last executing test programs:

1m43.240084879s ago: executing program 0 (id=35797):
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = socket(0x10, 0x803, 0x0) (rerun: 32)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000180)={<r6=>0x0, @loopback, @dev}, &(0x7f00000002c0)=0xc)
r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00')
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@dellinkprop={0x19c, 0x6d, 0x8, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x12000, 0x11}, [@IFLA_NET_NS_FD={0x8, 0x1c, r7}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x101}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xb}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}, @IFLA_VF_PORTS={0x12c, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '\\!#\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0xd, 0x2, 'mptcp_pm\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "63d70ce7a0eee53e2f2436d6b4d35789"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1ec783a0e126363cdc6f1bfa31f2ca38"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "003eaa9068ce1537398489127de1c210"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9253b11dfbffc703bf767a47719485d0"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a9885d119c67debd28520bcfc9a3bd20"}, @IFLA_PORT_VF={0x8, 0x1, 0x401}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '\xc6\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, 'vlan\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c05bfd1aee9b08cb9b1151e74d7a2366"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x80}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'vlan1\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_WEIGHT={0x8, 0xf, 0x9a}]}, 0x19c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

1m43.14937421s ago: executing program 0 (id=35798):
pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0)

1m43.147809991s ago: executing program 0 (id=35799):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000011c0), 0x59ce04015f1ad52c, 0x0)
r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$FICLONE(r1, 0x40049409, r1)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x17, &(0x7f0000000ec0)=ANY=[@ANYBLOB="180000008b000000000000004300ff0018110000219fa3b97844fc197173c5981fd568b879cec0b11620b887821b5ab17aa248a01c4f67cef90207e5da446b6d8b07e21087", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf09200000000000550901000000008095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000faffffff85000000d2000000bf91000000000000b702000003000000850000002a000000b7000000000500009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, 0x1411, 0x1, 0x709d29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c0d4}, 0x4044190)
setsockopt$sock_int(r5, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4)
close(0x3)
recvmmsg(r5, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x1ff}, {{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/176}], 0x0, &(0x7f0000000200)=""/185}, 0x75800000}, {{&(0x7f0000000380)=@isdn, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000400)=""/201}, {&(0x7f0000000500)=""/189}, {&(0x7f00000005c0)=""/170}, {&(0x7f0000000d00)=""/189}, {&(0x7f0000000740)=""/247}, {&(0x7f0000000840)=""/207}, {&(0x7f0000000940)=""/247}, {&(0x7f0000000a40)=""/141}], 0x0, &(0x7f0000000680)=""/95}, 0x5}], 0x37, 0x40010020, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000dc0)={0x5, 0x0, [{0xc0000000, 0x3, 0x6, 0x9, 0x4, 0x2, 0x3}, {0x8000000a, 0x7, 0x4, 0x3, 0x6, 0x7, 0x8}, {0xd, 0x0, 0x0, 0x140, 0x3, 0xa}, {0xc0000000, 0x9, 0x5, 0x1, 0x6, 0x4, 0x5}, {0x80000007, 0x5, 0x0, 0x2, 0xfff, 0x1, 0x3}]})
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000000)={"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"})
ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f0000000740))

1m42.233922313s ago: executing program 0 (id=35804):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x4}]}}]}, 0x154}}, 0x20000004)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b0400000000000000000b0000000008000000000000000001006d617371000000000c00028008000240000000000900010073797a30000000000900020073797a320000000014000000110001000000000000000000f5"], 0x74}, 0x1, 0x0, 0x0, 0x20000841}, 0x0)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3)
sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x124, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x43b}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x39}}]}, 0x124}, 0x1, 0x0, 0x0, 0x8010}, 0x800)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)

