  378.929626][T20043] veth1_vlan: left promiscuous mode
[  378.939108][T20043] veth0_vlan: left promiscuous mode
[  378.942117][T20043] veth0_vlan: entered promiscuous mode
[  378.947326][T20043] veth1_vlan: entered promiscuous mode
[  378.960728][T20043] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  379.024862][ T5500] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.028354][ T5500] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.109621][ T5500] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.168011][ T5500] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  379.818989][T20082] __nla_validate_parse: 8 callbacks suppressed
[  379.819011][T20082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4045'.
[  379.829235][T20082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4045'.
[  379.901991][T20084] IPv6: sit2: Disabled Multicast RS
[  380.295315][T20100] netlink: 'syz.0.4049': attribute type 1 has an invalid length.
[  380.321675][T20100] bond43: entered promiscuous mode
[  380.324868][T20100] 8021q: adding VLAN 0 to HW filter on device bond43
[  380.452424][T20108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4051'.
[  380.475201][T20108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4051'.
[  380.484844][T20108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4051'.
[  380.488779][T20108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4051'.
[  380.860724][T20120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4055'.
[  382.673031][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4057'.
[  382.736916][T20132] netlink: 'syz.1.4058': attribute type 1 has an invalid length.
[  382.739558][T20132] netlink: 'syz.1.4058': attribute type 1 has an invalid length.
[  382.760962][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4057'.
[  382.775689][T20135] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4059'.
[  383.713558][T20144] netlink: 'syz.1.4062': attribute type 11 has an invalid length.
[  383.742363][T20146] netlink: 'syz.1.4063': attribute type 1 has an invalid length.
[  383.771425][T20146] bond45: entered promiscuous mode
[  383.773342][T20146] 8021q: adding VLAN 0 to HW filter on device bond45
[  383.792770][T20146] 8021q: adding VLAN 0 to HW filter on device bond45
[  383.796398][T20146] bond45: (slave vcan0): The slave device specified does not support setting the MAC address
[  383.800470][T20146] bond45: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  383.805863][T20146] bond45: (slave vcan0): making interface the new active one
[  383.808274][T20146] vcan0: entered promiscuous mode
[  383.810935][T20146] bond45: (slave vcan0): Enslaving as an active interface with an up link
[  383.917292][T20151] netlink: 'syz.0.4066': attribute type 4 has an invalid length.
[  383.921191][T20151] netlink: 'syz.0.4066': attribute type 4 has an invalid length.
[  384.211413][T20167] netlink: 'syz.2.4069': attribute type 5 has an invalid length.
[  384.218902][T20165] xt_hashlimit: size too large, truncated to 1048576
[  384.222367][T20165] xt_hashlimit: invalid interval
[  384.244054][T20165] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.253584][T20165] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  384.256357][T20165] mac80211_hwsim hwsim5 ;: left promiscuous mode
[  384.259249][T20165] bond21: left promiscuous mode
[  384.261455][T20165] vti1: left promiscuous mode
[  384.263603][T20165] bond23: left promiscuous mode
[  384.270385][T20165] bond26: left promiscuous mode
[  384.272485][T20165] vcan1: left promiscuous mode
[  384.275494][T20165] vlan6: left promiscuous mode
[  384.282227][T20165] geneve1: left promiscuous mode
[  384.286882][T20165] vlan6: left allmulticast mode
[  384.290704][T20165] geneve1: left allmulticast mode
[  384.295464][T20165] bond28: left promiscuous mode
[  384.300786][T20165] bond28: left allmulticast mode
[  384.305323][T20165] bond29: left promiscuous mode
[  384.315455][T20169] netlink: 'syz.0.4070': attribute type 1 has an invalid length.
[  384.320828][T20165] bond32: left promiscuous mode
[  384.323451][T20165] ip6gre5: left promiscuous mode
[  384.326481][T20165] bond33: left allmulticast mode
[  384.329024][T20165] vlan0: left promiscuous mode
[  384.331063][T20165] bridge0: left promiscuous mode
[  384.333349][T20165] ipip1: left promiscuous mode
[  384.336289][T20165] ip6tnl8: left allmulticast mode
[  384.338607][T20165] bond40: left promiscuous mode
[  384.340896][T20165] vlan1: left promiscuous mode
[  384.343199][T20165] bond42: left promiscuous mode
[  384.346149][T20165] vlan1: left allmulticast mode
[  384.348363][T20165] bond42: left allmulticast mode
[  384.350136][T20165] bond43: left promiscuous mode
[  384.450766][T20174] netlink: 'syz.2.4071': attribute type 4 has an invalid length.
[  384.486376][T20176] netlink: 'syz.0.4073': attribute type 11 has an invalid length.
[  384.537741][T20178] netlink: 'syz.2.4071': attribute type 4 has an invalid length.
[  384.801639][T20199] netlink: 'syz.0.4080': attribute type 11 has an invalid length.
[  384.937840][T20207] __nla_validate_parse: 27 callbacks suppressed
[  384.937887][T20207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4084'.
[  384.947162][T20207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4084'.
[  385.051134][T20211] netlink: 'syz.1.4086': attribute type 1 has an invalid length.
[  385.108068][T20211] bond46: (slave vxcan1): The slave device specified does not support setting the MAC address
[  385.112384][T20211] bond46: (slave vxcan1): Error -95 calling set_mac_address
[  385.178118][T20211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4086'.
[  385.193769][T20211] bond46: (slave bridge44): Enslaving as an active interface with a down link
[  385.288731][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4087'.
[  385.292601][T20216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4087'.
[  385.299642][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4087'.
[  385.303876][T20216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4087'.
[  385.563075][T20222] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4089'.
[  385.570670][T20222] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  385.681420][T20228] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  386.568228][T20234] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4095'.
[  386.760763][T20245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4096'.
[  386.918501][T20258] bond45: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  386.929683][T20258] bond45: (slave lo): Enslaving as an active interface with an up link
[  386.933328][T20258] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  387.836301][T20271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  388.053810][T20327] xt_l2tp: invalid flags combination: 8
[  388.080378][T20325] syzkaller0: entered promiscuous mode
[  388.082220][T20325] syzkaller0: entered allmulticast mode
[  389.977424][T20344] __nla_validate_parse: 14 callbacks suppressed
[  389.977445][T20344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4125'.
[  389.984180][T20344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4125'.
[  390.029376][T20346] validate_nla: 4 callbacks suppressed
[  390.029392][T20346] netlink: 'syz.1.4126': attribute type 2 has an invalid length.
[  390.113561][T20351] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4128'.
[  390.125409][T20351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4128'.
[  390.169558][T20351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4128'.
[  390.275693][T20359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4131'.
[  390.293515][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4132'.
[  390.319419][ T5669] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  390.322583][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4132'.
[  390.326685][ T5669] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  390.350572][T20362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4130'.
[  390.357742][ T5669] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  390.362960][ T5669] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  390.468568][T20372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4135'.
[  390.732994][T20396] bond46: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  390.740515][T20396] bond46 (unregistering): Released all slaves
[  390.794082][T20402] bond47: (slave vxcan1): The slave device specified does not support setting the MAC address
[  390.801537][T20402] bond47: (slave vxcan1): Error -95 calling set_mac_address
[  391.644356][T20441] netlink: 'syz.0.4153': attribute type 1 has an invalid length.
[  391.649294][T20441] netlink: 'syz.0.4153': attribute type 6 has an invalid length.
[  391.652587][T20441] netlink: 'syz.0.4153': attribute type 3 has an invalid length.
[  391.825906][T20462] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  394.872476][T20466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  395.056283][T20502] __nla_validate_parse: 21 callbacks suppressed
[  395.056299][T20502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4168'.
[  395.063627][T20503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4168'.
[  395.087606][T20502] 8021q: adding VLAN 0 to HW filter on device bond36
[  395.093474][T20502] bond36: option mode: unable to set because the bond device is up
[  395.175682][T20509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4169'.
[  395.183280][T20509] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4169'.
[  395.279310][T20512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4172'.
[  395.288183][T20512] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  395.300724][T20512] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  395.313346][T20512] bond0: Caught tx_queue_len zero misconfig
[  395.511580][T20520] netlink: 'syz.1.4171': attribute type 1 has an invalid length.
[  395.547002][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4174'.
[  395.560968][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4174'.
[  395.743138][T20514] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  395.746119][T20514] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  395.751978][T20514] bond45: left promiscuous mode
[  395.753799][T20514] vcan0: left promiscuous mode
[  395.851202][ T8172] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.856027][ T8172] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.859401][ T8172] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.862814][ T8172] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  395.948943][T20536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4178'.
[  396.088496][T20545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4179'.
[  396.098732][T20545] ip6gre6: entered promiscuous mode
[  396.100535][T20545] ip6gre6: entered allmulticast mode
[  396.121986][T20550] netlink: 'syz.1.4180': attribute type 11 has an invalid length.
[  396.198349][T20554] netlink: 'syz.1.4182': attribute type 1 has an invalid length.
[  396.348149][T20563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4185'.
[  396.514945][T20567] netlink: 'syz.2.4186': attribute type 1 has an invalid length.
[  396.971680][T20577] openvswitch: netlink: Message has 151 unknown bytes.
[  397.145013][T20579] netlink: 'syz.2.4190': attribute type 1 has an invalid length.
[  397.184142][T20579] bond37: entered promiscuous mode
[  397.186161][T20579] 8021q: adding VLAN 0 to HW filter on device bond37
[  397.199544][T20580] netlink: 'syz.2.4190': attribute type 1 has an invalid length.
[  397.209668][T20579] 8021q: adding VLAN 0 to HW filter on device bond37
[  397.215469][T20579] bond37: (slave vcan0): The slave device specified does not support setting the MAC address
[  397.218717][T20579] bond37: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  397.232860][T20579] bond37: (slave vcan0): making interface the new active one
[  397.235432][T20579] vcan0: entered promiscuous mode
[  397.238120][T20579] bond37: (slave vcan0): Enslaving as an active interface with an up link
[  398.276759][T20608] netlink: 'syz.1.4198': attribute type 1 has an invalid length.
[  398.339191][T20608] 8021q: adding VLAN 0 to HW filter on device bond51
[  398.348371][T20608] bond50: (slave bond51): making interface the new active one
[  398.354678][T20608] bond50: (slave bond51): Enslaving as an active interface with an up link
[  399.087280][   T33] audit: type=1800 audit(1778897586.716:8): pid=20632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4204" name="memory.events" dev="tmpfs" ino=7169 res=0 errno=0
[  399.600148][T20647] netlink: 'syz.1.4209': attribute type 3 has an invalid length.
[  399.623122][T20647] nbd: nbd1 already in use
[  399.634552][T20647] block nbd1: NBD_DISCONNECT
[  399.636292][T20647] block nbd1: Send disconnect failed -32
[  399.654927][T20647] block nbd1: Send disconnect failed -32
[  399.802415][T20653] netlink: 'syz.1.4210': attribute type 1 has an invalid length.
[  399.811928][T20653] netlink: 'syz.1.4210': attribute type 1 has an invalid length.
[  399.847698][T20653] veth1_to_team: entered promiscuous mode
[  399.852381][T20653] veth1_to_team: left promiscuous mode
[  400.124951][T20674] __nla_validate_parse: 28 callbacks suppressed
[  400.124961][T20674] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4217'.
[  400.205601][T20676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4218'.
[  400.411097][T20688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4222'.
[  400.416487][T20688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4222'.
[  400.532895][T20700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4225'.
[  400.620123][T20702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4226'.
[  401.407317][T20734] bridge43: entered promiscuous mode
[  401.409518][T20734] bridge43: entered allmulticast mode
[  401.589217][T20748] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  401.613335][T20748] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  401.623232][T20748] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  401.927845][T20773] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4240'.
[  401.972540][T20773] validate_nla: 1 callbacks suppressed
[  401.972554][T20773] netlink: 'syz.1.4240': attribute type 1 has an invalid length.
[  402.092675][T20780] netlink: 'syz.1.4243': attribute type 1 has an invalid length.
[  402.101277][T20781] netlink: 'syz.1.4243': attribute type 1 has an invalid length.
[  402.135566][T20781] bond52: (slave vxcan1): The slave device specified does not support setting the MAC address
[  402.142280][T20781] bond52: (slave vxcan1): Error -95 calling set_mac_address
[  402.211376][T20786] bond52: (slave vxcan1): The slave device specified does not support setting the MAC address
[  402.219480][T20786] bond52: (slave vxcan1): Error -95 calling set_mac_address
[  402.360908][T20801] dvmrp6: entered allmulticast mode
[  402.429190][T20805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4247'.
[  402.883813][T20826] netlink: 'syz.0.4251': attribute type 11 has an invalid length.
[  403.071683][T20832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4253'.
[  403.100229][T20832] bond53: entered promiscuous mode
[  403.102368][T20832] 8021q: adding VLAN 0 to HW filter on device bond53
[  403.107007][T20832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4253'.
