last executing test programs:

1.152498575s ago: executing program 0 (id=15380):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000140)={r1, &(0x7f0000000040)='(\x00', 0x8000, &(0x7f0000000080)={@align=0x43a, {0x1, 0xe, 0x6, 0x9}}, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x9})
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x9c}}, ["", "", "", ""]}, 0x24}}, 0x40880)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x2, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x80000000}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40040)
sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="fdfd35e895", 0x5, 0x20, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x1c)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000440)={{r3}, 0x8, 0x6, 0x3})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r4)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0), 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup=<r6=>0xffffffffffffffff, 0xe, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0}, 0x40)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000007c0)={{<r8=>r1, &(0x7f0000000680)='TIPC\x00', 0x4200, &(0x7f00000006c0)={@_ha_fsid={[0x1, 0x4]}, {0x1, 0x4, 0x3caa, 0x3}}, 0xff, &(0x7f0000000700), &(0x7f0000000740)=0xfff}, {[0xfffffffb, 0x6, 0x4, 0x8]}, 0x4, 0x17, &(0x7f0000000780)=""/23})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@map=r8, r5, 0x17, 0x1014, 0x0, @void, @value, @void, @void, r7}, 0x20)
setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000840)=@assoc_value={0x0, 0xffffff7f}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'syztnl0\x00', <r9=>0x0, 0x2f, 0x8, 0xfa, 0x6, 0x6a, @rand_addr=' \x01\x00', @mcast2, 0x10, 0x7, 0x8, 0x400}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x16, &(0x7f0000000880)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ldst={0x2, 0x1, 0x6, 0xe3a4fac0c29f6385, 0xb, 0xfffffffffffffffe, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @exit], &(0x7f0000000940)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x43, '\x00', r9, 0x0, r8, 0x8, &(0x7f0000000a40)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x4, 0xd, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000ac0)=[r0], &(0x7f0000000b00)=[{0x3, 0x4, 0xb, 0x9}, {0x4, 0x1, 0xa, 0xa}, {0x5, 0x4, 0x3, 0xf59b6b8f925c8fc6}, {0x3, 0x1, 0x7, 0x5}, {0x5, 0x5, 0x1, 0xb}, {0x1, 0x5, 0x2, 0x5}], 0x10, 0x90}, 0x94)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x541080, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000c80)={'veth0_to_batadv\x00', 0x4000})
r11 = accept4$inet6(r8, &(0x7f0000000cc0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000d00)=0x1c, 0x80800)
ioctl$sock_SIOCGIFBR(r11, 0x8940, &(0x7f0000000d80)=@add_del={0x2, &(0x7f0000000d40)='veth1_vlan\x00'})
ioctl$SIOCGETMIFCNT_IN6(r8, 0x89e0, &(0x7f0000000dc0)={0xffffffffffffffff})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r8)
sendmsg$NL80211_CMD_GET_MPATH(r8, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x50, r12, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x79}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040854}, 0x40804)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000f80)={<r13=>0x0, 0x10000}, &(0x7f0000000fc0)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000001000)={r13, 0x4}, 0x8)
ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000001040)={<r14=>0x0, 0x1, 0x9, 0x1})
ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000001440)={{r6}, {@val={r14}, @max}})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001480)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x5, '\x00', r9, r10, 0x73, 0x5, 0x4}, 0x50)

1.073175523s ago: executing program 0 (id=15382):
ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={0x1})
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x1000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r2, 0x709)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
close(0x4)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x3, 0xb7, 0x0, 0x8000000}}, 0xe8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2c007337e7c3c11ac3e67008faffffff0200000008003d8004002580080003004700000008003e00", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800)

492.184703ms ago: executing program 0 (id=15391):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32)
r3 = gettid()
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd35, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) (async)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x20000000) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x64, r6, 0x1, 0x0, 0x0, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xfffffffe}}}]}, 0x64}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r7, 0x11b, 0x10, 0x0, &(0x7f00000004c0)) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) (async)
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x2000}], 0x1, 0x0, 0x0)

432.299466ms ago: executing program 0 (id=15394):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080c5b081597f9e298ffd4859aa5ebae6434f02e5e2c973c61b6d96829830ab0e8b024c9c5becfe3f6778f56b21c9cd6118ec5682ffa28f0e5b78d5eec14ed4ecc5090b7a4e3125db4c1415216edc7507973fe5dd6379fd298e59df666e1c42b9d3812a86b0f1ecb0ac92c0fad61efa980f14f57cf0ea407d6f8d74a9"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000640000000000dafa1817e018110000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8afcff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94)
r1 = socket$phonet(0x23, 0x2, 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030500000000000000080000000066a6c3477e5ecd1d9eef448fff09b53bd5fae86840725fc3b8a42258e8c110ca224e088dec6131f1250c48aebc8d7f94e6dda80af741", @ANYRES32=0x0], 0x3c}}, 0x4000000) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10)
recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
socket(0x40000000015, 0x5, 0x0) (async)
socket$inet6(0xa, 0x2, 0x8000) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x143942, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r5, &(0x7f0000000700)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x4e)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@deltclass={0x6c, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xb, 0xe}, {0x5, 0x3}, {0x5, 0xf}}, [@tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x2f}}, @TCA_RATE={0x6, 0x5, {0x6, 0xcd}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x99e, 0xad59}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890)

363.593951ms ago: executing program 1 (id=15395):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0x29, 0x8, 0x0, 0x0}}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0xffff0000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x328, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x2c4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1569}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x168, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff46}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xac}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6af63c41}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8b}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x47a}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC_CONCAT={0xf0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x454}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5efb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x63e}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_DESC_CONCAT={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8ca5}]}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3b8}, 0x1, 0x0, 0x0, 0x88c4}, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR(r1, 0x114, 0x2, 0x0, 0x20)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="28000000000000002900000004"], 0x28}, 0x4004004)

362.90088ms ago: executing program 1 (id=15396):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0) (async)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000280)=0x1004234, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0}) (async)
r3 = socket(0x1e, 0x4, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x1e, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7ff7}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}}, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xc, '\x00', r2, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) (async)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000880)={<r6=>r3, &(0x7f0000000780)='syzkaller0\x00', 0x4401, &(0x7f00000007c0)={@_ha_fsid={[0x0, 0x1]}, {0x1, 0x4, 0x91, 0x4}}, 0x9, &(0x7f0000000800)={@_ha_fsid}, &(0x7f0000000840)=0x6})
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x5, 0x0, 0x3, 0x8001, r5, 0x3698, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0xc, @value=r6}, 0x50) (async)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x7a6c744bbca2564f, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3, 0x7}, {0x9, 0xfff1}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async, rerun: 32)
r7 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@ipv6_getaddrlabel={0x24, 0x4a, 0x1, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) (async, rerun: 64)
sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019349e1be5cf505a9b501fbab07396bab3afec71f9767193f0b5309295e6d6188ce88368c55c5a2958d8800a3c2b81faff89887512fde0509148e68ab9788a6a6f8513e442607a7154e11fa396094eb9cc404b6b408c2c38b1ad77e8f41cbe776bf9a3e6961f39350c4a0c157f4dd8ed04ed53312ab6db19962fdc0d0f8cf23aff69951ac76e2deb4f3e8cd737a4f232eb5554", 0xba}]}}, {{&(0x7f0000001400)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000040)="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", 0x1bf}], 0x3}}, {{&(0x7f0000001880)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f00000019c0)}}], 0x3, 0x20000880) (async, rerun: 64)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10, r1}, 0x18) (async)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000240)={0x0, 0x0, "6288843bd93e252d2c9a691d6a03b682"})
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x9, [@union={0x5, 0x3, 0x0, 0x5, 0x1, 0x800, [{0x9, 0x2, 0x10}, {0xd, 0x8, 0x8}, {0xf, 0x2, 0xfff}]}, @typedef={0xd, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x5f, 0x61, 0x30, 0x61, 0x5f, 0x5f, 0x7f]}}, &(0x7f0000000480)=""/181, 0x5d, 0xb5, 0x1, 0xae1}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r9, @ANYBLOB="0500000000227f83842c324000"/26, @ANYRES32=r2, @ANYRES32=r10, @ANYBLOB="02000000000000000400"/28], 0x50)

258.783858ms ago: executing program 1 (id=15398):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x9, 0x4)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'pim6reg0\x00', @ifru_hwaddr=@local})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xff, 0x0, 0xff, 0x100fffe00], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'nr0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1e8, 0x208, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffffff, 0xff000000, 0xff000000], 0x4e20, 0x2b, 0x4, 0x4e24, 0x2, 0x20}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8)
setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(r2, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2000)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000008000000911015000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=0xffffffffffffffff)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x14, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = accept4$inet(r5, &(0x7f0000000500)={0x2, 0x0, @empty}, &(0x7f0000000580)=0x10, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r7, 0x4008f50a, &(0x7f00000005c0)={0x6})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

204.46381ms ago: executing program 2 (id=15399):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x3)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@empty, 0xf23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0xff}, {0x2179, 0x110002, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0xffffffff, 0x7fff}, {0x4, 0xfffffffffffffffe, 0x3, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x210000, 0x3c}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x1a, 0x0, 0x0, 0xfffffffb}}, 0xe8)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt(r2, 0xaa20, 0x24000000, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffe0)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000004)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x40000010)

204.195969ms ago: executing program 1 (id=15400):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="483cf2d35186bda75b4689dc370effb47eacd9e38d3a1d3d24f57f23e802dc14a9314ce688cfb5a071f3558afe857ccdc4180ff2f1b518e85e7b505abe926bdaf94a150c3af434f32c6cfdc3d44fc36e0dbdd7b9d7d0f5d553c3dc4e396beca1129b7f721fa99bfe1b253e9da629a88791b1d88b885fb497cb02b136efbb124a3f13d03c29885515c71e93249d72b343dac5905b9580aa8cc647e6706b9ffa3b74a76e08e1d0c5ab7540cc1fb1", @ANYRES16, @ANYRES16=r1, @ANYRES8=r0, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket(0x1d, 0x2, 0x6)
setsockopt$RDS_CANCEL_SENT_TO(r3, 0x6a, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)

144.339346ms ago: executing program 2 (id=15401):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000200000020002072c00048028000180"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, 0x0, &(0x7f00000000c0))
r1 = socket(0x10, 0x3, 0xfffffffd)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40000)
getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000240), &(0x7f0000000400)=0x4)
recvfrom$packet(r0, &(0x7f0000000380)=""/116, 0x74, 0x10061, &(0x7f0000000440)={0x11, 0x16, r3, 0x1, 0x4, 0x6, @random="843c1d9d97ae"}, 0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110380000000000ae000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
socket$netlink(0x10, 0x3, 0xb)
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="59cf00000000010000000b"], 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40c50080}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="ad6a15652485583d58a3bfde571118b6", @ANYRES16=r6, @ANYBLOB="000827bd7000fcdbdf250c0000000800060000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)

144.076323ms ago: executing program 2 (id=15402):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400e4ff07000700e00000020800020005000000080008"], 0x2c}}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

93.032684ms ago: executing program 1 (id=15403):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r2) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x6, 0x8, 0x2, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x800, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)
write$tun(r7, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0xffff}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x2b, 0x62, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad"}}, 0x39)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x60, r6, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) (async)
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xec, r6, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff1}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x14}}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x10fb615047026aaa}, 0x10)

92.761943ms ago: executing program 2 (id=15404):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7, 0x0, 0x8, 0x0, 0x8, 0xff}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x5c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r2, @ANYBLOB="040029bd7000fddbdf2505000000050007000500000030000180080003000000000008000300010000001400020076657468315f746f5f6873720000000008000100", @ANYRES32=r4, @ANYBLOB="0500060002000000080005000400000070010380ce0004001df7d31c91cdd5818d7f4a3064761c099caa0d02abe11de9c86fc379dc38dd8f978e6c76a366aeed067746f0b2d04cb1931156589473e8df183b06b8368903460a1ddbca8b98b7be1bf6881c1680279e5c3f4ea85d0aa746250a9442238742b7dad12547760bd2e4db269cc181b32ed69246fa63da8304c1e97b5535a0f79f0dc3d35bd3074544c764133182dbb4f4051462a703cb83c0fe782998139e914b2afa70062708bd74022f708d0c1d4efcad20f02acb7df5de1a2f279057e4764cd05d8366161bca39a47fda00009c0003802c00018008000100030000000c0002002d292a9e282d240004000300080001000900000008000100010000001000018004000300070002002c26000014000180040003000a0002002f7a5d7d2f00000024000180040003000200030004000300080001007459e64609000200626f6e64000000000c00018008000100010400001800018007000200402500000b00020029275e269e21b510e35cc74d0000050007000600000005000200090000003c16592207b1188df47df292cd1bcaabf636b70d3a7d23b83df7fdfe114757a99d7f4b732d570246ea7e99006a097f2e9a9d610c1f6aab6a1b3779ea210fa623a376186b2b1075ff5d075bb6766aef2821d2f0c02930526acac167c3a90d0f2270cc077807255679437d82979a43f499b5b97e41a4b269f446d939685318c6d7a4d710724a2f7e44c40dee6e7220b97efde6093b20ab04fcb637642e62177a1c6c33fb6427bd6de4b356cd9ac02a923642d5950c45590dcea6843123e3eb9324a7c1ccd61017b516519587ec5384c910fe6835241dc217a8"], 0x1dc}, 0x1, 0x0, 0x0, 0x240400d1}, 0x80)

92.452491ms ago: executing program 0 (id=15405):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x44, r0, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000fff000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0)

1.820685ms ago: executing program 0 (id=15406):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]}) (async)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000000)=<r2=>0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000300)={{r1}, r2, 0x1c, @inherit={0x60, &(0x7f0000000040)={0x1, 0x3, 0x100000000, 0x80, {0xe, 0xb, 0x9, 0x8, 0x5}, [0x8, 0x7, 0x386b]}}, @subvolid=0x3})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0xe5e1}]})

1.340937ms ago: executing program 2 (id=15407):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000010427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab08165727370616e0000040002800a000100aaaaaaaaaa1b000027392f901ba0a8693d6cc59fdddb240d26f679fa4125940613783a0a365c37ba5ef99a8a35313e2a1918b1747f5906d5c88885d7176a14176eec95ba1ccdf984105bea009e8e44ae68d3971dd076b33b7db0a581806c5a1a7a97c31defd7b0f46e02e8a3c8a6ff4bec8b014ad3a95d4d4b8abf4570538b70c7181cc4a27ac6ae7509ea9e62369bd3819826e893536580e40c69b14464fa3cb09c7e194f83db8f6edfe93db70ae8280b058b6c6afd15d35bc8bd91f6f7001c1cba2194a87fcfed7506959d40c17aa007fe556d616783d20f15a263"], 0x40}}, 0x4040)

