last executing test programs:

1.037889232s ago: executing program 0 (id=9315):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3c020000130001002bbd700000000000fc000000000000000000000000000000fc01000000000000000000000000000100020000000000000a0040002b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000)

1.034449653s ago: executing program 0 (id=9317):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
ioctl$FICLONE(r0, 0x40049409, r0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000006b00)={0x0, 0x800}, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04032bbd7000ffdbdf25258b000008000300612875258846ebd303321ae37d60a7a93a60f6b0384f08d1dbeb24e2ced96a2595f8c954cc6940ec3b106e199b0018b4ad1c02f11ac430e43a62a6e764757a387f081579f2f9c5a99d179ac1c8f6", @ANYRES32=0x0, @ANYBLOB="0a00340001010101010100000a003400020202020202000008003500060000001f003400785578686e7c691723b8fecae44e6fc8d8d94c04a501049dab6cf7000a00340002020202020200000a0034000101010101010000"], 0x74}, 0x1, 0x0, 0x0, 0x44854}, 0x18014)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a87080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7, <r8=>0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r5}, 0x20)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r11=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c000000", @ANYRES8=r7, @ANYBLOB="31032cbd7000fbdbdf250b00000008000300", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x4004042}, 0x4000800)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x8002}]}, 0x6c}}, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r8}, &(0x7f00000003c0), &(0x7f0000000400)=r5}, 0x20)
setsockopt$inet6_mreq(r9, 0x29, 0x14, &(0x7f0000000380)={@mcast1, r11}, 0x14)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r7, &(0x7f0000000100)="d0af02", &(0x7f0000000180)=""/238}, 0x20)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r14, @ANYRESDEC=r14, @ANYRES16=r14, @ANYRESDEC=r1, @ANYRES64=r14], 0x44}, 0x1, 0x0, 0x0, 0x24040805}, 0x4008000)
sendmsg$nl_route(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084)

977.504514ms ago: executing program 2 (id=9319):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x80000001})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)={0x20000014})
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @broadcast}], 0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
r7 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_int(r7, 0x1, 0x26, 0x0, &(0x7f0000000140))
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000080)={r6, 0x5e, "997870c2109cefd2ec7b55ffc59f187dfd5bb44e71cfc779f0dc067873239e823196dc2e444e86cd7c54a75fc218f5a6af3dd66cde0f88af5c4cb2a1dacfd639325c9db20718f2371a2889d3f135e6a7e77d01bcbda5dd58760795120f1d"}, &(0x7f0000000100)=0x66)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={r6, 0x0, 0x7}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000080)={r6, 0x3, 0x9, [0x2, 0x80, 0x0, 0x2, 0x2e, 0x1, 0x8, 0xb, 0x4]}, 0x1a)

886.432163ms ago: executing program 0 (id=9321):
socket$netlink(0x10, 0x3, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x800, 0x60b924, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x6, 0xb}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x240480e4}, 0x40000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async)
bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r1) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x1d, 0x2, 0x6) (async)
r6 = epoll_create(0x9660)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) (async)
close(r5) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0}) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {0x3}, {0x3}, {}, {0x74}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4894}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r7, 0x401, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, "b6"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async)
sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x24004000) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r11, 0x0, 0x4044045) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r13 = openat$cgroup_devices(r12, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r13, &(0x7f0000000100)={'a', ' *:* ', 'rwm\x00'}, 0xa)

885.126356ms ago: executing program 2 (id=9323):
r0 = socket(0x15, 0x80000, 0x3ff)
sendmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x4, 0x10, 0xf3d2, {}, {0x77359400}, {0x0, 0x1}, 0x1, @can={{0x4, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "6a1864bdc7a36f83"}}, 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x24000040) (async)
r1 = gettid()
syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/net\x00') (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000200)={0x534, r2, 0x220, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xedaa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xec}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa9d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "fb54cdc9af250e61403095391842d1d954ab877876de5fe3d25d31ed"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "f311373446d8de54248cceb6008be3f96649c64264274f8fee671ca3cb"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0xcc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x53}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9cb7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x154, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xf0, 0x3, "b48b97b67f7ea23794a7f25bee929e647b1781062fb45553b7347dbba449ca697b5793248481a9d14b0d1992863f21a16062b88791c81bfafb20e6d0e590749e8c1f474213111dca75e0bf23985ad75595c9e4a005a7df09e0ae7e7bdfe16fb4128ca2b3fbb78895a0bf275be07c31dbd7dc3aac65ede19e391513a8fa000235ffa26ef82c3ea9eb26c3f0574141cd57835dda61776a2b17a2da471fe7c39cf5f090b485718f59dd095753ef39e05020a62f5572862b14a5e4f105d93516569089dd168dc3ecb002ce615b6b652fea93f1a35381afaa050e5be0f45adf1dbf72a4d9e33fe62304b220cb79a7"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "74eb85cb9651d1c17321079366b2e7c05213400b436a0f03eaba718111"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x66e}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x49}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x534}, 0x1, 0x0, 0x0, 0x48005}, 0x6000) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
write$bt_hci(r0, &(0x7f00000007c0)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) (async)
sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x0, 0xb, 0x301, 0x0, 0x0, {0x1}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x9, 0x1, '+/\'\x13\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x44}}, 0x20000000) (async)
socket$netlink(0x10, 0x3, 0x4) (async)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000940)={0x2, 'tunl0\x00'}, 0x18) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000009c0)={<r4=>0x0, 0x9}, &(0x7f0000000a00)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000a40)={r4, 0x8, 0x3, 0x1, 0x8000, 0x40}, &(0x7f0000000a80)=0x14) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), r0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000dc0)={{'\x00', 0x3}, {0x2}, 0xd8, 0x0, 0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)="340ed197b30ee56a325768e61f9b4407df97b4087259b2ad2ca45fb47f28f066ce338d74f4e5b9e8f251e4f329f3c6a183f2e9d7c5e6af910f", 0x39, 0x0, &(0x7f0000000bc0)={0x2, 0x105, {0x0, 0xc, 0x59, "b8f1784705ec909913f7dff576abd68b284f38d1d2e168651a4c523286c5f65a3aa673ed959e0f71b88275e85b7cfc16a3c76296688588c0f80a9ddb00860a1eea36bab9d2b98933bb75858befc4afc3c39a1ae266b3bcf443", 0x9f, "b14024180149fb7697b827e11bbb16715f83fc85df5214a065146d280649e7c604ceb6b30036804083a79fb1f1299341fced8ac30ca5c864a1db0a94fdebb25d4a4a09262744902c3080a134a400f14084b3e30040316483bae7b828d216dbd316216bfe68962c809d2a9aec50e767a773fcd3ff9296fb5b2623f91fdfb36f7a1d7dda4c311bb8848bb428775c0b162281f990444f33c7bd0fdd123140a304"}, 0xbe, "0fa84ff60d4ff2e80f4666ab68e492ad55c00a26393f76f6395797189f198f47080dfb4ad1006306fea7a53775d5c77857a8d9c107a6e0c5a754476c758a4df44f78c6639ecf2a0f8c37d2a9587351686513134d6dd4b3e1626c6ec8b47e025e6914f65be37a25db2eb9ca17b5f22c7839cf70b6fe52aea5f58bfb7ab0776bb79c0d73ecc9f25046c46a2995c5c198b122def73aebcb17202fd103c5b478381b1f7859705b2b6cb589802fcfa21fbd8ab48729be9024a5d5ea8dcc0a7405"}, 0x1cf}) (async)
setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000e40)=0x2, 0x4) (async)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x164, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x249000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf8b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200000}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x48}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r5 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000010c0)) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001180)={'wpan4\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000001280)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x48, r7, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x15}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008014}, 0x4014043) (async)
r9 = syz_genetlink_get_family_id$fou(&(0x7f0000001300), r0)
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x58, r9, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000010)

758.141949ms ago: executing program 1 (id=9324):
socket(0x400000000010, 0x3, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r1, 0x1, 0x4b, 0x0, &(0x7f00000008c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015"], 0x38}, 0x1, 0x300}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="000000001d00000128bd7000fedbdf250a000000", @ANYRES32=r3, @ANYBLOB="2000790800000b00090000000000090009000000000008008ef44937a41eae752f06561e5e268a626966ad6790d68d6685f0dba1ffa3e04ef59ad44efc877a5d9c0b11a1867f654e22f98a93e084e7263aed2c6c0a8bd65507cdb3009bf6a58a5eb7f51826cf64dee7bf6da878ca3337508c7eaebc273c540637d08e4fc2150b39793cb04b67d03d91dc2b9594853cb4610670c5d356a056c4146242eb9367d9bd7935dc8280468aa090609cdb11ed55f8f1960fc240efbf517ffd7cdfbb80271d5e8e9ebd95066f7aa2331dba037b7a490d586993549edb8021aa7a0153d3670f365cb36716e29f3abb4d", @ANYRES32=r3, @ANYBLOB="000004001d01000000000300f7ffffff0200000006000000ff000000"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20084084)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80000)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000100001042abd70000000000000080000", @ANYRES32=0x0, @ANYBLOB="99800300000000002c0012800b000100697036746e6c00001c00028006000f00020000000400130004001300060011004e210000140003006e69"], 0x60}, 0x1, 0x0, 0x0, 0x8c1}, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000010000000800000008"], 0x48)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
accept(r4, &(0x7f0000000640)=@tipc=@id, &(0x7f00000006c0)=0x80)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r10=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x3, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x1c, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000100}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="000700000000040014001a80100004800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)={0x14, 0x0, 0x701, 0x0, 0x25dfdbfc, {0x41}}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x24000040)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fddbdf254d0000000e0001006e657464657673696d0000fe0e0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x40100c0)
r12 = socket(0x2, 0x80002, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r12, @ANYRES32=r12], 0x44}}, 0x2000800)

757.859543ms ago: executing program 2 (id=9325):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x83dff000)
recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x6, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000f40)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
close(r3)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000ffff"})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
write(r1, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
mmap(&(0x7f00000a8000/0x4000)=nil, 0x4000, 0x3000007, 0x50, r8, 0x0)
getsockopt$inet_mreqn(r0, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x0)
unshare(0x20040600)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x16)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10)
sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f0000000000)={0x0, 0x4d, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRES64=r11, @ANYRESHEX=r10, @ANYRESDEC=0x0, @ANYRES32=r10, @ANYRES64=r11, @ANYRES64=0x0, @ANYRESDEC=r10, @ANYBLOB="99f2bc065d1bbd3a4886370ee6b34e5cdf5d3cc3fd4dcc8fb8529d69a01a6f084c55aef91658c4f0dc62942130034f7d2f320e16f50d2ea9e307eee25432f4f25efef7c70cc1223ac45b5a6597203f7afd5fb3b2902521f51527e2f2dc0abe9fa5c39865b7456f1796420c0a54bf2ff9fa85", @ANYRES64=r11], 0x270}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

756.856553ms ago: executing program 0 (id=9326):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x40, r1, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4)

698.692211ms ago: executing program 0 (id=9327):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004880)={0x24, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @uid}]}]}, 0x24}], 0x1}, 0x44010)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', <r1=>0x0, 0x0, 0x8, 0x100, 0xa, {{0x5, 0x4, 0x0, 0x0, 0xb, 0xfffe, 0x0, 0x0, 0x0, 0x0, @broadcast, @empty}}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendmmsg$inet6(r3, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x3}, &(0x7f00000000c0)=0x8)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'pimreg\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "bf1b4087edfe5c4e7dbc31ec412ad7e146e549d45ef8ffffffffffffff00", "0b427558163b547e4025a26d22b39efd15a79bf13a99cfb77cc869a43447e49f", "87a906824296668daf4ebd4e96f95ec6d39d32a7238872c45dc65a18f8bf52af", "d8f28fdc3ec20b8facef9aa9d6f53dd7527511d9bb717ba90adf6ac47453a1f1", "53b30ad0a21007c3cb8fe4f81000946b00", "6ef390e675e608f371455a4e", 0x400003, 0x2aca, 0x7e0, 0x87d42, 0x9e}})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x6, 0x3, 0x2, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01042800", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r7], 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x5c}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x1ff, 0x1000000000, 0x4053e5, 0x5}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in=@multicast1, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r9, 0x84, 0x13, &(0x7f0000000200)=0x2a0, 0x4)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005})
r10 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_JOIN_FILTERS(r10, 0x65, 0x6, &(0x7f0000000140)=0x1, 0x4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f5, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000040)={'sit0\x00', r1, 0x10, 0x0, 0xfffffffe, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffc, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @rand_addr=0x64010101}}}})

588.177917ms ago: executing program 1 (id=9328):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x208001, 0x0)
ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x5, 0x1, 0x7f}, {0x79fd, 0x4, 0x6, 0xffffffff}]})

587.25102ms ago: executing program 0 (id=9329):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000000c0), 0x0}, 0x20)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000001080)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x3, 0x33, 0x20, 0x66, 0x0, 0x40, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0x4, "0f24"}]}}, {0x1e, 0xb, 0x0, @loopback}}}}}, 0x0) (async)
syz_emit_ethernet(0x2e, &(0x7f0000001080)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x3, 0x33, 0x20, 0x66, 0x0, 0x40, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0x4, "0f24"}]}}, {0x1e, 0xb, 0x0, @loopback}}}}}, 0x0)
r5 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) (async)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async)
getsockopt(r7, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x800)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x8c}}, 0x0)
sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r10, &(0x7f0000000400)=[{&(0x7f0000000480)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23048000000f858db343f00000000", 0x35}, {&(0x7f0000000600)="051a00000e800065589ab62b0ce07be2525ff592bf22c3126481c865", 0x1c}], 0x2) (async)
writev(r10, &(0x7f0000000400)=[{&(0x7f0000000480)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23048000000f858db343f00000000", 0x35}, {&(0x7f0000000600)="051a00000e800065589ab62b0ce07be2525ff592bf22c3126481c865", 0x1c}], 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0xf74}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}}, 0x4000)

585.857087ms ago: executing program 1 (id=9330):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x400, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

538.728471ms ago: executing program 2 (id=9331):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x27, 0x4, 0xfffffffc)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x104, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff2, 0x4}, {0xd, 0xb}, {0x9, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xf}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000080)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0xfffffd6e)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r6}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000080), 0x0}, 0x20)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000008967357cff95c4e2a9a01fef40b5e55ccfad189f2b2b580616c120c16e6fa514c92a3902357ad9c8e762b571f5e7c53a3c3d851c17fa3dfcee8b41f4875b9b64cd6775b317ed61edd21aa80e2c4771060dea03261283ce75d5fb0f", @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf250100000005002d000000000005002e000100000008003c000200000005003500ff000000080032000700000005002d0001000000"], 0x44}}, 0x1)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x63, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r9, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x18}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r9, 0x84, 0x1e, &(0x7f0000000000), 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0)

538.365671ms ago: executing program 1 (id=9332):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0xb05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000080}, 0x42)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x45, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r1, @ANYBLOB="9fb53718e83005a74b21fd47766742ccd973ee738a63b6d02897cbcce3f1bc0990e72f5fe340a035ef0000000000000000"], 0x4c}}, 0x40000)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="100028bd7000fedbdf25370000000c009900070000004500001f0800a00000000000050018012400000005001801030000000800a000ffff000000"], 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3) (async, rerun: 64)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000400}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) (async, rerun: 32)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="f5af25bd7000000000000e00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700)

537.029034ms ago: executing program 2 (id=9333):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x88, 0x30, 0x871a15abc695fb3d, 0x70bd2d, 0x0, {}, [{0x74, 0x1, [@m_skbedit={0x70, 0x2, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}]}, {0x39, 0x6, "a48e1acd6cdc6e835ce8d1e396b8f5b58b6d14a12853b65b679eda548cbda71a90f33e6aad8c4ca2061ec43df561103df947949392"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x20000824)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'dvmrp1\x00', {0x2}, 0x7ff}) (async, rerun: 64)
r4 = socket$kcm(0x10, 0x2, 0x10) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) (async)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async)
sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) (async, rerun: 32)
r6 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 32)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x24040800) (async)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000000)={r8, 0x4}, 0x8) (async, rerun: 32)
pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) (rerun: 32)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 32)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001f80)={0x2c, 0x35, 0x1, 0x70bd25, 0x25dfdbfd, {0x7}, [@nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x8c8, 0x0, 0x0, @u64=0x2}]}, @nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x92}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x3, 0x4, 0x624, 0x3, 0xfffffffe, 0x80000001, 0x8001}, 0x1c) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002780)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x178, 0xc, 0x160, 0x178, 0x230, 0x258, 0x258, 0x230, 0x258, 0x3, 0x0, {[{{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffffff], [0xffffffff, 0x0, 0xffffffff], 'wlan0\x00', 'netpci0\x00', {}, {}, 0x11}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@unspec=@addrtype1={{0x28}, {0x242}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x6, 0xa, 0x44, '\x00', 'syz1\x00', {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x6, 0x0, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) (async)
sendto$inet6(r0, &(0x7f0000000340)="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", 0x1de, 0x0, 0x0, 0x0)

469.089755ms ago: executing program 1 (id=9334):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f24001280200001800c000100636f756e74657200100002800c00024000000000000080000800034000000106140000001000010000000000000000000084000a"], 0xb0}}, 0x20050800)
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x40000000, 0x400}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000540)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x65, 0x3, 0xd913, 0x81, 0x1}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}}}, 0x24}}, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'xfrm0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1f, 0x0, 0x3, 0x401, 0x1, 0x51, 0x6, 0xa, 0x9, 0x85, 0x0, 0xff, 0x401, 0x5, 0x5, 0x8, [0x5, 0x9]}})