1m42.137190732s ago: executing program 0 (id=35806):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000011c0), 0x2200, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x240}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f00000006c0)='syzkaller\x00', 0x7fff, 0x6d, &(0x7f0000000700)=""/109, 0x41100, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0x5, 0x8000, 0x7ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8001}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r5, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000052}, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0xffffffffffffffd1, r5, 0x10, 0x70bd2c, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0xa, 0x3ffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x2}, 0x50)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000011c0), 0x340, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_SET_SREGS2(r9, 0x4140aecd, &(0x7f0000000140)={{0xeeef0000, 0x70000, 0x3, 0x9, 0x3, 0x8, 0x42, 0x4, 0x3, 0x3, 0x8, 0x9}, {0x100000, 0x50000, 0x0, 0x5, 0x6, 0x5d, 0x80, 0x19, 0xb3, 0x4, 0x7, 0x2}, {0x3000, 0x10000, 0xc, 0x6, 0x1, 0x1, 0x5, 0xe, 0xd2, 0x1, 0x6, 0x83}, {0xdddd0000, 0x4000, 0xa, 0x7f, 0x8, 0x1, 0xc0, 0x5, 0x3, 0xb, 0x5d, 0x6}, {0x8080000, 0x54000, 0x10, 0x1, 0x2, 0x1, 0x1, 0xb5, 0x4, 0x2, 0xfe, 0x10}, {0x54000, 0xdddd0000, 0xe, 0xfe, 0xe, 0x4, 0x9, 0x1a, 0x9, 0x7, 0x9, 0x6}, {0x7000, 0x1000, 0xe, 0xb6, 0x2, 0x2c, 0x5, 0x3, 0x42, 0xfc, 0x8, 0x9f}, {0xf000, 0xfec00000, 0x4, 0x2, 0x5, 0x4, 0x9, 0x7, 0xff, 0x10, 0x2, 0x8}, {0x25000, 0xc8c}, {0x24000, 0x7}, 0x0, 0x0, 0x10000, 0x4, 0xc, 0x6000, 0xdddd0000, 0x0, [0xffffffffffff1f82, 0x9, 0x10, 0xf]})

1m40.648705368s ago: executing program 0 (id=35814):
r0 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054)
syz_emit_ethernet(0x5e, &(0x7f0000000280)={@broadcast, @broadcast, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x1, 0x0, 0x4}}, {@canfd={0xd, {{0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "9dd35d94d91d838e082f65241e41eff257c352cb8d73895c31f89985623874e32751d77d9e9f592133c2faa118c7327c56b29f931ad2f721d3e0e95fdcb287ed"}}}}, &(0x7f0000000340)={0x0, 0x4, [0xfd3, 0xe31, 0xcf1, 0xd86]})
socket$inet6(0xa, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x9, 0x100000005, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r9 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r8, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r9, 0x2}, 0x20)
accept4$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x80800)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x73)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000100000000002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac14142808000a00", @ANYRES32=r10], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)

1m40.370463739s ago: executing program 32 (id=35814):
r0 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054)
syz_emit_ethernet(0x5e, &(0x7f0000000280)={@broadcast, @broadcast, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x1, 0x0, 0x4}}, {@canfd={0xd, {{0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "9dd35d94d91d838e082f65241e41eff257c352cb8d73895c31f89985623874e32751d77d9e9f592133c2faa118c7327c56b29f931ad2f721d3e0e95fdcb287ed"}}}}, &(0x7f0000000340)={0x0, 0x4, [0xfd3, 0xe31, 0xcf1, 0xd86]})
socket$inet6(0xa, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x9, 0x100000005, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r9 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r8, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r9, 0x2}, 0x20)
accept4$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x80800)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x73)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001ffffcffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000100000000002c0012800b00010067726574617000001c00028006000e000200000006000f000700000008000700ac14142808000a00", @ANYRES32=r10], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)

2.017858293s ago: executing program 2 (id=36763):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0)
socket$inet(0x2, 0x80000, 0x32cd85c6) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000340)={0x7, {{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x1}}, 0x0, 0x2, [{{0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5b7}}, {{0xa, 0x4e22, 0x4, @remote, 0x10}}]}, 0x190)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1, 0x7}, {0x8, 0x3}, {0xfff3, 0x4}}}, 0x24}}, 0x0)