[  403.216372][T20838] netlink: 'syz.0.4255': attribute type 1 has an invalid length.
[  403.680081][T20852] 8021q: adding VLAN 0 to HW filter on device bond39
[  403.717714][T20856] netlink: 'syz.2.4262': attribute type 12 has an invalid length.
[  403.931873][T20859] macsec0: entered promiscuous mode
[  404.025561][T20866] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  404.051010][T20855] macsec0: left promiscuous mode
[  404.183382][T20872] netlink: 'syz.1.4268': attribute type 4 has an invalid length.
[  404.208768][T20878] netlink: 'syz.1.4269': attribute type 58 has an invalid length.
[  404.304599][T20884] netlink: 'syz.1.4272': attribute type 11 has an invalid length.
[  404.337875][T20887] Bluetooth: MGMT ver 1.23
[  404.341019][T20887] netlink: 'syz.1.4273': attribute type 5 has an invalid length.
[  404.713811][T20900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  404.997345][T20913] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  405.000686][T20913] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  405.039894][T20924] xt_hashlimit: size too large, truncated to 1048576
[  405.113432][T20929] tipc: Resetting bearer <eth:gre0>
[  405.191089][   T31] syz1: Port: 1 Link DOWN
[  405.206387][T20931] syzkaller1: entered allmulticast mode
[  405.328791][T20935] __nla_validate_parse: 16 callbacks suppressed
[  405.328808][T20935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4288'.
[  405.402880][T20942] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4290'.
[  405.411025][T20942] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4290'.
[  405.421560][T20942] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4290'.
[  405.497504][T20946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4291'.
[  406.083594][T20971] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4297'.
[  406.468362][T20995] veth36: entered allmulticast mode
[  406.950236][T21024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4306'.
[  407.233408][T21028] validate_nla: 7 callbacks suppressed
[  407.233423][T21028] netlink: 'syz.0.4307': attribute type 10 has an invalid length.
[  407.438497][T21038] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  407.451832][T21040] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  407.607735][T21053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4314'.
[  407.740013][T21068] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  407.747653][T21068] xt_policy: too many policy elements
[  408.049923][T21090] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4324'.
[  408.639733][T21114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4330'.
[  408.918222][T21133] netlink: 'syz.1.4333': attribute type 1 has an invalid length.
[  408.933790][T21133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.837271][T21151] smc: net device lo applied user defined pnetid SYZ2
[  409.839928][T21151] smc: net device lo erased user defined pnetid SYZ2
[  409.950268][T21153] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.157343][T21180] x_tables: duplicate underflow at hook 2
[  410.288576][T21187] netlink: 'syz.0.4351': attribute type 7 has an invalid length.
[  410.330060][T21189] netlink: 'syz.2.4353': attribute type 12 has an invalid length.
[  410.346733][T21189] netlink: 'syz.2.4353': attribute type 39 has an invalid length.
[  410.635293][T21195] __nla_validate_parse: 5 callbacks suppressed
[  410.635303][T21195] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4355'.
[  410.726728][T21223] netlink: 'syz.0.4361': attribute type 1 has an invalid length.
[  411.173167][T21242] netlink: 'syz.0.4366': attribute type 1 has an invalid length.
[  411.214104][T21242] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  411.221518][ T6718] syz1: Port: 1 Link ACTIVE
[  411.225502][T21244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4367'.
[  411.230615][T21244] xt_l2tp: invalid flags combination: 8
[  411.246127][T21244] netlink: 'syz.1.4367': attribute type 1 has an invalid length.
[  411.250052][T21244] gre0: entered promiscuous mode
[  411.251796][T21244] gre0: entered allmulticast mode
[  411.282442][T21246] netlink: 'syz.1.4368': attribute type 1 has an invalid length.
[  411.285078][T21246] netlink: 'syz.1.4368': attribute type 3 has an invalid length.
[  411.287571][T21246] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4368'.
[  411.290471][T21246] NCSI netlink: No device for ifindex 813332851
[  411.312720][T21248] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4369'.
[  411.407058][T21252] netlink: 548 bytes leftover after parsing attributes in process `syz.0.4371'.
[  411.612612][T21260] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4372'.
[  411.616822][T21260] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4372'.
[  411.620855][T21260] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4372'.
[  411.625590][T21260] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4372'.
[  411.629512][T21260] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4372'.
[  412.000254][T21272] gre0: left promiscuous mode
[  412.002359][T21272] gre0: left allmulticast mode
[  412.017787][T21272] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  412.125732][T21277] macsec0: entered promiscuous mode
[  412.135916][T21276] macsec0: left promiscuous mode
[  412.359290][T21288] validate_nla: 4 callbacks suppressed
[  412.359401][T21288] netlink: 'syz.0.4382': attribute type 1 has an invalid length.
[  412.873708][T21311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  413.150468][T21328] sctp: [Deprecated]: syz.2.4389 (pid 21328) Use of int in max_burst socket option.
[  413.150468][T21328] Use struct sctp_assoc_value instead
[  413.439122][T21336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  413.673588][T21343] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  413.816536][T21352] netlink: 'syz.0.4397': attribute type 32 has an invalid length.
[  413.870711][T21352] bond47: option coupled_control: invalid value (29)
[  413.886345][T21352] bond47 (unregistering): Released all slaves
[  414.249768][T21364] lo speed is unknown, defaulting to 1000
[  414.250925][T21363] Cannot find del_set index 2 as target
[  414.259204][T21364] lo speed is unknown, defaulting to 1000
[  414.260382][T21364] lo speed is unknown, defaulting to 1000
[  414.279657][T21363] netlink: 'syz.1.4400': attribute type 3 has an invalid length.
[  414.293531][T21358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  414.431092][T21371] netlink: 'syz.1.4401': attribute type 1 has an invalid length.
[  414.459321][T21371] bond54: entered promiscuous mode
[  414.461328][T21371] 8021q: adding VLAN 0 to HW filter on device bond54
[  414.483216][T21371] bond54: (slave bridge47): making interface the new active one
[  414.486707][T21371] bridge47: entered promiscuous mode
[  414.490312][T21371] bond54: (slave bridge47): Enslaving as an active interface with an up link
[  414.539167][T21364] infiniband sqz0: set active
[  414.552577][T21364] infiniband sqz0: added lo
[  414.558206][ T6718] lo speed is unknown, defaulting to 1000
[  414.586130][T21364] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  414.592914][T21364] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  414.613787][T21364] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  414.668530][T21364] RDS/IB: sqz0: added
[  414.687075][T21364] smc: adding ib device sqz0 with port count 1
[  414.700426][T21364] smc:    ib device sqz0 port 1 has no pnetid
[  414.713526][ T6713] lo speed is unknown, defaulting to 1000
[  414.737603][T21364] lo speed is unknown, defaulting to 1000
[  415.012585][T21374] lo speed is unknown, defaulting to 1000
[  415.232735][T21364] lo speed is unknown, defaulting to 1000
[  415.550415][T21364] lo speed is unknown, defaulting to 1000
[  415.819441][T21412] __nla_validate_parse: 13 callbacks suppressed
[  415.819454][T21412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4411'.
[  415.825658][T21412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4411'.
[  415.838001][T21412] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4411'.
[  415.901056][T21416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4414'.
[  415.913553][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4414'.
[  415.922041][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4414'.
[  415.982074][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4414'.
[  415.987235][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4414'.
[  415.990112][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4414'.
[  415.993069][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4414'.
[  416.501928][T21440] netlink: 'syz.2.4422': attribute type 4 has an invalid length.
[  416.632880][T21444] openvswitch: netlink: Flow key attr not present in new flow.
[  416.693384][T21446] lo speed is unknown, defaulting to 1000
[  416.855990][T21458] netlink: 'syz.1.4429': attribute type 1 has an invalid length.
[  416.933870][T21458] bond55: (slave bridge48): Enslaving as a backup interface with an up link
[  416.946499][T21458] macvlan2: entered promiscuous mode
[  416.948299][T21458] macvlan2: entered allmulticast mode
[  416.950399][T21458] bond55: entered promiscuous mode
[  416.952120][T21458] bridge48: entered promiscuous mode
[  416.957144][T21458] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  416.960638][T21458] bond55: left promiscuous mode
[  416.962282][T21458] bridge48: left promiscuous mode
[  417.505336][T20530] lo speed is unknown, defaulting to 1000
[  417.757735][T21497] netlink: 'syz.0.4440': attribute type 1 has an invalid length.
[  417.996250][T21516] hsr0 speed is unknown, defaulting to 1000
[  417.998306][T21516] hsr0 speed is unknown, defaulting to 1000
[  418.000700][T21516] hsr0 speed is unknown, defaulting to 1000
[  418.003032][T21516] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  418.009994][T21516] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  418.015474][T21516] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  418.025986][T21516] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  418.043966][T21516] hsr0 speed is unknown, defaulting to 1000
[  418.047331][T21516] hsr0 speed is unknown, defaulting to 1000
[  418.050486][T21516] hsr0 speed is unknown, defaulting to 1000
[  430.265207][T21523] netlink: 'syz.0.4444': attribute type 3 has an invalid length.
[  430.273325][T21524] netlink: 'syz.0.4444': attribute type 3 has an invalid length.
[  430.399591][T21539] openvswitch: netlink: Missing key (keys=40, expected=80)
[  430.539331][T21546] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  430.650600][T21555] netlink: 'syz.0.4452': attribute type 13 has an invalid length.
[  430.692914][T21555] __nla_validate_parse: 19 callbacks suppressed
[  430.692926][T21555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4452'.
[  430.722467][T21560] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4453'.
[  430.729026][T21560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4453'.
[  430.776676][T21566] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4454'.
[  430.885709][T21572] netlink: 'syz.2.4455': attribute type 58 has an invalid length.
[  430.892829][T21572] batman_adv: batadv0: Interface deactivated: gretap0
[  431.026573][T21578] bond37: entered allmulticast mode
[  431.029258][T21578] vcan0: entered allmulticast mode
[  431.204548][T21587] netlink: 'syz.2.4461': attribute type 4 has an invalid length.
[  431.238377][T21593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4462'.
[  431.271218][T21591] lo speed is unknown, defaulting to 1000
[  431.352235][T21591] hsr0 speed is unknown, defaulting to 1000
[  431.474065][T21600] netlink: 'syz.2.4463': attribute type 1 has an invalid length.
[  431.505079][T21600] bond40: entered promiscuous mode
[  431.507661][T21600] 8021q: adding VLAN 0 to HW filter on device bond40
[  431.524896][T21600] bridge0: Device is already in use.
[  431.842538][T21612] netlink: 'syz.2.4467': attribute type 21 has an invalid length.
[  431.845910][T21612] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4467'.
[  431.848823][T21612] netlink: 'syz.2.4467': attribute type 4 has an invalid length.
[  431.851574][T21612] netlink: 'syz.2.4467': attribute type 5 has an invalid length.
[  431.854852][T21612] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4467'.
[  431.864086][T21612] netlink: 'syz.2.4467': attribute type 58 has an invalid length.
[  432.141535][T21624] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4471'.
[  432.228142][T21621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4470'.
[  432.343162][T21637] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4474'.
[  432.421791][T21641] syzkaller1: entered promiscuous mode
[  432.424074][T21641] syzkaller1: entered allmulticast mode
[  432.697922][T21656] erspan0: entered promiscuous mode
[  432.741912][T21654] bridge49: entered promiscuous mode
[  432.743801][T21654] bridge49: entered allmulticast mode
[  432.784565][T21663] openvswitch: netlink: IP tunnel TTL not specified.
[  432.897282][T21668] bond41 (unregistering): Released all slaves
[  432.947305][T21673] lo speed is unknown, defaulting to 1000
[  433.058110][T21679] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  433.171870][T21673] hsr0 speed is unknown, defaulting to 1000
[  433.326967][T21690] bond56: entered promiscuous mode
[  433.331533][T21690] 8021q: adding VLAN 0 to HW filter on device bond56
[  433.386235][T21690] 8021q: adding VLAN 0 to HW filter on device bond56
[  433.396905][T21690] bond56: (slave vti1): The slave device specified does not support setting the MAC address
[  433.401520][T21690] bond56: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  433.418714][T21690] bond56: (slave vti1): making interface the new active one
[  433.425324][T21690] vti1: entered promiscuous mode
[  433.431571][T21690] bond56: (slave vti1): Enslaving as an active interface with an up link
[  433.442982][T21696] vlan0: entered allmulticast mode
[  433.445559][T21696] bond0: entered allmulticast mode
[  434.037224][T21716] xt_hashlimit: size too large, truncated to 1048576
[  434.290766][T21729] bond41: entered promiscuous mode
[  434.299204][T21729] 8021q: adding VLAN 0 to HW filter on device bond41
[  434.342167][T21729] 8021q: adding VLAN 0 to HW filter on device bond41
[  434.345999][T21729] bond41: (slave sit5): The slave device specified does not support setting the MAC address
[  434.351023][T21729] bond41: (slave sit5): Error -95 calling set_mac_address
[  434.496451][T21737] lo speed is unknown, defaulting to 1000
[  434.601368][T21737] hsr0 speed is unknown, defaulting to 1000
[  434.978871][T21745] syzkaller0: entered promiscuous mode
[  434.982837][T21745] syzkaller0: entered allmulticast mode
[  435.902688][T21795] xt_hashlimit: size too large, truncated to 1048576
[  436.598472][T21801] __nla_validate_parse: 24 callbacks suppressed
[  436.598485][T21801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4521'.