465.37µs ago: executing program 1 (id=15408):
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x0, 0x5, 0x0, 0xdab, 0x6}, {0x6, 0x0, 0x8, 0x79a, 0x10}, 0x8, 0x6, 0xb3f}}, @TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x6, 0x6, 0x6, 0x76de, 0xfff, 0x9, 0x1, 0x5, 0x9, 0x9, 0xb4a, 0x40db, 0x3, 0xfffffff7, 0xf, 0x1, 0x7fffffff, 0x0, 0x3, 0x4, 0x3, 0x9, 0x8001, 0xc, 0x6123, 0x9, 0x6, 0x9, 0xffff0000, 0x9, 0x9, 0x6, 0xfff, 0x7ff, 0xfffffff8, 0x1, 0xbb, 0x2, 0x4, 0x8, 0x0, 0x800, 0xc, 0x8, 0x4, 0x1ff, 0x3ff, 0xffffffa3, 0x8, 0x9, 0xd, 0x9, 0x101, 0x6, 0x6, 0x394, 0x2, 0x8, 0xe0, 0x3, 0xfffffffa, 0x800, 0x2, 0x5, 0x66, 0x0, 0x6, 0xc0000000, 0x8, 0x32, 0x5, 0x3, 0x7fff, 0xffff7fff, 0x9, 0x9, 0x2c, 0x9, 0x1bf4, 0x661, 0x8, 0x9, 0x57, 0x1000, 0x101, 0x6, 0x4, 0xfffffff6, 0x6, 0x849b, 0x7, 0x36cd, 0x5, 0x4, 0x888, 0x2, 0x9, 0x2, 0xfff, 0xec3, 0x1, 0x7, 0x7, 0x4, 0x80, 0x101, 0x5, 0x3, 0x2, 0x10001, 0xfffffffa, 0xc89, 0xca53, 0x3, 0x2, 0x5, 0x5, 0x9, 0xd40, 0x0, 0x7, 0x6, 0x8, 0x58, 0x4, 0x10, 0xffffff00, 0x24c00, 0x1, 0xffff4f22, 0x7, 0x432e, 0xe, 0x2, 0x7, 0x1ff, 0x2, 0x9, 0x6, 0x8, 0x9, 0x3, 0x4, 0x40000004, 0x9, 0x1, 0xf, 0x4, 0x80000000, 0x5, 0x7, 0xfffffff9, 0x7, 0x4, 0x3f, 0x3, 0x5d23, 0x3, 0x9, 0x2a, 0xff9, 0x8, 0x9, 0xffe3, 0x5, 0x3, 0x50000000, 0x1, 0x4, 0x11, 0x4, 0x11, 0x1, 0x1, 0xe618, 0xd, 0x8cf9, 0x6, 0x6, 0x4, 0x2, 0x5, 0x81, 0x8, 0x10001, 0xe8, 0x5, 0x6, 0x7, 0x2, 0x9, 0x9, 0x0, 0x2, 0x800, 0x3, 0x1, 0x80000000, 0x1, 0x3, 0x7, 0x7fffffff, 0x2e, 0x2a0, 0x8, 0x3, 0x8, 0x7ff, 0xf3ad, 0x8, 0x8, 0x7, 0x5, 0x400, 0x58, 0x7f, 0x2, 0x401, 0x5, 0xce61, 0xb40, 0x4, 0xd, 0x9e1, 0x3, 0x777b379a, 0xffffff00, 0x7, 0xc, 0x8, 0x28, 0x6, 0x4f, 0x100, 0x9, 0x7, 0x6, 0x7f, 0x5, 0x9, 0x5, 0x24, 0x3, 0xb, 0x6, 0x1, 0x37, 0x4, 0x2, 0x1, 0x4, 0x9, 0x8, 0x1, 0xe3a]}]}}]}, 0x45c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2003, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x9}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB="94000000", @ANYRES16=r7, @ANYBLOB="010000000000fedbdf25030000008000018038000400200001000a0000000000000000000000000000000000000001000001000000001400020002004e23000000000000000000000000440002800800040007000000080004000180000008000200000000000800020021fb924f0800040000020000080003000300000008000200090000000800040009000000"], 0x94}}, 0x0)

0s ago: executing program 2 (id=15409):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x40000, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
socket$alg(0x26, 0x5, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)='B', 0x1}], 0x1}}], 0x1, 0x400c404)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000219f0000000000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000089000000bf0900000000000055090100000000009500000000000000bf9100000023458162dd000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x230}}], 0x1, 0x40)
epoll_create1(0x0)

kernel console output (not intermixed with test programs):