1.919972235s ago: executing program 2 (id=36764):
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x1fffe, 0x0, 0x34, 0x1000, 0x4}, 0x9c) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1)
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x4048050)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) (async, rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03100001"], 0x50) (rerun: 64)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r2}, 0x38) (async, rerun: 32)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) (rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000100001002ebd700000003c500fb300"/29, @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e04000004001980"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.719051728s ago: executing program 3 (id=36766):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
close(r0)
socket(0x1e, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x6, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0xda23, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x10}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r3 = getpid()
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x5, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0x10, 0xb}, {0xffe0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x5, 0xd, 0x1000, 0x1, 0x6, 0x2}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x200c840)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x6e21, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, 0x1c)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r9)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, r10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback={0x100000000000000}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x4c}, 0x2, 0x34005, 0x0, 0x4004}, 0x0)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
syz_open_procfs$namespace(r3, &(0x7f0000000180)='ns/pid\x00')
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1, r11, 0x2, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000000)={'wpan0\x00'})

1.718607877s ago: executing program 2 (id=36767):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000011c0), 0x340, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000160001000000000000000000ac14140d000000000000000000000000fc000000000000000000000000000001fffe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010018000032000000ffffffff0000000000000000000000000000000000000000fcffffffffff0000000000000008e6000000000000000000000000000000000000000000000000040000000000000000000000000000040000000000000000000000000000000000000000000008000000000000000000000000000200000000000a000002000000000000000000000000000000000c0015005c"], 0x104}}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000140)={{0xeeef0000, 0x70000, 0x3, 0x9, 0x3, 0x8, 0x42, 0x4, 0x3, 0x3, 0x8, 0x9}, {0x100000, 0x0, 0x0, 0x5, 0x6, 0x5d, 0x80, 0x19, 0xb3, 0x4, 0x7, 0x2}, {0x3000, 0x10000, 0xc, 0x6, 0x1, 0x1, 0x5, 0xe, 0xd2, 0x1, 0x6, 0x83}, {0xdddd0000, 0x4000, 0xa, 0x7f, 0x8, 0x1, 0xc0, 0x5, 0x3, 0xb, 0x5d, 0x6}, {0x8080000, 0x54000, 0x10, 0x1, 0x22, 0x1, 0x1, 0xb5, 0x4, 0x2, 0xfe, 0x10}, {0x54000, 0xdddd0000, 0xe, 0xfe, 0xe, 0x4, 0x9, 0x1a, 0x9, 0x7, 0x9, 0x6}, {0x7000, 0x1000, 0xe, 0xb6, 0x2, 0x2c, 0x5, 0x3, 0x42, 0xfc, 0x8, 0x9f}, {0xf000, 0xfec00000, 0x4, 0x2, 0x5, 0x4, 0x9, 0x7, 0xff, 0x10, 0x2, 0x8}, {0x25000, 0xc8c}, {0x24000, 0x7}, 0x0, 0x0, 0x10000, 0x4, 0xc, 0x6000, 0xdddd0000, 0x60000010, [0xffffffffffff1f82, 0x9, 0xf, 0xf]})

1.561294615s ago: executing program 2 (id=36768):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={r4, 0x2, 0x1, "fa"}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={r4, 0x2}, 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b00"], 0x28}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000041401000000000000000000080003000000000008", @ANYRES64=r8], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814)
r10 = socket$unix(0x1, 0x1, 0x0)
listen(r10, 0x2)
r11 = accept(r10, 0x0, 0x0)
sendto$inet6(r11, &(0x7f0000000440)="a415976c", 0x4, 0x4404c06d, 0x0, 0x0)

1.099922617s ago: executing program 2 (id=36769):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = epoll_create1(0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x17a, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014})
epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000340), &(0x7f0000000380)=r7}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800b0001006f626a7265660000100002800900020073797a30000000000900020073797a3200000000140000001100010000000000000000000100000a9f736ccd1af0aee8c88cefa28a3dc94abf44f8bb587e9cc5805d05095f81a63dc820dafefd4a4fa38c9d009c747802f74ada6dde8f"], 0x78}, 0x1, 0x0, 0x0, 0x4008840}, 0x20040040)
r9 = socket(0x10, 0x3, 0x2)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/35, 0x23, 0x0, &(0x7f0000000300)=""/27, 0x1b}, &(0x7f0000000400)=0x40)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
socket(0x1, 0x803, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xe, 0x0, &(0x7f00000002c0)="6362b5bd20572e46a104f3b962a3", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x50)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'lo\x00'})