[  436.603567][T21801] validate_nla: 8 callbacks suppressed
[  436.603575][T21801] netlink: 'syz.2.4521': attribute type 7 has an invalid length.
[  436.609170][T21801] netlink: 'syz.2.4521': attribute type 8 has an invalid length.
[  436.611340][T21801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4521'.
[  436.682472][T21805] nicvf0: tun_chr_ioctl cmd 1074812117
[  436.694798][T21805] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4522'.
[  436.707622][T21805] siw: device registration error -23
[  436.735530][T21807] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  436.736103][T21808] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  436.804166][T21810] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  436.890014][T21814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4526'.
[  436.898799][T21814] veth1_macvtap: renamed from vlan0
[  436.905384][T21814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4526'.
[  436.915956][T21814] syzkaller0: entered promiscuous mode
[  436.918347][T21814] syzkaller0: entered allmulticast mode
[  436.986975][T21816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4527'.
[  436.990818][T21816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4527'.
[  436.995645][T21816] netlink: 58 bytes leftover after parsing attributes in process `syz.1.4527'.
[  437.003817][T21817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4527'.
[  437.008509][T21816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4527'.
[  437.392173][T21847] netlink: 'syz.1.4535': attribute type 10 has an invalid length.
[  437.486733][T21855] netlink: 'syz.1.4537': attribute type 13 has an invalid length.
[  437.571469][T21861] 8021q: adding VLAN 0 to HW filter on device bond42
[  437.949215][T21883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  437.953149][T21884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  438.399830][T21900] can: request_module (can-proto-0) failed.
[  438.599139][T21906] syzkaller0: entered promiscuous mode
[  438.602780][T21906] syzkaller0: entered allmulticast mode
[  438.680903][T21928] netlink: 'syz.1.4556': attribute type 11 has an invalid length.
[  438.804522][T21940] netlink: 'syz.2.4559': attribute type 6 has an invalid length.
[  438.843684][T21943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  439.528860][T21965] netlink: 'syz.0.4566': attribute type 1 has an invalid length.
[  441.745224][T21935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  441.958997][T21982] netlink: 'syz.0.4571': attribute type 11 has an invalid length.
[  441.967127][T21980] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  442.029690][T21986] netlink: 'syz.0.4574': attribute type 3 has an invalid length.
[  442.033165][T21986] netlink: 'syz.0.4574': attribute type 3 has an invalid length.
[  442.200536][T22004] __nla_validate_parse: 15 callbacks suppressed
[  442.200554][T22004] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4578'.
[  442.478560][T22013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4581'.
[  442.633436][T22034] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4585'.
[  442.682618][T22038] netlink: 'syz.1.4587': attribute type 11 has an invalid length.
[  442.698550][T22032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4584'.
[  442.809106][T22045] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4590'.
[  442.854967][T22042] bond43: entered promiscuous mode
[  442.856970][T22042] 8021q: adding VLAN 0 to HW filter on device bond43
[  442.859869][T22048] netem: change failed
[  442.935883][T22055] netlink: 'syz.2.4594': attribute type 11 has an invalid length.
[  442.979061][T22052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4593'.
[  442.984106][T22052] bond45: (slave vcan0): Releasing backup interface
[  442.994891][T22052] bond45: Destroying bond
[  443.000650][T22052] bond45 (unregistering): Released all slaves
[  443.025453][T22058] netlink: 'syz.2.4595': attribute type 11 has an invalid length.
[  443.206852][T22063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4597'.
[  443.259864][T22063] bond44: (slave bridge53): Enslaving as an active interface with an up link
[  443.971072][ T6718] lo speed is unknown, defaulting to 1000
[  443.976580][ T5693] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  443.980500][ T6718] sqz0: Port: 1 Link DOWN
[  443.985899][ T5693] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  443.995879][ T5693] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  444.000804][ T5693] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  444.011515][ T6718] lo speed is unknown, defaulting to 1000
[  444.012326][ T5693] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  444.021599][ T5693] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  444.027036][ T5693] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  444.030719][ T5693] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  444.033750][T22087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4603'.
[  444.216543][T22105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4608'.
[  444.472770][T22121] xt_time: invalid argument - start or stop time greater than 23:59:59
[  444.558206][T22123] netlink: 'syz.1.4615': attribute type 10 has an invalid length.
[  444.846879][T22129] lo speed is unknown, defaulting to 1000
[  445.014858][T22129] hsr0 speed is unknown, defaulting to 1000
[  445.022366][T22128] lo speed is unknown, defaulting to 1000
[  445.182820][T22128] hsr0 speed is unknown, defaulting to 1000
[  445.224986][T22134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4618'.
[  445.330472][T22134] bond47: entered promiscuous mode
[  445.341383][T22134] 8021q: adding VLAN 0 to HW filter on device bond47
[  445.668400][T22140] bridge40: left promiscuous mode
[  445.670278][T22140] bridge40: left allmulticast mode
[  445.672231][T22140] ip6gretap1: left promiscuous mode
[  445.673855][T22140] ip6gretap1: left allmulticast mode
[  445.677615][T22140] bond37: left promiscuous mode
[  445.679191][T22140] vcan0: left promiscuous mode
[  445.682118][T22140] bond40: left promiscuous mode
[  445.683795][T22140] bridge49: left promiscuous mode
[  445.685941][T22140] bridge49: left allmulticast mode
[  445.688133][T22140] veth1_macvtap: left allmulticast mode
[  445.689919][T22140] bond0: left allmulticast mode
[  445.692053][T22140] bond43: left promiscuous mode
[  445.916640][T22159] netlink: 'syz.2.4625': attribute type 1 has an invalid length.
[  445.920170][T22159] nbd: illegal input index 871591272
[  445.947694][T22163] unsupported nlmsg_type 40
[  445.970198][T22165] netlink: 'syz.2.4626': attribute type 1 has an invalid length.
[  446.086868][T22181] netlink: 'syz.0.4631': attribute type 2 has an invalid length.
[  446.159490][T22184] netlink: 'syz.2.4632': attribute type 11 has an invalid length.
[  446.293132][T22196] bond45: (slave vxcan1): The slave device specified does not support setting the MAC address
[  446.298119][T22196] bond45: (slave vxcan1): Error -95 calling set_mac_address
[  446.366590][T22206] bond45: (slave bridge51): Enslaving as an active interface with a down link
[  446.897182][T22250] syzkaller1: entered promiscuous mode
[  446.901976][T22250] syzkaller1: entered allmulticast mode
[  446.993620][T22252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  447.189436][T22264] validate_nla: 3 callbacks suppressed
[  447.189486][T22264] netlink: 'syz.2.4653': attribute type 11 has an invalid length.
[  447.286186][T22266] __nla_validate_parse: 11 callbacks suppressed
[  447.286302][T22266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4654'.
[  447.366943][T22266] batman_adv: batadv0: Interface activated: gretap0
[  447.390092][T22266] 8021q: adding VLAN 0 to HW filter on device bond0
[  447.432683][T22266] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  447.442118][ T5684] lo speed is unknown, defaulting to 1000
[  447.448981][ T5684] sqz0: Port: 1 Link ACTIVE
[  447.463959][ T5684] lo speed is unknown, defaulting to 1000
[  447.562698][T22273] syzkaller1: entered promiscuous mode
[  447.566163][T22273] syzkaller1: entered allmulticast mode
[  447.933329][T22290] netlink: 'syz.0.4659': attribute type 1 has an invalid length.
[  448.089407][T22290] 8021q: adding VLAN 0 to HW filter on device bond48
[  448.347310][T22302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  448.358153][T22306] netlink: 'syz.0.4663': attribute type 9 has an invalid length.
[  448.964837][T22320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4667'.
[  449.113712][T22326] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4668'.
[  449.437419][T22340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4671'.
[  449.539982][T22348] netlink: 'syz.1.4673': attribute type 9 has an invalid length.
[  449.543004][T22348] netlink: 'syz.1.4673': attribute type 6 has an invalid length.
[  449.571865][T22350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4674'.
[  449.620573][T22352] netlink: 'syz.1.4676': attribute type 11 has an invalid length.
[  449.623183][T22352] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.4676'.
[  449.659006][T22354] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4675'.
[  449.937164][T22369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4679'.
[  449.959802][T22369] : entered promiscuous mode
[  450.323400][T22393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  450.380133][T22393] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  450.451884][T22399] ipip1: entered promiscuous mode
[  450.519983][T22405] tc_dump_action: action bad kind
[  450.553449][T22408] IPVS: length: 35 != 24
[  450.557056][T22408] IPVS: length: 35 != 24
[  450.559038][T22408] IPVS: length: 35 != 24
[  450.560687][T22408] IPVS: length: 35 != 24
[  450.566151][T22408] IPVS: length: 35 != 24
[  450.566306][T22409] lo speed is unknown, defaulting to 1000
[  450.567667][T22408] IPVS: length: 35 != 24
[  450.573474][T22408] IPVS: length: 35 != 24
[  450.697954][T22409] hsr0 speed is unknown, defaulting to 1000
[  450.904013][T22420] netlink: 'syz.1.4692': attribute type 11 has an invalid length.
[  450.907127][T22420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4692'.
[  450.956438][T22424] netlink: 'syz.0.4693': attribute type 1 has an invalid length.
[  451.100223][T22424] bond49: entered promiscuous mode
[  451.109009][T22424] 8021q: adding VLAN 0 to HW filter on device bond49
[  451.168974][T22427] vlan7: entered allmulticast mode
[  451.170736][T22427] bond49: entered allmulticast mode
[  451.195728][T22424] bond49: (slave bridge47): making interface the new active one
[  451.199165][T22424] bridge47: entered promiscuous mode
[  451.201312][T22424] bridge47: entered allmulticast mode
[  451.208091][T22424] bond49: (slave bridge47): Enslaving as an active interface with an up link
[  451.323014][T22445] netlink: 'syz.0.4699': attribute type 1 has an invalid length.
[  451.371948][T22448] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4700'.
[  451.409157][T22445] 8021q: adding VLAN 0 to HW filter on device bond50
[  451.498317][T22445] sctp: [Deprecated]: syz.0.4699 (pid 22445) Use of int in maxseg socket option.
[  451.498317][T22445] Use struct sctp_assoc_value instead
[  451.668984][T22479] netlink: 'syz.2.4706': attribute type 83 has an invalid length.
[  451.671933][T22480] Cannot find map_set index 17 as target
[  451.678517][T22481] netlink: 'syz.2.4706': attribute type 83 has an invalid length.
[  451.713533][T22485] bond51: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  451.723161][T22485] bond51 (unregistering): Released all slaves
[  452.044900][T22509] openvswitch: netlink: Unknown nsh attribute 0
[  452.511659][T22552] __nla_validate_parse: 15 callbacks suppressed
[  452.511670][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4727'.
[  452.523078][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4727'.
[  452.530895][T22552] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4727'.
[  452.541320][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4727'.
[  452.547800][T22552] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4727'.
[  452.552923][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4727'.
[  452.558614][T22555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4728'.
[  452.647323][T22561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4730'.
[  452.735079][T22567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4732'.
[  452.738127][T22567] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4732'.
[  453.009459][T22576] netlink: 'syz.0.4734': attribute type 11 has an invalid length.
[  453.381046][T22590] smc: net device hsr0 applied user defined pnetid SYZ2
[  453.437345][T22592] netlink: 'syz.0.4739': attribute type 1 has an invalid length.
[  453.488325][T22592] 8021q: adding VLAN 0 to HW filter on device bond52
[  453.498007][T22592] bond51: (slave bond52): making interface the new active one
[  453.501946][T22592] bond51: (slave bond52): Enslaving as an active interface with an up link
[  453.682815][T22600] netlink: 'syz.2.4741': attribute type 11 has an invalid length.
[  453.761762][T22602] ip6gre7: entered promiscuous mode
[  453.943741][T22613] openvswitch: netlink: Message has 2 unknown bytes.
[  454.027577][T22621] xt_hashlimit: overflow, rate too high: 0
[  454.245567][T22639] bridge56: entered promiscuous mode
[  454.257420][T22639] netlink: 'syz.2.4755': attribute type 1 has an invalid length.
[  454.485128][T22646] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  454.877331][T22658] xt_hashlimit: size too large, truncated to 1048576
[  455.050190][T22664] netlink: 'syz.0.4762': attribute type 11 has an invalid length.