3.932853ms ago: executing program 2 (id=9335):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r6 = socket(0x10, 0x803, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50)
r8 = socket$netlink(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="15060000f2ff01000000010000003000018014000400ff010000000000000000000000000001060005004e220000060001000a000000080006000100"], 0x44}, 0x5}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r6)
pipe(&(0x7f0000000480)={<r10=>0xffffffffffffffff})
readv(r10, &(0x7f0000002c00)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r11)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r11, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010001ffffcfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000200012800b00010067726574617000001000028008000700ac1414280400120008000a00", @ANYRES32=r12, @ANYBLOB="7363b5973ccf585de768a613a667906a75dd5fc6eb1cae87f1d9d18336473569cea09547cca1ed7196510fe12e8efe6c3d33e75ae311bed72f43750cfd168af6f2d1cffc4bf163e2a93e4c028083c666c409cfee1fb24d885f1d81efde9599e1540cda566f862328b4f307d96591b064ef7b12a2d9c3270a87353354ad4f720d000000"], 0x48}}, 0x0)

0s ago: executing program 1 (id=9336):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0xc, 0x0, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @fd=r0}]}, @nested={0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

kernel console output (not intermixed with test programs):

an active interface with an up link
[  557.677291][T31687] ipt_rpfilter: unknown options
[  557.721096][T31689] netlink: 'syz.0.7162': attribute type 29 has an invalid length.
[  557.727674][T31689] netlink: 'syz.0.7162': attribute type 29 has an invalid length.
[  557.731365][T31689] netlink: 'syz.0.7162': attribute type 29 has an invalid length.
[  557.735157][T31689] netlink: 'syz.0.7162': attribute type 29 has an invalid length.
[  558.049699][T31716] bond73: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  558.053660][T31716] bond73 (unregistering): Released all slaves
[  558.510515][T31737] sctp: [Deprecated]: syz.0.7174 (pid 31737) Use of struct sctp_assoc_value in delayed_ack socket option.
[  558.510515][T31737] Use struct sctp_sack_info instead
[  558.560951][T31741] bond92: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  558.566329][T31741] bond92 (unregistering): Released all slaves
[  558.989021][T31768] bridge0: port 2(veth1_to_bridge) entered disabled state
[  559.048036][T31768] tipc: Resetting bearer <ib:bond_slave_0>
[  559.139512][T31768] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  559.180637][T31768] bridge0: port 1(geneve0) entered disabled state
[  559.361580][T31776] syz1: Port: 1 Link DOWN
[  559.364803][ T5655] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  559.375487][ T5655] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  559.388550][ T5655] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  559.398659][ T5655] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  559.495405][T31784] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  559.568624][T31791] ip6tnl13: entered promiscuous mode
[  559.680483][T31803] macvlan3: entered promiscuous mode
[  559.682234][T31803] erspan0: entered promiscuous mode
[  559.684014][T31803] macvlan3: entered allmulticast mode
[  559.690179][T31803] erspan0: entered allmulticast mode
[  559.760404][T31824] block nbd0: not configured, cannot reconfigure
[  559.800387][T31832] __nla_validate_parse: 143 callbacks suppressed
[  559.800405][T31832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7193'.
[  559.925437][T31846] bond81: entered promiscuous mode
[  559.927397][T31846] 8021q: adding VLAN 0 to HW filter on device bond81
[  560.022828][T31863] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7204'.
[  560.026863][T31863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7204'.
[  560.041167][T31863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7204'.
[  560.080067][T31861] xt_NFQUEUE: number of total queues is 0
[  560.160896][T31872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7206'.
[  560.256280][T31887] validate_nla: 122 callbacks suppressed
[  560.256292][T31887] netlink: 'syz.2.7212': attribute type 1 has an invalid length.
[  560.282337][T31887] bond73: entered promiscuous mode
[  560.284409][T31887] 8021q: adding VLAN 0 to HW filter on device bond73
[  560.289934][T31887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7212'.
[  560.309784][T31887] bond73: (slave bridge36): making interface the new active one
[  560.312858][T31887] bridge36: entered promiscuous mode
[  560.317191][T31887] bond73: (slave bridge36): Enslaving as an active interface with an up link
[  560.369005][T31899] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7215'.
[  560.389804][T31903] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7216'.
[  560.455458][T31907] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7217'.
[  560.468082][T31906] netlink: 'syz.0.7217': attribute type 1 has an invalid length.
[  560.477827][T31906] netlink: 'syz.0.7217': attribute type 1 has an invalid length.
[  560.515292][T31916] netlink: 'syz.2.7220': attribute type 21 has an invalid length.
[  560.518113][T31916] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7220'.
[  560.571705][T31925] netlink: 'syz.1.7223': attribute type 1 has an invalid length.
[  560.626070][T31930] mac80211_hwsim hwsim90 syzkaller0: left promiscuous mode
[  560.628342][T31930] mac80211_hwsim hwsim90 syzkaller0: left allmulticast mode
[  560.726694][T31943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  560.824627][T31960] netlink: 'syz.0.7232': attribute type 1 has an invalid length.
[  560.964511][T31984] netlink: 'syz.0.7237': attribute type 11 has an invalid length.
[  561.113895][T32000] bridge37: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  561.178785][T31997] syzkaller0 speed is unknown, defaulting to 1000
[  561.323042][T32012] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  561.412733][T32014] netlink: 'syz.2.7244': attribute type 32 has an invalid length.
[  561.533619][T32024] xt_hashlimit: overflow, rate too high: 0
[  561.581019][T32024] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  561.960012][T32065] netlink: 'syz.0.7260': attribute type 13 has an invalid length.
[  561.963488][T32065] netlink: 'syz.0.7260': attribute type 12 has an invalid length.
[  561.973253][T32065] netlink: 'syz.0.7260': attribute type 11 has an invalid length.
[  562.449025][T32112] netlink: 'syz.1.7274': attribute type 13 has an invalid length.
[  562.532800][T32112] mac80211_hwsim hwsim90 syzkaller0: Caught tx_queue_len zero misconfig
[  562.790778][T32151] IPv6: Can't replace route, no match found
[  562.793287][T32151] IPv6: Can't replace route, no match found
[  563.545486][T32210] syzkaller1: entered promiscuous mode
[  563.547707][T32210] syzkaller1: entered allmulticast mode
[  564.007520][T32242] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  564.011869][T32244] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  564.055417][T32246] syzkaller0 speed is unknown, defaulting to 1000
[  564.372189][T32272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  564.448159][T32269] syzkaller0 speed is unknown, defaulting to 1000
[  565.033410][T32328] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  565.169162][T32337] __nla_validate_parse: 39 callbacks suppressed
[  565.169180][T32337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7336'.
[  565.258158][   T34] audit: type=1800 audit(1778900443.063:34): pid=32356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7342" name="memory.events" dev="tmpfs" ino=12632 res=0 errno=0
[  565.268547][   T34] audit: type=1804 audit(1778900443.063:35): pid=32356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.7342" name="/newroot/2476/memory.events" dev="tmpfs" ino=12632 res=1 errno=0
[  565.295775][T32358] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.7344'.
[  565.614270][T32369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7346'.
[  565.703716][T32373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7347'.
[  565.707645][T32373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7347'.
[  565.858577][T32387] validate_nla: 6 callbacks suppressed
[  565.858589][T32387] netlink: 'syz.2.7351': attribute type 1 has an invalid length.
[  565.975630][T32387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7351'.
[  566.128809][T32395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7354'.
[  566.133037][T32395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7354'.
[  566.138328][T32395] netlink: 'syz.2.7354': attribute type 14 has an invalid length.
[  566.141833][T32395] netlink: 'syz.2.7354': attribute type 11 has an invalid length.
[  566.166841][T32399] netlink: 'syz.1.7353': attribute type 1 has an invalid length.
[  566.327918][T32408] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR
[  566.344297][T32427] syzkaller0 speed is unknown, defaulting to 1000
[  566.351987][T32392] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7352'.
[  566.730522][T32448] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7362'.
[  566.751782][T32445] bond74 (unregistering): Released all slaves
[  566.829192][T32457] batman_adv: batadv0: Adding interface: gretap8
[  566.831931][T32457] batman_adv: batadv0: Interface activated: gretap8
[  566.846265][T32459] netlink: 'syz.1.7367': attribute type 3 has an invalid length.
[  566.848684][T32459] netlink: 'syz.1.7367': attribute type 3 has an invalid length.
[  566.914866][T32461] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0
[  567.010919][T32487] netlink: 'syz.0.7373': attribute type 1 has an invalid length.
[  567.047677][T32487] bond92: entered promiscuous mode
[  567.050281][T32487] 8021q: adding VLAN 0 to HW filter on device bond92
[  567.056520][T32488] netlink: 'syz.0.7373': attribute type 83 has an invalid length.
[  567.063233][T32485] netlink: 'syz.1.7372': attribute type 1 has an invalid length.
[  567.068277][T32493] bond92: (slave bridge50): making interface the new active one
[  567.070753][T32493] bridge50: entered promiscuous mode
[  567.072970][T32493] bond92: (slave bridge50): Enslaving as an active interface with an up link
[  567.179148][T32506] geneve1: Caught tx_queue_len zero misconfig
[  567.209711][T32507] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  567.315334][T32513] mac80211_hwsim hwsim90 syzkaller0: entered promiscuous mode
[  567.319635][T32513] mac80211_hwsim hwsim90 syzkaller0: entered allmulticast mode
[  568.411219][T32537] netlink: 'syz.2.7386': attribute type 2 has an invalid length.
[  568.784415][T32549] erspan0: left allmulticast mode
[  568.789877][T32549] erspan0: left promiscuous mode
[  568.912464][T32559] sctp: [Deprecated]: syz.2.7392 (pid 32559) Use of int in maxseg socket option.
[  568.912464][T32559] Use struct sctp_assoc_value instead
[  570.064806][T32649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  570.289829][T32668] __nla_validate_parse: 19 callbacks suppressed
[  570.289895][T32668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7423'.
[  570.323384][T32668] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7423'.
[  570.370071][T32678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7426'.
[  570.380059][T32678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7426'.
[  570.430948][T32690] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7429'.
[  570.446246][T32690] nbd: must specify at least one socket
[  570.472489][T32695] bond93: entered promiscuous mode
[  570.474389][T32695] bond93: entered allmulticast mode
[  570.479716][T32695] 8021q: adding VLAN 0 to HW filter on device bond93
[  570.499576][T32695] macvlan2: entered promiscuous mode
[  570.501237][T32695] macvlan2: entered allmulticast mode
[  570.504792][T32695] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  570.529355][T32700] syzkaller1: entered promiscuous mode
[  570.531756][T32700] syzkaller1: entered allmulticast mode
[  570.576877][T32706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7434'.
[  570.657154][T32713] netlink: 51 bytes leftover after parsing attributes in process `syz.0.7435'.
[  570.790051][T32721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7437'.
[  570.799885][T32726] syzkaller0 speed is unknown, defaulting to 1000
[  570.850324][T32734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7439'.
[  570.855111][T32734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7439'.
[  570.859467][T32733] lo: Caught tx_queue_len zero misconfig
[  571.057237][T32760] openvswitch: netlink: Flow actions attr not present in new flow.
[  571.175158][  T310] openvswitch: netlink: IP tunnel TTL not specified.
[  571.284396][  T311] 8021q: VLANs not supported on bond0
[  571.290319][  T309] validate_nla: 6 callbacks suppressed
[  571.290329][  T309] netlink: 'syz.0.7450': attribute type 8 has an invalid length.
[  571.383785][  T334] netlink: 'syz.1.7457': attribute type 12 has an invalid length.
[  571.482929][  T351] xt_hashlimit: size too large, truncated to 1048576
[  571.512363][  T357] netlink: 'syz.1.7462': attribute type 2 has an invalid length.
[  571.989651][  T394] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  571.993587][  T394] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  572.463353][  T400] veth0_macvtap: left promiscuous mode
[  572.466523][  T400] veth0_macvtap: entered promiscuous mode
[  572.473055][  T400] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  572.494163][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  572.498203][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  572.502723][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  572.507091][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  572.802934][  T417] netlink: 'syz.2.7478': attribute type 10 has an invalid length.
[  572.841253][  T418] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  572.852700][  T418] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  573.042229][  T429] vlan0: left promiscuous mode
[  573.045485][  T429] erspan0: left promiscuous mode
[  573.047535][  T429] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  573.051479][  T429] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  573.057450][  T429] bond70: left promiscuous mode
[  573.059824][  T429] bridge34: left promiscuous mode
[  573.062275][  T429] bridge34: left allmulticast mode
[  573.076053][  T429] ip6gretap4: left promiscuous mode
[  573.078223][  T429] ip6gretap4: left allmulticast mode
[  573.081980][  T429] bond73: left promiscuous mode
[  573.084035][  T429] bridge36: left promiscuous mode
[  573.102908][  T432] netlink: 'syz.2.7479': attribute type 1 has an invalid length.
[  573.903172][  T465] netlink: 'syz.1.7489': attribute type 12 has an invalid length.
[  573.913132][  T465] netlink: 'syz.1.7489': attribute type 12 has an invalid length.
[  574.066453][  T473] nbd: must specify a size in bytes for the device
[  574.553529][  T473] bond84 (unregistering): Released all slaves
[  575.154601][  T479] netlink: 'syz.0.7493': attribute type 2 has an invalid length.
[  575.958795][  T525] syzkaller0 speed is unknown, defaulting to 1000
[  576.157059][  T533] __nla_validate_parse: 28 callbacks suppressed
[  576.157078][  T533] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7504'.
[  576.228955][  T538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7506'.
[  576.307760][  T543] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  576.311063][  T543] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  576.315976][  T543] netlink: 'syz.2.7507': attribute type 21 has an invalid length.
[  576.319157][  T543] netlink: 'syz.2.7507': attribute type 19 has an invalid length.
[  576.324142][  T543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7507'.
[  576.338570][  T549] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7509'.
[  576.363581][  T549] batman_adv: batadv0: Interface deactivated: gretap8
[  576.400785][  T549] netlink: 'syz.0.7509': attribute type 13 has an invalid length.
[  576.403891][  T549] netlink: 'syz.0.7509': attribute type 17 has an invalid length.
[  576.462277][  T551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7509'.
[  576.462712][  T549] tipc: Resetting bearer <ib:bond_slave_0>
[  576.482067][  T549] veth0_macvtap: left promiscuous mode
[  576.484605][  T549] veth0_macvtap: entered promiscuous mode
[  576.497297][  T549] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  576.524838][ T5683] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  576.529328][ T5683] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  576.532466][ T5683] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  576.537706][  T551] bridge_slave_1: entered allmulticast mode
[  576.565664][T31772] syz1: Port: 1 Link ACTIVE
[  576.568041][ T5683] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  576.603651][  T558] block nbd0: not configured, cannot reconfigure
[  576.646962][  T565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7515'.
[  576.724252][  T569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7516'.
[  576.837279][  T580] mac80211_hwsim hwsim90 syzkaller0: left promiscuous mode
[  576.840320][  T580] mac80211_hwsim hwsim90 syzkaller0: left allmulticast mode
[  576.872637][  T589] netlink: 'syz.2.7522': attribute type 1 has an invalid length.
[  576.894323][  T589] 8021q: adding VLAN 0 to HW filter on device bond78
[  576.912377][  T589] bridge_slave_1: left allmulticast mode
[  576.914828][  T589] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.924469][  T589] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  576.939562][  T589] bond78: (slave gretap6): making interface the new active one
[  576.942519][  T589] bond78: (slave gretap6): Enslaving as an active interface with an up link
[  576.984775][  T598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7523'.
[  576.987885][  T598] openvswitch: netlink: Flow actions attr not present in new flow.
[  577.023140][  T585] netlink: 'syz.0.7521': attribute type 1 has an invalid length.
[  577.613493][  T630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7533'.
[  577.843367][  T644] netlink: 'syz.0.7536': attribute type 1 has an invalid length.
[  577.846541][  T644] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7536'.
[  578.142204][  T662] syzkaller0 speed is unknown, defaulting to 1000
[  578.151386][  T663] syzkaller0 speed is unknown, defaulting to 1000
[  578.885316][  T683] netlink: 'syz.2.7545': attribute type 9 has an invalid length.
[  578.980251][  T690] bond84 (unregistering): Released all slaves
[  579.238799][  T713] mac80211_hwsim hwsim90 syzkaller0: entered promiscuous mode
[  579.241816][  T713] mac80211_hwsim hwsim90 syzkaller0: entered allmulticast mode
[  579.266279][  T715] netlink: 'syz.2.7555': attribute type 11 has an invalid length.
[  579.381008][  T726] syzkaller0 speed is unknown, defaulting to 1000
[  579.480300][  T726] netlink: 'syz.2.7560': attribute type 11 has an invalid length.
[  579.770449][  T761] A link change request failed with some changes committed already. Interface c@0 may have been left with an inconsistent configuration, please check.