arsing attributes in process `syz.1.12776'.
[  598.975704][ T3075] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12776'.
[  599.159202][ T3100] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12789'.
[  599.176869][ T3100] syzkaller1: entered promiscuous mode
[  599.179288][ T3100] syzkaller1: entered allmulticast mode
[  599.421114][ T3126] sctp: [Deprecated]: syz.1.12802 (pid 3126) Use of struct sctp_assoc_value in delayed_ack socket option.
[  599.421114][ T3126] Use struct sctp_sack_info instead
[  599.482548][ T3136] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12807'.
[  599.519171][ T3141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12809'.
[  599.613383][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  599.676751][ T3165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12819'.
[  599.686412][ T3165] veth1_macvtap: left promiscuous mode
[  599.958579][ T3185] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  600.456364][ T3240] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12854'.
[  600.541044][ T3247] bond22 (unregistering): Released all slaves
[  600.653354][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  601.398847][ T3303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12874'.
[  601.468795][ T3311] netlink: 'syz.1.12878': attribute type 29 has an invalid length.
[  601.693323][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  602.733350][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  602.870130][ T3363] __nla_validate_parse: 2 callbacks suppressed
[  602.870140][ T3363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12900'.
[  603.026880][ T3371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  603.029418][ T3371] syzkaller0: entered promiscuous mode
[  603.031317][ T3371] syzkaller0: entered allmulticast mode
[  603.037002][ T3371] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  603.050574][ T3371] tipc: Resetting bearer <eth:syzkaller0>
[  603.053944][ T3370] tipc: Resetting bearer <eth:syzkaller0>
[  603.064464][ T3370] tipc: Disabling bearer <eth:syzkaller0>
[  603.171157][ T3373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12905'.
[  603.175637][ T3373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12905'.
[  603.370240][ T3381] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12909'.
[  603.508512][ T3385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12911'.
[  603.773353][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  604.058885][ T3407] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12922'.
[  604.813255][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  605.674532][ T3438] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  605.853277][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  606.768467][ T3463] IPVS: stopping master sync thread 2438 ...
[  606.893304][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  607.158736][ T3512] syzkaller1: entered promiscuous mode
[  607.163293][ T3512] syzkaller1: entered allmulticast mode
[  607.266610][ T3520] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  607.335836][ T3525] netlink: 'syz.0.12975': attribute type 1 has an invalid length.
[  607.378056][ T3525] 8021q: adding VLAN 0 to HW filter on device bond24
[  607.433491][ T3525] bond24: (slave veth17): Enslaving as an active interface with a down link
[  607.454261][ T3525] 8021q: adding VLAN 0 to HW filter on device batadv6
[  607.471362][ T3525] bond24: (slave batadv6): making interface the new active one
[  607.483636][ T3525] batadv6: entered promiscuous mode
[  607.489923][ T3525] bond24: (slave batadv6): Enslaving as an active interface with an up link
[  607.542819][ T3525] bond24 (unregistering): (slave veth17): Releasing active interface
[  607.561475][ T3525] bond24 (unregistering): (slave batadv6): Releasing active interface
[  607.577091][ T3525] bond24 (unregistering): Released all slaves
[  607.934573][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  608.208651][ T3565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12994'.
[  608.973732][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  609.091260][ T3602] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  609.094742][ T3602] syzkaller0: entered promiscuous mode
[  609.096727][ T3602] syzkaller0: entered allmulticast mode
[  609.607894][ T3605] tipc: Resetting bearer <eth:syzkaller0>
[  609.611424][ T3601] tipc: Resetting bearer <eth:syzkaller0>
[  609.625695][ T3601] tipc: Disabling bearer <eth:syzkaller0>
[  609.757735][ T3619] lo speed is unknown, defaulting to 1000
[  609.762279][ T3619] lo speed is unknown, defaulting to 1000
[  609.765855][ T3619] lo speed is unknown, defaulting to 1000
[  609.879935][ T3619] infiniband syz1: set active
[  609.890599][ T5667] lo speed is unknown, defaulting to 1000
[  609.898947][ T3619] infiniband syz1: added lo
[  609.943955][ T3619] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  609.951835][ T3619] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  609.959243][ T3619] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  609.990693][ T3619] RDS/IB: syz1: added
[  609.999344][ T3619] smc: adding ib device syz1 with port count 1
[  610.007077][ T3619] smc:    ib device syz1 port 1 has no pnetid
[  610.013368][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  610.055086][   T31] lo speed is unknown, defaulting to 1000
[  610.068532][ T3619] lo speed is unknown, defaulting to 1000
[  610.312428][ T3619] lo speed is unknown, defaulting to 1000
[  610.316442][ T3659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13034'.
[  610.324852][ T3659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13034'.
[  610.329660][ T3659] netlink: 'syz.2.13034': attribute type 14 has an invalid length.
[  610.546181][ T3619] lo speed is unknown, defaulting to 1000
[  610.862640][ T3700] openvswitch: netlink: Message has -2 unknown bytes.
[  610.865280][ T3700] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  611.048450][ T3712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  611.053293][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  611.141471][ T3719] netlink: 'syz.2.13063': attribute type 1 has an invalid length.
[  611.174071][ T3719] bond23: (slave veth33): Enslaving as an active interface with a down link
[  611.205194][ T3719] bond23: (slave veth35): Enslaving as an active interface with a down link
[  611.211466][ T3719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13063'.
[  611.222241][ T3719] 8021q: adding VLAN 0 to HW filter on device bond23
[  611.464738][ T3740] syzkaller0: entered promiscuous mode
[  611.467324][ T3740] syzkaller0: entered allmulticast mode
[  611.476189][ T3740] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  611.486355][ T3739] tipc: Resetting bearer <eth:syzkaller0>
[  611.507968][ T3739] tipc: Disabling bearer <eth:syzkaller0>
[  611.869078][ T3783] netlink: 'syz.0.13089': attribute type 28 has an invalid length.
[  612.071277][ T3803] netlink: 'syz.2.13099': attribute type 1 has an invalid length.
[  612.075690][ T3803] netlink: 'syz.2.13099': attribute type 1 has an invalid length.
[  612.093242][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  612.296384][ T3824] 8021q: adding VLAN 0 to HW filter on device bond0
[  612.300784][ T3824] 8021q: adding VLAN 0 to HW filter on device team0
[  612.311583][ T3824] 8021q: adding VLAN 0 to HW filter on device batadv0
[  612.332359][ T3824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  612.336714][ T3824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  612.345249][ T3824] veth1_vlan: left promiscuous mode
[  612.348411][ T3824] veth0_vlan: left promiscuous mode
[  612.352370][ T3824] veth0_vlan: entered promiscuous mode
[  612.357688][ T3824] veth1_vlan: entered promiscuous mode
[  612.382522][ T3824] 8021q: adding VLAN 0 to HW filter on device bond1
[  612.387964][ T3824] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  612.415446][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  612.457088][ T5666] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  612.462062][ T5666] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  612.474061][ T5666] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  612.480698][ T5666] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  612.880103][ T3861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13120'.
[  613.126011][ T3880] syzkaller0: entered promiscuous mode
[  613.127757][ T3880] syzkaller0: entered allmulticast mode
[  613.133276][    C1] net_ratelimit: 1 callbacks suppressed
[  613.133285][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  613.313689][ T3891] veth0: entered promiscuous mode
[  613.408380][ T3891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13133'.
[  613.432074][ T3890] veth0: left promiscuous mode
[  613.444278][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  613.588549][ T3903] netlink: 'syz.1.13136': attribute type 1 has an invalid length.
[  613.591767][ T3903] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13136'.
[  613.768415][ T3915] SET target dimension over the limit!
[  613.963849][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  614.173263][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  614.436912][ T3970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13154'.
[  614.442839][ T3970] netlink: set zone limit has 4 unknown bytes
[  614.483408][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  614.670664][T13656] lo speed is unknown, defaulting to 1000
[  614.721071][ T3995] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13165'.
[  614.830864][ T4007] openvswitch: netlink: Message has 12 unknown bytes.
[  614.839798][ T4007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  614.962595][ T4020] lo speed is unknown, defaulting to 1000
[  615.003491][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  615.213336][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  616.125866][ T4048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13185'.
[  616.301575][ T4062] syzkaller1: entered promiscuous mode
[  616.308728][ T4062] syzkaller1: entered allmulticast mode
[  616.334213][ T4066] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13194'.
[  616.414616][ T4072] syzkaller0: entered promiscuous mode
[  616.417730][ T4072] syzkaller0: entered allmulticast mode
[  616.470813][ T4078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13200'.
[  616.692983][ T4102] netlink: 112 bytes leftover after parsing attributes in process `syz.1.13211'.
[  616.786874][ T4115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13218'.
[  616.803959][ T4118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13219'.
[  616.809872][ T4115] bond24: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  616.820978][ T4115] bond24 (unregistering): Released all slaves
[  618.144426][ T4173] tipc: Enabling <eth:lo> not permitted
[  618.148995][ T4173] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  618.333305][    C1] net_ratelimit: 9 callbacks suppressed
[  618.333320][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  618.594583][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  618.610707][ T4213] __nla_validate_parse: 3 callbacks suppressed
[  618.610722][ T4213] netlink: 200 bytes leftover after parsing attributes in process `syz.0.13258'.
[  618.675574][ T4219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13262'.
[  619.114218][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  619.373272][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  619.549268][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13289'.
[  619.623366][ T5719] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  619.736827][ T4295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13298'.
[  620.029570][ T4331] netlink: 'syz.2.13313': attribute type 1 has an invalid length.
[  620.154196][ T5719] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  620.267307][ T4339] infiniband syz0: set active
[  620.270466][ T4339] infiniband syz0: added ipvlan1
[  620.283923][ T4339] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  620.291386][ T4339] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  620.299502][ T4339] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  620.311551][ T4339] RDS/IB: syz0: added
[  620.313021][ T4339] smc: adding ib device syz0 with port count 1
[  620.315870][ T4339] smc:    ib device syz0 port 1 has no pnetid
[  620.413336][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  620.673753][ T5719] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  621.183424][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  621.453291][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  623.285336][ T4355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  623.421409][ T4409] hsr0: entered allmulticast mode
[  623.423918][ T4409] hsr_slave_0: entered allmulticast mode
[  623.426550][ T4409] hsr_slave_1: entered allmulticast mode
[  623.533408][    C1] net_ratelimit: 5 callbacks suppressed
[  623.533426][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  623.733393][ T5719] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  624.254314][ T5666] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  624.345181][ T4486] netlink: 27 bytes leftover after parsing attributes in process `syz.1.13372'.
[  624.402554][ T4491] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  624.409488][ T4491] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  624.455943][ T4493] netlink: 'syz.2.13373': attribute type 1 has an invalid length.
[  624.459113][ T4493] netlink: 756 bytes leftover after parsing attributes in process `syz.2.13373'.
[  624.573278][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  624.763893][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  625.274374][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  625.361085][ T4510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13379'.
[  625.364533][ T4510] nbd: couldn't find a device at index 65546
[  625.521447][ T4524] batman_adv: batadv0: Removing interface: gretap3
[  625.531399][ T4524] vlan6: left allmulticast mode
[  625.534616][ T4524] geneve0: left allmulticast mode
[  625.537861][ T4524] bridge0: port 1(vlan6) entered disabled state
[  625.613356][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  625.622091][ T4532] syz_tun: entered allmulticast mode
[  625.643933][ T4531] syz_tun: left allmulticast mode
[  625.660391][ T4534] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13391'.
[  625.680558][ T4530] tc_dump_action: action bad kind
[  625.783665][ T5719] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  626.166597][ T4563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13404'.
[  626.294888][ T5719] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  626.403018][   T34] audit: type=1107 audit(1785179989.255:18): pid=4590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  626.645506][ T4610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13425'.
[  626.648715][ T4610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13425'.
[  626.653313][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  626.685826][ T4612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13426'.
[  626.780512][ T4615] netlink: 'syz.1.13427': attribute type 21 has an invalid length.
[  626.794753][ T4615] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13427'.
[  626.805538][ T4615] netlink: 'syz.1.13427': attribute type 5 has an invalid length.
[  626.812623][ T4615] netlink: 'syz.1.13427': attribute type 6 has an invalid length.
[  626.821682][ T4615] netlink: 3 bytes leftover after parsing attributes in process `syz.1.13427'.
[  627.034726][ T4627] block nbd7: server does not support multiple connections per device.
[  627.045128][ T4627] block nbd7: shutting down sockets
[  627.801398][ T4627] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  627.813472][ T4627] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  627.870632][ T4627] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  627.878976][ T4627] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  627.897978][ T4627] tipc: Resetting bearer <eth:syzkaller0>
[  627.949553][ T4627] tipc: Resetting bearer <eth:syzkaller0>
[  628.185628][ T4684] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  628.285171][ T4693] SET target dimension over the limit!
[  628.733405][    C1] net_ratelimit: 5 callbacks suppressed
[  628.733426][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  628.843767][ T5666] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  629.075195][ T4736] lo speed is unknown, defaulting to 1000
[  629.353447][ T5719] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  629.558529][ T4752] __nla_validate_parse: 5 callbacks suppressed
[  629.558549][ T4752] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.13488'.
[  629.726571][ T4761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13493'.
[  629.773259][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  629.873636][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  629.932592][ T4775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13499'.
[  630.162340][ T4790] netlink: 600 bytes leftover after parsing attributes in process `syz.1.13506'.
[  630.188588][ T4790] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  630.278332][ T4797] syzkaller0: entered promiscuous mode
[  630.280733][ T4797] syzkaller0: entered allmulticast mode
[  630.383269][ T5719] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  630.430504][ T4805] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  630.813348][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  630.826819][ T4833] geneve1: entered promiscuous mode
[  630.836176][ T4833] macsec0: entered promiscuous mode
[  630.841940][ T4833] macsec0: entered allmulticast mode
[  630.844489][ T4833] geneve1: entered allmulticast mode
[  630.848877][ T4833] geneve1: left allmulticast mode
[  630.851127][ T4833] geneve1: left promiscuous mode
[  630.895096][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  630.941414][ T4839] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13530'.
[  631.170534][ T4851] bond24: entered promiscuous mode
[  631.172356][ T4851] bond24: entered allmulticast mode
[  631.175097][ T4851] 8021q: adding VLAN 0 to HW filter on device bond24
[  631.264940][ T4862] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma?
[  631.413418][ T5666] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  631.509584][ T4892] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13554'.
[  631.771183][ T4913] sctp: [Deprecated]: syz.1.13564 (pid 4913) Use of int in max_burst socket option.
[  631.771183][ T4913] Use struct sctp_assoc_value instead
[  632.049697][ T4925] xt_hashlimit: max too large, truncated to 1048576
[  632.202695][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13574'.
[  632.205899][ T4935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13574'.
[  632.338645][ T4944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13578'.
[  632.456298][ T4948] vlan7: entered promiscuous mode
[  632.458484][ T4948] bridge0: entered promiscuous mode
[  632.612210][ T4959] lo speed is unknown, defaulting to 1000
[  632.969154][ T4981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13593'.
[  633.567846][ T5013] 8021q: adding VLAN 0 to HW filter on device bond25
[  633.933358][    C1] net_ratelimit: 27 callbacks suppressed
[  633.933379][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  633.983350][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  634.363071][ T5094] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  634.370452][ T5094] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  634.495197][ T5666] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  634.964435][ T5139] __nla_validate_parse: 6 callbacks suppressed
[  634.964446][ T5139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13658'.
[  634.973365][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  635.013749][ T5719] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  635.098318][ T5145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13661'.
[  635.101308][ T5145] nbd: must specify at least one socket
[  635.273011][ T5166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13667'.
[  635.524565][ T5719] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  635.610041][ T5204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13677'.
[  635.716712][ T5209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13679'.
[  635.881543][ T5215] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13680'.
[  636.013799][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  636.034166][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  636.543399][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  637.053274][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  637.474528][ T5313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13707'.