[  456.070910][T22704] netlink: 'syz.1.4775': attribute type 8 has an invalid length.
[  456.190428][T22706] netlink: 'syz.1.4776': attribute type 15 has an invalid length.
[  456.236630][T22708] netlink: 'syz.2.4777': attribute type 4 has an invalid length.
[  456.243812][   T10] lo speed is unknown, defaulting to 1000
[  456.249636][T22708] netlink: 'syz.2.4777': attribute type 4 has an invalid length.
[  456.252807][   T10] sqz0: Port: 1 Link DOWN
[  456.255674][   T10] lo speed is unknown, defaulting to 1000
[  456.263649][   T10] lo speed is unknown, defaulting to 1000
[  456.269526][   T10] sqz0: Port: 1 Link ACTIVE
[  456.318176][T22711] netlink: 'syz.1.4778': attribute type 1 has an invalid length.
[  456.322491][T22712] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  456.353608][T22711] bond57: (slave vxcan1): The slave device specified does not support setting the MAC address
[  456.358241][T22711] bond57: (slave vxcan1): Error -95 calling set_mac_address
[  456.404969][T22714] bond57: (slave bridge52): Enslaving as an active interface with a down link
[  456.552041][T22722] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  456.562882][T22723] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  456.566024][T22725] tipc: Trying to set illegal importance in message
[  456.589741][T22722] syzkaller0: entered promiscuous mode
[  456.598975][T22722] syzkaller0: entered allmulticast mode
[  456.709530][T22722] tipc: Resetting bearer <eth:syzkaller0>
[  456.733986][T22721] tipc: Resetting bearer <eth:syzkaller0>
[  456.751355][T22721] tipc: Disabling bearer <eth:syzkaller0>
[  457.162939][T22761] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR
[  457.421015][T22781] bond58: Unable to set down delay as MII monitoring is disabled
[  457.432731][T22781] bond58 (unregistering): Released all slaves
[  457.531048][T22785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  457.609419][T22788] __nla_validate_parse: 20 callbacks suppressed
[  457.609436][T22788] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4793'.
[  457.616571][T22788] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4793'.
[  457.902483][T22796] x_tables: duplicate underflow at hook 2
[  457.932598][T22792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4794'.
[  457.939584][ T5693] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  457.939631][T22792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4794'.
[  457.953838][ T5693] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  457.970083][ T5693] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  457.975786][ T5693] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  458.021440][T22803] validate_nla: 3 callbacks suppressed
[  458.021507][T22803] netlink: 'syz.1.4797': attribute type 9 has an invalid length.
[  458.030952][T22803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4797'.
[  458.113459][T22807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4798'.
[  458.259324][T22816] netlink: 'syz.1.4800': attribute type 11 has an invalid length.
[  458.589833][T22825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4802'.
[  458.607416][T22826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4802'.
[  458.627946][T22829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4803'.
[  458.631804][T22828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4803'.
[  458.832084][T22838] netlink: 'syz.2.4807': attribute type 10 has an invalid length.
[  458.836169][T22839] netlink: 'syz.2.4807': attribute type 10 has an invalid length.
[  458.839879][T22839] dummy0: entered promiscuous mode
[  458.842501][T22839] dummy0: entered allmulticast mode
[  458.845687][T22839] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  458.852685][T22838] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  458.891568][T22838] dummy0: left allmulticast mode
[  458.923390][T22838] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  459.142374][T22853] syzkaller1: entered promiscuous mode
[  459.147281][T22853] syzkaller1: entered allmulticast mode
[  459.286661][T22860] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  459.554150][T22873] tunl0: left allmulticast mode
[  459.816236][ T5693] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  459.819627][ T5693] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  459.843253][ T5693] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  459.851133][ T5693] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  459.878962][T22886] bond53: option packets_per_slave: invalid value (1048582)
[  459.882006][T22886] bond53: option packets_per_slave: allowed values 0 - 65535
[  459.886649][T22886] bond53 (unregistering): Released all slaves
[  460.088726][T22895] nbd: must specify at least one socket
[  460.234759][T22902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  460.449835][T22916] netlink: 'syz.1.4827': attribute type 58 has an invalid length.
[  460.453221][T22916] erspan0: left promiscuous mode
[  460.587804][T22921] bridge53: entered promiscuous mode
[  461.099626][T22926] xt_TCPMSS: Only works on TCP SYN packets
[  461.961519][T22959] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  461.974658][T22959] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  462.478444][T22969] bond45: option primary_reselect: invalid value (64)
[  462.494933][T22969] bond45 (unregistering): Released all slaves
[  462.610168][T22971] ip6tnl0: Caught tx_queue_len zero misconfig
[  463.335156][T22985] __nla_validate_parse: 18 callbacks suppressed
[  463.335175][T22985] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4850'.
[  463.364031][T22987] xt_policy: output policy not valid in PREROUTING and INPUT
[  463.648384][T23003] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  463.672247][T23005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4852'.
[  463.686252][T23005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4852'.
[  463.707448][T23008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4854'.
[  463.711504][T23006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4852'.
[  463.715465][T23008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4854'.
[  463.719227][T23008] netlink: 'syz.1.4854': attribute type 19 has an invalid length.
[  463.722602][T23008] netlink: 'syz.1.4854': attribute type 20 has an invalid length.
[  463.741604][T23008] dvmrp0: entered allmulticast mode
[  463.748632][T23006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4852'.
[  463.898574][T23017] syzkaller1: entered promiscuous mode
[  463.902476][T23017] syzkaller1: entered allmulticast mode
[  464.036757][T23025] netlink: 'syz.1.4858': attribute type 13 has an invalid length.
[  464.040066][T23025] netlink: 'syz.1.4858': attribute type 17 has an invalid length.
[  464.201501][T23029] netlink: 'syz.2.4859': attribute type 1 has an invalid length.
[  464.505566][T23032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4860'.
[  464.527945][T23035] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode
[  464.531351][T23035] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode
[  464.536171][ T5693] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  464.541354][ T5693] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  464.579696][ T5693] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  464.590770][ T5693] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  464.615147][T23039] netlink: 'syz.1.4861': attribute type 1 has an invalid length.
[  464.623496][T23040] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  464.628876][T23040] CPU: 1 UID: 0 PID: 23040 Comm: syz.1.4861 Not tainted syzkaller #0 PREEMPT(full) 
[  464.628902][T23040] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  464.628908][T23040] Call Trace:
[  464.628913][T23040]  <TASK>
[  464.628917][T23040]  dump_stack_lvl+0xe8/0x150
[  464.628933][T23040]  sysfs_warn_dup+0x8e/0xa0
[  464.628944][T23040]  sysfs_do_create_link_sd+0xc0/0x110
[  464.628955][T23040]  device_add_class_symlinks+0x1cf/0x240
[  464.628966][T23040]  device_add+0x475/0xbb0
[  464.628976][T23040]  wiphy_register+0x1dc5/0x2dc0
[  464.628996][T23040]  ? __pfx_wiphy_register+0x10/0x10
[  464.629006][T23040]  ? __pfx_netdev_run_todo+0x10/0x10
[  464.629017][T23040]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  464.629029][T23040]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  464.629075][T23040]  ieee80211_register_hw+0x3d82/0x4a70
[  464.629097][T23040]  ? ieee80211_register_hw+0x1931/0x4a70
[  464.629117][T23040]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  464.629128][T23040]  ? __asan_memset+0x22/0x50
[  464.629140][T23040]  ? __hrtimer_setup+0x1b7/0x260
[  464.629153][T23040]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  464.629173][T23040]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  464.629200][T23040]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  464.629208][T23040]  ? kstrndup+0xbf/0x160
[  464.629220][T23040]  hwsim_new_radio_nl+0xf6a/0x1c00
[  464.629244][T23040]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  464.629264][T23040]  ? rcu_is_watching+0x15/0xb0
[  464.629278][T23040]  ? trace_kmalloc+0x2a/0xf0
[  464.629297][T23040]  ? __nla_parse+0x40/0x60
[  464.629310][T23040]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  464.629318][T23040]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  464.629328][T23040]  genl_family_rcv_msg_doit+0x22a/0x330
[  464.629338][T23040]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  464.629351][T23040]  ? bpf_lsm_capable+0x9/0x20
[  464.629358][T23040]  ? security_capable+0x7e/0x2c0
[  464.629370][T23040]  genl_rcv_msg+0x61c/0x7a0
[  464.629379][T23040]  ? __pfx_genl_rcv_msg+0x10/0x10
[  464.629386][T23040]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  464.629400][T23040]  netlink_rcv_skb+0x232/0x4b0
[  464.629410][T23040]  ? __pfx_genl_rcv_msg+0x10/0x10
[  464.629417][T23040]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  464.629433][T23040]  ? down_read+0x270/0x2e0
[  464.629439][T23040]  ? genl_rcv+0xd/0x40
[  464.629447][T23040]  genl_rcv+0x28/0x40
[  464.629452][T23040]  netlink_unicast+0x75c/0x8e0
[  464.629465][T23040]  netlink_sendmsg+0x813/0xb40
[  464.629478][T23040]  ? __pfx_netlink_sendmsg+0x10/0x10
[  464.629488][T23040]  ? aa_sock_msg_perm+0xf1/0x1b0
[  464.629498][T23040]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  464.629509][T23040]  ____sys_sendmsg+0x972/0x9f0
[  464.629518][T23040]  ? __might_fault+0xaf/0x130
[  464.629530][T23040]  ? __pfx_____sys_sendmsg+0x10/0x10
[  464.629543][T23040]  ? import_iovec+0x73/0xa0
[  464.629554][T23040]  ___sys_sendmsg+0x2a5/0x360
[  464.629563][T23040]  ? __lock_acquire+0x6b5/0x2cf0
[  464.629572][T23040]  ? __pfx____sys_sendmsg+0x10/0x10
[  464.629584][T23040]  ? futex_wake+0x4ac/0x580
[  464.629605][T23040]  ? __fget_files+0x2a/0x420
[  464.629613][T23040]  ? __fget_files+0x3a0/0x420
[  464.629625][T23040]  __x64_sys_sendmsg+0x1bd/0x2a0
[  464.629641][T23040]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  464.629655][T23040]  ? fput+0xa0/0xd0
[  464.629667][T23040]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.629675][T23040]  do_syscall_64+0x15f/0xf80
[  464.629689][T23040]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.629696][T23040] RIP: 0033:0x7f0b64b9ce59
[  464.629705][T23040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.629711][T23040] RSP: 002b:00007f0b65972028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  464.629720][T23040] RAX: ffffffffffffffda RBX: 00007f0b64e16090 RCX: 00007f0b64b9ce59
[  464.629725][T23040] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000d
[  464.629730][T23040] RBP: 00007f0b64c32d6f R08: 0000000000000000 R09: 0000000000000000
[  464.629734][T23040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  464.629738][T23040] R13: 00007f0b64e16128 R14: 00007f0b64e16090 R15: 00007ffd6fcf0688
[  464.629750][T23040]  </TASK>
[  464.782773][T23039] bond58: entered promiscuous mode
[  464.786582][T23039] 8021q: adding VLAN 0 to HW filter on device bond58
[  464.798328][T23039] netlink: 148760 bytes leftover after parsing attributes in process `syz.1.4861'.
[  464.844656][T23049] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4864'.
[  465.061539][T23057] lo speed is unknown, defaulting to 1000
[  465.343094][T23069] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  465.578329][T23075] workqueue: Failed to create a rescuer kthread for wq "bond59": -EINTR
[  465.593837][T23057] hsr0 speed is unknown, defaulting to 1000
[  465.804089][T23077] netlink: 'syz.0.4871': attribute type 1 has an invalid length.
[  466.023918][T23059] lo speed is unknown, defaulting to 1000
[  466.286658][T23097] syzkaller1: entered promiscuous mode
[  466.289372][T23097] syzkaller1: entered allmulticast mode
[  466.300146][T23059] hsr0 speed is unknown, defaulting to 1000
[  466.963070][T23112] bond45: (slave vxcan5): The slave device specified does not support setting the MAC address
[  466.967523][T23112] bond45: (slave vxcan5): Error -95 calling set_mac_address
[  467.444584][T23131] netlink: 'syz.0.4882': attribute type 13 has an invalid length.
[  467.457986][T23131] netlink: 'syz.0.4882': attribute type 17 has an invalid length.