1.09902986s ago: executing program 3 (id=36770):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000fbffff729f3453ee6347110085000000bc00000096726554950000003ab559c3ce9794da"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', <r9=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x1, 0x803, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000000)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ad50120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x20040001}, 0x40810)
r14 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r14, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000009c0)=""/4117, 0x1015}], 0x1}, 0xfffffff9}], 0x1, 0x0, 0x0)
r15 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d00)=ANY=[@ANYBLOB="1c0600002c000100fefffffffcdbdf250a06f2801504"], 0x61c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000000206010100000000000000000000000005000400000000000900020073797a31000000000d000300686173683a6970000500010000"], 0x44}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="54ae1f8219560625baa794a469ce", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socket$netlink(0x10, 0x3, 0x0)

891.487661ms ago: executing program 3 (id=36772):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) (async, rerun: 64)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

831.443736ms ago: executing program 3 (id=36773):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x9}]}}}]}, 0x3c}}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xffffff7e, 0x2)
syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c1ff07000000000000655804e09171"}}}}}}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x200, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0xa, 0x9}, {0x0, 0x10}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6}}]}, 0x38}}, 0x20004055)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r3 = socket(0x27, 0x2, 0xfc)
sendmsg$inet6(r3, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="671723d7c6012c", 0x20}, {&(0x7f0000000140)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000840)="418a", 0x2}], 0x4}, 0x20008b88)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
listen(r5, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@deltclass={0xc4, 0x29, 0x0, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa}, {0x1, 0xb}, {0xfff3, 0xb}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x94, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x9, 0x3, 0x401}}, @TCA_HFSC_USC={0x10, 0x3, {0x56, 0x2, 0x6}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x4, 0x8}}, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x6, 0x1000}}, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x3, 0x401}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x8000, 0x3}}, @TCA_HFSC_FSC={0x10, 0x2, {0x81, 0x1, 0x400}}, @TCA_HFSC_RSC={0x10, 0x1, {0x1, 0x40, 0x2}}, @TCA_HFSC_FSC={0x10, 0x2, {0x101, 0x4, 0x5}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000880)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r7, 0x3ed9c000)
socket$unix(0x1, 0x1, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@delqdisc={0x48, 0x25, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0xfff3}, {0x0, 0x1}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x7}}, @qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0xde8}, @TCA_PIE_LIMIT={0x8, 0x2, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
socket$netlink(0x10, 0x3, 0x0)

769.980409ms ago: executing program 1 (id=36774):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17114be8c47ffd23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x98, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1300}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10001}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x401}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008081}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r6, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x808)