[  637.677149][ T5329] tcf_pedit_act: 22 callbacks suppressed
[  637.677161][ T5329] tc action pedit offset must be on 32 bit boundaries
[  637.682242][ T5329] tc action pedit offset must be on 32 bit boundaries
[  637.684474][ T5329] tc action pedit offset must be on 32 bit boundaries
[  637.686752][ T5329] tc action pedit offset must be on 32 bit boundaries
[  637.688972][ T5329] tc action pedit offset must be on 32 bit boundaries
[  637.691483][ T5329] tc action pedit offset must be on 32 bit boundaries
[  637.693765][ T5329] tc action pedit offset must be on 32 bit boundaries
[  637.695891][ T5329] tc action pedit offset must be on 32 bit boundaries
[  637.698083][ T5329] tc action pedit offset must be on 32 bit boundaries
[  637.700422][ T5329] tc action pedit offset must be on 32 bit boundaries
[  638.598323][ T5365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13725'.
[  639.126702][   T12] net_ratelimit: 6 callbacks suppressed
[  639.126717][   T12] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  639.133230][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  639.390567][ T5421] netlink: 'syz.2.13747': attribute type 1 has an invalid length.
[  639.647838][ T5666] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  640.169990][ T5445] tipc: Failed to remove unknown binding: 66,0,0/4266804985:2508806457/2508806459
[  640.173278][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  640.176347][ T5666] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  640.180899][ T5445] tipc: Failed to remove unknown binding: 66,0,0/4266804985:2508806457/2508806458
[  640.185427][ T5445] tipc: Failed to remove unknown binding: 66,0,0/4266804985:2508806457/2508806459
[  640.188478][ T5445] tipc: Failed to remove unknown binding: 66,0,0/4266804985:2508806457/2508806458
[  640.694691][ T5719] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  640.905908][ T5457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13762'.
[  641.205075][ T5719] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  641.213314][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  641.337431][ T5492] IPv6: Can't replace route, no match found
[  641.339541][ T5492] IPv6: Can't replace route, no match found
[  641.449311][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13787'.
[  641.456712][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13787'.
[  641.459519][ T5512] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  641.479423][ T5517] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  642.547123][ T5560] netlink: 'syz.2.13808': attribute type 142 has an invalid length.
[  642.856129][ T5588] nbd: socks must be embedded in a SOCK_ITEM attr
[  643.042228][ T5595] netlink: 'syz.2.13823': attribute type 2 has an invalid length.
[  643.132648][ T5607] siw: device registration error -23
[  643.457625][ T5638] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  643.462036][ T5638] syzkaller0: entered promiscuous mode
[  643.464369][ T5638] syzkaller0: entered allmulticast mode
[  643.481047][ T5638] tipc: Resetting bearer <eth:syzkaller0>
[  643.485264][ T5637] tipc: Resetting bearer <eth:syzkaller0>
[  643.500895][ T5637] tipc: Disabling bearer <eth:syzkaller0>
[  643.579168][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13845'.
[  644.333307][    C1] net_ratelimit: 2 callbacks suppressed
[  644.333326][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  644.427772][ T5734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13873'.
[  644.442941][ T5734] syz_tun: entered promiscuous mode
[  644.448565][ T5734] macvtap1: entered promiscuous mode
[  644.451083][ T5734] macvtap1: entered allmulticast mode
[  644.453810][ T5734] syz_tun: entered allmulticast mode
[  644.469500][ T5734] syz_tun: left allmulticast mode
[  644.472603][ T5734] syz_tun: left promiscuous mode
[  644.482865][ T5734] macvtap1: left promiscuous mode
[  644.488016][ T5734] macvtap1: left allmulticast mode
[  644.809640][ T5766] : renamed from bond_slave_0 (while UP)
[  644.881264][ T5772] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  644.885597][ T5772] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  645.119296][ T5800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13900'.
[  645.373234][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  645.391209][ T5818] netlink: 'syz.1.13910': attribute type 1 has an invalid length.
[  645.408523][ T5818] bond22: entered promiscuous mode
[  645.410776][ T5818] 8021q: adding VLAN 0 to HW filter on device bond22
[  645.426033][ T5818] vlan5: entered allmulticast mode
[  645.428393][ T5818] bond22: entered allmulticast mode
[  645.437499][ T5823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  645.442501][ T5818] bond22: (slave bridge18): making interface the new active one
[  645.449090][ T5818] bridge18: entered promiscuous mode
[  645.451587][ T5818] bridge18: entered allmulticast mode
[  645.459417][ T5818] bond22: (slave bridge18): Enslaving as an active interface with an up link
[  646.413264][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  646.861274][ T5911] syzkaller1: entered promiscuous mode
[  646.869129][ T5911] syzkaller1: entered allmulticast mode
[  647.110587][ T5922] 8021q: adding VLAN 0 to HW filter on device team0
[  647.121960][ T5922] 8021q: adding VLAN 0 to HW filter on device 60X
[  647.140638][ T5922] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  647.206911][ T5923] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13951'.
[  647.334645][ T5933] gre5: entered promiscuous mode
[  647.453393][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  647.679539][ T5960] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  647.786633][ T5972] netlink: 'syz.0.13975': attribute type 1 has an invalid length.
[  647.924863][ T5976] bridge0: left allmulticast mode
[  647.947098][ T5976] batman_adv: batadv0: Interface deactivated: dummy0
[  648.021465][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13978'.
[  648.247695][ T5976] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  648.258995][ T5976] batadv2: left allmulticast mode
[  648.267262][ T5976] geneve0: left promiscuous mode
[  648.307968][ T5976] bond24: left allmulticast mode
[  648.336697][ T5687] syz0: Port: 1 Link DOWN
[  648.337999][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  648.342193][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  648.346086][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  648.348865][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  648.351565][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  648.354650][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  648.357323][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  648.360116][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  648.442938][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13981'.
[  648.493348][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  649.533392][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  649.836927][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14015'.
[  650.043046][ T6091] netlink: 84 bytes leftover after parsing attributes in process `syz.2.14017'.
[  650.131951][ T6096] netlink: 'syz.2.14018': attribute type 23 has an invalid length.
[  650.140372][ T6096] netlink: 'syz.2.14018': attribute type 21 has an invalid length.
[  650.153903][ T6096] IPv6: NLM_F_CREATE should be specified when creating new route
[  650.159704][ T6097] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14018'.
[  650.168598][ T6097] netlink: 88 bytes leftover after parsing attributes in process `syz.2.14018'.
[  650.322934][ T6104] set match dimension is over the limit!
[  650.334236][ T6100] block nbd7: server does not support multiple connections per device.
[  650.339029][ T6100] block nbd7: shutting down sockets
[  650.575455][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  650.710129][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14024'.
[  650.724169][ T6117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14024'.
[  650.730297][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14024'.
[  650.756571][ T6137] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  650.759748][ T6137] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  650.833603][ T6147] netlink: 'syz.1.14031': attribute type 5 has an invalid length.
[  650.836930][ T6148] netlink: 'syz.1.14031': attribute type 5 has an invalid length.
[  650.842818][ T6147] netlink: 'syz.1.14031': attribute type 4 has an invalid length.
[  650.846049][ T6147] netlink: 'syz.1.14031': attribute type 8 has an invalid length.
[  650.848598][ T6147] netlink: 'syz.1.14031': attribute type 1 has an invalid length.
[  650.851205][ T6147] NCSI netlink: No device for ifindex 0
[  650.853098][ T6148] netlink: 'syz.1.14031': attribute type 4 has an invalid length.
[  650.862672][ T6148] netlink: 'syz.1.14031': attribute type 8 has an invalid length.
[  650.866155][ T6148] netlink: 'syz.1.14031': attribute type 1 has an invalid length.
[  650.868910][ T6148] NCSI netlink: No device for ifindex 0
[  650.872959][ T6147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  650.999525][ T6159] IPVS: Unknown mcast interface: veth1_to_hsr
[  651.397619][ T6180] netlink: 'syz.1.14042': attribute type 1 has an invalid length.
[  651.420551][ T6180] 8021q: adding VLAN 0 to HW filter on device bond23
[  651.436934][ T6180] bond23: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  651.613476][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  651.638724][ T6186] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  651.759935][ T6193] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2
[  651.886192][ T6195] netlink: 'syz.2.14048': attribute type 4 has an invalid length.
[  652.050678][ T6209] : entered promiscuous mode
[  652.367509][ T6228] __nla_validate_parse: 22 callbacks suppressed
[  652.367521][ T6228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14058'.
[  652.374993][ T6228] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14058'.
[  652.378043][ T6228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14058'.
[  652.653336][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  652.702101][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14063'.
[  652.724335][ T6239] vlan6: entered allmulticast mode
[  652.726626][ T6239] bridge19: entered allmulticast mode
[  652.817299][ T6241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14064'.
[  652.820224][ T6241] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14064'.
[  652.861102][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14065'.
[  653.191050][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14072'.
[  653.196838][ T6266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14072'.
[  653.203510][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14072'.
[  653.353516][ T6276] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  653.356723][ T6276] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  653.693414][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  654.270365][ T6300] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  654.288178][ T6299] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  654.678749][ T6332] block nbd7: Unsupported socket: should be TCP or UNIX.
[  654.733348][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  654.860218][ T6335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  654.867228][ T6335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  654.876139][ T6335] A link change request failed with some changes committed already. Interface ! may have been left with an inconsistent configuration, please check.
[  654.882313][T26337] batman_adv: batadv0: Interface activated: vlan3
[  654.913387][ T6349] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  655.071122][ T6365] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  655.075198][ T6365] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  655.773399][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  655.877390][ T6405] 8021q: adding VLAN 0 to HW filter on device bond0
[  655.881383][ T6405] 8021q: adding VLAN 0 to HW filter on device team0
[  655.887247][ T6405] batman_adv: batadv0: Interface activated: dummy0
[  655.889998][ T6405] batadv0: mtu less than device minimum
[  655.893443][ T6405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  655.897984][ T6405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  655.903072][ T6405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  655.908047][ T6405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  655.913012][ T6405] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  655.936288][ T6405] 8021q: adding VLAN 0 to HW filter on device batadv0
[  655.960471][ T6405] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  655.964225][ T6405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  655.970023][ T6405] veth1_vlan: left promiscuous mode
[  655.973113][ T6405] veth0_vlan: left promiscuous mode
[  655.978984][ T6405] veth0_vlan: entered promiscuous mode
[  655.984382][ T6405] veth1_vlan: entered promiscuous mode
[  656.007392][T26337] syz0: Port: 1 Link ACTIVE
[  656.008722][T15830] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  656.012732][ T6411] validate_nla: 7 callbacks suppressed
[  656.012773][ T6411] netlink: 'syz.1.14118': attribute type 6 has an invalid length.
[  656.014156][T15830] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  656.014682][ T6411] netlink: 'syz.1.14118': attribute type 5 has an invalid length.
[  656.034434][T15830] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  656.039588][T15830] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  656.047009][ T6411] x_tables: unsorted underflow at hook 4
[  656.610896][ T6460] netlink: 'syz.0.14133': attribute type 83 has an invalid length.
[  659.933414][    C1] net_ratelimit: 26 callbacks suppressed
[  659.933438][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  660.123802][ T5992] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  660.643638][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  660.973532][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  661.153500][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  661.663422][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  662.013375][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  662.176508][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  662.683398][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  663.053449][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  665.133424][    C1] net_ratelimit: 5 callbacks suppressed
[  665.133446][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  665.233489][ T5992] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  665.743506][ T5992] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  666.173421][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  666.255140][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  666.763646][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  667.213643][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  667.273534][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  667.783668][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  668.253446][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  670.333467][    C1] net_ratelimit: 5 callbacks suppressed
[  670.333491][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  670.343834][ T5992] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  670.853513][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  671.363660][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  671.373435][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  671.873420][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  672.383518][ T5992] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  672.413356][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  672.894051][ T5992] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  673.403566][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  675.454218][T15830] net_ratelimit: 5 callbacks suppressed
[  675.454275][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  675.533839][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  675.963903][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  676.473438][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  676.573411][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  676.983780][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  677.493651][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  677.613507][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  678.013751][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  678.533545][ T5992] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  678.966936][ T6484] __nla_validate_parse: 24 callbacks suppressed
[  678.966951][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14140'.
[  679.081541][ T6493] netlink: 164 bytes leftover after parsing attributes in process `syz.0.14142'.
[  679.175003][ T6495] netlink: 524 bytes leftover after parsing attributes in process `syz.0.14143'.
[  679.217052][ T6497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14144'.
[  679.455157][ T6512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14150'.
[  679.467770][ T6512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14150'.
[  679.885590][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14161'.
[  679.888622][ T6546] netlink: 'syz.2.14161': attribute type 11 has an invalid length.
[  679.896173][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  679.896179][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14161'.
[  679.896200][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  679.898824][ T6546] netlink: 'syz.2.14161': attribute type 11 has an invalid length.
[  679.901938][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  679.913246][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  680.464735][ T6573] xt_HMARK: spi-set and port-set can't be combined
[  680.516696][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14167'.
[  680.531884][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14167'.
[  680.585157][T15830] net_ratelimit: 5 callbacks suppressed
[  680.585170][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  680.587068][ T6577] : renamed from vlan0
[  680.733381][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  680.768666][ T6595] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  680.775458][ T6595] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  681.103600][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  681.155741][ T6621] netlink: 'syz.0.14183': attribute type 1 has an invalid length.
[  681.162329][ T6621] netlink: 'syz.0.14183': attribute type 2 has an invalid length.
[  681.172642][ T6621] netlink: 'syz.0.14183': attribute type 1 has an invalid length.
[  681.179803][ T6621] netlink: 'syz.0.14183': attribute type 2 has an invalid length.
[  681.499423][ T6641] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma?
[  681.504975][ T6625] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  681.615464][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  681.773441][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  681.878184][ T6658] syzkaller0: entered promiscuous mode
[  681.880331][ T6658] syzkaller0: entered allmulticast mode
[  682.133586][ T5992] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  682.235496][ T6662] wlan0: entered promiscuous mode
[  682.237908][ T6662] wlan0: left allmulticast mode
[  682.241386][ T6662] netlink: 'syz.1.14199': attribute type 1 has an invalid length.
[  682.653847][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  682.787353][ T6717] veth0_macvtap: left promiscuous mode
[  682.813340][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  682.823974][ T6713] block nbd7: server does not support multiple connections per device.
[  682.827597][ T6713] block nbd7: shutting down sockets
[  682.977645][ T6728] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  683.086127][ T5356] veth0_macvtap: entered promiscuous mode
[  683.173368][ T5992] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  683.279455][ T6760] netlink: 'syz.1.14231': attribute type 2 has an invalid length.
[  683.306788][ T6760] : entered promiscuous mode
[  683.510851][ T6780] rdma_rxe: rxe_newlink: failed to add xfrm0
[  683.791650][ T6802] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode
[  683.794055][ T6802] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode
[  683.837186][ T6799] netlink: 'syz.0.14237': attribute type 11 has an invalid length.
[  683.839935][ T6799] netlink: 'syz.0.14237': attribute type 13 has an invalid length.
[  683.905307][ T6816] bond0: entered promiscuous mode