[  467.678447][T23131] 8021q: adding VLAN 0 to HW filter on device bond0
[  467.685789][T23131] 8021q: adding VLAN 0 to HW filter on device batadv0
[  467.765088][T23131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  467.769290][T23131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  467.780929][T23131] veth0_macvtap: left promiscuous mode
[  467.844835][T23131] veth0_macvtap: entered promiscuous mode
[  467.867193][T23131] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  467.870926][T23131] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  467.881408][T23131] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  467.891237][T23131] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  467.904626][T23131] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  467.912283][T23131] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  467.948674][ T8964] hsr0 speed is unknown, defaulting to 1000
[  467.953211][ T5693] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  467.956155][ T8964] syz2: Port: 1 Link ACTIVE
[  467.982484][T12200] hsr0 speed is unknown, defaulting to 1000
[  467.986903][ T5693] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  467.998065][ T5693] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  468.012773][ T5693] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  468.340525][T23157] netlink: ct family unspecified
[  468.390958][T23159] __nla_validate_parse: 14 callbacks suppressed
[  468.391092][T23159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4887'.
[  468.590705][   T33] audit: type=1107 audit(1778897656.216:9): pid=23174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='y a9)Uׇsz#S˷՘klD'
[  468.628245][T23182] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4893'.
[  468.650844][T23184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4894'.
[  468.656377][T23182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4893'.
[  468.831116][T23192] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4896'.
[  469.287639][T23205] lo speed is unknown, defaulting to 1000
[  469.314960][T23208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4898'.
[  469.332286][T23208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4898'.
[  469.505899][T23205] hsr0 speed is unknown, defaulting to 1000
[  469.706631][T23217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4900'.
[  469.764942][T23218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4900'.
[  469.833630][T23220] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4901'.
[  470.134778][T23228] netem: change failed
[  470.351679][T23230] bond53: invalid ARP target 0.0.0.0 specified for addition
[  470.361367][T23230] bond53: option arp_ip_target: invalid value (0)
[  470.369633][T23230] bond53 (unregistering): Released all slaves
[  470.623916][T23255] netlink: 'syz.0.4910': attribute type 1 has an invalid length.
[  470.627849][T23255] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.887327][T23266] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  470.914474][T23267] lo speed is unknown, defaulting to 1000
[  471.091557][T23286] bond45: (slave lo): Releasing backup interface
[  471.096227][T23286] bond45: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  471.108789][T23286] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  471.200704][T23267] hsr0 speed is unknown, defaulting to 1000
[  471.332526][T23297] mac80211_hwsim hwsim2 ;: renamed from wlan0
[  471.771372][T23318] netlink: 'syz.1.4925': attribute type 10 has an invalid length.
[  471.780532][T23318] tap0: tun_chr_ioctl cmd 1074025677
[  471.782828][T23318] tap0: linktype set to 773
[  471.797987][T23318] : entered promiscuous mode
[  472.276700][T23328] can: request_module (can-proto-0) failed.
[  472.361782][T23326] lo speed is unknown, defaulting to 1000
[  472.617760][T23337] tipc: Resetting bearer <eth:gre0>
[  472.669666][T23338] netlink: 'syz.0.4930': attribute type 13 has an invalid length.
[  472.685594][T23338] netlink: 'syz.0.4930': attribute type 17 has an invalid length.
[  473.015771][T23338] 8021q: adding VLAN 0 to HW filter on device bond0
[  473.019575][T23338] 8021q: adding VLAN 0 to HW filter on device batadv0
[  473.055250][T23338] veth0_macvtap: left promiscuous mode
[  473.057902][T23338] veth0_macvtap: entered promiscuous mode
[  473.063630][T23338] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  473.067327][T23338] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  473.070381][T23338] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  473.073770][T23338] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  473.077892][T23338] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  473.088400][T23326] hsr0 speed is unknown, defaulting to 1000
[  473.140724][ T8964] hsr0 speed is unknown, defaulting to 1000
[  473.146254][  T874] hsr0 speed is unknown, defaulting to 1000
[  473.300965][T23360] netlink: 'syz.0.4933': attribute type 27 has an invalid length.
[  473.373929][T23362] netem: change failed
[  473.832460][T23398] __nla_validate_parse: 39 callbacks suppressed
[  473.832478][T23398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4942'.
[  473.839045][T23383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4937'.
[  474.020325][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4947'.
[  474.033147][T23413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4944'.
[  474.038312][T23412] netem: change failed
[  474.041082][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4947'.
[  474.048431][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4947'.
[  474.052220][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4947'.
[  474.056456][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4947'.
[  474.060287][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4947'.
[  474.064029][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4947'.
[  474.351227][T23424] smbdirect: ib_dev[syz1] removed
[  474.371475][T23431] netlink: 'syz.2.4953': attribute type 1 has an invalid length.
[  474.375153][T23431] nbd: illegal input index 871591272
[  474.412852][T23433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  474.680798][T23452] netlink: 'syz.2.4959': attribute type 1 has an invalid length.
[  474.698004][T23452] 8021q: adding VLAN 0 to HW filter on device bond47
[  474.876240][T23462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  474.879258][T23462] IPv6: NLM_F_CREATE should be set when creating new route
[  474.943610][T23469] netlink: 'syz.0.4965': attribute type 9 has an invalid length.
[  475.334196][T23493] lo speed is unknown, defaulting to 1000
[  475.384641][T23495] batadv0: entered promiscuous mode
[  475.388048][T23495] batadv0: left promiscuous mode
[  475.429330][T23497] ip6t_rpfilter: unknown options
[  475.502467][T23507] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001
[  475.553594][T23493] hsr0 speed is unknown, defaulting to 1000
[  476.532205][T23537] netlink: 'syz.1.4985': attribute type 32 has an invalid length.
[  476.679413][T23537] bridge0: port 1(veth1_to_bridge) entered blocking state
[  476.684388][T23537] bridge0: port 1(veth1_to_bridge) entered disabled state
[  476.687604][T23537] veth1_to_bridge: entered allmulticast mode
[  476.692791][T23537] veth1_to_bridge: entered promiscuous mode
[  476.860401][T23557] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  477.270968][T23596] tunl0: entered promiscuous mode
[  477.277365][T23596] netlink: 'syz.0.5003': attribute type 4 has an invalid length.
[  477.329864][T23604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  477.399435][T23604] netlink: 'syz.1.5005': attribute type 4 has an invalid length.
[  477.416303][T23602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  477.750333][T23625] openvswitch: netlink: Message has 2 unknown bytes.
[  477.868902][T23632] netlink: 'syz.2.5014': attribute type 1 has an invalid length.
[  477.914188][T23632] 8021q: adding VLAN 0 to HW filter on device bond49
[  477.922436][T23632] bond48: (slave bond49): making interface the new active one
[  477.926588][T23632] bond48: (slave bond49): Enslaving as an active interface with an up link
[  478.143844][T23652] tipc: Failed to remove unknown binding: 66,0,0/4026166346:2514611655/2514611657
[  478.151021][T23652] tipc: Failed to remove unknown binding: 66,0,0/4026166346:2514611655/2514611656
[  478.268276][T23665] netlink: 'syz.2.5023': attribute type 1 has an invalid length.
[  478.360849][T23671] netlink: 'syz.1.5025': attribute type 15 has an invalid length.
[  478.438537][T23674] netlink: 'syz.1.5026': attribute type 1 has an invalid length.
[  478.443965][T23672] batman_adv: batadv0: Interface deactivated: gretap0
[  478.547794][T23672] bridge0: port 1(team0) entered disabled state
[  478.603083][T23679] netlink: 'syz.1.5026': attribute type 10 has an invalid length.
[  478.828297][ T6717] lo speed is unknown, defaulting to 1000
[  478.831153][ T6717] sqz0: Port: 1 Link DOWN
[  478.854028][T23674] 8021q: adding VLAN 0 to HW filter on device bond59
[  478.870152][T23676] bond59: (slave veth41): Enslaving as an active interface with a down link
[  478.875560][ T5669] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  478.886294][ T5669] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  478.897222][ T5669] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  478.897785][ T6717] lo speed is unknown, defaulting to 1000
[  478.900252][ T5669] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  479.092760][T23689] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.123478][T23704] 5: entered promiscuous mode
[  479.179328][T23689] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.197423][T23708] __nla_validate_parse: 31 callbacks suppressed
[  479.197438][T23708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5034'.
[  479.203851][T23709] netlink: 'syz.2.5035': attribute type 1 has an invalid length.
[  479.207361][T23709] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5035'.
[  479.209108][T23708] dvmrp8: entered allmulticast mode
[  479.211082][T23709] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5035'.
[  479.216647][T23709] netlink: 'syz.2.5035': attribute type 1 has an invalid length.
[  479.291326][T23689] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.301524][T23718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5038'.
[  479.399075][T23689] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.478785][ T8172] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  479.499708][ T8172] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  479.512757][T23732] netlink: 19 bytes leftover after parsing attributes in process `syz.1.5042'.
[  479.521220][ T8172] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.524700][ T8172] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.539246][T23734] netlink: 19 bytes leftover after parsing attributes in process `syz.1.5042'.
[  479.588002][T23737] tunl0: left promiscuous mode
[  479.591932][T23737] tipc: Resetting bearer <eth:gre0>
[  479.799981][T23737] ip6gre6: left promiscuous mode
[  479.803605][T23737] ip6gre6: left allmulticast mode
[  479.805725][T23737] bridge43: left promiscuous mode
[  479.807346][T23737] bridge43: left allmulticast mode
[  479.809334][T23737] bond47: left promiscuous mode
[  479.811007][T23737] bond49: left promiscuous mode
[  479.812504][T23737] bridge47: left promiscuous mode
[  479.814142][T23737] vlan7: left allmulticast mode
[  479.815895][T23737] bond49: left allmulticast mode
[  479.817379][T23737] bridge47: left allmulticast mode
[  479.819131][T23737] ip6gre7: left promiscuous mode
[  479.832881][   T10] hsr0 speed is unknown, defaulting to 1000
[  479.834766][ T8172] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  479.834799][ T8172] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  479.834820][ T8172] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  479.834840][ T8172] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  479.844982][   T10] syz2: Port: 1 Link DOWN
[  479.907261][T23752] lo speed is unknown, defaulting to 1000
[  479.922731][T23757] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5049'.
[  479.926966][T23757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5049'.
[  479.976164][T23760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5050'.
[  480.089895][T23752] hsr0 speed is unknown, defaulting to 1000
[  480.377459][T23778] bridge0: port 1(vlan8) entered blocking state
[  480.384508][T23778] bridge0: port 1(vlan8) entered disabled state
[  480.388923][T23778] vlan8: entered allmulticast mode
[  480.392511][T23778] geneve0: entered allmulticast mode
[  480.439056][T23776] 8021q: adding VLAN 0 to HW filter on device bond50
[  480.455748][T23779] bond50: (slave veth31): Enslaving as an active interface with a down link
[  480.486518][T23776] bond50: (slave veth33): Enslaving as an active interface with a down link
[  480.499118][T23776] bond50: entered allmulticast mode
[  480.629669][T23791] bond53: entered promiscuous mode
[  480.631581][T23791] 8021q: adding VLAN 0 to HW filter on device bond53
[  480.651169][T23791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5061'.
[  480.674910][T23795] bond53: (slave bridge50): making interface the new active one
[  480.677622][T23795] bridge50: entered promiscuous mode
[  480.680322][T23795] bond53: (slave bridge50): Enslaving as an active interface with an up link
[  481.194289][T23828] bridge54: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  481.492578][T23845] syzkaller1: entered promiscuous mode
[  481.494468][T23845] syzkaller1: entered allmulticast mode
[  482.168313][T23864] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  482.455330][T23881] validate_nla: 7 callbacks suppressed
[  482.455341][T23881] netlink: 'syz.1.5087': attribute type 1 has an invalid length.
[  482.487557][T23881] bond60: entered promiscuous mode
[  482.490280][T23881] 8021q: adding VLAN 0 to HW filter on device bond60
[  482.497577][T23881] netlink: 'syz.1.5087': attribute type 1 has an invalid length.
[  482.553173][T23883] SET target dimension over the limit!
[  482.568613][T23883] vlan9: entered allmulticast mode
[  482.570583][T23883] bond60: entered allmulticast mode
[  482.583554][T23883] bond60: (slave bridge55): making interface the new active one
[  482.586569][T23883] bridge55: entered promiscuous mode
[  482.588634][T23883] bridge55: entered allmulticast mode
[  482.591629][T23883] bond60: (slave bridge55): Enslaving as an active interface with an up link
[  482.639403][T23885] netem: change failed
[  482.790274][T23895] netlink: 'syz.2.5091': attribute type 1 has an invalid length.
[  482.820411][T23895] 8021q: adding VLAN 0 to HW filter on device bond51
[  482.845372][T23895] vlan0: entered promiscuous mode
[  482.850956][T23895] bond51: entered promiscuous mode
[  482.858510][T23895] vlan0: entered allmulticast mode
[  482.864556][T23895] bond51: entered allmulticast mode
[  482.900223][T23897] bond61: option miimon: invalid value (18446744073709551607)
[  482.903306][T23897] bond61: option miimon: allowed values 0 - 2147483647
[  482.908614][T23897] bond61 (unregistering): Released all slaves
[  482.940341][T23900] netlink: 'syz.2.5092': attribute type 4 has an invalid length.