[  579.958300][  T771] netlink: 'syz.2.7571': attribute type 1 has an invalid length.
[  580.677381][  T805] team0: Caught tx_queue_len zero misconfig
[  581.103054][  T850] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  581.304112][  T856] syzkaller1: entered promiscuous mode
[  581.308476][  T856] syzkaller1: entered allmulticast mode
[  581.448675][  T861] validate_nla: 5 callbacks suppressed
[  581.448692][  T861] netlink: 'syz.0.7593': attribute type 12 has an invalid length.
[  581.472475][  T861] __nla_validate_parse: 21 callbacks suppressed
[  581.472491][  T861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7593'.
[  581.478789][  T861] macsec0: entered promiscuous mode
[  581.483485][  T860] macsec0: left promiscuous mode
[  581.511005][  T863] netlink: 'syz.0.7594': attribute type 12 has an invalid length.
[  581.516383][  T863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7594'.
[  581.520653][  T863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7594'.
[  581.811229][  T890] netlink: 'syz.1.7601': attribute type 11 has an invalid length.
[  582.013229][  T913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7608'.
[  582.202386][  T934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7613'.
[  582.333913][  T952] xt_hashlimit: size too large, truncated to 1048576
[  582.401166][  T961] Bluetooth: MGMT ver 1.23
[  582.408225][  T963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7617'.
[  582.484220][  T968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7618'.
[  582.597767][  T976] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.7620'.
[  582.622563][  T979] netlink: 'syz.0.7621': attribute type 6 has an invalid length.
[  582.903513][ T1000] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7628'.
[  582.981195][ T1002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7629'.
[  583.026122][ T1005] netlink: 'syz.1.7630': attribute type 9 has an invalid length.
[  583.046352][  T999] netpci0: tun_chr_ioctl cmd 1074025678
[  583.050019][  T999] netpci0: group set to 0
[  583.257709][ T1022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  583.359632][ T1037] netlink: 'syz.0.7636': attribute type 1 has an invalid length.
[  583.901147][ T1067] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  584.052324][ T1079] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  584.111178][ T1093] bridge0: port 2(vlan0) entered blocking state
[  584.113490][ T1093] bridge0: port 2(vlan0) entered disabled state
[  584.117046][ T1093] vlan0: entered allmulticast mode
[  584.120243][ T1093] vlan0: left allmulticast mode
[  584.211734][ T1098] netlink: 'syz.0.7649': attribute type 32 has an invalid length.
[  584.233091][ T1104] syzkaller0 speed is unknown, defaulting to 1000
[  584.517920][ T1144] syzkaller0 speed is unknown, defaulting to 1000
[  584.542579][ T1152] siw: device registration error -23
[  584.603457][ T1157] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  584.612866][ T1155] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  584.619534][ T1157] netlink: 'syz.1.7660': attribute type 1 has an invalid length.
[  584.678783][ T1157] 8021q: adding VLAN 0 to HW filter on device bond84
[  584.720994][ T1171] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  584.727653][ T1171] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  584.752104][ T1172] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  584.758711][ T1171] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  584.858246][ T1180] netlink: 'syz.0.7665': attribute type 1 has an invalid length.
[  584.861965][ T1180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  584.968280][ T1195] netlink: 'syz.1.7670': attribute type 10 has an invalid length.
[  584.978144][ T1195] netlink: 'syz.1.7670': attribute type 9 has an invalid length.
[  585.030875][ T1200] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  585.034324][ T1200] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  585.051005][ T1197] syzkaller0 speed is unknown, defaulting to 1000
[  585.193522][ T1209] smc: adding net device hsr0 with user defined pnetid SYZ2
[  585.202715][ T1209] smc: removing net device hsr0 with user defined pnetid SYZ2
[  585.249531][ T1210] ip6gretap4: entered promiscuous mode
[  585.251372][ T1210] ip6gretap4: entered allmulticast mode
[  585.707431][ T1233] tipc: Resetting bearer <ib:bond_slave_0>
[  585.746168][ T6476] syz1: Port: 1 Link DOWN
[  585.748151][ T5655] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.755060][ T5655] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.762353][ T5655] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  585.768321][ T5655] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  586.004522][ T1241] bridge0: entered allmulticast mode
[  586.013427][ T1241] pim6reg: entered allmulticast mode
[  586.104494][ T1251] syzkaller0 speed is unknown, defaulting to 1000
[  586.535992][ T1268] __nla_validate_parse: 30 callbacks suppressed
[  586.536004][ T1268] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7690'.
[  586.711092][ T1281] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7693'.
[  586.714665][ T1281] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7693'.
[  586.759978][ T1290] validate_nla: 4 callbacks suppressed
[  586.759994][ T1290] netlink: 'syz.2.7696': attribute type 1 has an invalid length.
[  586.775359][ T1290] bond79: entered promiscuous mode
[  586.777207][ T1290] bond79: entered allmulticast mode
[  586.779193][ T1290] 8021q: adding VLAN 0 to HW filter on device bond79
[  586.864889][ T1302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7700'.
[  586.931773][ T1316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  586.937869][ T1318] openvswitch: netlink: IPv6 tunnel dst address is zero
[  587.026574][ T1324] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  587.078504][ T1320] netlink: 'syz.2.7707': attribute type 1 has an invalid length.
[  587.108284][ T1320] bond80 (unregistering): Released all slaves
[  587.212285][ T1349] netlink: 'syz.1.7713': attribute type 1 has an invalid length.
[  587.246033][ T1349] bond85: (slave vxcan5): The slave device specified does not support setting the MAC address
[  587.250406][ T1349] bond85: (slave vxcan5): Error -95 calling set_mac_address
[  587.275319][ T1351] : option downdelay: invalid value (18446744073709547007)
[  587.277936][ T1351] : option downdelay: allowed values 0 - 2147483647
[  587.281031][ T1351]  (unregistering): Released all slaves
[  587.291722][ T1357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7713'.
[  587.315897][ T1357] bond85: (slave bridge113): Enslaving as an active interface with a down link
[  587.324817][ T1349] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7713'.
[  587.371929][ T1360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7716'.
[  587.391606][ T1363] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.7717'.
[  587.460195][ T1368] syzkaller0 speed is unknown, defaulting to 1000
[  587.516957][ T1365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7718'.
[  587.557691][ T1376] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  587.569641][ T1376] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  587.609195][ T1379] team0: entered promiscuous mode
[  587.612685][ T1379] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  587.647198][ T1385] tipc: Resetting bearer <eth:syzkaller0>
[  587.781948][ T1391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7722'.
[  587.842442][ T1393] team0: entered allmulticast mode
[  587.844570][ T1393] 8021q: adding VLAN 0 to HW filter on device team0
[  588.466256][ T1427] netlink: 'syz.2.7735': attribute type 3 has an invalid length.
[  588.476669][ T1427] nbd: nbd2 already in use
[  588.479175][ T1427] block nbd2: NBD_DISCONNECT
[  588.481191][ T1427] block nbd2: Send disconnect failed -32
[  588.483647][ T1427] block nbd2: shutting down sockets
[  588.901625][ T1458] syzkaller0 speed is unknown, defaulting to 1000
[  589.051646][ T1481] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  589.148739][ T1481] vlan6: entered promiscuous mode
[  589.654525][ T1514] netlink: 'syz.2.7759': attribute type 1 has an invalid length.
[  589.683778][ T1514] bond80: (slave vxcan1): The slave device specified does not support setting the MAC address
[  589.688284][ T1514] bond80: (slave vxcan1): Error -95 calling set_mac_address
[  589.750013][ T1516] bond80: (slave bridge43): Enslaving as an active interface with a down link
[  589.940189][ T1519] block nbd2: not configured, cannot reconfigure
[  590.066344][ T1526] wg0: entered allmulticast mode
[  590.335108][ T1530] nbd0: detected capacity change from 0 to 63
[  590.339823][T11748] block nbd0: Receive control failed (result -104)
[  590.342082][   T56] block nbd0: Receive control failed (result -32)
[  590.884654][ T1549] netlink: 'syz.2.7769': attribute type 4 has an invalid length.
[  591.330975][ T1558] bond81 (unregistering): Released all slaves
[  591.429842][ T1561] netlink: 'syz.1.7772': attribute type 4 has an invalid length.
[  591.443600][ T1561] netlink: 'syz.1.7772': attribute type 83 has an invalid length.
[  591.546090][ T1570] __nla_validate_parse: 9 callbacks suppressed
[  591.546104][ T1570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7776'.
[  591.552283][ T1570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7776'.
[  591.596600][ T1577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7778'.
[  591.600126][ T1577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7778'.
[  591.733286][ T1590] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7783'.
[  591.742496][ T1590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7783'.
[  591.808456][ T1598] netlink: 'syz.0.7786': attribute type 1 has an invalid length.
[  591.826993][ T1598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7786'.
[  591.830309][ T1598] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes
[  591.833693][ T1594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7784'.
[  591.845208][ T1594] netlink: 'syz.1.7784': attribute type 9 has an invalid length.
[  591.848882][ T1594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7784'.
[  591.857235][ T1594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7784'.
[  591.860019][ T1594] netlink: 'syz.1.7784': attribute type 9 has an invalid length.
[  592.231628][ T1648] bond0: left allmulticast mode
[  592.233585][ T1648] vcan0: left allmulticast mode
[  592.258700][ T1648] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  592.261472][ T1648] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  592.657844][   T98] block nbd0: Connection timed out, retrying (0/2 alive)
[  592.660213][   T98] block nbd0: Connection timed out, retrying (0/2 alive)
[  592.662754][   T98] block nbd0: Connection timed out, retrying (0/2 alive)
[  592.665031][   T98] block nbd0: Connection timed out, retrying (0/2 alive)
[  592.667800][   T98] block nbd0: Dead connection, failed to find a fallback
[  592.670578][   T98] block nbd0: shutting down sockets
[  592.672574][   T98] blk_print_req_error: 138 callbacks suppressed
[  592.672581][   T98] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.678471][   T98] buffer_io_error: 138 callbacks suppressed
[  592.678480][   T98] Buffer I/O error on dev nbd0, logical block 3, async page read
[  592.682731][   T98] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.685624][   T98] Buffer I/O error on dev nbd0, logical block 2, async page read
[  592.688205][   T98] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.691251][   T98] Buffer I/O error on dev nbd0, logical block 1, async page read
[  592.693638][   T98] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.696574][   T98] Buffer I/O error on dev nbd0, logical block 0, async page read
[  592.699241][T31733] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.702806][T31733] Buffer I/O error on dev nbd0, logical block 0, async page read
[  592.705718][ T1672] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  592.708818][T31733] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.711608][T31733] Buffer I/O error on dev nbd0, logical block 1, async page read
[  592.714356][T31733] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.718101][ T1672] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  592.722552][T31733] Buffer I/O error on dev nbd0, logical block 2, async page read
[  592.725864][T31733] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.729648][T31733] Buffer I/O error on dev nbd0, logical block 3, async page read
[  592.732925][T31733] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.737584][T31733] Buffer I/O error on dev nbd0, logical block 0, async page read
[  592.740833][T31733] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  592.744477][T31733] Buffer I/O error on dev nbd0, logical block 1, async page read
[  592.749983][T31733] ldm_validate_partition_table(): Disk read failed.
[  592.754058][T31733] Dev nbd0: unable to read RDB block 0
[  592.758350][T31733]  nbd0: unable to read partition table
[  592.768546][T31733] ldm_validate_partition_table(): Disk read failed.
[  592.772619][T31733] Dev nbd0: unable to read RDB block 0
[  592.777017][T31733]  nbd0: unable to read partition table
[  592.991964][ T1677] bond86: entered promiscuous mode
[  592.993712][ T1677] bond86: entered allmulticast mode
[  593.052662][   T34] audit: type=1804 audit(1778900470.853:36): pid=1683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.7811" name="/newroot/2586/memory.events" dev="tmpfs" ino=13172 res=1 errno=0
[  593.065835][   T34] audit: type=1800 audit(1778900470.853:37): pid=1683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7811" name="memory.events" dev="tmpfs" ino=13172 res=0 errno=0
[  593.086193][ T1683] bond87: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  593.090340][ T1683] bond87 (unregistering): Released all slaves
[  593.309806][ T1686] team0: left promiscuous mode
[  593.311495][ T1686] team0: left allmulticast mode
[  593.319023][ T1686] mac80211_hwsim hwsim90 syzkaller0: left promiscuous mode
[  593.321404][ T1686] mac80211_hwsim hwsim90 syzkaller0: left allmulticast mode
[  593.333417][ T1686] bond74: left promiscuous mode
[  593.335429][ T1686] bond75: left promiscuous mode
[  593.337063][ T1686] wireguard1: left promiscuous mode
[  593.339307][ T1686] bond79: left promiscuous mode
[  593.340904][ T1686] bridge106: left promiscuous mode
[  593.342885][ T1686] macsec1: left promiscuous mode
[  593.344606][ T1686] macvlan3: left promiscuous mode
[  593.346464][ T1686] macvlan3: left allmulticast mode
[  593.348263][ T1686] bond81: left promiscuous mode
[  593.362138][ T1694] netlink: 'syz.2.7814': attribute type 13 has an invalid length.
[  593.378115][ T1686] bond86: left promiscuous mode
[  593.379805][ T1686] bond86: left allmulticast mode
[  593.381773][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  593.473749][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  593.484128][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  593.494569][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  593.575701][ T1713] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  593.586483][ T1717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  593.642841][ T1728] ip6tnl14: entered allmulticast mode
[  593.760756][ T1738] sctp: [Deprecated]: syz.0.7829 (pid 1738) Use of int in max_burst socket option.
[  593.760756][ T1738] Use struct sctp_assoc_value instead
[  593.854594][ T1742] batadv_slave_0: Caught tx_queue_len zero misconfig
[  593.881348][ T1750] sctp: [Deprecated]: syz.0.7832 (pid 1750) Use of int in max_burst socket option.
[  593.881348][ T1750] Use struct sctp_assoc_value instead
[  593.984106][ T1761] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  594.036362][ T1772] netlink: 'syz.1.7840': attribute type 1 has an invalid length.
[  594.068757][ T1777] syzkaller0 speed is unknown, defaulting to 1000
[  594.082658][ T1779] 8021q: VLANs not supported on bond0
[  594.164548][ T1789] smc: adding net device hsr0 with user defined pnetid SYZ2
[  594.168053][ T1789] dummy0: entered promiscuous mode
[  594.170772][ T1789] batadv0: entered promiscuous mode
[  594.173521][ T1789] hsr0: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  594.178683][ T1789] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  594.364071][ T1809] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  594.370821][ T1809] netlink: 'syz.0.7849': attribute type 3 has an invalid length.
[  595.175056][ T1826] netlink: 'syz.0.7856': attribute type 1 has an invalid length.
[  595.179075][ T1826] workqueue: Failed to create a rescuer kthread for wq "bond95": -EINTR
[  595.236123][ T1834] lo: Caught tx_queue_len zero misconfig
[  595.283110][ T1841] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  595.285479][ T1841] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  595.507524][ T1865] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4
[  595.517696][ T1870] netlink: 'syz.1.7868': attribute type 1 has an invalid length.
[  595.679102][ T1877] bond87: option arp_all_targets: invalid value (129)
[  595.683871][ T1877] bond87 (unregistering): Released all slaves
[  595.850912][ T1891] netlink: 'syz.1.7874': attribute type 10 has an invalid length.
[  595.915854][ T1896] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  596.231756][ T1914] netlink: 'syz.1.7878': attribute type 1 has an invalid length.
[  596.468639][ T1929] Unsupported ieee802154 address type: 0
[  596.593218][ T1944] tc_dump_action: action bad kind
[  596.631636][ T1946] __nla_validate_parse: 62 callbacks suppressed
[  596.631654][ T1946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7888'.
[  596.641763][ T1946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7888'.
[  596.646236][ T1946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7888'.
[  596.651849][ T1946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7888'.
[  596.685856][ T1954] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7890'.
[  596.799588][ T1977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7897'.
[  596.832958][ T1979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7898'.
[  596.835568][ T1981] validate_nla: 2 callbacks suppressed
[  596.835581][ T1981] netlink: 'syz.0.7899': attribute type 1 has an invalid length.
[  596.867193][ T1981] 8021q: adding VLAN 0 to HW filter on device bond95
[  596.883303][ T1981] bond95: (slave veth57): Enslaving as an active interface with a down link
[  596.901729][ T1981] bond95: (slave veth59): Enslaving as an active interface with a down link
[  596.909985][ T1990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7900'.
[  596.914782][ T1981] bond95: entered allmulticast mode
[  596.947474][ T1986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7900'.
[  597.028663][ T2006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7902'.
[  597.088437][ T2012] netlink: 'syz.0.7907': attribute type 1 has an invalid length.
[  597.092996][ T2013] netlink: 'syz.0.7907': attribute type 1 has an invalid length.
[  597.098582][ T2011] pim6reg: left allmulticast mode
[  597.101833][ T2011] bridge0: left allmulticast mode
[  597.124550][ T2012] 8021q: adding VLAN 0 to HW filter on device bond96