[  683.908450][ T6816] debugfs: 'hsr1' already exists in 'hsr'
[  683.910371][ T6816] Cannot create hsr debugfs directory
[  683.912116][ T6816] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  683.916728][ T6816] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  683.920891][ T6816] 8021q: adding VLAN 0 to HW filter on device hsr1
[  683.924049][ T6816] bond0: left promiscuous mode
[  683.968817][ T6820] bond0: entered promiscuous mode
[  683.972935][ T6820] debugfs: 'hsr1' already exists in 'hsr'
[  683.976590][ T6820] Cannot create hsr debugfs directory
[  683.979081][ T6820] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  683.983074][ T6820] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  683.989181][ T6820] 8021q: adding VLAN 0 to HW filter on device hsr1
[  683.993615][ T6820] bond0: left promiscuous mode
[  684.210054][ T6825] __nla_validate_parse: 28 callbacks suppressed
[  684.210067][ T6825] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14245'.
[  684.260560][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14250'.
[  684.568627][ T6857] syzkaller0: entered promiscuous mode
[  684.571074][ T6857] syzkaller0: entered allmulticast mode
[  684.618460][ T6857] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  685.147255][ T6903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14272'.
[  685.265919][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14276'.
[  685.375762][ T6922] team0: left allmulticast mode
[  685.377921][ T6922] batadv1: left allmulticast mode
[  685.379911][ T6922] macvlan5: left allmulticast mode
[  685.382026][ T6922] bridge14: left allmulticast mode
[  685.387888][ T6922] team0: left promiscuous mode
[  685.389971][ T6922] batadv1: left promiscuous mode
[  685.392142][ T6922] macvlan5: left promiscuous mode
[  685.394569][ T6922] bridge14: left promiscuous mode
[  685.397109][ T6922] bridge0: port 1(team0) entered disabled state
[  685.405723][ T6922] bond1: left allmulticast mode
[  685.410779][ T6922] bond1: left promiscuous mode
[  685.417017][ T6922] bridge0: port 3(bond1) entered disabled state
[  685.693994][ T6955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14289'.
[  685.702229][ T6955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14289'.
[  685.710921][ T6956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14289'.
[  685.730892][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14289'.
[  685.733963][T15830] net_ratelimit: 8 callbacks suppressed
[  685.733972][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  685.872031][ T6977] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.14296'.
[  685.878014][ T6977] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.14296'.
[  685.933486][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  686.257599][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  686.361927][ T7003] sctp: [Deprecated]: syz.1.14300 (pid 7003) Use of struct sctp_assoc_value in delayed_ack socket option.
[  686.361927][ T7003] Use struct sctp_sack_info instead
[  686.380355][ T7003] sctp: [Deprecated]: syz.1.14300 (pid 7003) Use of struct sctp_assoc_value in delayed_ack socket option.
[  686.380355][ T7003] Use struct sctp_sack_info instead
[  686.388390][ T7004] validate_nla: 4 callbacks suppressed
[  686.388406][ T7004] netlink: 'syz.2.14299': attribute type 1 has an invalid length.
[  686.400122][ T7003] netlink: 'syz.1.14300': attribute type 1 has an invalid length.
[  686.773318][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  686.964722][ T7046] 8021q: adding VLAN 0 to HW filter on device bond24
[  686.973326][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  686.984060][ T7046] vlan2: entered allmulticast mode
[  686.986223][ T7046] erspan0: entered allmulticast mode
[  686.989073][ T7046] bond24: (slave vlan2): Error -34 calling dev_set_mtu
[  687.031084][ T7048] netlink: 'syz.0.14313': attribute type 21 has an invalid length.
[  687.034744][ T7048] netlink: 'syz.0.14313': attribute type 4 has an invalid length.
[  687.038202][ T7048] netlink: 'syz.0.14313': attribute type 5 has an invalid length.
[  687.285062][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  687.422902][ T7067] netlink: 'syz.1.14319': attribute type 1 has an invalid length.
[  687.540341][ T7078] syzkaller1: entered promiscuous mode
[  687.542624][ T7078] syzkaller1: entered allmulticast mode
[  687.548751][ T7078] syzkaller0: entered promiscuous mode
[  687.552524][ T7078] syzkaller0: entered allmulticast mode
[  687.804589][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  687.828231][ T7098] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  687.895024][ T7109] bond0: entered promiscuous mode
[  687.897843][ T7109] batadv0: entered promiscuous mode
[  687.900778][ T7109] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  687.906135][ T7109] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  687.910701][ T7109] bond0: left promiscuous mode
[  687.916829][ T7109] batadv0: left promiscuous mode
[  687.938721][ T7112] netlink: 'syz.0.14332': attribute type 2 has an invalid length.
[  687.945642][ T7112] bond0: entered promiscuous mode
[  687.950062][ T7112] batadv0: entered promiscuous mode
[  687.954553][ T7112] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  687.957889][ T7112] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  687.968608][ T7112] bond0: left promiscuous mode
[  687.970973][ T7112] batadv0: left promiscuous mode
[  688.013514][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  688.020854][ T7117] netlink: 'syz.1.14336': attribute type 4 has an invalid length.
[  688.104729][ T7121] xt_CT: You must specify a L4 protocol and not use inversions on it
[  688.169628][ T7135] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  688.176960][ T7135] bond4: (slave lo): Enslaving as an active interface with an up link
[  688.187787][ T7135] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  688.198535][ T7140] netlink: 'syz.1.14344': attribute type 10 has an invalid length.
[  688.207121][ T7140] bond23: (slave veth0_to_bond): Releasing backup interface
[  688.213624][ T7140] veth0_to_bond: entered promiscuous mode
[  688.218761][ T7140] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  688.320627][ T7151] batadv0: entered promiscuous mode
[  688.322899][ T7151] batadv0: left promiscuous mode
[  688.332723][ T7156] bond_slave_0: entered promiscuous mode
[  688.388002][ T7145] batadv0: entered promiscuous mode
[  688.391342][ T7145] batadv0: left promiscuous mode
[  688.559113][ T7184] syzkaller0: entered promiscuous mode
[  688.567056][ T7184] syzkaller0: entered allmulticast mode
[  688.573994][ T7184] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  688.585716][ T7184] tipc: Resetting bearer <eth:syzkaller0>
[  688.592825][ T7183] tipc: Resetting bearer <eth:syzkaller0>
[  688.607870][ T7183] tipc: Disabling bearer <eth:syzkaller0>
[  688.611961][ T7186] netlink: 'syz.0.14358': attribute type 4 has an invalid length.
[  688.739188][ T7197] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  688.818966][ T7204] syzkaller0: entered promiscuous mode
[  688.821339][ T7204] syzkaller0: entered allmulticast mode
[  688.837335][ T7204] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  688.840979][ T7203] tipc: Resetting bearer <eth:syzkaller0>
[  688.859085][ T7203] tipc: Disabling bearer <eth:syzkaller0>
[  689.375161][ T7212] __nla_validate_parse: 23 callbacks suppressed
[  689.375175][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14367'.
[  689.571839][ T7222] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14371'.
[  689.664647][ T7229] bond0: entered promiscuous mode
[  689.670337][ T7229] batadv0: entered promiscuous mode
[  689.674722][ T7229] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  689.678168][ T7229] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  689.685614][ T7229] bond0: left promiscuous mode
[  689.688182][ T7229] batadv0: left promiscuous mode
[  689.722243][ T7232] bond0: entered promiscuous mode
[  689.727056][ T7232] batadv0: entered promiscuous mode
[  689.729378][ T7232] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  689.732658][ T7232] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  689.739196][ T7232] bond0: left promiscuous mode
[  689.741391][ T7232] batadv0: left promiscuous mode
[  689.751610][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14376'.
[  689.830590][ T7241] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14379'.
[  689.909080][ T7246] team0: entered promiscuous mode
[  689.911302][ T7246] batadv1: entered promiscuous mode
[  689.914305][ T7246] macvlan5: entered promiscuous mode
[  689.916966][ T7246] bridge14: entered promiscuous mode
[  689.919804][ T7246] team0: entered allmulticast mode
[  689.922164][ T7246] batadv1: entered allmulticast mode
[  689.924606][ T7246] macvlan5: entered allmulticast mode
[  689.926614][ T7250] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:20003
[  689.927080][ T7246] bridge14: entered allmulticast mode
[  689.934563][ T7246] team0: Cannot enslave team device to itself
[  689.939870][ T7246] netlink: 32 bytes leftover after parsing attributes in process `syz.2.14381'.
[  690.144212][ T7271] bond0: (slave ip6tnl0): refused to change device type
[  690.147791][ T7273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14391'.
[  690.183989][ T7271] ip6erspan1: entered allmulticast mode
[  690.262295][ T7285] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  690.305560][ T7289] hsr0: entered allmulticast mode
[  690.308874][ T7289] hsr_slave_0: entered allmulticast mode
[  690.311233][ T7289] hsr_slave_1: entered allmulticast mode
[  690.541599][ T7288] hsr0: left allmulticast mode
[  690.546111][ T7288] hsr_slave_0: left allmulticast mode
[  690.550803][ T7288] hsr_slave_1: left allmulticast mode
[  690.620046][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14409'.
[  690.636091][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14409'.
[  690.805161][ T7353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14416'.
[  690.827270][ T7355] lo: entered allmulticast mode
[  690.873959][   T13] net_ratelimit: 8 callbacks suppressed
[  690.873977][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  690.894958][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14419'.
[  690.991983][ T7369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  691.052509][ T7372] 8021q: adding VLAN 0 to HW filter on device bond26
[  691.079562][ T7372] bond26: (slave veth41): Enslaving as an active interface with a down link
[  691.087951][ T7372] team0: left promiscuous mode
[  691.089675][ T7372] batadv1: left promiscuous mode
[  691.091358][ T7372] macvlan5: left promiscuous mode
[  691.093056][ T7372] bridge14: left promiscuous mode
[  691.095583][ T7372] team0: left allmulticast mode
[  691.097257][ T7372] batadv1: left allmulticast mode
[  691.098942][ T7372] macvlan5: left allmulticast mode
[  691.100628][ T7372] bridge14: left allmulticast mode
[  691.113633][ T7372] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  691.129443][ T7372] 8021q: adding VLAN 0 to HW filter on device batadv3
[  691.133315][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  691.139958][ T7372] bond26: (slave batadv3): making interface the new active one
[  691.147604][ T7372] batadv3: entered promiscuous mode
[  691.150245][ T7372] bond26: (slave batadv3): Enslaving as an active interface with an up link
[  691.218999][ T7396] pim6reg: entered allmulticast mode
[  691.222111][ T7396] pim6reg: left allmulticast mode
[  691.405143][T15830] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  691.423995][ T7406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  691.432860][ T7406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  691.459633][ T7406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  691.475386][ T7406] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  691.574202][ T7420] validate_nla: 7 callbacks suppressed
[  691.574214][ T7420] netlink: 'syz.1.14441': attribute type 16 has an invalid length.
[  691.578985][ T7420] netlink: 'syz.1.14441': attribute type 17 has an invalid length.
[  691.597682][ T7420] wlan0: left promiscuous mode
[  691.625964][ T7420] hsr0: left allmulticast mode
[  691.627807][ T7420] hsr_slave_0: left allmulticast mode
[  691.629592][ T7420] hsr_slave_1: left allmulticast mode
[  691.632770][ T7420] A link change request failed with some changes committed already. Interface ! may have been left with an inconsistent configuration, please check.
[  692.099696][ T7452] netlink: 'syz.0.14451': attribute type 1 has an invalid length.
[  692.127565][ T7452] bond25: entered promiscuous mode
[  692.130716][ T7452] 8021q: adding VLAN 0 to HW filter on device bond25
[  692.147785][ T7452] ipvlan2: entered allmulticast mode
[  692.149981][ T7452] bond25: entered allmulticast mode
[  692.162071][ T7452] ipvlan3: entered allmulticast mode
[  692.190610][ T7452] bond25: (slave bridge0): making interface the new active one
[  692.194532][ T7452] bridge0: entered promiscuous mode
[  692.196945][ T7452] bridge0: entered allmulticast mode
[  692.202154][ T7452] bond25: (slave bridge0): Enslaving as an active interface with an up link
[  692.389890][ T7473] sctp: [Deprecated]: syz.0.14459 (pid 7473) Use of struct sctp_assoc_value in delayed_ack socket option.
[  692.389890][ T7473] Use struct sctp_sack_info instead
[  692.540520][ T7483] netlink: 'syz.2.14462': attribute type 15 has an invalid length.
[  692.657705][ T7492] xt_CT: You must specify a L4 protocol and not use inversions on it
[  692.672989][ T7494] batadv0: entered promiscuous mode
[  692.676238][ T7494] batadv0: left promiscuous mode
[  692.758204][ T7487] batadv0: entered promiscuous mode
[  692.765850][ T7487] batadv0: left promiscuous mode
[  692.896372][ T7510] ip6gretap0: entered promiscuous mode
[  692.898230][ T7510] ip6gretap0: entered allmulticast mode
[  693.968055][ T7545] netlink: 'syz.0.14482': attribute type 1 has an invalid length.
[  694.744492][ T7591] __nla_validate_parse: 46 callbacks suppressed
[  694.744503][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14499'.
[  694.766972][ T7591] bond27: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  694.771380][ T7591] bond27 (unregistering): Released all slaves
[  694.873449][ T7591] block nbd7: server does not support multiple connections per device.
[  694.879028][ T7591] block nbd7: shutting down sockets
[  694.907341][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14503'.
[  695.069250][ T7625] netlink: 408 bytes leftover after parsing attributes in process `syz.1.14509'.
[  695.121514][ T7627] tap0: tun_chr_ioctl cmd 2148553947
[  695.169675][ T7632] netlink: 84 bytes leftover after parsing attributes in process `syz.2.14511'.
[  695.173645][ T7632] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14511'.
[  695.209227][ T7632] bond0 (unregistering): Released all slaves
[  695.219674][ T7638] netlink: 'syz.1.14514': attribute type 1 has an invalid length.
[  695.395897][ T7651] xfrm3: entered allmulticast mode
[  695.799846][ T7665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14524'.
[  696.018580][   T13] net_ratelimit: 12 callbacks suppressed
[  696.018599][   T13] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  696.333439][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  696.495498][ T7698] syz_tun: entered allmulticast mode
[  696.533570][ T5992] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (0); Ignoring new local tt entry: 01:00:5e:00:00:01
[  696.696082][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14539'.
[  696.722092][ T7708] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14539'.
[  696.725884][ T7708] batman_adv: batadv0: Interface deactivated: dummy0
[  696.741271][ T7708] team0: Port device macvlan5 removed
[  696.761086][ T7708] batman_adv: batadv0: Removing interface: dummy0
[  696.774531][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14539'.
[  696.777615][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14539'.
[  696.790066][ T7714] netlink: 'syz.1.14541': attribute type 5 has an invalid length.
[  696.796622][ T7714] netlink: 'syz.1.14541': attribute type 5 has an invalid length.
[  696.840142][ T7716] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2
[  697.088597][ T7735] syzkaller1: entered promiscuous mode
[  697.090464][ T7735] syzkaller1: entered allmulticast mode
[  697.371134][ T7753] can: request_module (can-proto-4) failed.
[  697.373306][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  697.396706][ T7755] bond0: entered promiscuous mode
[  697.400091][ T7755] batadv0: entered promiscuous mode
[  697.404038][ T7755] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  697.408923][ T7755] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  697.417778][ T7755] bond0: left promiscuous mode
[  697.421656][ T7755] batadv0: left promiscuous mode
[  697.444609][ T7760] netlink: 'syz.0.14556': attribute type 2 has an invalid length.
[  697.448135][ T7762] netlink: 'syz.2.14559': attribute type 16 has an invalid length.
[  697.451947][ T7760] bond0: entered promiscuous mode
[  697.456612][ T7760] batadv0: entered promiscuous mode
[  697.458900][ T7760] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  697.462122][ T7760] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  697.469337][ T7760] bond0: left promiscuous mode
[  697.471850][ T7760] batadv0: left promiscuous mode
[  697.518178][ T7766] netlink: zone id is out of range
[  697.521032][ T7766] netlink: zone id is out of range
[  697.526504][ T7766] netlink: zone id is out of range
[  697.528575][ T7766] netlink: zone id is out of range
[  697.530718][ T7766] netlink: zone id is out of range
[  697.532877][ T7766] netlink: zone id is out of range
[  697.717932][ T7775] syzkaller0: entered promiscuous mode
[  697.720807][ T7775] syzkaller0: entered allmulticast mode
[  701.533461][    C1] net_ratelimit: 17 callbacks suppressed
[  701.533477][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  702.214909][T15830] batadv3: left promiscuous mode
[  702.241029][ T7790] __nla_validate_parse: 22 callbacks suppressed
[  702.241051][ T7790] netlink: 68 bytes leftover after parsing attributes in process `syz.2.14571'.
[  702.291694][ T7794] netlink: 'syz.2.14572': attribute type 1 has an invalid length.
[  702.319287][ T7794] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  702.328522][ T7794] bond0 (unregistering): Released all slaves
[  702.347149][ T7796] netlink: 'syz.0.14573': attribute type 1 has an invalid length.
[  702.354158][ T7796] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14573'.
[  702.354571][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14574'.
[  702.573296][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  702.667010][ T7834] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14587'.
[  702.867803][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14591'.
[  702.895680][ T7850] batman_adv: batadv0: Interface deactivated: vlan3
[  702.920787][ T5667] lo speed is unknown, defaulting to 1000
[  702.922806][ T5667] syz1: Port: 1 Link DOWN
[  702.932756][T15830] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  702.936414][T15830] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  702.950022][ T7858] vlan2: entered allmulticast mode
[  702.971099][ T5667] lo speed is unknown, defaulting to 1000
[  702.971184][T15830] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  702.982242][T15830] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  702.987466][T15830] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  702.991728][T15830] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  702.998413][T15830] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  703.002040][T15830] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  703.119131][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14598'.
[  703.121992][ T7874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14598'.
[  703.260266][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14603'.
[  703.261481][ T7888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14602'.
[  703.302479][ T7888] 8021q: adding VLAN 0 to HW filter on device bond26
[  703.303751][ T7887] netlink: 'syz.1.14603': attribute type 1 has an invalid length.
[  703.317764][ T7888] vlan2: entered allmulticast mode
[  703.321034][ T7888] bond26: (slave vlan2): Error -34 calling dev_set_mtu
[  703.474708][ T7896] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14606'.
[  703.613507][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  704.175598][ T7958] 8021q: adding VLAN 0 to HW filter on device bond0
[  704.246537][ T7966] xt_hl: Unknown Hop Limit match mode: 206
[  704.254792][ T7967] vlan4: entered allmulticast mode
[  704.256538][ T7967] veth0_vlan: entered allmulticast mode