[  482.974122][T23903] netlink: 'syz.2.5093': attribute type 1 has an invalid length.
[  482.990900][   T56] block nbd1: Receive control failed (result -32)
[  483.005688][T23903] 8021q: adding VLAN 0 to HW filter on device bond52
[  483.079178][T23913] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  483.082758][T23914] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  483.175239][T23925] netlink: 'syz.1.5100': attribute type 11 has an invalid length.
[  483.293057][T23923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  483.405139][T23940] xt_ecn: cannot match TCP bits for non-tcp packets
[  483.408034][T23940] netlink: 'syz.1.5105': attribute type 1 has an invalid length.
[  483.497981][T23944] lo speed is unknown, defaulting to 1000
[  483.591196][T23944] hsr0 speed is unknown, defaulting to 1000
[  483.603631][T23943] lo speed is unknown, defaulting to 1000
[  483.773508][T23943] hsr0 speed is unknown, defaulting to 1000
[  484.331942][T23991] __nla_validate_parse: 12 callbacks suppressed
[  484.331956][T23991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5121'.
[  484.495089][T23997] xt_hashlimit: invalid rate
[  484.603631][T24001] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5124'.
[  484.629640][T24001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5124'.
[  484.641961][T24001] batman_adv: batadv0: Interface activated: gretap0
[  484.663437][T24001] 8021q: adding VLAN 0 to HW filter on device bond0
[  484.702894][T24001] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  484.711136][  T874] lo speed is unknown, defaulting to 1000
[  484.718469][  T874] sqz0: Port: 1 Link ACTIVE
[  484.735666][T24002] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  484.741770][  T874] lo speed is unknown, defaulting to 1000
[  484.781735][T24008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5126'.
[  484.899118][T24023] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5130'.
[  485.009683][T24030] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5131'.
[  485.126016][T24034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  485.132365][T24033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  485.198182][T24029] infiniband syz0: set down
[  485.205270][T24029] infiniband syz0: added ipvlan1
[  485.222062][T24029] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  485.229267][T24029] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  485.236863][T24029] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  485.269866][T24029] RDS/IB: syz0: added
[  485.273826][T24029] smc: adding ib device syz0 with port count 1
[  485.276936][T24029] smc:    ib device syz0 port 1 has no pnetid
[  485.787247][T24046] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.5135'.
[  485.919778][T24067] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  485.952581][T24068] netlink: 'syz.1.5136': attribute type 1 has an invalid length.
[  485.987693][T24068] bond62: (slave geneve6): making interface the new active one
[  485.995732][T24068] bond62: (slave geneve6): Enslaving as an active interface with an up link
[  485.999661][ T5669] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  486.003525][ T5669] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  486.007316][ T5669] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  486.010695][ T5669] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  486.028165][T24072] netlink: 'syz.2.5140': attribute type 8 has an invalid length.
[  486.668219][T24078] macvtap0: entered promiscuous mode
[  486.719739][T24061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  486.726245][T24074] netlink: 'syz.2.5140': attribute type 1 has an invalid length.
[  486.847497][T24090] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.5146'.
[  486.851182][T24090] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  486.872868][T24092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5144'.
[  486.876708][T24092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5144'.
[  487.213029][T24105] IPVS: Unknown mcast interface: vcan0
[  487.216663][T24105] netlink: 'syz.0.5149': attribute type 15 has an invalid length.
[  487.410598][T24121] : renamed from bond0
[  487.499494][T24123] tun0: tun_chr_ioctl cmd 1074812118
[  487.502450][T24123] tun0: tun_chr_ioctl cmd 1074033169
[  487.633530][T24127] validate_nla: 1 callbacks suppressed
[  487.633546][T24127] netlink: 'syz.0.5155': attribute type 11 has an invalid length.
[  487.696387][T24131] netlink: 'syz.2.5157': attribute type 8 has an invalid length.
[  487.799182][T24140] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  487.821918][T24139] netlink: 'syz.0.5159': attribute type 1 has an invalid length.
[  487.862232][T24139] 8021q: adding VLAN 0 to HW filter on device bond0
[  487.886904][T24139] bond0: (slave veth31): Enslaving as an active interface with a down link
[  487.910740][T24139] bond0: (slave veth33): Enslaving as an active interface with a down link
[  487.920300][T24139] syzkaller0: entered promiscuous mode
[  487.922616][T24139] syzkaller0: entered allmulticast mode
[  487.928184][T24139] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  487.968809][T24137] tipc: Resetting bearer <eth:syzkaller0>
[  487.994502][T24137] tipc: Disabling bearer <eth:syzkaller0>
[  488.131327][T24166] xt_hashlimit: size too large, truncated to 1048576
[  488.809962][T24179] veth1: entered promiscuous mode
[  488.812164][T24179] veth1: entered allmulticast mode
[  488.857268][T24181] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  488.860333][T24181] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  489.068527][T24190] netlink: 'syz.2.5171': attribute type 1 has an invalid length.
[  489.148470][T24192] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  489.191984][T24197] netlink: 'syz.0.5173': attribute type 11 has an invalid length.
[  489.304196][T24208] team0: entered promiscuous mode
[  489.310071][T24208] team0: entered allmulticast mode
[  489.315456][T24208] 8021q: adding VLAN 0 to HW filter on device team0
[  489.323349][T24209] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  489.336537][T24208] __nla_validate_parse: 12 callbacks suppressed
[  489.336546][T24208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5177'.
[  489.344872][T24209] team1: entered promiscuous mode
[  489.346977][T24209] team1: entered allmulticast mode
[  489.349443][T24209] 8021q: adding VLAN 0 to HW filter on device team1
[  489.356023][T24208] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  489.382002][T24208] team2: entered promiscuous mode
[  489.384062][T24208] team2: entered allmulticast mode
[  489.386896][T24208] 8021q: adding VLAN 0 to HW filter on device team2
[  489.442961][T24218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5179'.
[  489.563984][T24223] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5181'.
[  489.570827][T24223] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5181'.
[  489.658852][T24231] pim6reg0: tun_chr_ioctl cmd 1074812118
[  489.690620][T24234] openvswitch: netlink: Actions may not be safe on all matching packets
[  489.730730][T24238] netlink: 'syz.0.5185': attribute type 9 has an invalid length.
[  489.816980][T24241] netlink: 'syz.2.5186': attribute type 1 has an invalid length.
[  489.832936][T24241] 8021q: adding VLAN 0 to HW filter on device bond53
[  489.838625][T24241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5186'.
[  489.855108][T24241] vlan8: entered allmulticast mode
[  489.856808][T24241] bond53: entered allmulticast mode
[  490.250854][T24274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5195'.
[  490.541412][T24287] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5198'.
[  490.658902][T24298] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  490.661893][T24298] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  490.670764][T24298] netlink: 'syz.1.5202': attribute type 10 has an invalid length.
[  490.677578][T24295] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5201'.
[  490.683461][T24298] bond0: (slave bridge1): Enslaving as an active interface with an up link
[  490.939872][T24324] dvmrp0: left allmulticast mode
[  491.009996][T24332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5208'.
[  491.594912][T24350] netlink: 'syz.2.5213': attribute type 9 has an invalid length.
[  491.660748][T24353] netlink: 'syz.2.5213': attribute type 3 has an invalid length.
[  491.802230][T24358] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  491.961047][T24370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5219'.
[  492.436629][T24387] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  492.445707][T24387] block nbd0: reconnected socket
[  492.451435][ T9109] block nbd0: Receive control failed (result -32)
[  492.670419][T24399] validate_nla: 1 callbacks suppressed
[  492.670435][T24399] netlink: 'syz.0.5228': attribute type 1 has an invalid length.
[  492.694932][T24399] 8021q: adding VLAN 0 to HW filter on device bond54
[  492.713406][T24399] bond54: (slave veth35): Enslaving as an active interface with a down link
[  492.720095][T24399] netlink: 'syz.0.5228': attribute type 10 has an invalid length.
[  493.025736][T24416] openvswitch: netlink: nsh attr 14384 is out of range max 3
[  493.028605][T24416] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  493.057278][T24419] xt_hashlimit: max too large, truncated to 1048576
[  493.062600][T24419] xt_hashlimit: Unknown mode mask 300, kernel too old?
[  493.069045][T24424] netlink: 'syz.0.5236': attribute type 11 has an invalid length.
[  493.148441][T24426] bridge57: entered promiscuous mode
[  493.150834][T24426] bridge57: entered allmulticast mode
[  493.238771][T24440] netlink: 'syz.1.5241': attribute type 1 has an invalid length.
[  493.264841][T24440] bond63: entered promiscuous mode
[  493.267101][T24440] 8021q: adding VLAN 0 to HW filter on device bond63
[  493.273120][T24435] syzkaller0: entered promiscuous mode
[  493.287977][T24440] bond63: (slave bridge58): making interface the new active one
[  493.290521][T24440] bridge58: entered promiscuous mode
[  493.293683][T24440] bridge58: left promiscuous mode
[  493.589002][T24462] openvswitch: netlink: Duplicate key (type 21).
[  493.608449][T24465] netlink: 'syz.2.5248': attribute type 1 has an invalid length.
[  493.628681][T24465] 8021q: adding VLAN 0 to HW filter on device bond54
[  493.636461][T24468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  493.641740][T24465] dummy0: left promiscuous mode
[  493.658652][T24465] bond54: (slave dummy0): making interface the new active one
[  493.665537][T24465] bond54: (slave dummy0): Enslaving as an active interface with an up link
[  493.671419][T24465] netlink: 'syz.2.5248': attribute type 10 has an invalid length.
[  493.680403][T24465] dummy0: entered promiscuous mode
[  493.687380][T24465] bond54: (slave dummy0): Releasing active interface
[  493.886917][T24480] netlink: 'syz.2.5253': attribute type 1 has an invalid length.
[  494.010950][T24482] 8021q: adding VLAN 0 to HW filter on device bond55
[  494.231081][T24493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  494.617149][T24511] __nla_validate_parse: 20 callbacks suppressed
[  494.617160][T24511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5262'.
[  494.629228][T24511] netlink: 'syz.1.5262': attribute type 30 has an invalid length.
[  494.637521][T24511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5262'.
[  494.643906][T24511] netlink: 'syz.1.5262': attribute type 30 has an invalid length.
[  494.862118][T24533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5266'.
[  494.954795][T24544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5269'.
[  494.958745][T24544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5269'.
[  495.005037][T24551] netlink: 'syz.2.5270': attribute type 1 has an invalid length.
[  495.032583][T24551] bond56: entered promiscuous mode
[  495.035724][T24551] 8021q: adding VLAN 0 to HW filter on device bond56
[  495.072503][T24552] bond56: (slave veth37): making interface the new active one
[  495.075882][T24552] veth37: entered promiscuous mode
[  495.079933][T24552] bond56: (slave veth37): Enslaving as an active interface with an up link
[  496.083869][T24585] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  496.153624][T24592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5282'.
[  496.207255][T24596] team0 (unregistering): left allmulticast mode
[  496.209861][T24596] bridge4: left allmulticast mode
[  496.211829][T24596] bridge39: left allmulticast mode
[  496.212596][T24600] netlink: 284 bytes leftover after parsing attributes in process `syz.1.5284'.
[  496.213877][T24596] team0 (unregistering): left promiscuous mode
[  496.213888][T24596] bridge4: left promiscuous mode
[  496.213975][T24596] bridge39: left promiscuous mode
[  496.225522][T24596] bridge0: port 1(team0) entered disabled state
[  496.232262][T24596] team0 (unregistering): Port device bridge4 removed
[  496.237098][T24596] team0 (unregistering): Port device bridge39 removed
[  496.249418][T24600] netem: change failed
[  496.323507][T24598] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5283'.
[  496.378872][T24610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5286'.
[  496.498095][T24629] openvswitch: netlink: Key 6 has unexpected len 318 expected 2
[  496.582096][T24639] 8021q: VLANs not supported on gre0
[  499.457426][T24622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  499.466243][T24650] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5294'.
[  499.474424][T24650] netlink: 'syz.0.5294': attribute type 2 has an invalid length.
[  499.483030][T24650] netlink: 'syz.0.5294': attribute type 1 has an invalid length.
[  499.558915][T24657] netlink: 'syz.1.5298': attribute type 21 has an invalid length.
[  499.588760][T24661] netlink: 'syz.1.5299': attribute type 1 has an invalid length.
[  499.591305][T24661] netlink: 'syz.1.5299': attribute type 1 has an invalid length.
[  499.601480][T24661] syzkaller1: entered promiscuous mode
[  499.603279][T24661] syzkaller1: entered allmulticast mode
[  499.705099][T24667] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  499.761692][T24678] __nla_validate_parse: 2 callbacks suppressed
[  499.761709][T24678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5302'.