[  597.147819][ T2012] vlan11: entered promiscuous mode
[  597.150062][ T2012] bond96: entered promiscuous mode
[  597.152548][ T2012] vlan11: entered allmulticast mode
[  597.154320][ T2012] bond96: entered allmulticast mode
[  597.315634][ T2040] netlink: 'syz.2.7916': attribute type 1 has an invalid length.
[  597.318526][ T2040] netlink: 'syz.2.7916': attribute type 1 has an invalid length.
[  597.376714][ T2046] netlink: 'syz.0.7917': attribute type 1 has an invalid length.
[  598.391416][ T2078] x_tables: duplicate underflow at hook 1
[  598.397302][ T2078] syzkaller1: entered promiscuous mode
[  598.399092][ T2078] syzkaller1: entered allmulticast mode
[  598.401709][ T2080] batadv_slave_1: entered allmulticast mode
[  598.430489][ T2084] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20001
[  598.618560][ T2111] netlink: 'syz.2.7938': attribute type 2 has an invalid length.
[  598.662158][ T2115] pim6reg1: entered promiscuous mode
[  598.664308][ T2115] pim6reg1: entered allmulticast mode
[  598.770361][ T2128] netlink: 'syz.2.7945': attribute type 29 has an invalid length.
[  598.971325][ T2148] netlink: 'syz.1.7949': attribute type 5 has an invalid length.
[  599.008794][ T2155] rdma_rxe: rxe_newlink: failed to add lo
[  599.086233][ T2165] dvmrp0: left allmulticast mode
[  599.088030][ T2165] bond43: left allmulticast mode
[  599.434277][ T2189] IPv6: sit7: Disabled Multicast RS
[  599.499020][ T2191] syzkaller0 speed is unknown, defaulting to 1000
[  599.900071][ T2215] x_tables: unsorted underflow at hook 3
[  599.929585][ T2213] syzkaller0 speed is unknown, defaulting to 1000
[  599.980278][ T2220] netlink: 'syz.0.7969': attribute type 1 has an invalid length.
[  599.990037][ T2220] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  600.061068][ T2228] macsec2: entered promiscuous mode
[  600.063550][ T2228] veth1_macvtap: entered promiscuous mode
[  600.077426][ T2228] veth1_macvtap: left promiscuous mode
[  600.567684][ T2267] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  600.781555][ T2281] openvswitch: netlink: Multiple metadata blocks provided
[  600.848894][ T2283] gtp5: entered promiscuous mode
[  600.850906][ T2283] gtp5: entered allmulticast mode
[  600.901028][ T2285] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  600.904357][ T2285] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  601.212249][ T2308] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[  601.915621][ T2356] __nla_validate_parse: 41 callbacks suppressed
[  601.915638][ T2356] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.8006'.
[  602.264741][ T2372] netlink: 1308 bytes leftover after parsing attributes in process `syz.2.8011'.
[  602.270366][ T2372] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.8011'.
[  602.279810][ T2373] netlink: 1308 bytes leftover after parsing attributes in process `syz.2.8011'.
[  602.371042][ T2378] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  602.620559][ T2393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8017'.
[  602.630627][ T2393] nbd0: detected capacity change from 63 to 0
[  602.633819][ T2394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8017'.
[  602.644124][ T2393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8017'.
[  602.667350][ T2393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8017'.
[  602.710500][ T2396] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  602.713461][ T2396] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  602.824496][ T2400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8019'.
[  603.193360][ T2415] vlan0: entered promiscuous mode
[  603.252966][ T2423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8026'.
[  615.133670][ T2446] __nla_validate_parse: 1 callbacks suppressed
[  615.133682][ T2446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8031'.
[  615.154508][ T2447] bond81: invalid ARP target 0.0.0.0 specified for addition
[  615.158022][ T2447] bond81: option arp_ip_target: invalid value (0)
[  615.161747][ T2447] bond81 (unregistering): Released all slaves
[  615.427022][ T2469] sctp: [Deprecated]: syz.2.8038 (pid 2469) Use of int in max_burst socket option.
[  615.427022][ T2469] Use struct sctp_assoc_value instead
[  615.437477][ T2469] validate_nla: 4 callbacks suppressed
[  615.437486][ T2469] netlink: 'syz.2.8038': attribute type 2 has an invalid length.
[  615.446218][ T2469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8038'.
[  615.515500][ T2481] sctp: [Deprecated]: syz.2.8041 (pid 2481) Use of struct sctp_assoc_value in delayed_ack socket option.
[  615.515500][ T2481] Use struct sctp_sack_info instead
[  615.523340][ T2481] veth1_to_team: Caught tx_queue_len zero misconfig
[  615.566677][ T2487] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8043'.
[  615.612703][ T2494] ip6erspan1: entered allmulticast mode
[  615.616101][ T2496] netlink: 'syz.1.8046': attribute type 4 has an invalid length.
[  615.618813][ T2496] netlink: 'syz.1.8046': attribute type 4 has an invalid length.
[  615.650001][ T2499] netlink: 'syz.2.8047': attribute type 7 has an invalid length.
[  615.885191][ T2518] mac80211_hwsim hwsim90 syzkaller0: entered promiscuous mode
[  615.887693][ T2518] mac80211_hwsim hwsim90 syzkaller0: entered allmulticast mode
[  615.910324][ T2518] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  615.945828][ T2523] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8053'.
[  615.991822][ T2528] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8055'.
[  615.994621][ T2527] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8055'.
[  616.002072][ T2527] syzkaller1: entered allmulticast mode
[  616.258845][ T2549] xt_hashlimit: size too large, truncated to 1048576
[  616.482458][ T2563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8063'.
[  616.512954][ T2563] tipc: Resetting bearer <ib:bond_slave_0>
[  616.516296][ T2563] tipc: Resetting bearer <ib:bond_slave_0>
[  616.525709][ T2563] veth0_macvtap: left promiscuous mode
[  616.528213][ T2563] veth0_macvtap: entered promiscuous mode
[  616.535815][ T2563] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  616.550993][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  616.554155][ T6487] syz1: Port: 1 Link ACTIVE
[  616.557296][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  616.561020][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  616.566565][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  616.633663][ T2566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8064'.
[  616.637967][ T2566] netlink: 7 bytes leftover after parsing attributes in process `syz.0.8064'.
[  616.820399][ T2578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8067'.
[  616.989115][ T2582] hm3): entered promiscuous mode
[  617.082291][ T2589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  617.171616][ T2597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  617.187875][ T2597] batadv0: entered promiscuous mode
[  617.190142][ T2597] batadv0: entered allmulticast mode
[  617.201079][ T2596] 5n: entered promiscuous mode
[  617.354229][ T2612] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  617.357656][ T2612] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  617.368301][ T2615] pim6reg99999991: entered allmulticast mode
[  617.448728][ T2629] netlink: 'syz.2.8083': attribute type 3 has an invalid length.
[  617.477216][ T2629] block nbd2: NBD_DISCONNECT
[  617.520226][ T2629] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  617.535609][ T1120] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  617.537934][ T1120] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  617.543272][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  617.551047][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  617.561475][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  617.569152][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  617.678155][ T2639] smc: net device lo applied user defined pnetid SYZ2
[  617.680774][ T2637] smc: net device lo erased user defined pnetid SYZ2
[  617.699463][ T2637] netlink: 'syz.2.8085': attribute type 1 has an invalid length.
[  617.736945][ T2637] bond81: entered promiscuous mode
[  617.739483][ T2637] 8021q: adding VLAN 0 to HW filter on device bond81
[  617.756005][ T2639] : default FDB implementation only supports local addresses
[  617.760160][ T2631] netlink: 'syz.0.8084': attribute type 6 has an invalid length.
[  617.776348][ T2637] 8021q: adding VLAN 0 to HW filter on device bond81
[  617.779816][ T2637] bond81: (slave vcan0): The slave device specified does not support setting the MAC address
[  617.784055][ T2637] bond81: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  617.791487][ T2637] bond81: (slave vcan0): making interface the new active one
[  617.794624][ T2637] vcan0: entered promiscuous mode
[  617.798826][ T2637] bond81: (slave vcan0): Enslaving as an active interface with an up link
[  617.931062][ T2646] netlink: 'syz.0.8087': attribute type 1 has an invalid length.
[  617.996631][ T2653] tunl0: Caught tx_queue_len zero misconfig
[  618.078254][ T2660] xt_CT: You must specify a L4 protocol and not use inversions on it
[  618.082131][ T2662] netlink: 'syz.1.8092': attribute type 8 has an invalid length.
[  618.083512][ T2660] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  618.115659][ T2660] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  618.130944][ T2669] netlink: 'syz.1.8093': attribute type 1 has an invalid length.
[  618.133758][ T2669] nbd: couldn't find device at index -427251215
[  618.912405][ T2689] smc: net device wlan0 applied user defined pnetid SYZ0
[  619.101005][ T2694] veth1_to_bridge: left allmulticast mode
[  619.103100][ T2694] veth1_to_bridge: left promiscuous mode
[  619.105666][ T2694] bridge0: port 1(veth1_to_bridge) entered disabled state
[  619.112675][ T2694] bond64: (slave vcan0): Releasing backup interface
[  619.118153][ T2694] bond66: (slave bridge99): Releasing active interface
[  619.123133][ T2694] bond68: (slave geneve7): Releasing active interface
[  619.128968][ T2694] bond71: (slave erspan2): Releasing active interface
[  619.134176][ T2694] bond75: (slave wireguard1): Releasing backup interface
[  619.140778][ T2694] bond79: (slave bridge106): Releasing backup interface
[  619.146759][ T2694] bond85: (slave bridge113): Releasing active interface
[  619.373901][ T2717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  619.768365][ T2724] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  619.771390][ T2724] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  620.234522][ T2750] __nla_validate_parse: 51 callbacks suppressed
[  620.234533][ T2750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8112'.
[  620.243756][ T2750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8112'.
[  620.413644][ T2754] PKCS7: Unknown OID: [4] (bad)
[  620.415975][ T2754] PKCS7: Only support pkcs7_signedData type
[  620.418202][ T2754] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8113'.
[  620.476478][ T2758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8116'.
[  620.480834][ T2758] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8116'.
[  620.571885][ T2766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8117'.
[  620.578800][ T2766] xt_l2tp: invalid flags combination: 8
[  620.583582][ T2768] validate_nla: 6 callbacks suppressed
[  620.583591][ T2768] netlink: 'syz.2.8118': attribute type 1 has an invalid length.
[  620.589358][ T2768] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8118'.
[  620.596458][ T2766] netlink: 'syz.1.8117': attribute type 1 has an invalid length.
[  620.815023][ T2784] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.8121'.
[  620.925176][ T2801] 8021q: VLANs not supported on xfrm0
[  620.984810][ T2805] netlink: 'syz.2.8125': attribute type 30 has an invalid length.
[  621.187329][ T2819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8129'.
[  621.190189][ T2819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8129'.
[  621.256210][ T2823] netlink: 'syz.0.8130': attribute type 4 has an invalid length.
[  621.258944][ T2822] netlink: 'syz.0.8130': attribute type 4 has an invalid length.
[  621.286589][ T2822] netlink: 'syz.0.8130': attribute type 4 has an invalid length.
[  621.338482][ T2833] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  621.444476][ T2839] ip6t_srh: unknown srh match flags  4000
[  621.502757][ T2844] netlink: 'syz.2.8136': attribute type 1 has an invalid length.
[  621.528398][ T2844] 8021q: adding VLAN 0 to HW filter on device bond83
[  621.713893][ T2860] netlink: Conntrack attr has 3 unknown bytes
[  621.739988][ T2862] netlink: 'syz.1.8140': attribute type 21 has an invalid length.
[  621.764305][ T2862] batadv0: entered promiscuous mode
[  621.767248][ T2862] batadv0: entered allmulticast mode
[  621.770882][ T2862] 8021q: adding VLAN 0 to HW filter on device batadv0
[  621.922966][ T2872] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  621.926414][ T2872] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  622.216762][ T2894] netlink: 'syz.1.8148': attribute type 7 has an invalid length.
[  622.219517][ T2894] netlink: 'syz.1.8148': attribute type 1 has an invalid length.
[  622.242503][ T2894] 8021q: adding VLAN 0 to HW filter on device bond87
[  622.277404][ T2894] tipc: Resetting bearer <eth:syzkaller0>
[  622.614032][ T2933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  622.650912][ T2933] syzkaller1: entered promiscuous mode
[  622.655395][ T2933] syzkaller1: entered allmulticast mode
[  623.198117][ T2970] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  623.201996][ T2970] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  623.265867][ T2972] tipc: Resetting bearer <eth:syzkaller0>
[  623.357079][ T2976] bridge53: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  623.764561][ T2993] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  623.799554][ T2997] xt_CT: You must specify a L4 protocol and not use inversions on it
[  623.800260][ T2997] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  623.815426][ T2997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  624.479022][ T3015] xt_hashlimit: size too large, truncated to 1048576
[  624.546704][ T3019] veth1: entered promiscuous mode
[  624.548594][ T3019] veth1: entered allmulticast mode
[  624.612557][ T3023] 8021q: VLANs not supported on bond0
[  624.737198][ T3030] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  625.200485][ T3045] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  625.391694][ T3045] bond79: left promiscuous mode
[  625.394178][ T3045] bond79: left allmulticast mode
[  625.409207][ T3045] gtp5: left promiscuous mode
[  625.412369][ T3045] gtp5: left allmulticast mode
[  625.417605][ T3045] vlan0: left promiscuous mode
[  625.420967][ T3045] ip6erspan1: left allmulticast mode
[  625.424248][ T3045] bond81: left promiscuous mode
[  625.426768][ T3045] vcan0: left promiscuous mode
[  625.445060][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  625.452651][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  625.457831][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  625.463282][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  625.553199][ T3051] __nla_validate_parse: 22 callbacks suppressed
[  625.553211][ T3051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8193'.
[  625.573622][ T3053] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  625.674141][ T3065] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.8197'.
[  625.763413][ T3067] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  625.767404][ T3067] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  625.770763][ T3067] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  625.895231][ T3076] syzkaller0 speed is unknown, defaulting to 1000
[  625.987210][ T3085] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8202'.
[  626.030294][ T3082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8203'.
[  626.114637][ T3089] validate_nla: 6 callbacks suppressed
[  626.114647][ T3089] netlink: 'syz.2.8204': attribute type 3 has an invalid length.
[  626.378170][ T3102] tipc: Resetting bearer <ib:bond_slave_0>
[  626.560004][ T6487] syz1: Port: 1 Link DOWN
[  626.579797][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  626.608433][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  626.613421][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  626.618239][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  626.751392][ T3129] xt_CT: You must specify a L4 protocol and not use inversions on it
[  626.752885][ T3130] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  626.792010][ T3134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8210'.
[  626.877894][ T3139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  626.897514][ T3144] netlink: 'syz.1.8215': attribute type 2 has an invalid length.
[  626.993043][ T3150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8218'.
[  627.056314][ T3156] netlink: 'syz.0.8220': attribute type 1 has an invalid length.
[  627.060888][ T3156] netlink: 'syz.0.8220': attribute type 1 has an invalid length.
[  627.064130][ T3154] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  627.068518][ T3154] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  627.102688][ T3158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8221'.
[  627.157828][ T3161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8222'.
[  627.173118][ T3161] netlink: 'syz.0.8222': attribute type 10 has an invalid length.
[  627.350842][ T3170] bond97: entered promiscuous mode
[  627.352789][ T3170] 8021q: adding VLAN 0 to HW filter on device bond97
[  627.781558][ T3191] tipc: Resetting bearer <ib:bond_slave_0>
[  627.790033][ T3191] veth0_macvtap: left promiscuous mode
[  627.792340][ T3191] veth0_macvtap: entered promiscuous mode
[  627.799583][ T3191] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  627.823324][ T5655] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  627.826857][ T5655] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  627.832723][ T6487] syz1: Port: 1 Link ACTIVE
[  627.836438][ T5655] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  627.843496][ T5655] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  627.860481][ T3197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8231'.
[  627.863254][ T3194] syzkaller0 speed is unknown, defaulting to 1000
[  627.864361][ T3196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8232'.
[  627.939354][ T3201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  627.945213][ T3203] netlink: 'syz.1.8233': attribute type 13 has an invalid length.
[  627.954716][ T3203] netlink: 'syz.1.8233': attribute type 27 has an invalid length.
[  628.021794][ T3213] netlink: 'syz.1.8233': attribute type 1 has an invalid length.
[  628.031526][ T3213] netlink: 'syz.1.8233': attribute type 1 has an invalid length.
[  628.211935][ T3223] netlink: Unknown conntrack attr (type=2304, max=9)
[  628.212280][ T3221] 8021q: VLANs not supported on ip6_vti0
[  628.287168][ T3235] block nbd2: Unsupported socket: should be TCP or UNIX.
[  628.294691][ T3234] block nbd2: Unsupported socket: should be TCP or UNIX.