[  704.264204][ T7967] bond0: (slave vlan4): Enslaving as an active interface with an up link
[  704.532379][ T7995] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  704.536228][ T7995] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 56885 - 0
[  704.619805][ T7999] bond0: entered promiscuous mode
[  704.621989][ T7999] vlan4: entered promiscuous mode
[  704.629955][ T7999] debugfs: 'hsr1' already exists in 'hsr'
[  704.632359][ T7999] Cannot create hsr debugfs directory
[  704.635202][ T7999] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  704.639921][ T7999] 8021q: adding VLAN 0 to HW filter on device hsr1
[  704.644148][ T7999] bond0: left promiscuous mode
[  704.649430][ T7999] vlan4: left promiscuous mode
[  704.653421][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  704.750609][ T8008] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  704.795610][ T7998] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.808499][ T7998] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 56885 - 0
[  704.917679][ T7998] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  704.925921][ T7998] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 56885 - 0
[  705.020045][ T7998] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[  705.025322][ T7998] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  705.028682][ T7998] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 56885 - 0
[  705.151735][T15830] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 56885 - 0
[  705.158371][T15830] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  705.185244][T15830] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 56885 - 0
[  705.188806][T15830] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  705.249298][T15830] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 56885 - 0
[  705.257014][T15830] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  705.280174][T15830] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 56885 - 0
[  705.283970][T15830] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  705.419650][ T8051] : left promiscuous mode
[  705.639382][ T8051] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  705.643878][ T8051] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  705.658086][ T8051] geneve5: left promiscuous mode
[  705.690971][ T8051] geneve7: left promiscuous mode
[  705.693521][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  705.696781][ T8051] geneve7: left allmulticast mode
[  705.761160][ T8051] gre5: left promiscuous mode
[  705.921347][ T8051] bond25: left promiscuous mode
[  705.926314][ T8051] bridge0: left promiscuous mode
[  705.937011][ T8051] ipvlan2: left allmulticast mode
[  705.940738][ T8051] ipvlan3: left allmulticast mode
[  705.944309][ T8051] bond25: left allmulticast mode
[  705.946417][ T8051] bridge0: left allmulticast mode
[  705.972128][ T5992] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 56885 - 0
[  705.975631][ T5992] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  705.981556][ T5992] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 56885 - 0
[  705.991007][ T5992] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  705.995098][ T5992] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 56885 - 0
[  705.998693][ T5992] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  706.002161][ T5992] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 56885 - 0
[  706.006178][ T5992] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  706.075870][ T8068] netlink: 'syz.2.14662': attribute type 12 has an invalid length.
[  706.078670][ T8068] netlink: 'syz.2.14662': attribute type 14 has an invalid length.
[  706.533663][ T8091] netlink: 'syz.2.14670': attribute type 16 has an invalid length.
[  706.536800][ T8091] netlink: 'syz.2.14670': attribute type 3 has an invalid length.
[  706.649406][ T8095] mac80211_hwsim hwsim5 nicvf0: entered allmulticast mode
[  706.733487][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  706.768807][ T8103] 8021q: adding VLAN 0 to HW filter on device team0
[  706.776274][ T8103] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  706.934858][ T8070] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  706.938295][ T8111] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  707.035510][ T8118] batadv0: entered promiscuous mode
[  707.037749][ T8118] batadv0: left promiscuous mode
[  707.339175][ T8139] bond27: option ad_user_port_key: invalid value (65535)
[  707.342070][ T8139] bond27: option ad_user_port_key: allowed values 0 - 1023
[  707.348485][ T8139] bond27 (unregistering): Released all slaves
[  707.362938][ T8142] __nla_validate_parse: 15 callbacks suppressed
[  707.362954][ T8142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14687'.
[  707.773270][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  708.208907][ T8156] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14692'.
[  708.306463][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14693'.
[  708.410344][ T8176] ipt_rpfilter: unknown options
[  708.442742][ T8176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14697'.
[  708.505658][ T8176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14697'.
[  708.515268][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14697'.
[  708.524866][ T8183] ipt_rpfilter: unknown options
[  708.652191][ T8198] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14704'.
[  708.656714][ T8199] netlink: 96 bytes leftover after parsing attributes in process `syz.2.14703'.
[  708.666125][ T8193] nbd7: detected capacity change from 0 to 63
[  708.704066][   T56] block nbd7: Receive control failed (result -104)
[  708.738015][ T8205] netlink: 'syz.2.14705': attribute type 4 has an invalid length.
[  708.747795][ T8205] netlink: 'syz.2.14705': attribute type 4 has an invalid length.
[  708.813421][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  709.433885][ T8228] ip6gretap0: left promiscuous mode
[  709.440535][ T8228] ip6gretap0: left allmulticast mode
[  709.464734][ T8228] batadv1: left promiscuous mode
[  709.468676][ T8228] batadv1: left allmulticast mode
[  709.472883][ T8228] geneve3: left promiscuous mode
[  709.480364][ T8228] ip6gre6: left promiscuous mode
[  709.490774][ T8228] ip6gre6: left allmulticast mode
[  709.498176][ T8228] bond11: left promiscuous mode
[  709.510768][ T8228] bond12: left promiscuous mode
[  709.520089][ T8228] bridge10: left promiscuous mode
[  709.523500][ T8228] bridge10: left allmulticast mode
[  709.526637][ T8228] geneve5: left promiscuous mode
[  709.528882][ T8228] geneve5: left allmulticast mode
[  709.531237][ T8228] vlan2: left allmulticast mode
[  709.533763][ T8228] bond13: left allmulticast mode
[  709.535811][ T8228] geneve6: left allmulticast mode
[  709.539082][ T8228] bond15: left promiscuous mode
[  709.541315][ T8228] bridge11: left promiscuous mode
[  709.544105][ T8228] bond15: left allmulticast mode
[  709.546592][ T8228] bridge11: left allmulticast mode
[  709.550074][ T8228] ip6gre7: left promiscuous mode
[  709.552142][ T8228] ip6gre7: left allmulticast mode
[  709.560344][ T8228] bond18: left promiscuous mode
[  709.563494][ T8228] bridge12: left promiscuous mode
[  709.570370][ T8228] : left allmulticast mode
[  709.574155][ T8228] bond18: left allmulticast mode
[  709.578224][ T8228] bridge12: left allmulticast mode
[  709.584542][ T8228] bridge14: left allmulticast mode
[  709.593410][ T8228] bridge15: left allmulticast mode
[  709.595664][ T8228] gtp0: left allmulticast mode
[  709.598939][ T8228] bond22: left promiscuous mode
[  709.604937][ T8228] bridge18: left promiscuous mode
[  709.613412][ T8228] vlan5: left allmulticast mode
[  709.615262][ T8228] bond22: left allmulticast mode
[  709.618807][ T8228] bridge18: left allmulticast mode
[  709.623008][ T8228] xfrm3: left allmulticast mode
[  709.636282][ T5992] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  709.638983][ T5992] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  709.643664][   T31] syz0: Port: 1 Link DOWN
[  709.685652][ T5992] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  709.689905][ T5992] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  709.694460][ T8231] netlink: 80 bytes leftover after parsing attributes in process `syz.1.14711'.
[  709.697605][ T8231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14711'.
[  709.698113][ T5992] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  709.705569][ T5992] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  709.709081][ T5992] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  709.711861][ T5992] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  709.715830][ T8231] geneve0: entered allmulticast mode
[  709.853409][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  709.951912][ T8246] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  709.954737][ T8246] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  710.893436][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  711.299068][ T8297] netlink: 'syz.2.14731': attribute type 2 has an invalid length.
[  711.334323][ T8299] openvswitch: netlink: Key 26 has unexpected len 4 expected 16
[  711.933371][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  712.007002][ T8323] syzkaller1: entered promiscuous mode
[  712.009428][ T8323] syzkaller1: entered allmulticast mode
[  712.195389][ T8331] 8021q: adding VLAN 0 to HW filter on device batadv2
[  712.265939][ T8340] RDS: rds_bind could not find a transport for ::ffff:172.20.20.27, load rds_tcp or rds_rdma?
[  712.442874][ T8358] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  712.658686][ T8376] openvswitch: netlink: Multiple metadata blocks provided
[  712.661803][ T8376] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  712.753011][ T8390] __nla_validate_parse: 11 callbacks suppressed
[  712.753021][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14762'.
[  712.769433][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14762'.
[  712.786139][ T8379] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  712.791144][ T8379] netlink: 92 bytes leftover after parsing attributes in process `syz.2.14762'.
[  712.795241][ T8395] bond0: entered promiscuous mode
[  712.798611][ T8395] batadv0: entered promiscuous mode
[  712.801412][ T8395] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  712.805246][ T8395] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  712.812932][ T8395] bond0: left promiscuous mode
[  712.815889][ T8395] batadv0: left promiscuous mode
[  712.856522][ T8400] netlink: 44 bytes leftover after parsing attributes in process `syz.2.14768'.
[  712.859765][ T8400] netlink: 43 bytes leftover after parsing attributes in process `syz.2.14768'.
[  712.863392][ T8400] netlink: 'syz.2.14768': attribute type 6 has an invalid length.
[  712.872159][ T8400] netlink: 'syz.2.14768': attribute type 5 has an invalid length.
[  712.877369][ T8400] netlink: 43 bytes leftover after parsing attributes in process `syz.2.14768'.
[  712.953409][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14773'.
[  712.973439][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  712.988822][ T8412] 8021q: adding VLAN 0 to HW filter on device bond27
[  713.001874][ T8412] vlan7: entered allmulticast mode
[  713.004396][ T8412] erspan0: entered allmulticast mode
[  713.007567][ T8412] bond27: (slave vlan7): Opening slave failed
[  713.075609][ T8429] bond0: entered promiscuous mode
[  713.078592][ T8429] batadv0: entered promiscuous mode
[  713.082476][ T8429] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  713.087434][ T8429] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  713.096091][ T8429] bond0: left promiscuous mode
[  713.108118][ T8429] batadv0: left promiscuous mode
[  713.216795][ T8441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  713.267166][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14788'.
[  713.289750][ T8454] 8021q: adding VLAN 0 to HW filter on device bond27
[  713.302149][ T8454] vlan2: entered allmulticast mode
[  713.305963][ T8454] bond27: (slave vlan2): Error -34 calling dev_set_mtu
[  714.013453][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  714.391278][ T8469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  714.495628][ T8486] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14796'.
[  714.682054][ T8509] netlink: 144 bytes leftover after parsing attributes in process `syz.0.14801'.
[  715.053301][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  716.093396][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  717.133539][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  717.569259][ T8498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  717.638858][ T8524] netlink: 'syz.0.14806': attribute type 1 has an invalid length.
[  717.671756][ T8524] 8021q: adding VLAN 0 to HW filter on device bond28
[  717.720644][ T8536] netlink: 'syz.0.14809': attribute type 30 has an invalid length.
[  717.734264][ T5992] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  717.738095][ T5992] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  717.743395][ T5992] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  717.746326][ T5992] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  717.750751][ T8536] netlink: 'syz.0.14809': attribute type 30 has an invalid length.
[  717.779660][ T8536] __nla_validate_parse: 4 callbacks suppressed
[  717.779671][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14809'.
[  717.870564][ T8548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14813'.
[  718.173348][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  718.587244][ T8538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  718.826041][ T8583] 8021q: adding VLAN 0 to HW filter on device batadv4
[  718.864154][ T8573] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14821'.
[  719.032173][ T8595] tipc: Resetting bearer <eth:syzkaller0>
[  719.088375][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  719.094187][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  719.101675][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  719.107107][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  719.223328][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  719.330243][ T8624] netlink: 'syz.2.14834': attribute type 1 has an invalid length.
[  719.332845][ T8625] netlink: 'syz.2.14834': attribute type 1 has an invalid length.
[  719.347366][ T8624] 8021q: adding VLAN 0 to HW filter on device bond28
[  719.355775][ T8624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14834'.
[  719.360023][ T8624] bond28: entered promiscuous mode
[  719.362306][ T8624] bond28: entered allmulticast mode
[  719.545846][ T8633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14835'.
[  719.550272][ T8633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14835'.
[  719.876575][ T8644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14838'.
[  719.892456][ T8644] 8021q: adding VLAN 0 to HW filter on device bond26
[  719.904038][ T8644] vlan0: entered allmulticast mode
[  719.906808][ T8644] erspan0: entered allmulticast mode
[  719.909154][ T8644] bond26: (slave vlan0): Error -34 calling dev_set_mtu
[  720.145022][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14843'.
[  720.263402][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  721.293411][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  722.333433][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  722.686064][ T8637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  722.817987][ T8678] bridge20: the hash_elasticity option has been deprecated and is always 16
[  722.820764][ T8678] bridge20: entered allmulticast mode
[  722.875657][ T8686] netlink: zone id is out of range
[  722.879034][ T8686] netlink: zone id is out of range
[  722.895155][ T8689] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  722.945102][ T8689] netlink: 188 bytes leftover after parsing attributes in process `syz.0.14854'.
[  722.951169][ T8689] openvswitch: netlink: Flow key attr not present in new flow.
[  722.985001][ T8700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14856'.
[  723.005642][ T8700] 8021q: adding VLAN 0 to HW filter on device bond27
[  723.029846][ T8700] vlan0: entered allmulticast mode
[  723.035973][ T8700] bond27: (slave vlan0): Error -34 calling dev_set_mtu
[  723.077866][ T8714] netlink: 'syz.0.14862': attribute type 1 has an invalid length.
[  723.092295][ T8714] 8021q: adding VLAN 0 to HW filter on device bond29
[  723.129942][ T8714] bond29: (slave veth27): Enslaving as an active interface with a down link
[  723.142094][ T8719] netlink: 'syz.1.14864': attribute type 1 has an invalid length.
[  723.157747][ T8719] netlink: 256 bytes leftover after parsing attributes in process `syz.1.14864'.
[  723.172329][ T8714] bond29: (slave veth29): Enslaving as an active interface with a down link
[  723.207078][ T8722] tipc: Resetting bearer <eth:syzkaller0>
[  723.212415][ T8722] tipc: Resetting bearer <eth:syzkaller0>
[  723.220809][ T8722] netlink: 'syz.2.14865': attribute type 16 has an invalid length.
[  723.227382][ T8722] netlink: 'syz.2.14865': attribute type 17 has an invalid length.
[  723.248684][ T8724] bond29: entered allmulticast mode
[  723.267404][ T8726] netlink: 112 bytes leftover after parsing attributes in process `syz.1.14866'.
[  723.300304][ T8722] 8021q: adding VLAN 0 to HW filter on device team0
[  723.307208][ T8722] 8021q: adding VLAN 0 to HW filter on device batadv0
[  723.317865][ T8735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14868'.
[  723.339287][ T8722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  723.343635][ T8722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  723.348294][ T8722] veth1_vlan: left promiscuous mode
[  723.351321][ T8722] veth0_vlan: left promiscuous mode
[  723.356091][ T8722] veth0_vlan: entered promiscuous mode
[  723.359016][ T8722] veth1_vlan: entered promiscuous mode
[  723.371068][ T8722] mac80211_hwsim hwsim5 nicvf0: left allmulticast mode
[  723.373523][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  723.380675][ T8722] 8021q: adding VLAN 0 to HW filter on device bond1
[  723.381136][ T8740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14870'.
[  723.384993][ T8722] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  723.415614][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  723.420007][T13665] syz0: Port: 1 Link ACTIVE
[  723.421626][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  723.436868][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  723.441371][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  723.446517][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  723.451314][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  723.459123][ T8747] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14873'.
[  723.463631][T13665] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  723.535844][ T8761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14878'.
[  723.558924][ T8764] batadv0: entered promiscuous mode
[  723.562780][ T8764] batadv0: left promiscuous mode
[  723.628493][ T8780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14883'.
[  723.646018][ T8783] xt_CT: You must specify a L4 protocol and not use inversions on it
[  723.646351][ T8783] netlink: 'syz.0.14884': attribute type 21 has an invalid length.
[  723.674286][ T8783] netlink: 160 bytes leftover after parsing attributes in process `syz.0.14884'.
[  723.706397][ T8787] netlink: 'syz.2.14886': attribute type 1 has an invalid length.
[  723.734085][ T8787] bond29: (slave bridge21): Enslaving as a backup interface with an up link
[  723.781484][ T8800] 8021q: VLANs not supported on gre0
[  723.844495][ T8805] netlink: 'syz.1.14891': attribute type 3 has an invalid length.
[  724.287605][ T8826] netlink: 'syz.0.14896': attribute type 13 has an invalid length.
[  724.293262][ T8826] netlink: 'syz.0.14896': attribute type 17 has an invalid length.
[  724.312766][ T8826] 8021q: adding VLAN 0 to HW filter on device 60X
[  724.341374][ T8826] veth1_vlan: left promiscuous mode
[  724.345188][ T8826] veth0_vlan: left promiscuous mode
[  724.347796][ T8826] veth0_vlan: entered promiscuous mode
[  724.351647][ T8826] veth1_vlan: entered promiscuous mode
[  724.362736][ T8826] veth0_macvtap: left promiscuous mode
[  724.376489][ T8826] veth0_macvtap: entered promiscuous mode
[  724.405599][ T8826] 8021q: adding VLAN 0 to HW filter on device bond1
[  724.413404][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  724.416264][T13665] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  724.445253][ T8826] 1{X: entered promiscuous mode