[  499.838063][ T8964] bridge0: entered promiscuous mode
[  499.961212][T24693] tipc: Enabled bearer <eth:gre0>, priority 27
[  500.048969][T24699] bridge0: port 2(vlan9) entered blocking state
[  500.051168][T24699] bridge0: port 2(vlan9) entered disabled state
[  500.053293][T24699] vlan9: entered allmulticast mode
[  500.055142][T24699] bridge0: entered allmulticast mode
[  500.058191][T24699] vlan9: left allmulticast mode
[  500.059847][T24699] bridge0: left allmulticast mode
[  500.275540][T24708] netlink: 'syz.0.5312': attribute type 1 has an invalid length.
[  500.308213][T24711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5313'.
[  500.737379][T24716] netlink: 'syz.1.5315': attribute type 4 has an invalid length.
[  500.746822][T24716] netlink: 'syz.1.5315': attribute type 3 has an invalid length.
[  500.749890][T24716] netlink: 'syz.1.5315': attribute type 3 has an invalid length.
[  500.925499][T24733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  501.200904][T24740] bond53: left promiscuous mode
[  501.202581][T24740] bridge50: left promiscuous mode
[  501.209425][T24740] team0: left promiscuous mode
[  501.211802][T24740] team1: left promiscuous mode
[  501.213726][T24740] team2: left promiscuous mode
[  501.414124][T24750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5324'.
[  501.417989][T24749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5324'.
[  501.499368][T24757] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5325'.
[  501.548428][T24765] block nbd0: reconnected socket
[  501.551206][ T9109] block nbd0: Receive control failed (result -32)
[  501.612569][T24769] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5329'.
[  501.721320][T24778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5330'.
[  501.827488][T24784] netlink: 'syz.2.5331': attribute type 8 has an invalid length.
[  501.991504][T24805] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5337'.
[  502.039159][T24807] mac80211_hwsim hwsim44 syzkaller0: left promiscuous mode
[  502.042261][T24807] mac80211_hwsim hwsim44 syzkaller0: left allmulticast mode
[  502.194791][T24811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5340'.
[  502.206045][T24811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5340'.
[  502.232221][T24815] xt_hashlimit: size too large, truncated to 1048576
[  502.285017][T24818] veth1: entered allmulticast mode
[  502.454115][T24826] Cannot find add_set index 2 as target
[  502.811922][T24839] bridge51: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  503.154995][T24855] 8021q: adding VLAN 0 to HW filter on device bond57
[  503.185540][T24855] bond57: (slave veth39): Enslaving as an active interface with a down link
[  503.191695][T24855] dummy0: left promiscuous mode
[  503.197531][T24855] bond57: (slave dummy0): making interface the new active one
[  503.201726][T24855] dummy0: entered promiscuous mode
[  503.206226][T24855] bond57: (slave dummy0): Enslaving as an active interface with an up link
[  503.218213][T24855] bond57: (slave dummy0): Releasing active interface
[  503.222557][T24855] dummy0 (unregistering): left promiscuous mode
[  503.318633][T24859] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode
[  504.302229][T24869] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode
[  504.388354][T24873] IPVS: set_ctl: invalid protocol: 58 100.1.1.3:19999
[  504.558177][T24880] 8021q: VLANs not supported on nicvf0
[  504.730054][T24895] IPVS: length: 64 != 24
[  504.792291][T24902] __nla_validate_parse: 9 callbacks suppressed
[  504.792309][T24902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5367'.
[  504.810526][T24902] ipvlan5: entered allmulticast mode
[  504.812617][T24902] gretap0: entered allmulticast mode
[  504.963981][T24911] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5371'.
[  504.967930][T24912] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5371'.
[  504.975043][T24912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5371'.
[  505.618359][T24918] validate_nla: 2 callbacks suppressed
[  505.618376][T24918] netlink: 'syz.2.5373': attribute type 2 has an invalid length.
[  505.780357][T24922] block nbd0: reconnected socket
[  505.843096][T24924] vcan0: entered allmulticast mode
[  505.847411][   T56] block nbd0: Receive control failed (result -32)
[  506.013827][T24931] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5378'.
[  506.020001][T24931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5378'.
[  506.078678][T24933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5379'.
[  506.266135][T24943] netlink: 'syz.0.5382': attribute type 13 has an invalid length.
[  506.361395][T24947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5383'.
[  506.430402][T24947] vti2: entered allmulticast mode
[  506.484210][T24953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5385'.
[  506.572226][T24960] sctp: [Deprecated]: syz.1.5387 (pid 24960) Use of struct sctp_assoc_value in delayed_ack socket option.
[  506.572226][T24960] Use struct sctp_sack_info instead
[  506.580596][T24960] sctp: [Deprecated]: syz.1.5387 (pid 24960) Use of struct sctp_assoc_value in delayed_ack socket option.
[  506.580596][T24960] Use struct sctp_sack_info instead
[  506.588444][T24961] sctp: [Deprecated]: syz.1.5387 (pid 24961) Use of struct sctp_assoc_value in delayed_ack socket option.
[  506.588444][T24961] Use struct sctp_sack_info instead
[  506.597306][T24960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  506.602088][T24960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  507.018309][T24964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5388'.
[  507.101097][T24966] tipc: Enabling of bearer <ufp:s> rejected, media not registered
[  507.199388][ T5693] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  507.202057][ T5693] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  507.205379][ T5693] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  507.208252][ T5693] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  507.441071][T25002] netlink: 'syz.2.5402': attribute type 1 has an invalid length.
[  507.470732][T25002] 8021q: adding VLAN 0 to HW filter on device bond58
[  507.490188][T25002] bond58: (slave veth41): Enslaving as an active interface with a down link
[  507.513630][T25002] bond58: (slave veth43): Enslaving as an active interface with a down link
[  507.575026][T25017] bridge61: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  507.829074][T25041] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  507.945531][T25049] veth1_vlan: left promiscuous mode
[  507.948883][T25049] veth0_vlan: left promiscuous mode
[  507.952014][T25049] veth0_vlan: entered promiscuous mode
[  507.955980][T25049] veth1_vlan: entered promiscuous mode
[  507.972313][T25049] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  507.996780][ T5500] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  507.999257][ T5500] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  508.002237][ T5500] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  508.006475][ T5500] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  508.259744][T25067] netem: incorrect ge model size
[  508.262195][T25067] netem: change failed
[  508.328804][T25071] netlink: 'syz.2.5418': attribute type 9 has an invalid length.
[  508.583660][T25085] block nbd0: reconnected socket
[  508.677260][ T9109] block nbd0: Receive control failed (result -32)
[  508.746438][T25092] bond59: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  508.761434][T25092] bond59: (slave lo): Enslaving as an active interface with an up link
[  508.768347][T25092] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  508.803430][T25095] bond55: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  508.809461][T25095] bond55 (unregistering): Released all slaves
[  508.828743][   T10] lo speed is unknown, defaulting to 1000
[  508.832368][   T10] lo speed is unknown, defaulting to 1000
[  508.836121][  T874] lo speed is unknown, defaulting to 1000
[  508.977456][T25110] netem: incorrect ge model size
[  508.979627][T25110] netem: change failed
[  509.110397][T25121] SET target dimension over the limit!
[  509.252628][T25123] 
[  509.253693][T25123] ======================================================
[  509.256510][T25123] WARNING: possible circular locking dependency detected
[  509.259284][T25123] syzkaller #0 Not tainted
[  509.261220][T25123] ------------------------------------------------------
[  509.264039][T25123] syz.2.5433/25123 is trying to acquire lock:
[  509.266553][T25123] ffff88816fd39b98 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300
[  509.270066][T25123] 
[  509.270066][T25123] but task is already holding lock:
[  509.273007][T25123] ffff88816a466bf8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  509.276788][T25123] 
[  509.276788][T25123] which lock already depends on the new lock.
[  509.276788][T25123] 
[  509.280978][T25123] 
[  509.280978][T25123] the existing dependency chain (in reverse order) is:
[  509.284595][T25123] 
[  509.284595][T25123] -> #6 (&q->elevator_lock){+.+.}-{4:4}:
[  509.287786][T25123]        __mutex_lock+0x1a3/0x1550
[  509.289875][T25123]        elevator_change+0x1b3/0x450
[  509.291979][T25123]        elevator_set_none+0xb5/0x140
[  509.294099][T25123]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  509.296712][T25123]        nbd_start_device+0x17f/0xb10
[  509.298886][T25123]        nbd_genl_connect+0x165b/0x1cf0
[  509.301174][T25123]        genl_family_rcv_msg_doit+0x22a/0x330
[  509.303692][T25123]        genl_rcv_msg+0x61c/0x7a0
[  509.305730][T25123]        netlink_rcv_skb+0x232/0x4b0
[  509.307809][T25123]        genl_rcv+0x28/0x40
[  509.309694][T25123]        netlink_unicast+0x75c/0x8e0
[  509.311849][T25123]        netlink_sendmsg+0x813/0xb40
[  509.314025][T25123]        ____sys_sendmsg+0x972/0x9f0
[  509.316175][T25123]        ___sys_sendmsg+0x2a5/0x360
[  509.318236][T25123]        __x64_sys_sendmsg+0x1bd/0x2a0
[  509.320379][T25123]        do_syscall_64+0x15f/0xf80
[  509.322387][T25123]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.324971][T25123] 
[  509.324971][T25123] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  509.328412][T25123]        blk_alloc_queue+0x546/0x680
[  509.330472][T25123]        __blk_mq_alloc_disk+0x197/0x390
[  509.332681][T25123]        nbd_dev_add+0x499/0xb50
[  509.334694][T25123]        nbd_init+0x168/0x1f0
[  509.336651][T25123]        do_one_initcall+0x250/0x870
[  509.338789][T25123]        do_initcall_level+0x104/0x190
[  509.340976][T25123]        do_initcalls+0x59/0xa0
[  509.342948][T25123]        kernel_init_freeable+0x2a6/0x3e0
[  509.345222][T25123]        kernel_init+0x1d/0x1d0
[  509.347189][T25123]        ret_from_fork+0x514/0xb70
[  509.349269][T25123]        ret_from_fork_asm+0x1a/0x30
[  509.351454][T25123] 
[  509.351454][T25123] -> #4 (fs_reclaim){+.+.}-{0:0}:
[  509.354370][T25123]        fs_reclaim_acquire+0x71/0x100
[  509.356576][T25123]        __kmalloc_cache_node_noprof+0x46/0x6b0
[  509.359118][T25123]        create_worker+0x113/0x7e0
[  509.361275][T25123]        workqueue_prepare_cpu+0xe4/0x170
[  509.363639][T25123]        cpuhp_invoke_callback+0x445/0x860
[  509.366038][T25123]        _cpu_up+0x2ce/0x5b0
[  509.367958][T25123]        cpu_up+0x1d2/0x220
[  509.369830][T25123]        cpuhp_bringup_mask+0xb2/0x1a0
[  509.372064][T25123]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  509.374681][T25123]        bringup_nonboot_cpus+0x17/0x30
[  509.376958][T25123]        smp_init+0x32/0x110
[  509.378879][T25123]        kernel_init_freeable+0x288/0x3e0
[  509.381233][T25123]        kernel_init+0x1d/0x1d0
[  509.383258][T25123]        ret_from_fork+0x514/0xb70
[  509.385363][T25123]        ret_from_fork_asm+0x1a/0x30
[  509.387570][T25123] 
[  509.387570][T25123] -> #3 (cpu_hotplug_lock){++++}-{0:0}:
[  509.390752][T25123]        cpus_read_lock+0x42/0x160
[  509.392872][T25123]        static_key_slow_inc+0x12/0x30
[  509.395110][T25123]        nbd_genl_reconfigure+0x132f/0x1ea0
[  509.397542][T25123]        genl_family_rcv_msg_doit+0x22a/0x330