[  628.515912][ T3259] netlink: 'syz.2.8249': attribute type 4 has an invalid length.
[  628.638655][ T3288] macvtap0: entered promiscuous mode
[  628.640577][ T3288] erspan0: entered promiscuous mode
[  628.642322][ T3288] macvtap0: entered allmulticast mode
[  628.644057][ T3288] erspan0: entered allmulticast mode
[  628.649396][ T3272] syzkaller0 speed is unknown, defaulting to 1000
[  628.768876][ T3296] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  628.771687][ T3296] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  628.977159][ T3307] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  628.981038][ T3304] syzkaller0 speed is unknown, defaulting to 1000
[  629.572184][ T3365] bond88: entered promiscuous mode
[  629.574390][ T3365] 8021q: adding VLAN 0 to HW filter on device bond88
[  630.470934][ T3396] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  630.670559][ T3410] __nla_validate_parse: 33 callbacks suppressed
[  630.670578][ T3410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8288'.
[  630.688285][ T3410] openvswitch: netlink: Flow actions attr not present in new flow.
[  630.797051][ T3415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8292'.
[  630.814184][ T3418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8291'.
[  631.060520][ T3439] netlink: 'syz.1.8298': attribute type 11 has an invalid length.
[  631.116639][ T3447] mac80211_hwsim hwsim90 syzkaller0: left allmulticast mode
[  631.266200][ T3461] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  631.273916][ T3459] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8303'.
[  631.288291][ T3459] netlink: 296 bytes leftover after parsing attributes in process `syz.1.8303'.
[  631.333854][ T3461] vlan0: entered promiscuous mode
[  631.408040][ T3474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8307'.
[  631.411610][ T3475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8307'.
[  631.449424][ T3478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8308'.
[  631.626764][ T3480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8309'.
[  631.660361][ T3480] bridge44: port 1(veth67) entered blocking state
[  631.662618][ T3480] bridge44: port 1(veth67) entered disabled state
[  631.665672][ T3480] veth67: entered allmulticast mode
[  631.668601][ T3480] veth67: entered promiscuous mode
[  631.686938][ T3480] bridge44: port 2(veth69) entered blocking state
[  631.689217][ T3480] bridge44: port 2(veth69) entered disabled state
[  631.691577][ T3480] veth69: entered allmulticast mode
[  631.694572][ T3480] veth69: entered promiscuous mode
[  631.992028][ T3490] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  632.253134][ T3499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8315'.
[  632.355964][ T3502] validate_nla: 6 callbacks suppressed
[  632.355975][ T3502] netlink: 'syz.1.8316': attribute type 3 has an invalid length.
[  633.010048][ T3535] bond0: Unable to set down delay as MII monitoring is disabled
[  633.150895][ T3545] netlink: 'syz.1.8329': attribute type 22 has an invalid length.
[  633.153593][ T3545] netlink: 'syz.1.8329': attribute type 1 has an invalid length.
[  633.244433][ T3560] netlink: 'syz.0.8334': attribute type 4 has an invalid length.
[  633.248337][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.265747][ T3560] netlink: 'syz.0.8334': attribute type 4 has an invalid length.
[  633.358755][ T3560] netlink: 'syz.0.8334': attribute type 4 has an invalid length.
[  633.414057][ T3563] bond84: option ad_select: invalid value (34)
[  633.417671][ T3563] bond84 (unregistering): Released all slaves
[  633.447952][ T3566] veth1_to_team: entered promiscuous mode
[  633.454549][ T3566] veth1_to_team: left promiscuous mode
[  633.551891][ T3575] netlink: 'syz.0.8337': attribute type 13 has an invalid length.
[  633.644228][ T3568] tipc: Resetting bearer <ib:bond_slave_0>
[  633.785852][ T3572] netlink: 'syz.2.8339': attribute type 12 has an invalid length.
[  633.791633][ T6491] syz1: Port: 1 Link DOWN
[  633.791992][ T5655] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  633.798076][ T5655] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  633.802813][ T5655] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  633.808395][ T5655] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  633.870359][ T3590] syzkaller0 speed is unknown, defaulting to 1000
[  634.047987][  T152] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  634.062871][ T3590] veth0_macvtap: left promiscuous mode
[  634.085455][ T3590] veth0_macvtap: entered promiscuous mode
[  634.091938][ T3590] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  634.119208][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  634.126888][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  634.134094][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  634.167101][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  634.443295][ T3620] veth0_macvtap: Caught tx_queue_len zero misconfig
[  634.575255][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.521276][ T3677] netlink: 'syz.0.8370': attribute type 29 has an invalid length.
[  635.534633][ T3679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  635.943181][ T3709] __nla_validate_parse: 13 callbacks suppressed
[  635.943200][ T3709] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8377'.
[  636.011222][ T3709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8377'.
[  636.016757][ T3709] veth1: Caught tx_queue_len zero misconfig
[  636.120750][ T3715] netlink: 'syz.2.8379': attribute type 1 has an invalid length.
[  636.152331][ T3715] bond84: (slave vxcan1): The slave device specified does not support setting the MAC address
[  636.157128][ T3715] bond84: (slave vxcan1): Error -95 calling set_mac_address
[  636.200254][ T3717] netlink: 200 bytes leftover after parsing attributes in process `syz.2.8379'.
[  636.301755][ T3721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8381'.
[  636.340518][ T3725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8383'.
[  636.426131][ T3723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8382'.
[  636.458033][ T3733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8385'.
[  636.479932][ T3737] bond0: Caught tx_queue_len zero misconfig
[  636.584124][ T3752] ip6gretap4: entered allmulticast mode
[  636.700951][ T3765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8391'.
[  636.841405][ T3787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8395'.
[  636.845768][ T3787] openvswitch: netlink: Message has 2 unknown bytes.
[  636.849130][ T3787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8395'.
[  637.213240][ T3813] mac80211_hwsim hwsim90 syzkaller0: Caught tx_queue_len zero misconfig
[  637.314453][ T3827] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  637.376919][ T3835] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  637.422848][ T3845] validate_nla: 4 callbacks suppressed
[  637.422860][ T3845] netlink: 'syz.2.8410': attribute type 13 has an invalid length.
[  637.457071][ T3845] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  637.574702][ T3855] mac80211_hwsim hwsim90 syzkaller0: entered allmulticast mode
[  637.753867][   T34] audit: type=1800 audit(1778900515.553:38): pid=3872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8418" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=14333 res=0 errno=0
[  637.971488][ T3886] syzkaller1: entered promiscuous mode
[  637.973795][ T3886] syzkaller1: entered allmulticast mode
[  638.209325][ T3894] netlink: 'syz.2.8426': attribute type 1 has an invalid length.
[  639.209579][ T3917] x_tables: duplicate underflow at hook 1
[  639.252242][ T3919] netlink: set zone limit has 4 unknown bytes
[  639.302194][ T3921] netlink: 'syz.2.8436': attribute type 20 has an invalid length.
[  639.332156][ T3923] netlink: 'syz.2.8437': attribute type 1 has an invalid length.
[  639.367577][ T3925] netlink: 'syz.2.8438': attribute type 27 has an invalid length.
[  639.707462][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.910531][ T3957] netlink: 'syz.0.8449': attribute type 1 has an invalid length.
[  639.935664][ T3957] 8021q: adding VLAN 0 to HW filter on device bond98
[  640.381174][ T3969] netlink: 'syz.2.8453': attribute type 1 has an invalid length.
[  640.383750][ T3969] netlink: 'syz.2.8453': attribute type 2 has an invalid length.
[  640.596259][ T3988] xt_hashlimit: size too large, truncated to 1048576
[  640.827726][ T3998] netlink: 'syz.0.8462': attribute type 13 has an invalid length.
[  640.880313][ T3998] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig
[  641.138778][ T4012] __nla_validate_parse: 22 callbacks suppressed
[  641.138790][ T4012] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8466'.
[  641.197746][ T4016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8467'.
[  641.324238][ T4028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8470'.
[  641.343276][ T4028] netlink: 332 bytes leftover after parsing attributes in process `syz.2.8470'.
[  641.347241][ T4028] netlink: 'syz.2.8470': attribute type 9 has an invalid length.
[  641.350380][ T4028] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8470'.
[  641.353872][ T4028] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8470'.
[  641.383787][ T4033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8473'.
[  641.419101][ T4037] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  641.422678][ T4037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8475'.
[  641.483661][ T4031] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8472'.
[  641.489974][ T4039] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  641.744312][ T4055] siw: device registration error -23
[  641.758131][ T4059] netlink: 26 bytes leftover after parsing attributes in process `syz.0.8482'.
[  641.800437][ T4057] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.862196][ T4057] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.903176][ T4067] tc_dump_action: action bad kind
[  641.930722][ T4057] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  641.981439][ T4057] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.061789][ T5655] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  642.070483][ T5655] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  642.082656][ T5655] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  642.093020][ T5655] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  642.198251][   T33] page_pool_release_retry() stalled pool shutdown: id 303, 1 inflight 60 sec
[  642.660702][ T4164] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  642.668263][ T4163] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  642.749021][ T4173] validate_nla: 3 callbacks suppressed
[  642.749038][ T4173] netlink: 'syz.1.8511': attribute type 4 has an invalid length.
[  642.953070][ T4195] ip6tnl0: Caught tx_queue_len zero misconfig
[  643.007313][ T4201] netlink: 'syz.2.8519': attribute type 1 has an invalid length.
[  643.086385][ T4213] netlink: 'syz.1.8522': attribute type 8 has an invalid length.
[  643.125746][ T4217] netlink: 'syz.2.8523': attribute type 1 has an invalid length.
[  643.147193][ T4217] 8021q: adding VLAN 0 to HW filter on device bond85
[  643.153885][ T4216] netlink: 'syz.2.8523': attribute type 10 has an invalid length.
[  643.160140][ T4221] xt_hashlimit: size too large, truncated to 1048576
[  643.170819][ T4216] netlink: 'syz.2.8523': attribute type 10 has an invalid length.
[  643.173529][ T4217] netlink: 'syz.2.8523': attribute type 10 has an invalid length.
[  643.294819][ T4235] netlink: 'syz.1.8526': attribute type 1 has an invalid length.
[  643.360915][ T4240] netlink: 'syz.1.8527': attribute type 13 has an invalid length.
[  643.408386][ T4240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  643.423735][ T4240] netlink: 'syz.1.8527': attribute type 12 has an invalid length.
[  643.518803][ T4253] bond90: entered promiscuous mode
[  643.521128][ T4253] 8021q: adding VLAN 0 to HW filter on device bond90
[  644.127215][ T4315] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig
[  644.240709][ T4322] netem: incorrect ge model size
[  644.770998][ T4335] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  644.799134][ T4341] mac80211_hwsim hwsim90 syzkaller0: Caught tx_queue_len zero misconfig
[  645.065938][ T4360] bond91: (slave vxcan5): The slave device specified does not support setting the MAC address
[  645.069548][ T4360] bond91: (slave vxcan5): Error -95 calling set_mac_address
[  645.153743][ T4360] bond91: (slave bridge116): Enslaving as an active interface with a down link
[  645.164466][ T4360] macvlan8: entered promiscuous mode
[  645.166932][ T4360] macvlan8: entered allmulticast mode
[  645.169705][ T4360] bond91: entered promiscuous mode
[  645.172320][ T4360] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  645.179626][ T4360] bond91: left promiscuous mode
[  645.611540][ T4415] bond99: entered promiscuous mode
[  645.613461][ T4415] 8021q: adding VLAN 0 to HW filter on device bond99
[  645.620524][ T4418] macvtap3: entered allmulticast mode
[  645.638468][ T4415] bond99: (slave bridge56): making interface the new active one
[  645.644038][ T4415] bridge56: entered promiscuous mode
[  645.648868][ T4415] bond99: (slave bridge56): Enslaving as an active interface with an up link
[  645.827818][ T4436] syzkaller0 speed is unknown, defaulting to 1000
[  645.915707][ T4443] bond86: entered promiscuous mode
[  645.917583][ T4443] 8021q: adding VLAN 0 to HW filter on device bond86
[  645.960287][ T4451] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  645.975176][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.208960][ T4470] __nla_validate_parse: 44 callbacks suppressed
[  646.208972][ T4470] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8584'.
[  646.251945][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.269881][ T4471] veth0_macvtap: left promiscuous mode
[  646.279339][ T4471] veth0_macvtap: entered promiscuous mode
[  646.291162][ T4471] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  646.472496][ T4488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8588'.
[  646.543330][ T4499] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  646.547065][ T4497] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  646.735159][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  646.842635][ T4529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8601'.
[  646.851016][ T4529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8601'.
[  646.859320][ T4529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8601'.
[  646.863025][ T4529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8601'.
[  646.870157][ T4529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8601'.
[  646.873825][ T4529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8601'.
[  646.941878][ T4533] bond100: entered promiscuous mode
[  646.944408][ T4533] 8021q: adding VLAN 0 to HW filter on device bond100
[  646.960651][ T4536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8604'.
[  646.989214][ T4538] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.8605'.
[  647.086420][ T4552] ip6t_srh: unknown srh match flags  4000
[  647.089222][ T4552] openvswitch: netlink: nsh attr 14384 is out of range max 3
[  647.092179][ T4552] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  647.183774][ T4560] bond101: entered promiscuous mode
[  647.189530][ T4560] 8021q: adding VLAN 0 to HW filter on device bond101
[  647.237494][ T4565] sit8: entered promiscuous mode
[  647.283857][ T4575] bond0: Caught tx_queue_len zero misconfig
[  647.438862][   T34] audit: type=1804 audit(1778900525.243:39): pid=4593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8622" name="/newroot/2841/memory.events" dev="tmpfs" ino=14472 res=1 errno=0
[  647.451786][   T34] audit: type=1800 audit(1778900525.243:40): pid=4593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8622" name="memory.events" dev="tmpfs" ino=14472 res=0 errno=0
[  647.466091][ T4595] openvswitch: netlink: Flow actions attr not present in new flow.
[  647.531750][ T4613] netem: change failed
[  647.931708][ T4657] validate_nla: 26 callbacks suppressed
[  647.931720][ T4657] netlink: 'syz.2.8642': attribute type 13 has an invalid length.
[  647.946030][ T4657] netlink: 'syz.2.8642': attribute type 17 has an invalid length.
[  647.949996][ T4659] netlink: 'syz.1.8643': attribute type 1 has an invalid length.
[  648.008355][ T4657] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  648.010600][ T4657] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  648.028821][ T4659] bond92: entered promiscuous mode
[  648.030676][ T4659] 8021q: adding VLAN 0 to HW filter on device bond92
[  648.045212][   T26] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  648.047520][   T26] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  648.051280][ T5655] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  648.055607][ T5655] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  648.070562][ T5655] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  648.077880][ T5655] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  648.152787][ T4668] syzkaller1: entered allmulticast mode
[  648.289167][ T4675] veth0_macvtap: entered allmulticast mode
[  648.651431][ T4689] netlink: 'syz.0.8653': attribute type 1 has an invalid length.
[  648.847483][ T4702] bond0: entered promiscuous mode
[  648.849301][ T4702] ip6gretap4: entered promiscuous mode
[  648.852052][ T4702] bond0: left promiscuous mode
[  648.853657][ T4702] ip6gretap4: left promiscuous mode
[  648.984267][ T4705] netlink: 'syz.2.8657': attribute type 1 has an invalid length.
[  649.006466][ T4705] bond87: entered promiscuous mode
[  649.008964][ T4705] 8021q: adding VLAN 0 to HW filter on device bond87
[  649.779836][ T4707] bond87: (slave bridge45): making interface the new active one
[  649.782880][ T4707] bridge45: entered promiscuous mode
[  649.787578][ T4707] bridge45: left promiscuous mode
[  649.947891][ T4722] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  649.968026][ T4722] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  649.970738][ T4722] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  649.976346][ T4722] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  650.314712][ T4751] bond93: entered promiscuous mode
[  650.317401][ T4751] 8021q: adding VLAN 0 to HW filter on device bond93
[  650.343275][ T4756] netlink: 'syz.2.8669': attribute type 1 has an invalid length.
[  650.394402][ T4756] bond88: entered promiscuous mode
[  650.398903][ T4756] bond88: entered allmulticast mode
[  650.401768][ T4756] 8021q: adding VLAN 0 to HW filter on device bond88
[  650.412538][ T4758] erspan3: entered allmulticast mode
[  650.419607][ T4758] bond88: (slave erspan3): making interface the new active one
[  650.422775][ T4758] erspan3: entered promiscuous mode
[  650.426071][ T4758] bond88: (slave erspan3): Enslaving as an active interface with an up link
[  650.471167][ T4762] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  650.482240][ T4762] vlan0: left promiscuous mode
[  650.485488][ T4762] macvtap0: left promiscuous mode