[  724.449363][ T8826] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  724.496187][T13674] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  724.512818][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  724.516353][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  724.519150][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  724.524771][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  724.531929][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  724.536419][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  724.543630][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  724.546411][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  724.799481][ T8858] nbd: must specify a size in bytes for the device
[  724.841648][ T8855] syzkaller0: entered promiscuous mode
[  724.853525][ T8855] syzkaller0: entered allmulticast mode
[  725.453425][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  726.690129][ T8896] batadv0: entered promiscuous mode
[  726.692098][ T8896] batadv0: left promiscuous mode
[  726.700317][ T8893] netlink: 'syz.0.14917': attribute type 1 has an invalid length.
[  726.761537][ T8899] 8021q: adding VLAN 0 to HW filter on device bond30
[  726.773004][ T8899] vlan2: entered promiscuous mode
[  726.775342][ T8899] bond30: entered promiscuous mode
[  726.779733][ T8899] vlan2: entered allmulticast mode
[  726.782021][ T8899] bond30: entered allmulticast mode
[  726.794729][ T8899] 8021q: adding VLAN 0 to HW filter on device batadv8
[  726.801922][ T8899] bond30: (slave batadv8): making interface the new active one
[  726.805886][ T8899] batadv8: entered promiscuous mode
[  726.808337][ T8899] batadv8: entered allmulticast mode
[  726.811549][ T8899] bond30: (slave batadv8): Enslaving as an active interface with an up link
[  726.839103][ T8905] 8021q: adding VLAN 0 to HW filter on device bond28
[  726.869548][ T8905] vlan0: entered allmulticast mode
[  726.874790][ T8905] bond28: (slave vlan0): Error -34 calling dev_set_mtu
[  727.264486][ T8933] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  727.293566][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  727.533418][    C1] net_ratelimit: 1 callbacks suppressed
[  727.533428][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  727.562569][ T8967] 8021q: adding VLAN 0 to HW filter on device bond29
[  727.570518][ T8967] vlan0: entered allmulticast mode
[  727.572731][ T8967] bond29: (slave vlan0): Error -34 calling dev_set_mtu
[  727.658253][ T8974] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  727.664225][ T8974] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  728.505246][ T8994] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  728.549869][ T8996] tipc: Failed to remove unknown binding: 66,0,0/4266804985:1630017216/1630017219
[  728.552890][ T8996] tipc: Failed to remove unknown binding: 66,0,0/4266804985:1630017216/1630017218
[  728.557248][ T8996] tipc: Failed to remove unknown binding: 66,0,0/4266804985:1630017216/1630017217
[  728.560543][ T8996] tipc: Failed to remove unknown binding: 66,0,0/4266804985:1630017216/1630017219
[  728.563889][ T8996] tipc: Failed to remove unknown binding: 66,0,0/4266804985:1630017216/1630017218
[  728.566922][ T8996] tipc: Failed to remove unknown binding: 66,0,0/4266804985:1630017216/1630017217
[  728.573426][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  728.634475][ T8999] x_tables: duplicate entry at hook 1
[  729.613491][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  729.707647][ T9046] bond0: entered promiscuous mode
[  729.709553][ T9046] vlan4: entered promiscuous mode
[  729.714166][ T9046] debugfs: 'hsr1' already exists in 'hsr'
[  729.716073][ T9046] Cannot create hsr debugfs directory
[  729.717943][ T9046] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  729.725649][ T9046] 8021q: adding VLAN 0 to HW filter on device hsr1
[  729.731477][ T9046] bond0: left promiscuous mode
[  729.734922][ T9046] vlan4: left promiscuous mode
[  729.871249][ T9057] __nla_validate_parse: 19 callbacks suppressed
[  729.871261][ T9057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14958'.
[  729.922229][ T9066] validate_nla: 4 callbacks suppressed
[  729.922249][ T9066] netlink: 'syz.1.14963': attribute type 21 has an invalid length.
[  729.928321][ T9066] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14963'.
[  729.931674][ T9066] netlink: 3 bytes leftover after parsing attributes in process `syz.1.14963'.
[  729.942611][ T9067] bond0: entered promiscuous mode
[  729.944934][ T9067] vlan4: entered promiscuous mode
[  729.949008][ T9067] debugfs: 'hsr1' already exists in 'hsr'
[  729.951330][ T9067] Cannot create hsr debugfs directory
[  729.955545][ T9067] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  729.959146][ T9067] 8021q: adding VLAN 0 to HW filter on device hsr1
[  730.076233][ T9073] netlink: 56 bytes leftover after parsing attributes in process `syz.1.14966'.
[  730.088215][ T9073] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.14966'.
[  730.437226][ T9084] batadv0: entered promiscuous mode
[  730.439197][ T9084] batadv0: left promiscuous mode
[  730.647803][ T9096] netlink: 16146 bytes leftover after parsing attributes in process `syz.1.14971'.
[  730.653356][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  730.657734][ T9096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14971'.
[  730.775080][ T9107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14975'.
[  730.820547][ T9107] 8021q: adding VLAN 0 to HW filter on device bond30
[  730.837838][ T9107] vlan7: entered allmulticast mode
[  730.852220][ T9107] bond30: (slave vlan7): Enslaving as an active interface with an up link
[  730.891859][ T9111] syzkaller1: entered promiscuous mode
[  730.902410][ T9111] syzkaller1: entered allmulticast mode
[  730.910917][ T9119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14978'.
[  730.981301][ T9121] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14979'.
[  731.126504][ T9142] netlink: 'syz.1.14986': attribute type 16 has an invalid length.
[  731.129052][ T9142] netlink: 'syz.1.14986': attribute type 17 has an invalid length.
[  731.146668][ T9142] 8021q: adding VLAN 0 to HW filter on device bond0
[  731.439490][ T9142] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  731.450808][ T9142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  731.481085][ T9142] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  731.490617][T13665] lo speed is unknown, defaulting to 1000
[  731.493987][T13674] batman_adv: batadv0: Interface activated: vlan3
[  731.497007][T13665] syz1: Port: 1 Link ACTIVE
[  731.524444][ T8954] bridge0: port 2(veth1_to_bridge) entered blocking state
[  731.526917][ T8954] bridge0: port 2(veth1_to_bridge) entered forwarding state
[  731.554770][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  731.564699][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  731.582422][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  731.592945][T13665] lo speed is unknown, defaulting to 1000
[  731.597054][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  731.641544][ T9159] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  731.644906][ T9159] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  731.693368][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  731.743802][ T9173] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  731.806933][ T9169] nbd8: detected capacity change from 0 to 63
[  731.820478][   T56] block nbd8: Receive control failed (result -104)
[  732.189333][ T9187] openvswitch: netlink: Duplicate or invalid key (type 0).
[  732.191940][ T9187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  732.274380][ T9197] netlink: 'syz.0.15005': attribute type 3 has an invalid length.
[  732.278921][ T9197] netlink: 'syz.0.15005': attribute type 1 has an invalid length.
[  732.540358][ T9212] block nbd0: reconnected socket
[  732.561834][   T57] block nbd0: Receive control failed (result -32)
[  732.608072][ T9215] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  732.617593][ T9215] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  732.733491][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  732.852004][ T9239] netlink: 'syz.1.15017': attribute type 1 has an invalid length.
[  732.880534][ T9239] 8021q: adding VLAN 0 to HW filter on device bond30
[  732.907077][ T9239] bond30: (slave veth17): Enslaving as an active interface with a down link
[  732.926361][ T9239] 8021q: adding VLAN 0 to HW filter on device batadv3
[  732.935878][ T9239] bond30: (slave batadv3): making interface the new active one
[  732.939374][ T9239] batadv3: entered promiscuous mode
[  732.941564][ T9239] bond30: (slave batadv3): Enslaving as an active interface with an up link
[  733.174543][ T9267] tipc: Resetting bearer <eth:syzkaller0>
[  733.196126][ T9272] netlink: 'syz.1.15030': attribute type 7 has an invalid length.
[  733.199012][ T9272] netlink: 'syz.1.15030': attribute type 8 has an invalid length.
[  733.495910][ T9305] bond0: entered promiscuous mode
[  733.498936][ T9305] batadv0: entered promiscuous mode
[  733.501291][ T9305] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  733.504869][ T9305] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  733.510903][ T9305] bond0: left promiscuous mode
[  733.518497][ T9305] batadv0: left promiscuous mode
[  733.730980][ T9325] vxcan1: entered allmulticast mode
[  733.773520][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  733.799283][ T9331] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  734.176865][ T9364] team0 (unregistering): Port device batadv1 removed
[  734.180740][ T9364] team0 (unregistering): Port device bridge14 removed
[  734.374825][ T9379] syzkaller0: entered promiscuous mode
[  734.376784][ T9379] syzkaller0: entered allmulticast mode
[  734.404170][ T9385] netlink: 'syz.2.15060': attribute type 4 has an invalid length.
[  734.813524][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  735.693944][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  735.853371][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  736.893331][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  737.047599][ T9398] bridge0: port 2(veth1_to_bridge) entered disabled state
[  737.068631][ T9398] netlink: 'syz.1.15063': attribute type 16 has an invalid length.
[  737.072597][ T9398] netlink: 'syz.1.15063': attribute type 17 has an invalid length.
[  737.089792][ T9398] bridge0: port 2(veth1_to_bridge) entered blocking state
[  737.092707][ T9398] bridge0: port 2(veth1_to_bridge) entered forwarding state
[  737.104216][ T9398] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  737.122572][ T9406] __nla_validate_parse: 20 callbacks suppressed
[  737.122582][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15065'.
[  737.138105][ T9406] macvlan7: entered allmulticast mode
[  737.143402][ T9406] 1{X: entered allmulticast mode
[  737.219853][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15067'.
[  737.236568][ T9414] 8021q: adding VLAN 0 to HW filter on device bond31
[  737.335190][ T9419] netlink: 'syz.1.15068': attribute type 2 has an invalid length.
[  737.412400][ T9425] vxcan3: entered allmulticast mode
[  737.827002][ T9391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  737.933392][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  737.989400][ T9444] netlink: 'syz.1.15077': attribute type 8 has an invalid length.
[  737.993650][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15077'.
[  738.037693][ T9444] netlink: 'syz.1.15077': attribute type 8 has an invalid length.
[  738.042284][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15077'.
[  738.061129][ T9449] atomic_op ffff8881077b7998 conn xmit_atomic 0000000000000000
[  738.341437][ T9472] netlink: 'syz.0.15087': attribute type 16 has an invalid length.
[  738.344937][ T9472] netlink: 'syz.0.15087': attribute type 17 has an invalid length.
[  738.406025][ T9472] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  738.422542][ T9471] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15085'.
[  738.455365][ T9477] netlink: 'syz.0.15088': attribute type 22 has an invalid length.
[  738.457969][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15088'.
[  738.461377][ T9477] netlink: 'syz.0.15088': attribute type 22 has an invalid length.
[  738.464070][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15088'.
[  738.468663][ T9477] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15088'.
[  738.503113][ T9477] bond0 (unregistering): Released all slaves
[  738.899564][  T494] block nbd7: Possible stuck request ffff88810b5d0000: control (read@0,4096B). Runtime 30 seconds
[  738.973323][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  739.125493][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15096'.
[  739.186738][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15100'.
[  740.013377][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  741.053317][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  742.093424][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  742.175115][ T9501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  742.237278][ T9526] __nla_validate_parse: 4 callbacks suppressed
[  742.237294][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15105'.
[  742.265375][ T9526] 8021q: adding VLAN 0 to HW filter on device bond32
[  742.299894][ T9533] netlink: 'syz.0.15108': attribute type 83 has an invalid length.
[  742.305342][ T9533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15108'.
[  742.418663][ T9553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15116'.
[  742.421214][ T9554] netlink: 'syz.1.15115': attribute type 1 has an invalid length.
[  742.440069][ T9554] 8021q: adding VLAN 0 to HW filter on device bond33
[  742.512474][ T9557] tipc: Resetting bearer <eth:syzkaller0>
[  742.517590][ T9557] tipc: Resetting bearer <eth:syzkaller0>
[  742.522654][ T9565] netlink: 'syz.2.15117': attribute type 16 has an invalid length.
[  742.528365][ T9565] netlink: 'syz.2.15117': attribute type 17 has an invalid length.
[  742.552411][ T9565] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  742.584211][ T5667] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  742.602930][   T34] audit: type=1804 audit(1785180105.455:19): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.15124" name="/newroot/4881/memory.events" dev="tmpfs" ino=24671 res=1 errno=0
[  742.615366][   T34] audit: type=1800 audit(1785180105.465:20): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.15124" name="memory.events" dev="tmpfs" ino=24671 res=0 errno=0
[  742.622766][   T34] audit: type=1804 audit(1785180105.475:21): pid=9574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.15124" name="/newroot/4881/memory.events" dev="tmpfs" ino=24671 res=1 errno=0
[  742.667240][ T9579] tipc: Resetting bearer <eth:syzkaller0>
[  742.773656][ T5667] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  742.861552][ T9592] bridge0: port 2(veth1_to_bridge) entered disabled state
[  742.882801][ T9592] netlink: 'syz.1.15130': attribute type 16 has an invalid length.
[  742.893631][ T9592] netlink: 'syz.1.15130': attribute type 17 has an invalid length.
[  742.908749][ T9592] bridge0: port 2(veth1_to_bridge) entered blocking state
[  742.911863][ T9592] bridge0: port 2(veth1_to_bridge) entered forwarding state
[  742.922816][ T9592] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  742.991556][ T9598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15131'.
[  743.133291][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  743.466743][ T9618] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  743.790778][ T9634] netlink: 'syz.0.15139': attribute type 4 has an invalid length.
[  743.833656][ T9634] netlink: zone id is out of range
[  743.836026][ T9634] netlink: zone id is out of range
[  743.838157][ T9634] netlink: zone id is out of range
[  743.840614][ T9634] netlink: zone id is out of range
[  743.846216][ T9634] netlink: zone id is out of range
[  743.848965][ T9634] netlink: zone id is out of range
[  743.851890][ T9634] netlink: zone id is out of range
[  743.854997][ T9634] netlink: zone id is out of range
[  743.858855][ T9634] netlink: zone id is out of range
[  744.003870][T15830] batadv3: left promiscuous mode
[  744.134095][ T9655] tipc: Resetting bearer <eth:syzkaller0>
[  744.136354][ T9655] tipc: Resetting bearer <eth:syzkaller0>
[  744.150315][ T9655] netlink: 'syz.2.15146': attribute type 16 has an invalid length.
[  744.152906][ T9655] netlink: 'syz.2.15146': attribute type 17 has an invalid length.
[  744.198679][T26337] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  744.363533][T26337] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  744.918323][ T9674] netlink: 'syz.1.15152': attribute type 29 has an invalid length.
[  744.921612][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15152'.
[  744.926976][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15152'.
[  744.930862][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15152'.
[  744.935329][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15152'.
[  744.939355][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15152'.
[  744.943467][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15152'.
[  745.198148][ T9681] tipc: Resetting bearer <eth:syzkaller0>
[  746.987635][ T9641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  747.550015][ T9713] syzkaller0: entered promiscuous mode
[  747.551802][ T9713] syzkaller0: entered allmulticast mode
[  748.333380][    C1] net_ratelimit: 727 callbacks suppressed
[  748.333396][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  749.099024][ T9723] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  749.103322][ T9723] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  749.157556][ T9729] __nla_validate_parse: 56 callbacks suppressed
[  749.157578][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15169'.
[  749.203499][ T9729] validate_nla: 60 callbacks suppressed
[  749.203511][ T9729] netlink: 'syz.0.15169': attribute type 8 has an invalid length.
[  749.337841][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15175'.
[  749.373300][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  749.535793][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15184'.
[  749.674359][ T9790] nbd: socks must be embedded in a SOCK_ITEM attr
[  749.735279][ T9793] netlink: 'syz.0.15179': attribute type 4 has an invalid length.
[  750.413871][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  750.515783][ T9845] IPv4: Oversized IP packet from 127.202.26.0
[  750.585165][ T9853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15197'.
[  750.711602][ T9861] bridge0: port 2(veth1_to_bridge) entered disabled state
[  750.737228][ T9861] netlink: 'syz.1.15198': attribute type 16 has an invalid length.
[  750.743594][ T9861] netlink: 'syz.1.15198': attribute type 17 has an invalid length.
[  750.764446][ T9861] bridge0: port 2(veth1_to_bridge) entered blocking state
[  750.766753][ T9861] bridge0: port 2(veth1_to_bridge) entered forwarding state
[  750.777325][ T9861] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  750.943966][ T9872] netlink: 67 bytes leftover after parsing attributes in process `syz.0.15200'.
[  751.301379][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15205'.
[  751.307900][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15205'.
[  751.312731][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15205'.
[  751.453482][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  751.475751][ T9909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15210'.
[  751.506188][ T9912] netlink: 'syz.0.15211': attribute type 16 has an invalid length.
[  751.509264][ T9912] netlink: 'syz.0.15211': attribute type 17 has an invalid length.
[  751.539531][ T9912] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  751.723625][ T9916] netlink: 'syz.0.15212': attribute type 7 has an invalid length.
[  751.733680][ T9916] netlink: 'syz.0.15212': attribute type 8 has an invalid length.
[  751.909202][ T9927] netlink: 'syz.2.15216': attribute type 1 has an invalid length.
[  751.916485][ T9927] netlink: 128 bytes leftover after parsing attributes in process `syz.2.15216'.
[  751.924815][ T9927] netlink: 'syz.2.15216': attribute type 1 has an invalid length.
[  751.938468][ T9927] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5
[  752.413350][ T9965] bond4: (slave lo): Releasing backup interface
[  752.416113][ T9965] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  752.421489][ T9965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  752.493469][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  752.586237][ T9981] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  752.977033][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  753.018076][T10023] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  753.054137][T22387] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  753.298026][T10059] syzkaller0: entered promiscuous mode
[  753.302318][T10059] syzkaller0: entered allmulticast mode