[  509.399883][T25123]        genl_rcv_msg+0x61c/0x7a0
[  509.401917][T25123]        netlink_rcv_skb+0x232/0x4b0
[  509.404094][T25123]        genl_rcv+0x28/0x40
[  509.405963][T25123]        netlink_unicast+0x75c/0x8e0
[  509.408125][T25123]        netlink_sendmsg+0x813/0xb40
[  509.410077][T25123]        ____sys_sendmsg+0x972/0x9f0
[  509.412205][T25123]        ___sys_sendmsg+0x2a5/0x360
[  509.414342][T25123]        __x64_sys_sendmsg+0x1bd/0x2a0
[  509.416588][T25123]        do_syscall_64+0x15f/0xf80
[  509.418720][T25123]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.421379][T25123] 
[  509.421379][T25123] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[  509.424338][T25123]        __mutex_lock+0x1a3/0x1550
[  509.426458][T25123]        nbd_queue_rq+0x37b/0x1100
[  509.428574][T25123]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  509.431025][T25123]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  509.433815][T25123]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  509.436429][T25123]        blk_mq_run_hw_queue+0x348/0x4f0
[  509.438746][T25123]        blk_mq_dispatch_list+0xd16/0xe10
[  509.441101][T25123]        blk_mq_flush_plug_list+0x48d/0x570
[  509.443453][T25123]        __blk_flush_plug+0x3ed/0x4d0
[  509.445652][T25123]        __submit_bio+0x28d/0x580
[  509.447682][T25123]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  509.450110][T25123]        block_read_full_folio+0x599/0x830
[  509.452440][T25123]        filemap_read_folio+0x137/0x3b0
[  509.454651][T25123]        do_read_cache_folio+0x358/0x590
[  509.456858][T25123]        read_part_sector+0xb6/0x2b0
[  509.459005][T25123]        adfspart_check_ICS+0xb1/0x960
[  509.461269][T25123]        bdev_disk_changed+0x817/0x1770
[  509.463548][T25123]        blkdev_get_whole+0x380/0x510
[  509.465755][T25123]        bdev_open+0x31e/0xd30
[  509.467749][T25123]        blkdev_open+0x470/0x610
[  509.469792][T25123]        do_dentry_open+0x785/0x14e0
[  509.471862][T25123]        vfs_open+0x3b/0x340
[  509.473742][T25123]        path_openat+0x2e08/0x3860
[  509.475857][T25123]        do_file_open+0x23e/0x4a0
[  509.477820][T25123]        do_sys_openat2+0x113/0x200
[  509.479880][T25123]        __x64_sys_openat+0x138/0x170
[  509.482095][T25123]        do_syscall_64+0x15f/0xf80
[  509.484226][T25123]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.486858][T25123] 
[  509.486858][T25123] -> #1 (&cmd->lock){+.+.}-{4:4}:
[  509.489838][T25123]        __mutex_lock+0x1a3/0x1550
[  509.491949][T25123]        nbd_queue_rq+0xc6/0x1100
[  509.494029][T25123]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  509.496548][T25123]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  509.499261][T25123]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  509.501889][T25123]        blk_mq_run_hw_queue+0x348/0x4f0
[  509.504159][T25123]        blk_mq_dispatch_list+0xd16/0xe10
[  509.506462][T25123]        blk_mq_flush_plug_list+0x48d/0x570
[  509.508902][T25123]        __blk_flush_plug+0x3ed/0x4d0
[  509.511113][T25123]        __submit_bio+0x28d/0x580
[  509.513108][T25123]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  509.515623][T25123]        block_read_full_folio+0x599/0x830
[  509.518036][T25123]        filemap_read_folio+0x137/0x3b0
[  509.520328][T25123]        do_read_cache_folio+0x358/0x590
[  509.522665][T25123]        read_part_sector+0xb6/0x2b0
[  509.524846][T25123]        adfspart_check_ICS+0xb1/0x960
[  509.527105][T25123]        bdev_disk_changed+0x817/0x1770
[  509.529378][T25123]        blkdev_get_whole+0x380/0x510
[  509.531625][T25123]        bdev_open+0x31e/0xd30
[  509.533623][T25123]        blkdev_open+0x470/0x610
[  509.535680][T25123]        do_dentry_open+0x785/0x14e0
[  509.537871][T25123]        vfs_open+0x3b/0x340
[  509.539783][T25123]        path_openat+0x2e08/0x3860
[  509.541916][T25123]        do_file_open+0x23e/0x4a0
[  509.543997][T25123]        do_sys_openat2+0x113/0x200
[  509.546139][T25123]        __x64_sys_openat+0x138/0x170
[  509.548236][T25123]        do_syscall_64+0x15f/0xf80
[  509.550290][T25123]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.552937][T25123] 
[  509.552937][T25123] -> #0 (set->srcu){.+.+}-{0:0}:
[  509.555739][T25123]        __lock_acquire+0x15a5/0x2cf0
[  509.557912][T25123]        lock_sync+0x9d/0x120
[  509.559876][T25123]        __synchronize_srcu+0xca/0x300
[  509.562132][T25123]        elevator_switch+0x1e8/0x7a0
[  509.564326][T25123]        elevator_change+0x2cc/0x450
[  509.566536][T25123]        elevator_set_default+0x36c/0x430
[  509.568883][T25123]        blk_register_queue+0x3e9/0x4e0
[  509.571087][T25123]        __add_disk+0x677/0xd50
[  509.573103][T25123]        add_disk_fwnode+0xfb/0x480
[  509.575258][T25123]        nbd_dev_add+0x72c/0xb50
[  509.577290][T25123]        nbd_genl_connect+0x962/0x1cf0
[  509.579544][T25123]        genl_family_rcv_msg_doit+0x22a/0x330
[  509.582064][T25123]        genl_rcv_msg+0x61c/0x7a0
[  509.584118][T25123]        netlink_rcv_skb+0x232/0x4b0
[  509.586292][T25123]        genl_rcv+0x28/0x40
[  509.588106][T25123]        netlink_unicast+0x75c/0x8e0
[  509.590206][T25123]        netlink_sendmsg+0x813/0xb40
[  509.592401][T25123]        ____sys_sendmsg+0x972/0x9f0
[  509.594541][T25123]        ___sys_sendmsg+0x2a5/0x360
[  509.596595][T25123]        __x64_sys_sendmsg+0x1bd/0x2a0
[  509.598713][T25123]        do_syscall_64+0x15f/0xf80
[  509.600754][T25123]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.603290][T25123] 
[  509.603290][T25123] other info that might help us debug this:
[  509.603290][T25123] 
[  509.607354][T25123] Chain exists of:
[  509.607354][T25123]   set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock
[  509.607354][T25123] 
[  509.612847][T25123]  Possible unsafe locking scenario:
[  509.612847][T25123] 
[  509.615870][T25123]        CPU0                    CPU1
[  509.618073][T25123]        ----                    ----
[  509.620295][T25123]   lock(&q->elevator_lock);
[  509.622224][T25123]                                lock(&q->q_usage_counter(io)#49);
[  509.625446][T25123]                                lock(&q->elevator_lock);
[  509.628361][T25123]   sync(set->srcu);
[  509.629991][T25123] 
[  509.629991][T25123]  *** DEADLOCK ***
[  509.629991][T25123] 
[  509.633263][T25123] 6 locks held by syz.2.5433/25123:
[  509.635380][T25123]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  509.638714][T25123]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  509.642362][T25123]  #2: ffff88801ec679c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480
[  509.646558][T25123]  #3: ffff88816a466c80 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x119/0x4e0
[  509.650380][T25123]  #4: ffff88816a466708 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[  509.654749][T25123]  #5: ffff88816a466bf8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  509.658746][T25123] 
[  509.658746][T25123] stack backtrace:
[  509.661088][T25123] CPU: 0 UID: 0 PID: 25123 Comm: syz.2.5433 Not tainted syzkaller #0 PREEMPT(full) 
[  509.661103][T25123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  509.661110][T25123] Call Trace:
[  509.661118][T25123]  <TASK>
[  509.661126][T25123]  dump_stack_lvl+0xe8/0x150
[  509.661143][T25123]  print_circular_bug+0x2e1/0x300
[  509.661160][T25123]  check_noncircular+0x12e/0x150
[  509.661177][T25123]  __lock_acquire+0x15a5/0x2cf0
[  509.661193][T25123]  ? lockdep_unlock+0x5d/0xd0
[  509.661204][T25123]  ? __lock_acquire+0x146e/0x2cf0
[  509.661216][T25123]  ? __lock_acquire+0x146e/0x2cf0
[  509.661228][T25123]  ? __synchronize_srcu+0xb6/0x300
[  509.661239][T25123]  lock_sync+0x9d/0x120
[  509.661250][T25123]  ? __synchronize_srcu+0xb6/0x300
[  509.661262][T25123]  __synchronize_srcu+0xca/0x300
[  509.661275][T25123]  ? do_raw_spin_lock+0x12b/0x2f0
[  509.661289][T25123]  ? __pfx___synchronize_srcu+0x10/0x10
[  509.661303][T25123]  ? kvm_clock_get_cycles+0x47/0x60
[  509.661319][T25123]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  509.661336][T25123]  ? synchronize_srcu+0x20d/0x270
[  509.661347][T25123]  elevator_switch+0x1e8/0x7a0
[  509.661363][T25123]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  509.661375][T25123]  elevator_change+0x2cc/0x450
[  509.661389][T25123]  ? do_raw_spin_unlock+0x4d/0x210
[  509.661405][T25123]  elevator_set_default+0x36c/0x430
[  509.661420][T25123]  ? __pfx_elevator_set_default+0x10/0x10
[  509.661438][T25123]  ? disk_register_independent_access_ranges+0x2db/0x380
[  509.661454][T25123]  ? blk_crypto_sysfs_register+0x11c/0x170
[  509.661470][T25123]  blk_register_queue+0x3e9/0x4e0
[  509.661482][T25123]  __add_disk+0x677/0xd50
[  509.661496][T25123]  ? down_read+0x270/0x2e0
[  509.661509][T25123]  add_disk_fwnode+0xfb/0x480
[  509.661549][T25123]  nbd_dev_add+0x72c/0xb50
[  509.661564][T25123]  ? __pfx_nbd_dev_add+0x10/0x10
[  509.661581][T25123]  ? bpf_lsm_capable+0x9/0x20
[  509.661592][T25123]  ? security_capable+0x7e/0x2c0
[  509.661607][T25123]  ? radix_tree_lookup+0x25c/0x290
[  509.661628][T25123]  nbd_genl_connect+0x962/0x1cf0
[  509.661639][T25123]  ? __pfx___nla_validate_parse+0x10/0x10
[  509.661658][T25123]  ? __pfx_nbd_genl_connect+0x10/0x10
[  509.661670][T25123]  ? rcu_is_watching+0x15/0xb0
[  509.661682][T25123]  ? trace_kmalloc+0x2a/0xf0
[  509.661699][T25123]  ? __nla_parse+0x40/0x60
[  509.661715][T25123]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  509.661729][T25123]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  509.661741][T25123]  genl_family_rcv_msg_doit+0x22a/0x330
[  509.661756][T25123]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  509.661770][T25123]  ? __lock_acquire+0x6b5/0x2cf0
[  509.661785][T25123]  genl_rcv_msg+0x61c/0x7a0
[  509.661797][T25123]  ? __pfx_genl_rcv_msg+0x10/0x10
[  509.661807][T25123]  ? __pfx_nbd_genl_connect+0x10/0x10
[  509.661822][T25123]  netlink_rcv_skb+0x232/0x4b0
[  509.661837][T25123]  ? __pfx_genl_rcv_msg+0x10/0x10
[  509.661849][T25123]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  509.661866][T25123]  ? down_read+0x270/0x2e0
[  509.661875][T25123]  ? genl_rcv+0xd/0x40
[  509.661886][T25123]  genl_rcv+0x28/0x40
[  509.661895][T25123]  netlink_unicast+0x75c/0x8e0
[  509.661912][T25123]  netlink_sendmsg+0x813/0xb40
[  509.661929][T25123]  ? __pfx_netlink_sendmsg+0x10/0x10
[  509.661944][T25123]  ? aa_sock_msg_perm+0xf1/0x1b0
[  509.661959][T25123]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  509.661974][T25123]  ____sys_sendmsg+0x972/0x9f0
[  509.661991][T25123]  ? __might_fault+0xaf/0x130
[  509.662005][T25123]  ? __pfx_____sys_sendmsg+0x10/0x10
[  509.662022][T25123]  ? import_iovec+0x73/0xa0
[  509.662039][T25123]  ___sys_sendmsg+0x2a5/0x360
[  509.662052][T25123]  ? __lock_acquire+0x6b5/0x2cf0
[  509.662065][T25123]  ? __pfx____sys_sendmsg+0x10/0x10
[  509.662082][T25123]  ? futex_wait+0x2a2/0x390
[  509.662103][T25123]  ? __fget_files+0x2a/0x420
[  509.662116][T25123]  ? __fget_files+0x3a0/0x420
[  509.662131][T25123]  __x64_sys_sendmsg+0x1bd/0x2a0
[  509.662147][T25123]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  509.662163][T25123]  ? rcu_is_watching+0x15/0xb0
[  509.662179][T25123]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.662190][T25123]  do_syscall_64+0x15f/0xf80
[  509.662205][T25123]  ? trace_irq_disable+0x3b/0x140
[  509.662224][T25123]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.662235][T25123] RIP: 0033:0x7fb111b9ce59
[  509.662248][T25123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  509.662258][T25123] RSP: 002b:00007fb112a03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  509.662270][T25123] RAX: ffffffffffffffda RBX: 00007fb111e15fa0 RCX: 00007fb111b9ce59
[  509.662279][T25123] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000c
[  509.662286][T25123] RBP: 00007fb111c32d6f R08: 0000000000000000 R09: 0000000000000000
[  509.662291][T25123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  509.662298][T25123] R13: 00007fb111e16038 R14: 00007fb111e15fa0 R15: 00007fff40701fa8
[  509.662313][T25123]  </TASK>