[  650.488907][ T4762] bond86: left promiscuous mode
[  650.491307][ T4762] sit8: left promiscuous mode
[  650.493665][ T4762] bond87: left promiscuous mode
[  650.501723][ T4762] bond88: left promiscuous mode
[  650.503620][ T4762] erspan3: left promiscuous mode
[  650.617361][ T4764] netlink: 'syz.0.8671': attribute type 3 has an invalid length.
[  650.624692][ T4764] netlink: 'syz.0.8671': attribute type 3 has an invalid length.
[  650.690200][ T4770] syzkaller0 speed is unknown, defaulting to 1000
[  650.742717][ T4771] sctp: [Deprecated]: syz.0.8673 (pid 4771) Use of struct sctp_assoc_value in delayed_ack socket option.
[  650.742717][ T4771] Use struct sctp_sack_info instead
[  650.897976][ T4781] netlink: 'syz.0.8675': attribute type 1 has an invalid length.
[  650.910935][ T4781] 8021q: adding VLAN 0 to HW filter on device bond102
[  650.919111][ T4781] netlink: 'syz.0.8675': attribute type 10 has an invalid length.
[  650.959116][ T4790] syzkaller0 speed is unknown, defaulting to 1000
[  651.010746][ T4795] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20001
[  651.238890][ T4827] __nla_validate_parse: 25 callbacks suppressed
[  651.238903][ T4827] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8690'.
[  651.263912][ T4825] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8689'.
[  651.331090][ T4833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8693'.
[  651.855880][   T26] net_ratelimit: 1 callbacks suppressed
[  651.855897][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  652.098745][ T4862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8703'.
[  652.191399][ T4864] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.8704'.
[  652.397375][ T4880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8708'.
[  652.680126][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8714'.
[  652.683823][ T4897] dvmrp0 (unregistering): left allmulticast mode
[  652.837706][ T4908] x_tables: ip_tables: icmp match: only valid for protocol 1
[  652.847902][ T4908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8718'.
[  652.850912][ T4908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8718'.
[  652.856669][ T4908] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  652.888085][ T4915] openvswitch: netlink: Unknown key attributes 2
[  652.912628][ T4920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8717'.
[  653.371312][ T4958] bond94: entered promiscuous mode
[  653.373289][ T4958] 8021q: adding VLAN 0 to HW filter on device bond94
[  653.386189][ T4958] 8021q: adding VLAN 0 to HW filter on device bond94
[  653.388681][ T4958] bond94: (slave ip6gre5): The slave device specified does not support setting the MAC address
[  653.392555][ T4958] bond94: (slave ip6gre5): Error -95 calling set_mac_address
[  653.548830][ T4978] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  653.747233][ T4989] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  653.769271][ T5003] validate_nla: 4 callbacks suppressed
[  653.769289][ T5003] netlink: 'syz.2.8727': attribute type 1 has an invalid length.
[  653.812442][ T5003] bond89: (slave bridge45): making interface the new active one
[  653.818438][ T5003] bond89: (slave bridge45): Enslaving as an active interface with an up link
[  653.833265][ T5003] macvlan4: entered promiscuous mode
[  653.836542][ T5003] macvlan4: entered allmulticast mode
[  653.839605][ T5003] bond89: entered promiscuous mode
[  653.841814][ T5003] bridge45: entered promiscuous mode
[  653.844862][ T5003] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  653.849217][ T5003] bond89: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  653.856438][ T5003] bond89: left promiscuous mode
[  653.858736][ T5003] bridge45: left promiscuous mode
[  654.091739][ T5046] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  654.113728][ T5051] tunl0: Caught tx_queue_len zero misconfig
[  654.116226][ T5051] sch_tbf: burst 0 is lower than device tunl0 mtu (1280) !
[  654.344058][ T5077] netlink: 'syz.2.8745': attribute type 3 has an invalid length.
[  654.372441][ T5077] block nbd2: NBD_DISCONNECT
[  654.387945][ T5077] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  654.433535][ T5082] veth71: entered promiscuous mode
[  654.779819][ T5106] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  654.809666][ T5104] tipc: Resetting bearer <ib:bond_slave_0>
[  654.822542][ T5104] veth0_macvtap: left promiscuous mode
[  654.824832][ T5104] veth0_macvtap: entered promiscuous mode
[  654.850821][ T5104] 8021q: adding VLAN 0 to HW filter on device bond1
[  654.853711][ T5104] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  654.873300][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  654.877965][ T5690] syz1: Port: 1 Link ACTIVE
[  654.880373][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  654.890117][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  654.894699][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  654.994063][ T5126] 8021q: VLANs not supported on ip6_vti0
[  655.002749][ T5132] xt_hashlimit: max too large, truncated to 1048576
[  655.029666][ T5132] bridge58: entered promiscuous mode
[  655.127208][ T5142] netlink: 'syz.0.8762': attribute type 1 has an invalid length.
[  655.157921][ T5146] netlink: 'syz.0.8764': attribute type 2 has an invalid length.
[  655.160694][ T5146] netlink: 'syz.0.8764': attribute type 1 has an invalid length.
[  655.192530][ T5150] syzkaller0 speed is unknown, defaulting to 1000
[  655.223488][ T5155] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  655.335677][ T5158] bridge59: port 1(veth65) entered blocking state
[  655.340735][ T5158] bridge59: port 1(veth65) entered disabled state
[  655.343148][ T5158] veth65: entered allmulticast mode
[  655.347109][ T5158] veth65: entered promiscuous mode
[  655.362524][ T5159] bridge59: port 2(veth67) entered blocking state
[  655.365052][ T5159] bridge59: port 2(veth67) entered disabled state
[  655.369826][ T5159] veth67: entered allmulticast mode
[  655.376412][ T5159] veth67: entered promiscuous mode
[  655.396178][ T5165] netlink: 'syz.2.8769': attribute type 13 has an invalid length.
[  655.398662][ T5165] netlink: 'syz.2.8769': attribute type 17 has an invalid length.
[  655.411675][ T5158] bridge59: port 3(veth69) entered blocking state
[  655.421322][ T5158] bridge59: port 3(veth69) entered disabled state
[  655.424642][ T5158] veth69: entered allmulticast mode
[  655.428241][ T5158] veth69: entered promiscuous mode
[  655.441032][ T5165] gretap0: refused to change device tx_queue_len
[  655.445547][ T5165] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  655.457874][ T5175] netlink: 'syz.1.8770': attribute type 10 has an invalid length.
[  655.538553][ T5178] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  655.573772][ T5187] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  655.666072][ T5191] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  655.707726][ T5199] tc_dump_action: action bad kind
[  655.784535][ T5210] openvswitch: netlink: Key type 29 is not supported
[  655.956898][ T5246] netlink: 'syz.0.8789': attribute type 1 has an invalid length.
[  656.140844][ T5268] xfrm0: entered allmulticast mode
[  656.237384][ T5274] syzkaller0 speed is unknown, defaulting to 1000
[  656.276042][ T5276] __nla_validate_parse: 28 callbacks suppressed
[  656.276060][ T5276] netlink: 192 bytes leftover after parsing attributes in process `syz.2.8798'.
[  656.296997][ T5276] netlink: 'syz.2.8798': attribute type 32 has an invalid length.
[  656.369167][ T5281] 8021q: adding VLAN 0 to HW filter on device bond104
[  656.466841][ T5291] bond105 (unregistering): Released all slaves
[  656.594779][ T5296] bond105: option tlb_dynamic_lb: invalid value (5)
[  656.602553][ T5296] bond105 (unregistering): Released all slaves
[  656.887976][ T5320] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  656.892910][ T5322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8810'.
[  656.897302][ T5320] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  656.946461][ T5322] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8810'.
[  657.014392][ T5326] syzkaller0 speed is unknown, defaulting to 1000
[  657.181192][ T5337] net_ratelimit: 2 callbacks suppressed
[  657.181206][ T5337] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  657.388634][ T5346] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8819'.
[  657.480793][ T5350] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  657.484517][ T5350] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  657.615958][T10118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  658.241267][ T5370] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8823'.
[  658.281250][ T5370] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8823'.
[  658.292976][ T5370] nbd: device at index 64 is going down
[  658.391242][ T5386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8828'.
[  658.588563][ T5404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8831'.
[  658.605650][ T5404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8831'.
[  658.609764][ T5404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8831'.
[  658.814848][ T5421] openvswitch: netlink: Missing key (keys=40, expected=80)
[  658.834921][ T5422] validate_nla: 5 callbacks suppressed
[  658.837229][ T5422] netlink: 'syz.1.8835': attribute type 1 has an invalid length.
[  658.927870][ T5429] syzkaller0 speed is unknown, defaulting to 1000
[  659.216586][ T5434] netlink: 'syz.0.8841': attribute type 13 has an invalid length.
[  659.218042][ T5435] netlink: 'syz.0.8841': attribute type 13 has an invalid length.
[  659.219868][ T5434] netlink: 'syz.0.8841': attribute type 17 has an invalid length.
[  659.223104][ T5435] netlink: 'syz.0.8841': attribute type 17 has an invalid length.
[  659.251649][ T5434] wg0: left allmulticast mode
[  659.256060][ T5434] bridge_slave_1: left allmulticast mode
[  659.261214][ T5434] xfrm0: left allmulticast mode
[  659.270239][ T5434] veth0_macvtap: left allmulticast mode
[  659.304301][ T5434] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  659.331761][ T5435] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  659.703148][ T5456] netlink: 'syz.1.8845': attribute type 1 has an invalid length.
[  659.729170][ T5456] bond95: (slave vxcan5): The slave device specified does not support setting the MAC address
[  659.735569][ T5456] bond95: (slave vxcan5): Error -95 calling set_mac_address
[  659.774497][ T5454] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  659.836060][ T5456] bond95: (slave bridge117): Enslaving as an active interface with a down link
[  659.849715][ T5454] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  659.852611][ T5454] CPU: 1 UID: 0 PID: 5454 Comm: syz.0.8846 Not tainted syzkaller #0 PREEMPT(full) 
[  659.852624][ T5454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  659.852631][ T5454] Call Trace:
[  659.852635][ T5454]  <TASK>
[  659.852639][ T5454]  dump_stack_lvl+0xe8/0x150
[  659.852655][ T5454]  sysfs_warn_dup+0x8e/0xa0
[  659.852667][ T5454]  sysfs_do_create_link_sd+0xc0/0x110
[  659.852678][ T5454]  device_add_class_symlinks+0x1cf/0x240
[  659.852690][ T5454]  device_add+0x475/0xbb0
[  659.852700][ T5454]  wiphy_register+0x1dc5/0x2dc0
[  659.852721][ T5454]  ? __pfx_wiphy_register+0x10/0x10
[  659.852733][ T5454]  ? __pfx_netdev_run_todo+0x10/0x10
[  659.852743][ T5454]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  659.852754][ T5454]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  659.852768][ T5454]  ieee80211_register_hw+0x3d82/0x4a70
[  659.852787][ T5454]  ? ieee80211_register_hw+0x1931/0x4a70
[  659.852809][ T5454]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  659.852822][ T5454]  ? __asan_memset+0x22/0x50
[  659.852830][ T5454]  ? __hrtimer_setup+0x1b7/0x260
[  659.852839][ T5454]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  659.852849][ T5454]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  659.852869][ T5454]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  659.852876][ T5454]  ? kstrndup+0xbf/0x160
[  659.852893][ T5454]  hwsim_new_radio_nl+0xf6a/0x1c00
[  659.852921][ T5454]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  659.852943][ T5454]  ? rcu_is_watching+0x15/0xb0
[  659.852958][ T5454]  ? trace_kmalloc+0x2a/0xf0
[  659.852975][ T5454]  ? __nla_parse+0x40/0x60
[  659.852997][ T5454]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  659.853009][ T5454]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  659.853029][ T5454]  genl_family_rcv_msg_doit+0x22a/0x330
[  659.853040][ T5454]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  659.853055][ T5454]  ? bpf_lsm_capable+0x9/0x20
[  659.853063][ T5454]  ? security_capable+0x7e/0x2c0
[  659.853077][ T5454]  genl_rcv_msg+0x61c/0x7a0
[  659.853089][ T5454]  ? __pfx_genl_rcv_msg+0x10/0x10
[  659.853096][ T5454]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  659.853112][ T5454]  netlink_rcv_skb+0x232/0x4b0
[  659.853123][ T5454]  ? __pfx_genl_rcv_msg+0x10/0x10
[  659.853132][ T5454]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  659.853149][ T5454]  ? down_read+0x270/0x2e0
[  659.853155][ T5454]  ? genl_rcv+0xd/0x40
[  659.853163][ T5454]  genl_rcv+0x28/0x40
[  659.853169][ T5454]  netlink_unicast+0x75c/0x8e0
[  659.853182][ T5454]  netlink_sendmsg+0x813/0xb40
[  659.853197][ T5454]  ? __pfx_netlink_sendmsg+0x10/0x10
[  659.853209][ T5454]  ? aa_sock_msg_perm+0xf1/0x1b0
[  659.853220][ T5454]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  659.853231][ T5454]  ____sys_sendmsg+0x972/0x9f0
[  659.853241][ T5454]  ? __might_fault+0xaf/0x130
[  659.853252][ T5454]  ? __pfx_____sys_sendmsg+0x10/0x10
[  659.853265][ T5454]  ? import_iovec+0x73/0xa0
[  659.853277][ T5454]  ___sys_sendmsg+0x2a5/0x360
[  659.853286][ T5454]  ? __lock_acquire+0x6b5/0x2cf0
[  659.853295][ T5454]  ? __pfx____sys_sendmsg+0x10/0x10
[  659.853307][ T5454]  ? futex_wait+0x2a2/0x390
[  659.853327][ T5454]  ? __fget_files+0x2a/0x420
[  659.853335][ T5454]  ? __fget_files+0x3a0/0x420
[  659.853347][ T5454]  __x64_sys_sendmsg+0x1bd/0x2a0
[  659.853358][ T5454]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  659.853375][ T5454]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.853383][ T5454]  do_syscall_64+0x15f/0xf80
[  659.853417][ T5454]  ? trace_irq_disable+0x3b/0x140
[  659.853431][ T5454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.853440][ T5454] RIP: 0033:0x7f089f79ce59
[  659.853450][ T5454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  659.853456][ T5454] RSP: 002b:00007f08a072a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  659.853465][ T5454] RAX: ffffffffffffffda RBX: 00007f089fa15fa0 RCX: 00007f089f79ce59
[  659.853472][ T5454] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  659.853477][ T5454] RBP: 00007f089f832d6f R08: 0000000000000000 R09: 0000000000000000
[  659.853481][ T5454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  659.853486][ T5454] R13: 00007f089fa16038 R14: 00007f089fa15fa0 R15: 00007fffa2f13058
[  659.853499][ T5454]  </TASK>
[  660.082909][ T5467] xt_CT: You must specify a L4 protocol and not use inversions on it
[  660.134730][ T5470] netlink: 'syz.2.8850': attribute type 1 has an invalid length.
[  660.307262][ T5480] vti2: entered promiscuous mode
[  660.309536][ T5480] vti2: entered allmulticast mode
[  660.355895][ T5484] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  660.359822][ T5484] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  660.528670][ T5501] bond0: Caught tx_queue_len zero misconfig
[  660.716215][ T5522] vlan0: entered promiscuous mode
[  660.801756][ T5533] team0: entered promiscuous mode
[  660.803940][ T5533] team0: entered allmulticast mode
[  660.806857][ T5533] 8021q: adding VLAN 0 to HW filter on device team0
[  660.832580][ T5533] team1: entered promiscuous mode
[  660.834830][ T5533] team1: entered allmulticast mode
[  660.837657][ T5533] 8021q: adding VLAN 0 to HW filter on device team1
[  661.137548][ T5537] netlink: 'syz.2.8868': attribute type 4 has an invalid length.
[  661.203113][ T5655] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.216020][ T5655] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.225446][ T5655] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.232293][ T5655] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.286662][ T5561] __nla_validate_parse: 45 callbacks suppressed
[  661.286682][ T5561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8873'.
[  661.376031][ T5563] netlink: 'syz.1.8874': attribute type 1 has an invalid length.
[  661.431813][ T5563] 8021q: adding VLAN 0 to HW filter on device bond96
[  662.056833][ T5582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8879'.
[  662.523273][ T5598] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8880'.
[  662.590942][ T5603] netlink: 'syz.1.8885': attribute type 2 has an invalid length.
[  662.606057][ T5603] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.8885'.
[  662.671117][ T5603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8885'.
[  662.832221][ T5630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8891'.
[  662.877332][ T5636] pim6reg1: entered promiscuous mode
[  662.879933][ T5636] pim6reg1: entered allmulticast mode
[  662.895688][ T5638] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.8894'.
[  662.898950][ T5638] openvswitch: netlink: Duplicate key (type 3).
[  662.994763][ T5646] sctp: [Deprecated]: syz.1.8897 (pid 5646) Use of int in max_burst socket option deprecated.
[  662.994763][ T5646] Use struct sctp_assoc_value instead
[  663.127509][ T5678] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  663.128617][ T5673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8903'.
[  663.130903][ T5678] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  663.244518][ T5698] Cannot find del_set index 4 as target
[  663.298186][ T5703] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  663.306126][ T5700] 8021q: adding VLAN 0 to HW filter on device bond97
[  663.350824][ T5700] bond97: (slave veth45): Enslaving as an active interface with a down link
[  663.357080][ T5700] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8906'.
[  663.363071][ T5700] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8906'.
[  663.426893][ T5707] bond93: entered allmulticast mode
[  663.443204][ T5707] dvmrp8: entered allmulticast mode
[  663.458209][ T5706] bond93: left allmulticast mode
[  663.585022][ T5722] openvswitch: netlink: Message has 4 unknown bytes.
[  663.750434][ T5737] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  663.841933][ T5739] batadv_slave_1 (unregistering): left allmulticast mode
[  664.249813][ T5770] A link change request failed with some changes committed already. Interface c@0 may have been left with an inconsistent configuration, please check.
[  664.320483][ T5780] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  664.333279][ T5784] validate_nla: 6 callbacks suppressed
[  664.333297][ T5784] netlink: 'syz.2.8930': attribute type 11 has an invalid length.
[  664.340209][ T5784] netlink: 'syz.2.8930': attribute type 11 has an invalid length.
[  664.396702][ T5780] veth71: entered allmulticast mode