[  753.533362][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  753.673504][T22387] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  754.370507][T10121] syzkaller1: entered promiscuous mode
[  754.375089][T10121] syzkaller1: entered allmulticast mode
[  754.441988][T10125] syzkaller0: entered promiscuous mode
[  754.444679][T10125] syzkaller0: entered allmulticast mode
[  754.468105][T10125] __nla_validate_parse: 12 callbacks suppressed
[  754.468115][T10125] netlink: 596 bytes leftover after parsing attributes in process `syz.1.15282'.
[  754.546513][T10130] validate_nla: 4 callbacks suppressed
[  754.546527][T10130] netlink: 'syz.0.15283': attribute type 1 has an invalid length.
[  754.561760][T10128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15283'.
[  754.568219][T10128] 8021q: adding VLAN 0 to HW filter on device bond0
[  754.573382][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  754.605233][T10133] netlink: 'syz.1.15284': attribute type 1 has an invalid length.
[  754.649533][T10133] bond34: entered promiscuous mode
[  754.658123][T10140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15284'.
[  754.659025][T10133] 8021q: adding VLAN 0 to HW filter on device bond34
[  754.683562][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15284'.
[  754.701025][T10133] bond34 (unregistering): Released all slaves
[  755.397410][T10211] tipc: Resetting bearer <eth:syzkaller0>
[  755.458545][T10217] x_tables: duplicate underflow at hook 1
[  755.471575][T10217] netlink: 'syz.0.15316': attribute type 2 has an invalid length.
[  755.543075][T10225] geneve1: entered promiscuous mode
[  755.562303][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  755.567702][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  755.574413][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  755.585383][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  755.613419][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  755.617031][T10229] gretap5: entered promiscuous mode
[  755.665442][T10232] team0: Device vlan0 is already an upper device of the team interface
[  755.785674][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15323'.
[  755.791671][T10236] IPv6: NLM_F_CREATE should be specified when creating new route
[  755.886515][T10244] IPVS: Error connecting to the multicast addr
[  755.963706][T10250] bridge0: port 2(veth1_to_bridge) entered disabled state
[  755.988712][T10250] netlink: 'syz.1.15326': attribute type 16 has an invalid length.
[  755.994504][T10250] netlink: 'syz.1.15326': attribute type 17 has an invalid length.
[  756.009827][T10250] bridge0: port 2(veth1_to_bridge) entered blocking state
[  756.012294][T10250] bridge0: port 2(veth1_to_bridge) entered forwarding state
[  756.022297][T10250] geneve1: left promiscuous mode
[  756.026968][T10250] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  756.032475][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  756.042443][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  756.058840][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  756.065052][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  756.098969][T10255] pim6reg: entered allmulticast mode
[  756.107368][T10255] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15327'.
[  756.537597][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15332'.
[  756.540461][T10279] netlink: 'syz.0.15332': attribute type 10 has an invalid length.
[  756.543038][T10279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15332'.
[  756.584365][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15333'.
[  756.607505][T10278] netlink: 'syz.2.15333': attribute type 1 has an invalid length.
[  756.611646][T10278] netlink: 248 bytes leftover after parsing attributes in process `syz.2.15333'.
[  756.653296][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  757.693371][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  757.850580][T10405] netlink: 'syz.0.15376': attribute type 8 has an invalid length.
[  757.897280][T10413] netlink: 'syz.0.15379': attribute type 7 has an invalid length.
[  758.012727][T10423] syzkaller0: entered promiscuous mode
[  758.015787][T10423] syzkaller0: entered allmulticast mode
[  758.126331][T10433] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  758.680960][T10470] tipc: Resetting bearer <eth:syzkaller0>
[  758.685710][T10470] tipc: Resetting bearer <eth:syzkaller0>
[  758.698148][T10470] netlink: 'syz.2.15393': attribute type 16 has an invalid length.
[  758.731406][T10470] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  758.737670][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  758.756443][T13675] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  758.793742][T13675] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  758.830926][T10489] nbd: must specify a size in bytes for the device
[  758.921081][T10499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  759.120102][T10518] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[  759.142959][T10520] tipc: Resetting bearer <eth:syzkaller0>
[  759.147814][T10518] 
[  759.148909][T10518] ======================================================
[  759.151272][T10518] WARNING: possible circular locking dependency detected
[  759.153559][T10518] syzkaller #0 Not tainted
[  759.155340][T10518] ------------------------------------------------------
[  759.158006][T10518] syz.1.15408/10518 is trying to acquire lock:
[  759.160377][T10518] ffff888199ca3698 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0
[  759.163375][T10518] 
[  759.163375][T10518] but task is already holding lock:
[  759.166165][T10518] ffff888199d2e2a8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  759.169853][T10518] 
[  759.169853][T10518] which lock already depends on the new lock.
[  759.169853][T10518] 
[  759.173254][T10518] 
[  759.173254][T10518] the existing dependency chain (in reverse order) is:
[  759.176078][T10518] 
[  759.176078][T10518] -> #6 (&q->elevator_lock){+.+.}-{4:4}:
[  759.178511][T10518]        __mutex_lock+0x19d/0x1550
[  759.180171][T10518]        elevator_change+0x1af/0x480
[  759.181841][T10518]        elevator_set_none+0xb5/0x140
[  759.183534][T10518]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  759.185469][T10518]        nbd_start_device+0x189/0xb30
[  759.187071][T10518]        nbd_genl_connect+0x1597/0x1c10
[  759.188765][T10518]        genl_family_rcv_msg_doit+0x233/0x340
[  759.190663][T10518]        genl_rcv_msg+0x614/0x7a0
[  759.192301][T10518]        netlink_rcv_skb+0x226/0x4a0
[  759.194035][T10518]        genl_rcv+0x28/0x40
[  759.195585][T10518]        netlink_unicast+0x7bb/0x940
[  759.197703][T10518]        netlink_sendmsg+0x813/0xb40
[  759.199798][T10518]        sock_sendmsg_nosec+0x13a/0x180
[  759.202009][T10518]        ____sys_sendmsg+0x54e/0x850
[  759.204103][T10518]        ___sys_sendmsg+0x2a5/0x360
[  759.206175][T10518]        __x64_sys_sendmsg+0x1b1/0x290
[  759.208434][T10518]        do_syscall_64+0x174/0x580
[  759.210558][T10518]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.213179][T10518] 
[  759.213179][T10518] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  759.216677][T10518]        blk_alloc_queue+0x544/0x690
[  759.218843][T10518]        __blk_mq_alloc_disk+0x194/0x390
[  759.221089][T10518]        nbd_dev_add+0x494/0xb60
[  759.223103][T10518]        nbd_init+0x15f/0x1e0
[  759.224981][T10518]        do_one_initcall+0x250/0x870
[  759.227060][T10518]        do_initcall_level+0x10a/0x1a0
[  759.229272][T10518]        do_initcalls+0x59/0xa0
[  759.231296][T10518]        kernel_init_freeable+0x29d/0x3e0
[  759.233603][T10518]        kernel_init+0x1d/0x1d0
[  759.235506][T10518]        ret_from_fork+0x514/0xb70
[  759.237523][T10518]        ret_from_fork_asm+0x1a/0x30
[  759.239640][T10518] 
[  759.239640][T10518] -> #4 (fs_reclaim){+.+.}-{0:0}:
[  759.242604][T10518]        fs_reclaim_acquire+0x71/0x100
[  759.244840][T10518]        __kmalloc_cache_node_noprof+0x66/0x630
[  759.247376][T10518]        create_worker+0x112/0x7b0
[  759.249357][T10518]        workqueue_prepare_cpu+0xe4/0x170
[  759.251573][T10518]        cpuhp_invoke_callback+0x434/0x810
[  759.253892][T10518]        _cpu_up+0x2ce/0x5b0
[  759.255724][T10518]        cpu_up+0x1d2/0x220
[  759.257592][T10518]        cpuhp_bringup_mask+0xb2/0x1a0
[  759.259755][T10518]        cpuhp_bringup_cpus_parallel+0x109/0x120
[  759.262297][T10518]        bringup_nonboot_cpus+0x17/0x30
[  759.264573][T10518]        smp_init+0x32/0x110
[  759.266491][T10518]        kernel_init_freeable+0x27f/0x3e0
[  759.268692][T10518]        kernel_init+0x1d/0x1d0
[  759.270622][T10518]        ret_from_fork+0x514/0xb70
[  759.272672][T10518]        ret_from_fork_asm+0x1a/0x30
[  759.274858][T10518] 
[  759.274858][T10518] -> #3 (cpu_hotplug_lock){++++}-{0:0}:
[  759.277984][T10518]        cpus_read_lock+0x42/0x160
[  759.280037][T10518]        static_key_slow_inc+0x12/0x30
[  759.282255][T10518]        nbd_genl_reconfigure+0x1301/0x1e80
[  759.284245][T10518]        genl_family_rcv_msg_doit+0x233/0x340
[  759.286163][T10518]        genl_rcv_msg+0x614/0x7a0
[  759.287826][T10518]        netlink_rcv_skb+0x226/0x4a0
[  759.289477][T10518]        genl_rcv+0x28/0x40
[  759.290888][T10518]        netlink_unicast+0x7bb/0x940
[  759.292638][T10518]        netlink_sendmsg+0x813/0xb40
[  759.294773][T10518]        sock_sendmsg_nosec+0x13a/0x180
[  759.297073][T10518]        ____sys_sendmsg+0x54e/0x850
[  759.299249][T10518]        ___sys_sendmsg+0x2a5/0x360
[  759.301133][T10518]        __x64_sys_sendmsg+0x1b1/0x290
[  759.303352][T10518]        do_syscall_64+0x174/0x580
[  759.305442][T10518]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.307981][T10518] 
[  759.307981][T10518] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[  759.311012][T10518]        __mutex_lock+0x19d/0x1550
[  759.313178][T10518]        nbd_queue_rq+0x373/0x1150
[  759.315225][T10518]        blk_mq_dispatch_rq_list+0x499/0x1990
[  759.317674][T10518]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  759.320443][T10518]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  759.323101][T10518]        blk_mq_run_work_fn+0x16c/0x300
[  759.325391][T10518]        process_scheduled_works+0xa8e/0x14e0
[  759.327849][T10518]        worker_thread+0xa47/0xfb0
[  759.329977][T10518]        kthread+0x388/0x470
[  759.331930][T10518]        ret_from_fork+0x514/0xb70
[  759.334007][T10518]        ret_from_fork_asm+0x1a/0x30
[  759.336202][T10518] 
[  759.336202][T10518] -> #1 (&cmd->lock){+.+.}-{4:4}:
[  759.339150][T10518]        __mutex_lock+0x19d/0x1550
[  759.341222][T10518]        nbd_queue_rq+0xc1/0x1150
[  759.343063][T10518]        blk_mq_dispatch_rq_list+0x499/0x1990
[  759.345214][T10518]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  759.347661][T10518]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  759.350321][T10518]        blk_mq_run_work_fn+0x16c/0x300
[  759.352623][T10518]        process_scheduled_works+0xa8e/0x14e0
[  759.355083][T10518]        worker_thread+0xa47/0xfb0
[  759.357174][T10518]        kthread+0x388/0x470
[  759.359120][T10518]        ret_from_fork+0x514/0xb70
[  759.361286][T10518]        ret_from_fork_asm+0x1a/0x30
[  759.363495][T10518] 
[  759.363495][T10518] -> #0 (set->srcu){.+.+}-{0:0}:
[  759.366419][T10518]        __lock_acquire+0x1520/0x2cf0
[  759.368637][T10518]        lock_sync+0x9d/0x120
[  759.370548][T10518]        __synchronize_srcu+0xc9/0x2f0
[  759.372534][T10518]        elevator_switch+0x1e8/0x7b0
[  759.374379][T10518]        elevator_change+0x2fa/0x480
[  759.376040][T10518]        elevator_set_default+0x375/0x440
[  759.378269][T10518]        blk_register_queue+0x3f3/0x4e0
[  759.380538][T10518]        __add_disk+0x6cb/0xe30
[  759.382483][T10518]        add_disk_fwnode+0x100/0x3a0
[  759.384490][T10518]        nbd_dev_add+0x733/0xb60
[  759.386512][T10518]        nbd_genl_connect+0x992/0x1c10
[  759.388740][T10518]        genl_family_rcv_msg_doit+0x233/0x340
[  759.391287][T10518]        genl_rcv_msg+0x614/0x7a0
[  759.393414][T10518]        netlink_rcv_skb+0x226/0x4a0
[  759.395598][T10518]        genl_rcv+0x28/0x40
[  759.397467][T10518]        netlink_unicast+0x7bb/0x940
[  759.399611][T10518]        netlink_sendmsg+0x813/0xb40
[  759.401793][T10518]        sock_sendmsg_nosec+0x13a/0x180
[  759.404066][T10518]        ____sys_sendmsg+0x54e/0x850
[  759.406257][T10518]        ___sys_sendmsg+0x2a5/0x360
[  759.408343][T10518]        __x64_sys_sendmsg+0x1b1/0x290
[  759.410597][T10518]        do_syscall_64+0x174/0x580
[  759.412689][T10518]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.415263][T10518] 
[  759.415263][T10518] other info that might help us debug this:
[  759.415263][T10518] 
[  759.419383][T10518] Chain exists of:
[  759.419383][T10518]   set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock
[  759.419383][T10518] 
[  759.424904][T10518]  Possible unsafe locking scenario:
[  759.424904][T10518] 
[  759.427974][T10518]        CPU0                    CPU1
[  759.430098][T10518]        ----                    ----
[  759.432293][T10518]   lock(&q->elevator_lock);
[  759.434070][T10518]                                lock(&q->q_usage_counter(io)#50);
[  759.436595][T10518]                                lock(&q->elevator_lock);
[  759.438905][T10518]   sync(set->srcu);
[  759.440214][T10518] 
[  759.440214][T10518]  *** DEADLOCK ***
[  759.440214][T10518] 
[  759.442813][T10518] 6 locks held by syz.1.15408/10518:
[  759.444685][T10518]  #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  759.447374][T10518]  #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  759.450271][T10518]  #2: ffff8881bcebb9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0
[  759.453604][T10518]  #3: ffff888199d2e330 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0
[  759.456784][T10518]  #4: ffff888199d2ddb8 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x194/0x480
[  759.460327][T10518]  #5: ffff888199d2e2a8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  759.463472][T10518] 
[  759.463472][T10518] stack backtrace:
[  759.465395][T10518] CPU: 1 UID: 0 PID: 10518 Comm: syz.1.15408 Not tainted syzkaller #0 PREEMPT(full) 
[  759.465407][T10518] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  759.465413][T10518] Call Trace:
[  759.465419][T10518]  <TASK>
[  759.465425][T10518]  dump_stack_lvl+0xe8/0x150
[  759.465440][T10518]  print_circular_bug+0x2e1/0x300
[  759.465452][T10518]  check_noncircular+0x12e/0x150
[  759.465461][T10518]  __lock_acquire+0x1520/0x2cf0
[  759.465474][T10518]  ? check_noncircular+0xda/0x150
[  759.465483][T10518]  ? lockdep_unlock+0x5d/0xd0
[  759.465493][T10518]  ? __lock_acquire+0x13e8/0x2cf0
[  759.465504][T10518]  ? __lock_acquire+0x13e8/0x2cf0
[  759.465515][T10518]  ? __synchronize_srcu+0xb5/0x2f0
[  759.465527][T10518]  lock_sync+0x9d/0x120
[  759.465537][T10518]  ? __synchronize_srcu+0xb5/0x2f0
[  759.465548][T10518]  __synchronize_srcu+0xc9/0x2f0
[  759.465559][T10518]  ? __pfx___synchronize_srcu+0x10/0x10
[  759.465569][T10518]  ? do_raw_spin_lock+0x12b/0x2f0
[  759.465578][T10518]  ? kvm_clock_get_cycles+0x47/0x60
[  759.465588][T10518]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  759.465598][T10518]  ? synchronize_srcu+0x20a/0x260
[  759.465607][T10518]  elevator_switch+0x1e8/0x7b0
[  759.465618][T10518]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  759.465625][T10518]  elevator_change+0x2fa/0x480
[  759.465635][T10518]  ? do_raw_spin_unlock+0x4d/0x210
[  759.465643][T10518]  elevator_set_default+0x375/0x440
[  759.465653][T10518]  ? __pfx_elevator_set_default+0x10/0x10
[  759.465663][T10518]  ? disk_register_independent_access_ranges+0x2d8/0x380
[  759.465673][T10518]  ? blk_crypto_sysfs_register+0x11c/0x170
[  759.465683][T10518]  blk_register_queue+0x3f3/0x4e0
[  759.465692][T10518]  __add_disk+0x6cb/0xe30
[  759.465702][T10518]  add_disk_fwnode+0x100/0x3a0
[  759.465710][T10518]  nbd_dev_add+0x733/0xb60
[  759.465720][T10518]  ? __pfx_nbd_dev_add+0x10/0x10
[  759.465730][T10518]  ? bpf_lsm_capable+0x9/0x20
[  759.465739][T10518]  ? security_capable+0x7e/0x2c0
[  759.465747][T10518]  ? radix_tree_lookup+0x25c/0x290
[  759.465760][T10518]  nbd_genl_connect+0x992/0x1c10
[  759.465769][T10518]  ? __pfx_nbd_genl_connect+0x10/0x10
[  759.465777][T10518]  ? rcu_is_watching+0x15/0xb0
[  759.465784][T10518]  ? trace_kmalloc+0x2a/0xf0
[  759.465794][T10518]  ? __kmalloc_noprof+0x396/0x720
[  759.465803][T10518]  ? __nla_parse+0x40/0x60
[  759.465814][T10518]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  759.465826][T10518]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  759.465839][T10518]  genl_family_rcv_msg_doit+0x233/0x340
[  759.465852][T10518]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  759.465863][T10518]  ? __lock_acquire+0x683/0x2cf0
[  759.465911][T10518]  genl_rcv_msg+0x614/0x7a0
[  759.465928][T10518]  ? __pfx_genl_rcv_msg+0x10/0x10
[  759.465943][T10518]  ? __pfx_nbd_genl_connect+0x10/0x10
[  759.465959][T10518]  netlink_rcv_skb+0x226/0x4a0
[  759.465972][T10518]  ? __pfx_genl_rcv_msg+0x10/0x10
[  759.465988][T10518]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  759.466004][T10518]  ? down_read+0x2be/0x330
[  759.466021][T10518]  genl_rcv+0x28/0x40
[  759.466037][T10518]  netlink_unicast+0x7bb/0x940
[  759.466047][T10518]  netlink_sendmsg+0x813/0xb40
[  759.466059][T10518]  ? __pfx_netlink_sendmsg+0x10/0x10
[  759.466068][T10518]  ? aa_sock_msg_perm+0xf1/0x1b0
[  759.466078][T10518]  ? __pfx_netlink_sendmsg+0x10/0x10
[  759.466086][T10518]  sock_sendmsg_nosec+0x13a/0x180
[  759.466098][T10518]  ____sys_sendmsg+0x54e/0x850
[  759.466106][T10518]  ? __pfx_____sys_sendmsg+0x10/0x10
[  759.466115][T10518]  ? import_iovec+0x73/0xa0
[  759.466126][T10518]  ___sys_sendmsg+0x2a5/0x360
[  759.466133][T10518]  ? __lock_acquire+0x683/0x2cf0
[  759.466144][T10518]  ? __pfx____sys_sendmsg+0x10/0x10
[  759.466151][T10518]  ? futex_wake+0x51b/0x5f0
[  759.466164][T10518]  ? __fget_files+0x2a/0x420
[  759.466174][T10518]  ? __fget_files+0x3a2/0x420
[  759.466184][T10518]  __x64_sys_sendmsg+0x1b1/0x290
[  759.466192][T10518]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  759.466202][T10518]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.466210][T10518]  do_syscall_64+0x174/0x580
[  759.466219][T10518]  ? trace_irq_disable+0x3b/0x140
[  759.466229][T10518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  759.466237][T10518] RIP: 0033:0x7f9b0959de99
[  759.466246][T10518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  759.466253][T10518] RSP: 002b:00007f9b0a508028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  759.466262][T10518] RAX: ffffffffffffffda RBX: 00007f9b09825fa0 RCX: 00007f9b0959de99
[  759.466268][T10518] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008
[  759.466273][T10518] RBP: 00007f9b09633eaf R08: 0000000000000000 R09: 0000000000000000
[  759.466277][T10518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  759.466282][T10518] R13: 00007f9b09826038 R14: 00007f9b09825fa0 R15: 00007ffcd9d4c4d8
[  759.466290][T10518]  </TASK>
[  759.651084][T10520] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  759.666657][T10523] __nla_validate_parse: 19 callbacks suppressed
[  759.666666][T10523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15408'.
[  759.674706][T22387] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  759.744383][T22387] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  759.773255][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  760.813277][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  761.853265][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  761.945265][   T53] block nbd8: Possible stuck request ffff88810b650000: control (read@0,1024B). Runtime 30 seconds
[  761.949517][   T53] block nbd8: Possible stuck request ffff88810b650200: control (read@1024,1024B). Runtime 30 seconds
[  761.954012][   T53] block nbd8: Possible stuck request ffff88810b650400: control (read@2048,1024B). Runtime 30 seconds
[  761.958250][   T53] block nbd8: Possible stuck request ffff88810b650600: control (read@3072,1024B). Runtime 30 seconds
[  762.893275][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  763.933251][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  764.973236][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  766.013241][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  767.053623][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  768.093360][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  768.736835][ T5060] udevd[5060]: worker [8000] /devices/virtual/block/nbd7 is taking a long time
[  768.973875][  T494] block nbd7: Possible stuck request ffff88810b5d0000: control (read@0,4096B). Runtime 60 seconds
[  769.133240][    C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available