[  664.413750][ T5780] bond105: (slave veth71): Enslaving as an active interface with an up link
[  664.439747][ T5780] bond105 (unregistering): (slave veth71): Releasing backup interface
[  664.446226][ T5780] bond105 (unregistering): Released all slaves
[  664.536434][ T5787] syzkaller0 speed is unknown, defaulting to 1000
[  664.722589][ T5803] netlink: 'syz.1.8935': attribute type 1 has an invalid length.
[  665.080971][ T5838] netlink: 'syz.2.8940': attribute type 21 has an invalid length.
[  665.125887][ T5840] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  665.128638][ T5840] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  665.189545][ T5844] netlink: 'syz.0.8944': attribute type 9 has an invalid length.
[  665.338098][ T5863] netlink: 'syz.2.8952': attribute type 1 has an invalid length.
[  665.434324][ T5872] netlink: 'syz.1.8956': attribute type 3 has an invalid length.
[  665.523316][ T5879] netlink: 'syz.2.8958': attribute type 1 has an invalid length.
[  665.589241][ T5879] 8021q: adding VLAN 0 to HW filter on device bond90
[  665.597239][ T5890] macvlan4: entered promiscuous mode
[  665.599101][ T5890] macvlan4: entered allmulticast mode
[  665.700579][ T5896] netlink: 'syz.1.8961': attribute type 4 has an invalid length.
[  665.751663][ T5902] netlink: 'syz.1.8961': attribute type 4 has an invalid length.
[  665.867061][ T5899] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  665.874004][ T5899] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  665.883228][ T5899] vlan0: left promiscuous mode
[  665.886813][ T5899] erspan0: left allmulticast mode
[  665.888904][ T5899] macvtap0: left allmulticast mode
[  665.950435][ T5899] bond88: left allmulticast mode
[  665.963639][ T5899] erspan3: left allmulticast mode
[  665.979407][ T5899] veth71: left promiscuous mode
[  666.001349][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  666.011484][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  666.026626][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  666.035485][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  666.385782][ T5971] __nla_validate_parse: 35 callbacks suppressed
[  666.385801][ T5971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8976'.
[  666.598252][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8986'.
[  666.650466][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8987'.
[  666.707447][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8989'.
[  666.760938][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8993'.
[  666.817474][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8993'.
[  666.826361][ T6031] netem: incorrect ge model size
[  666.830829][ T6031] netem: change failed
[  666.838899][ T6034] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8995'.
[  666.853039][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8993'.
[  666.897931][ T6038] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  666.903004][ T6038] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  666.903818][ T6040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8998'.
[  666.915235][ T6040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8998'.
[  667.104160][ T6065] pim6reg: left allmulticast mode
[  667.106067][ T6065] bridge0: left allmulticast mode
[  667.239969][ T6077] bond99: option primary_reselect: invalid value (133)
[  667.259961][ T6077] bond99 (unregistering): Released all slaves
[  667.470826][ T6100] bond105: entered promiscuous mode
[  667.472879][ T6100] 8021q: adding VLAN 0 to HW filter on device bond105
[  667.495773][ T6100] bond105: (slave bridge60): making interface the new active one
[  667.498264][ T6100] bridge60: entered promiscuous mode
[  667.500661][ T6100] bond105: (slave bridge60): Enslaving as an active interface with an up link
[  667.534617][ T6098] bond99: option miimon: invalid value (18446744073709551607)
[  667.545121][ T6098] bond99: option miimon: allowed values 0 - 2147483647
[  667.552038][ T6098] bond99 (unregistering): Released all slaves
[  667.607810][ T6109] bond106: option primary_reselect: invalid value (133)
[  667.617005][ T6109] bond106 (unregistering): Released all slaves
[  667.619143][   T56] block nbd2: Receive control failed (result -32)
[  667.924728][ T6147] dvmrp6: entered allmulticast mode
[  667.940834][ T6147] erspan0: left promiscuous mode
[  667.963420][ T6147] net_ratelimit: 1 callbacks suppressed
[  667.963433][ T6147] A link change request failed with some changes committed already. Interface c@0 may have been left with an inconsistent configuration, please check.
[  668.136503][ T6159] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  668.145083][ T6159] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  668.196104][ T6154] tipc: Resetting bearer <eth:syzkaller0>
[  668.264462][ T6164] syzkaller0 speed is unknown, defaulting to 1000
[  668.291866][ T6166] x_tables: duplicate underflow at hook 1
[  668.374403][ T6169] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  668.388040][ T6169] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  668.399907][ T6169] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  668.402844][ T6169] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  668.414609][ T6169] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  668.432830][ T6169] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  668.490047][ T6178] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  668.832368][ T6189] 8021q: adding VLAN 0 to HW filter on device bond100
[  668.841808][ T6189] bond99: (slave bond100): making interface the new active one
[  668.845949][ T6189] bond99: (slave bond100): Enslaving as an active interface with an up link
[  668.852743][ T6189] 8021q: adding VLAN 0 to HW filter on device bond99
[  669.031772][ T6193] macsec0: entered promiscuous mode
[  669.036741][ T6193] macsec0 (unregistering): left promiscuous mode
[  669.082101][ T6205] openvswitch: netlink: Multiple metadata blocks provided
[  669.220021][ T6219] bond92: entered promiscuous mode
[  669.222118][ T6219] 8021q: adding VLAN 0 to HW filter on device bond92
[  669.264173][ T6227] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  669.357013][ T6240] validate_nla: 7 callbacks suppressed
[  669.357031][ T6240] netlink: 'syz.1.9057': attribute type 8 has an invalid length.
[  669.379042][ T6240] veth1_to_team: entered promiscuous mode
[  669.383198][ T6240] gretap0: entered promiscuous mode
[  669.385557][ T6240] gretap0: left promiscuous mode
[  669.390071][ T6240] veth1_to_team: left promiscuous mode
[  669.474557][ T6244] netlink: 'syz.0.9058': attribute type 13 has an invalid length.
[  669.480949][ T6250] netlink: 'syz.0.9058': attribute type 13 has an invalid length.
[  669.489343][ T6244] netlink: 'syz.0.9058': attribute type 17 has an invalid length.
[  669.498154][ T6250] netlink: 'syz.0.9058': attribute type 17 has an invalid length.
[  669.598385][ T6243] tipc: Resetting bearer <ib:bond_slave_0>
[  669.938614][ T6250] veth0_macvtap: left promiscuous mode
[  669.940951][ T6250] veth0_macvtap: entered promiscuous mode
[  669.960527][ T6250] 8021q: adding VLAN 0 to HW filter on device bond1
[  669.963298][ T6250] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  669.977860][ T6244] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  670.003801][ T6263] veth0: entered promiscuous mode
[  670.183071][ T6274] bridge61: entered promiscuous mode
[  670.187338][ T6274] bridge61: entered allmulticast mode
[  670.192153][ T6274] team0: Port device bridge61 added
[  670.313370][ T6287] nbd: must specify at least one socket
[  670.545342][ T6260] veth0: left promiscuous mode
[  670.620953][ T6299] netlink: 'syz.0.9075': attribute type 1 has an invalid length.
[  670.637657][ T6299] 8021q: adding VLAN 0 to HW filter on device bond106
[  670.655112][ T6299] vlan12: entered allmulticast mode
[  670.656851][ T6299] bond106: entered allmulticast mode
[  670.886446][ T6311] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  670.929735][ T6326] netlink: 'syz.0.9084': attribute type 32 has an invalid length.
[  670.933946][ T6327] netlink: 'syz.0.9084': attribute type 32 has an invalid length.
[  671.849859][ T6387] __nla_validate_parse: 32 callbacks suppressed
[  671.849878][ T6387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9105'.
[  671.960380][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9108'.
[  671.971044][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9108'.
[  672.071208][ T6406] openvswitch: netlink: IPv4 tun info is not correct
[  672.074466][ T6406] netlink: 'syz.1.9110': attribute type 17 has an invalid length.
[  672.078175][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9110'.
[  672.081712][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9110'.
[  672.090213][ T6406] erspan0: entered promiscuous mode
[  672.092564][ T6406] erspan0: left promiscuous mode
[  672.167337][ T6415] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9114'.
[  672.173404][ T6415] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9114'.
[  672.182664][ T6415] netlink: 324 bytes leftover after parsing attributes in process `syz.0.9114'.
[  672.382006][ T6440] netlink: 762 bytes leftover after parsing attributes in process `syz.1.9121'.
[  672.589575][ T6444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9123'.
[  673.195415][ T6455] bridge0: port 4(erspan0) entered blocking state
[  673.198324][ T6455] bridge0: port 4(erspan0) entered disabled state
[  673.201159][ T6455] erspan0: entered allmulticast mode
[  673.206701][ T6455] erspan0: left allmulticast mode
[  673.581089][ T6494] syzkaller0 speed is unknown, defaulting to 1000
[  673.614222][ T6505] IPVS: rr: FWM 3 0x00000003 - no destination available
[  673.662336][ T6506] can: request_module (can-proto-4) failed.
[  673.796049][ T6510] bond93 (unregistering): Released all slaves
[  673.914350][ T6516] netlink: 'syz.2.9138': attribute type 29 has an invalid length.
[  674.139965][ T6525] syzkaller1: entered promiscuous mode
[  674.142147][ T6525] syzkaller1: entered allmulticast mode
[  674.500036][ T6545] 8021q: adding VLAN 0 to HW filter on device bond107
[  674.524777][ T6548] syzkaller1: tun_chr_ioctl cmd 1074025677
[  674.527063][ T6548] syzkaller1: linktype set to 270
[  674.529447][ T6550] bond107: option mode: unable to set because the bond device is up
[  674.533603][ T6549] syzkaller1: tun_chr_ioctl cmd 1074025677
[  674.535862][ T6549] syzkaller1: linktype set to 270
[  674.572562][ T6548] veth0_macvtap: left promiscuous mode
[  674.579742][ T6548] veth0_macvtap: entered promiscuous mode
[  674.602140][ T6548] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  674.630786][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  674.634643][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  674.639798][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  674.647181][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  674.678754][ T6558] bond108: Removing last ns target with arp_interval on
[  674.843834][ T6580] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  675.109793][ T6613] x_tables: duplicate underflow at hook 1
[  675.132284][ T6613] syzkaller1: entered promiscuous mode
[  675.135330][ T6613] syzkaller1: entered allmulticast mode
[  675.221190][ T6617] netlink: 'syz.2.9165': attribute type 1 has an invalid length.
[  675.267655][ T6617] netlink: 'syz.2.9165': attribute type 3 has an invalid length.
[  675.278446][ T6620] bond101: entered promiscuous mode
[  675.280708][ T6620] bond101: entered allmulticast mode
[  675.283346][ T6620] 8021q: adding VLAN 0 to HW filter on device bond101
[  675.368537][ T6637] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  675.417453][ T6640] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  675.877110][ T6672] bond0: Master is either lo or non-ether device
[  675.881875][ T6670] mac80211_hwsim hwsim90 syzkaller0: left promiscuous mode
[  675.884510][ T6670] mac80211_hwsim hwsim90 syzkaller0: left allmulticast mode
[  675.885172][ T6665] block nbd13: server does not support multiple connections per device.
[  675.897063][ T6665] block nbd13: shutting down sockets
[  675.991092][   T55] block nbd13: Receive control failed (result -1)
[  676.033869][ T6681] xt_hashlimit: size too large, truncated to 1048576
[  676.486113][ T6712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  676.490992][ T6712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  676.549714][ T6714] x_tables: unsorted entry at hook 3
[  676.621998][ T6719] mac80211_hwsim hwsim90 syzkaller0: entered promiscuous mode
[  676.627038][ T6719] mac80211_hwsim hwsim90 syzkaller0: entered allmulticast mode
[  676.630303][ T6718] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  676.675951][ T6726] netlink: 'syz.1.9193': attribute type 1 has an invalid length.
[  676.689148][ T6726] bond102: entered promiscuous mode
[  676.691513][ T6726] 8021q: adding VLAN 0 to HW filter on device bond102
[  676.946921][ T6732] __nla_validate_parse: 11 callbacks suppressed
[  676.946940][ T6732] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9194'.
[  676.972586][ T6739] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  677.029727][ T6741] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9197'.
[  677.056711][ T6744] netlink: 'syz.1.9198': attribute type 1 has an invalid length.
[  677.057414][ T6741] syzkaller0 speed is unknown, defaulting to 1000
[  677.113771][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9197'.
[  677.166010][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9197'.
[  677.340354][ T6761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9203'.
[  677.584365][ T6772] netlink: 'syz.0.9209': attribute type 62 has an invalid length.
[  677.824098][ T6811] netlink: 'syz.1.9218': attribute type 1 has an invalid length.
[  677.824756][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9216'.
[  678.103972][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9227'.
[  678.111473][ T6852] workqueue: Failed to create a rescuer kthread for wq "bond93": -EINTR
[  678.201831][ T6861] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9229'.
[  678.217138][ T6862] netlink: 'syz.2.9228': attribute type 1 has an invalid length.
[  678.222683][ T6862] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  678.268430][ T6867] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  678.313560][ T6870] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9231'.
[  678.792031][ T6878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9233'.
[  678.942303][ T6885] netlink: 'syz.1.9235': attribute type 1 has an invalid length.
[  679.408055][ T6895] bond109: entered allmulticast mode
[  679.418844][ T6895] macvlan0: entered promiscuous mode
[  679.421132][ T6895] macvlan0: entered allmulticast mode
[  679.424452][ T6895] bond109: (slave macvlan0): Opening slave failed
[  679.704796][ T6915] syzkaller0 speed is unknown, defaulting to 1000
[  679.991915][ T6942] bond0: entered allmulticast mode
[  680.237425][ T6960] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  680.239988][ T6960] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  680.243373][ T6960] bond92: left promiscuous mode
[  680.328886][ T7130] tipc: Subscription rejected, illegal request
[  680.377821][ T6972] netlink: 'syz.2.9260': attribute type 9 has an invalid length.
[  680.390420][ T6972] bond93: option tlb_dynamic_lb: invalid value (5)
[  680.393783][ T6972] bond93 (unregistering): Released all slaves
[  680.528833][ T6982] team0: left allmulticast mode
[  681.450074][ T7013] vlan13: entered promiscuous mode
[  681.631386][ T7018] netlink: 'syz.1.9273': attribute type 1 has an invalid length.
[  681.728343][ T7021] netlink: Conntrack attr has 4 unknown bytes
[  681.739109][ T7023] netlink: 'syz.2.9274': attribute type 1 has an invalid length.
[  681.742996][ T7023] netlink: 'syz.2.9274': attribute type 2 has an invalid length.
[  681.746583][ T7023] netlink: 'syz.2.9274': attribute type 1 has an invalid length.
[  681.750046][ T7023] netlink: 'syz.2.9274': attribute type 3 has an invalid length.
[  681.975128][ T7039] __nla_validate_parse: 20 callbacks suppressed
[  681.975162][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9280'.
[  682.029308][ T7047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9282'.
[  682.148443][ T7060] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  682.246257][ T7071] tunl0: entered allmulticast mode
[  682.580407][ T7109] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  682.660259][ T7124] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  682.664797][ T7124] xt_hashlimit: size too large, truncated to 1048576
[  682.798159][ T7139] veth0: entered promiscuous mode
[  682.801104][ T7138] veth0: left promiscuous mode
[  682.830483][ T7141] ipip4: entered promiscuous mode
[  682.961103][ T7144] bond110 (unregistering): Released all slaves
[  683.107900][ T7165] netlink: 'syz.0.9315': attribute type 1 has an invalid length.
[  683.110488][ T7165] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9315'.
[  683.118398][ T7165] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9315'.
[  683.122380][ T7165] netlink: 658 bytes leftover after parsing attributes in process `syz.0.9315'.
[  683.149154][ T7169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9316'.
[  683.174611][ T7171] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9317'.
[  683.280691][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9321'.
[  683.351667][ T7192] nft_compat: unsupported protocol 1
[  683.616663][ T7223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  683.692188][ T7236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9334'.
[  683.753949][ T7224] tipc: Resetting bearer <ib:bond_slave_0>
[  683.937805][ T7224] vlan0: left promiscuous mode
[  683.941563][ T7224] geneve1: left promiscuous mode
[  683.947040][ T7224] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  683.950169][ T7224] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  683.954506][ T7224] bond65: left promiscuous mode
[  683.957048][ T7224] bond65: left allmulticast mode
[  683.960073][ T7224] ip6gre6: left promiscuous mode
[  683.962221][ T7224] ip6gre6: left allmulticast mode
[  683.964476][ T7224] macvlan1: left promiscuous mode
[  683.967177][ T7224] macvlan1: left allmulticast mode
[  683.970251][ T7224] bond72: left promiscuous mode
[  683.972425][ T7224] bond73: left promiscuous mode
[  683.974434][ T7224] bond73: left allmulticast mode
[  683.976604][ T7224] bond74: left promiscuous mode
[  683.978865][ T7224] bond74: left allmulticast mode
[  683.981595][ T7224] ipip1: left promiscuous mode
[  683.984282][ T7224] bond78: left promiscuous mode
[  683.986857][ T7224] bridge44: left promiscuous mode
[  683.988689][ T7224] ipvlan3: left allmulticast mode
[  683.990249][ T7224] bond78: left allmulticast mode
[  683.991808][ T7224] bridge44: left allmulticast mode
[  683.993629][ T7224] bond82: left promiscuous mode
[  683.995331][ T7224] bridge45: left promiscuous mode
[  683.997374][ T7224] vlan8: left allmulticast mode
[  683.998910][ T7224] bond82: left allmulticast mode
[  684.000432][ T7224] bridge45: left allmulticast mode
[  684.002066][ T7224] ip6tnl12: left allmulticast mode
[  684.004287][ T7224] vlan9: left allmulticast mode
[  684.006104][ T7224] veth1_virt_wifi: left allmulticast mode
[  684.008363][ T7224] vlan10: left promiscuous mode
[  684.009921][ T7224] bond91: left promiscuous mode
[  684.011434][ T7224] batadv3: left promiscuous mode
[  684.013091][ T7224] vlan10: left allmulticast mode
[  684.014623][ T7224] bond91: left allmulticast mode
[  684.016318][ T7224] batadv3: left allmulticast mode
[  684.018295][ T7224] ip6tnl13: left promiscuous mode
[  684.020051][ T7224] bond92: left promiscuous mode
[  684.021584][ T7224] bridge50: left promiscuous mode
[  684.023312][ T7224] bond93: left promiscuous mode
[  684.024860][ T7224] bond93: left allmulticast mode
[  684.027134][ T7224] ip6tnl14: left allmulticast mode
[  684.029301][ T7224] bond95: left allmulticast mode
[  684.031547][ T7224] vlan11: left promiscuous mode
[  684.033402][ T7224] bond96: left promiscuous mode
[  684.035518][ T7224] vlan11: left allmulticast mode
[  684.037772][ T7224] bond96: left allmulticast mode
[  684.039919][ T7224] veth1: left promiscuous mode
[  684.041757][ T7224] veth1: left allmulticast mode
[  684.044630][ T7224] bond97: left promiscuous mode
[  684.046717][ T7224] ip6gretap4: left allmulticast mode
[  684.048824][ T7224] bond99: left promiscuous mode
[  684.050401][ T7224] bridge56: left promiscuous mode
[  684.052052][ T7224] macvtap3: left allmulticast mode
[  684.053699][ T7224] bond100: left promiscuous mode
[  684.055467][ T7224] bond101: left promiscuous mode
[  684.057662][ T7224] bridge58: left promiscuous mode
[  684.059749][ T7224] vti2: left promiscuous mode
[  684.061221][ T7224] vti2: left allmulticast mode
[  684.062761][ T7224] team0: left promiscuous mode
[  684.064419][ T7224] team1: left promiscuous mode
[  684.066418][ T7224] team1: left allmulticast mode
[  684.068737][ T7224] veth71: left allmulticast mode
[  684.070793][ T7224] bond105: left promiscuous mode
[  684.072496][ T7224] bridge60: left promiscuous mode
[  684.074733][ T7224] bridge61: left promiscuous mode
[  684.076547][ T7224] bridge61: left allmulticast mode
[  684.083986][ T7224] vlan12: left allmulticast mode
[  684.086101][ T7224] bond106: left allmulticast mode
[  684.092219][ T7224] bond109: left allmulticast mode
[  684.123323][ T6491] syz1: Port: 1 Link DOWN
[  684.131922][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  684.136433][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  684.185168][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  684.191271][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  684.223035][ T7247] 
[  684.223866][ T7247] ======================================================
[  684.226132][ T7247] WARNING: possible circular locking dependency detected
[  684.228360][ T7247] syzkaller #0 Not tainted
[  684.230081][ T7247] ------------------------------------------------------
[  684.232436][ T7247] syz.2.9335/7247 is trying to acquire lock:
[  684.234432][ T7247] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  684.237369][ T7247] 
[  684.237369][ T7247] but task is already holding lock:
[  684.239801][ T7247] ffff8881bb202ae0 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800
[  684.243240][ T7247] 
[  684.243240][ T7247] which lock already depends on the new lock.
[  684.243240][ T7247] 
[  684.246529][ T7247] 
[  684.246529][ T7247] the existing dependency chain (in reverse order) is:
[  684.249283][ T7247] 
[  684.249283][ T7247] -> #7 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}:
[  684.251747][ T7247]        lock_sock_nested+0x41/0x100
[  684.253404][ T7247]        mptcp_subflow_create_socket+0x142/0x800
[  684.255733][ T7247]        __mptcp_nmpc_sk+0x155/0x790
[  684.257733][ T7247]        mptcp_listen+0x112/0x610
[  684.259732][ T7247]        __x64_sys_listen+0x1c7/0x240
[  684.261923][ T7247]        do_syscall_64+0x15f/0xf80
[  684.264010][ T7247]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.266661][ T7247] 
[  684.266661][ T7247] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  684.269352][ T7247]        lock_sock_nested+0x41/0x100
[  684.270981][ T7247]        inet_shutdown+0x6a/0x390
[  684.272548][ T7247]        nbd_mark_nsock_dead+0x2e9/0x560
[  684.274372][ T7247]        recv_work+0x1c2e/0x1d40
[  684.276020][ T7247]        process_scheduled_works+0xb5d/0x1860
[  684.277912][ T7247]        worker_thread+0xa53/0xfc0
[  684.279503][ T7247]        kthread+0x389/0x470
[  684.280933][ T7247]        ret_from_fork+0x514/0xb70
[  684.282513][ T7247]        ret_from_fork_asm+0x1a/0x30
[  684.284243][ T7247] 
[  684.284243][ T7247] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  684.286608][ T7247]        __mutex_lock+0x1a3/0x1550
[  684.288201][ T7247]        nbd_queue_rq+0x37b/0x1100
[  684.289752][ T7247]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  684.291622][ T7247]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  684.293712][ T7247]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  684.295809][ T7247]        blk_mq_run_hw_queue+0x348/0x4f0
[  684.297588][ T7247]        blk_mq_dispatch_list+0xd16/0xe10
[  684.299360][ T7247]        blk_mq_flush_plug_list+0x48d/0x570
[  684.301197][ T7247]        __blk_flush_plug+0x3ed/0x4d0
[  684.302930][ T7247]        __submit_bio+0x28d/0x580
[  684.304560][ T7247]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  684.306453][ T7247]        block_read_full_folio+0x599/0x830
[  684.308239][ T7247]        filemap_read_folio+0x137/0x3b0
[  684.309936][ T7247]        do_read_cache_folio+0x358/0x590
[  684.311825][ T7247]        read_part_sector+0xb6/0x2b0
[  684.313556][ T7247]        adfspart_check_ICS+0xb1/0x960
[  684.315396][ T7247]        bdev_disk_changed+0x817/0x1770
[  684.317176][ T7247]        blkdev_get_whole+0x380/0x510
[  684.318915][ T7247]        bdev_open+0x31e/0xd30
[  684.320534][ T7247]        blkdev_open+0x470/0x610
[  684.322141][ T7247]        do_dentry_open+0x785/0x14e0
[  684.323840][ T7247]        vfs_open+0x3b/0x340
[  684.325331][ T7247]        path_openat+0x2e08/0x3860
[  684.326929][ T7247]        do_file_open+0x23e/0x4a0
[  684.328613][ T7247]        do_sys_openat2+0x113/0x200
[  684.330462][ T7247]        __x64_sys_openat+0x138/0x170
[  684.332257][ T7247]        do_syscall_64+0x15f/0xf80
[  684.333948][ T7247]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.336572][ T7247] 
[  684.336572][ T7247] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  684.339559][ T7247]        __mutex_lock+0x1a3/0x1550
[  684.341655][ T7247]        nbd_queue_rq+0xc6/0x1100
[  684.343619][ T7247]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  684.345543][ T7247]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  684.347671][ T7247]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  684.349669][ T7247]        blk_mq_run_hw_queue+0x348/0x4f0
[  684.351388][ T7247]        blk_mq_dispatch_list+0xd16/0xe10
[  684.353157][ T7247]        blk_mq_flush_plug_list+0x48d/0x570
[  684.355028][ T7247]        __blk_flush_plug+0x3ed/0x4d0
[  684.356693][ T7247]        __submit_bio+0x28d/0x580
[  684.358257][ T7247]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  684.360147][ T7247]        block_read_full_folio+0x599/0x830
[  684.361927][ T7247]        filemap_read_folio+0x137/0x3b0
[  684.363642][ T7247]        do_read_cache_folio+0x358/0x590
[  684.365472][ T7247]        read_part_sector+0xb6/0x2b0
[  684.367093][ T7247]        adfspart_check_ICS+0xb1/0x960
[  684.368789][ T7247]        bdev_disk_changed+0x817/0x1770
[  684.370496][ T7247]        blkdev_get_whole+0x380/0x510
[  684.372145][ T7247]        bdev_open+0x31e/0xd30
[  684.373623][ T7247]        blkdev_open+0x470/0x610
[  684.375432][ T7247]        do_dentry_open+0x785/0x14e0
[  684.377134][ T7247]        vfs_open+0x3b/0x340
[  684.378992][ T7247]        path_openat+0x2e08/0x3860
[  684.381066][ T7247]        do_file_open+0x23e/0x4a0
[  684.383076][ T7247]        do_sys_openat2+0x113/0x200
[  684.385024][ T7247]        __x64_sys_openat+0x138/0x170
[  684.387196][ T7247]        do_syscall_64+0x15f/0xf80
[  684.389309][ T7247]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.393089][ T7247] 
[  684.393089][ T7247] -> #3 (set->srcu){.+.+}-{0:0}:
[  684.396001][ T7247]        __synchronize_srcu+0xca/0x300
[  684.398248][ T7247]        elevator_switch+0x1e8/0x7a0
[  684.400413][ T7247]        elevator_change+0x2cc/0x450
[  684.402562][ T7247]        elevator_set_default+0x36c/0x430
[  684.404895][ T7247]        blk_register_queue+0x3e9/0x4e0
[  684.407071][ T7247]        __add_disk+0x677/0xd50
[  684.409086][ T7247]        add_disk_fwnode+0xfb/0x480
[  684.411184][ T7247]        nbd_dev_add+0x72c/0xb50
[  684.413185][ T7247]        nbd_init+0x168/0x1f0
[  684.415020][ T7247]        do_one_initcall+0x250/0x870
[  684.417165][ T7247]        do_initcall_level+0x104/0x190
[  684.419355][ T7247]        do_initcalls+0x59/0xa0
[  684.421342][ T7247]        kernel_init_freeable+0x2a6/0x3e0
[  684.423617][ T7247]        kernel_init+0x1d/0x1d0
[  684.425590][ T7247]        ret_from_fork+0x514/0xb70
[  684.427594][ T7247]        ret_from_fork_asm+0x1a/0x30
[  684.429696][ T7247] 
[  684.429696][ T7247] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  684.432775][ T7247]        __mutex_lock+0x1a3/0x1550
[  684.434773][ T7247]        elevator_change+0x1b3/0x450
[  684.436841][ T7247]        elevator_set_none+0xb5/0x140
[  684.439053][ T7247]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  684.441631][ T7247]        nbd_start_device+0x17f/0xb10
[  684.443785][ T7247]        nbd_genl_connect+0x165b/0x1cf0
[  684.445984][ T7247]        genl_family_rcv_msg_doit+0x22a/0x330
[  684.448424][ T7247]        genl_rcv_msg+0x61c/0x7a0
[  684.450435][ T7247]        netlink_rcv_skb+0x232/0x4b0
[  684.452587][ T7247]        genl_rcv+0x28/0x40
[  684.454424][ T7247]        netlink_unicast+0x75c/0x8e0
[  684.456458][ T7247]        netlink_sendmsg+0x813/0xb40
[  684.458468][ T7247]        ____sys_sendmsg+0x972/0x9f0
[  684.460594][ T7247]        ___sys_sendmsg+0x2a5/0x360
[  684.462729][ T7247]        __x64_sys_sendmsg+0x1bd/0x2a0
[  684.464845][ T7247]        do_syscall_64+0x15f/0xf80
[  684.466855][ T7247]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.469324][ T7247] 
[  684.469324][ T7247] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  684.472821][ T7247]        blk_alloc_queue+0x546/0x680
[  684.474845][ T7247]        __blk_mq_alloc_disk+0x197/0x390
[  684.477088][ T7247]        nbd_dev_add+0x499/0xb50
[  684.479103][ T7247]        nbd_init+0x168/0x1f0
[  684.480903][ T7247]        do_one_initcall+0x250/0x870
[  684.483043][ T7247]        do_initcall_level+0x104/0x190
[  684.485273][ T7247]        do_initcalls+0x59/0xa0
[  684.487255][ T7247]        kernel_init_freeable+0x2a6/0x3e0
[  684.489529][ T7247]        kernel_init+0x1d/0x1d0
[  684.491526][ T7247]        ret_from_fork+0x514/0xb70
[  684.493552][ T7247]        ret_from_fork_asm+0x1a/0x30
[  684.495653][ T7247] 
[  684.495653][ T7247] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  684.498553][ T7247]        __lock_acquire+0x15a5/0x2cf0
[  684.500717][ T7247]        lock_acquire+0x106/0x350
[  684.502673][ T7247]        fs_reclaim_acquire+0x71/0x100
[  684.504850][ T7247]        __kmalloc_cache_noprof+0x40/0x660
[  684.507244][ T7247]        ref_tracker_alloc+0x15a/0x4c0
[  684.509344][ T7247]        get_net_track+0x16e/0x230
[  684.511400][ T7247]        sk_net_refcnt_upgrade+0xb2/0x130
[  684.513628][ T7247]        mptcp_subflow_create_socket+0x32b/0x800
[  684.516190][ T7247]        __mptcp_nmpc_sk+0x155/0x790
[  684.518322][ T7247]        mptcp_pm_nl_add_addr_doit+0xe25/0x1420
[  684.520860][ T7247]        genl_family_rcv_msg_doit+0x22a/0x330
[  684.523363][ T7247]        genl_rcv_msg+0x61c/0x7a0
[  684.525444][ T7247]        netlink_rcv_skb+0x232/0x4b0
[  684.527571][ T7247]        genl_rcv+0x28/0x40
[  684.529423][ T7247]        netlink_unicast+0x75c/0x8e0
[  684.531587][ T7247]        netlink_sendmsg+0x813/0xb40
[  684.533743][ T7247]        ____sys_sendmsg+0x972/0x9f0
[  684.535891][ T7247]        ___sys_sendmsg+0x2a5/0x360
[  684.537974][ T7247]        __x64_sys_sendmsg+0x1bd/0x2a0
[  684.540216][ T7247]        do_syscall_64+0x15f/0xf80
[  684.542289][ T7247]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.544888][ T7247] 
[  684.544888][ T7247] other info that might help us debug this:
[  684.544888][ T7247] 
[  684.548804][ T7247] Chain exists of:
[  684.548804][ T7247]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6/1
[  684.548804][ T7247] 
[  684.553985][ T7247]  Possible unsafe locking scenario:
[  684.553985][ T7247] 
[  684.556925][ T7247]        CPU0                    CPU1
[  684.559080][ T7247]        ----                    ----
[  684.561251][ T7247]   lock(k-sk_lock-AF_INET6/1);
[  684.563223][ T7247]                                lock(sk_lock-AF_INET6);
[  684.566011][ T7247]                                lock(k-sk_lock-AF_INET6/1);
[  684.568945][ T7247]   lock(fs_reclaim);
[  684.570630][ T7247] 
[  684.570630][ T7247]  *** DEADLOCK ***
[  684.570630][ T7247] 
[  684.573906][ T7247] 4 locks held by syz.2.9335/7247:
[  684.576018][ T7247]  #0: ffffffff8fe3fb28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  684.579346][ T7247]  #1: ffffffff8fe3f960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  684.582928][ T7247]  #2: ffff888173e5ea60 (msk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_pm_nl_add_addr_doit+0xdc7/0x1420
[  684.587225][ T7247]  #3: ffff8881bb202ae0 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_subflow_create_socket+0x142/0x800
[  684.591677][ T7247] 
[  684.591677][ T7247] stack backtrace:
[  684.594071][ T7247] CPU: 1 UID: 0 PID: 7247 Comm: syz.2.9335 Not tainted syzkaller #0 PREEMPT(full) 
[  684.594087][ T7247] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  684.594095][ T7247] Call Trace:
[  684.594102][ T7247]  <TASK>
[  684.594136][ T7247]  dump_stack_lvl+0xe8/0x150
[  684.594154][ T7247]  print_circular_bug+0x2e1/0x300
[  684.594173][ T7247]  check_noncircular+0x12e/0x150
[  684.594190][ T7247]  __lock_acquire+0x15a5/0x2cf0
[  684.594203][ T7247]  ? genl_rcv_msg+0x61c/0x7a0
[  684.594213][ T7247]  ? netlink_rcv_skb+0x232/0x4b0
[  684.594228][ T7247]  ? genl_rcv+0x28/0x40
[  684.594237][ T7247]  ? ____sys_sendmsg+0x972/0x9f0
[  684.594252][ T7247]  ? ___sys_sendmsg+0x2a5/0x360
[  684.594266][ T7247]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[  684.594280][ T7247]  ? do_syscall_64+0x15f/0xf80
[  684.594294][ T7247]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.594307][ T7247]  ? __kmalloc_cache_noprof+0x40/0x660
[  684.594322][ T7247]  lock_acquire+0x106/0x350
[  684.594332][ T7247]  ? __kmalloc_cache_noprof+0x40/0x660
[  684.594351][ T7247]  fs_reclaim_acquire+0x71/0x100
[  684.594364][ T7247]  ? __kmalloc_cache_noprof+0x40/0x660
[  684.594377][ T7247]  __kmalloc_cache_noprof+0x40/0x660
[  684.594390][ T7247]  ? lockdep_hardirqs_on+0x7a/0x110
[  684.594403][ T7247]  ? ref_tracker_alloc+0x15a/0x4c0
[  684.594417][ T7247]  ref_tracker_alloc+0x15a/0x4c0
[  684.594430][ T7247]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  684.594444][ T7247]  ? ref_tracker_free+0x522/0x840
[  684.594456][ T7247]  ? __pfx_ref_tracker_free+0x10/0x10
[  684.594467][ T7247]  ? sk_net_refcnt_upgrade+0x8c/0x130
[  684.594481][ T7247]  ? mptcp_subflow_create_socket+0x32b/0x800
[  684.594491][ T7247]  ? __mptcp_nmpc_sk+0x155/0x790
[  684.594500][ T7247]  ? mptcp_pm_nl_add_addr_doit+0xe25/0x1420
[  684.594515][ T7247]  ? genl_family_rcv_msg_doit+0x22a/0x330
[  684.594527][ T7247]  ? net_passive_dec+0x177/0x250
[  684.594540][ T7247]  ? __pfx_net_passive_dec+0x10/0x10
[  684.594554][ T7247]  get_net_track+0x16e/0x230
[  684.594570][ T7247]  sk_net_refcnt_upgrade+0xb2/0x130
[  684.594587][ T7247]  mptcp_subflow_create_socket+0x32b/0x800
[  684.594609][ T7247]  ? __pfx_mptcp_subflow_create_socket+0x10/0x10
[  684.594624][ T7247]  ? do_raw_spin_lock+0x12b/0x2f0
[  684.594640][ T7247]  ? lock_sock_nested+0x6a/0x100
[  684.594651][ T7247]  __mptcp_nmpc_sk+0x155/0x790
[  684.594661][ T7247]  ? __pfx___mptcp_nmpc_sk+0x10/0x10
[  684.594671][ T7247]  ? mptcp_pm_nl_add_addr_doit+0xdc7/0x1420
[  684.594683][ T7247]  ? __local_bh_enable_ip+0xd0/0x130
[  684.594695][ T7247]  mptcp_pm_nl_add_addr_doit+0xe25/0x1420
[  684.594709][ T7247]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  684.594731][ T7247]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  684.594743][ T7247]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  684.594754][ T7247]  genl_family_rcv_msg_doit+0x22a/0x330
[  684.594764][ T7247]  ? __asan_memcpy+0x40/0x70
[  684.594780][ T7247]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  684.594794][ T7247]  ? bpf_lsm_capable+0x9/0x20
[  684.594805][ T7247]  ? security_capable+0x7e/0x2c0
[  684.594820][ T7247]  genl_rcv_msg+0x61c/0x7a0
[  684.594834][ T7247]  ? __pfx_genl_rcv_msg+0x10/0x10
[  684.594843][ T7247]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  684.594857][ T7247]  netlink_rcv_skb+0x232/0x4b0
[  684.594872][ T7247]  ? __pfx_genl_rcv_msg+0x10/0x10
[  684.594883][ T7247]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  684.594897][ T7247]  ? down_read+0x270/0x2e0
[  684.594908][ T7247]  ? genl_rcv+0xd/0x40
[  684.594918][ T7247]  genl_rcv+0x28/0x40
[  684.594928][ T7247]  netlink_unicast+0x75c/0x8e0
[  684.594946][ T7247]  netlink_sendmsg+0x813/0xb40
[  684.594964][ T7247]  ? __pfx_netlink_sendmsg+0x10/0x10
[  684.594980][ T7247]  ? aa_sock_msg_perm+0xf1/0x1b0
[  684.594995][ T7247]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  684.595010][ T7247]  ____sys_sendmsg+0x972/0x9f0
[  684.595026][ T7247]  ? __might_fault+0xaf/0x130
[  684.595042][ T7247]  ? __pfx_____sys_sendmsg+0x10/0x10
[  684.595059][ T7247]  ? import_iovec+0x73/0xa0
[  684.595076][ T7247]  ___sys_sendmsg+0x2a5/0x360
[  684.595088][ T7247]  ? __lock_acquire+0x6b5/0x2cf0
[  684.595100][ T7247]  ? __pfx____sys_sendmsg+0x10/0x10
[  684.595147][ T7247]  ? futex_wait+0x2a2/0x390
[  684.595172][ T7247]  ? __fget_files+0x2a/0x420
[  684.595184][ T7247]  ? __fget_files+0x3a0/0x420
[  684.595200][ T7247]  __x64_sys_sendmsg+0x1bd/0x2a0
[  684.595217][ T7247]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  684.595237][ T7247]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.595248][ T7247]  do_syscall_64+0x15f/0xf80
[  684.595262][ T7247]  ? trace_irq_disable+0x3b/0x140
[  684.595279][ T7247]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.595291][ T7247] RIP: 0033:0x7fbfb2f9ce59
[  684.595304][ T7247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  684.595313][ T7247] RSP: 002b:00007fbfb3dab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  684.595327][ T7247] RAX: ffffffffffffffda RBX: 00007fbfb3215fa0 RCX: 00007fbfb2f9ce59
[  684.595336][ T7247] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009
[  684.595345][ T7247] RBP: 00007fbfb3032d6f R08: 0000000000000000 R09: 0000000000000000
[  684.595352][ T7247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  684.595359][ T7247] R13: 00007fbfb3216038 R14: 00007fbfb3215fa0 R15: 00007ffda85decb8
[  684.595372][ T7247]  </TASK>
[  684.777020][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9337'.