600.98758ms ago: executing program 1 (id=36775):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0x70bd25, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
write$cgroup_type(r1, &(0x7f0000000040), 0x9)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
r3 = socket(0x11, 0x80a, 0x0)
sendto$x25(r3, 0x0, 0x0, 0x4080, &(0x7f0000000040), 0x12)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000d40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f00000007c0)={0x518, r4, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x97}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdd}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x4b8, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x4ab, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @from_mac=@device_b, {0x6, 0x37e}, @value=@ver_80211n={0x0, 0x6000, 0x2, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0xb, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x9}, {0x1}, {0x3}, {0x6, 0x1}, {0x6}, {0xc, 0x1}]}, @void, @val={0x4, 0x6, {0x1, 0x6, 0x2, 0xfffa}}, @void, @val={0x5, 0xaf, {0x1, 0xc4, 0xfa, "35a5a2715619a73c28660a0dc4b79236af0bef1578970dcdfc97f22b2f87ef93e239d1d12e34593d4ecbc9ce37b280022c6a2807e59dc78855da7d2b5c5941e4678f64e87675423324032ee4520dc33b67630d1f06d6fd0f6964d1f348e1d4953a37b1f959744582d971781c771c7de9d55bb7139c6c433f21f96fbd601cadbd196d33b9a2c8b6ed75a8cacef4db18558a08e2e9446c1349db51b23a8475fb51498effba4920a2da14cdc8a8"}}, @val={0x25, 0x3, {0x0, 0xb8, 0x6}}, @void, @val={0x3c, 0x4, {0x0, 0x8, 0x28, 0x8}}, @val={0x2d, 0x1a, {0xc, 0x1, 0x1, 0x0, {0x97, 0x8, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x6, 0x5, 0xe}}, @void, @void, @void, [{0xdd, 0xde, "352b730ab2ee7a17989fbbf5724dbc0eb56aeafca112ef3d0ef3309359ca7fd43d8eb10b3ac6f44b0a31f46cf8eecb79b04b31d3f08292111aa5950b746b6376d246abd24528a640d460e4142db3eb79d71d5d2e2fdc93348f2b510048286fc6d1b0b7e7fb1dea01fe5057f3222474a48f1393787be90b35225cb9d504dc53a043c1946f14ccd8f4256426864c3794c27478becba0322c930b2709235afd914e8ab8d39d48d12958f2e9bdbc9f4ff387b450a90ed77c0da9f5f5e961d75422dd82c7cb437a3aa9ce093130b2415734eb7846ca9803373c612a409a1e7c08"}, {0xdd, 0xaa, "b76611de0ab59b8ddf1deef7c24cf0d7634c25bcb954efca7f34c06256b8ea51dcd61829a74103b90508460882a5e14c8339b586823a97daec67cc58383cc0d898cf62dc16ecf9096f7049b739e6b0237d2d103b706b96bc614a9ba92154d5867503c409a08e8127923ca3d9710256a202ce9b662761771202943d517b7eb4470fd0dd305b47bb3c74c819889e03edf22e09f9cb62ad4ee974c69a264728a389e22156b3e24c18542933"}, {0xdd, 0x82, "4024938ca368044e0489ee7ed96c0826a90ddeeb943cb4758de3a6a7944d627cf7000cead5805b623f5d1195b273a914f8bd55a82bc1646285f0933a61fcaab3a5d517063cc795c4c8a8885251d38d5624fc94db6aa3b98cf3874b5768bad0026be7c1bb5a9cf5db94d05270e66081f179ed66e8e4d1af8034dfcb17c1f4560787d3"}, {0xdd, 0xee, "68b3d1d3015de948292d974c1e680101196e2cf1bdb19334534c2132e3b230e4e80d52ead66c149a1b78db775360956073b73b799c4a0276295e388e0a0595bd7efb4e68d39d672aacded8553781150d8089e03ffa16cef7078b0d89331f310c71f0209955ae6c0821e40872407ba33944c0bfadb77fdee1be88f2c0d9efbab511d945f466bdea35a72348e4136b3e5fe890aa8fd8e9d392071ff49f812b3c19c41948a91d0ff8a7dc75d242c8b0c3d2d09e45633ead6888d5981eb887d1e821a6aa6f97a74c4d0f66d9fe53e996ac7550936db9ed0dafd99e0a2218997553a60ad6e520feaf547ac3b76150f5a0"}, {0xdd, 0x8d, "6d1f3387b90f2c85b075782d3e0ff7bb4ebd292ad5b479994878e4099a0a7fbda25da0dc328d9c8a806183c564339a0451aa8d1cfe4cb1b05cf2508d9b1942c2f2c2ed77b68a0291dec5cb4fb7acba1c2c0b2b431c7ec3d8801722dfe7dbade7263d5221d8a6ae332e83baa1bbbacb9303c47819e67e9a503fc7ce62ccee94e988dd19a2c51fb6bf5bcab996be"}]}}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x1]}]}]}, 0x518}, 0x1, 0x0, 0x0, 0x10}, 0x4004001)
r6 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000005163a6c32c500000000000000"], 0x20}}, 0x40000c0)
ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000300)={0x2, 0x4})
close(r7)
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r8=>0x0})
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r8}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x88, 0x5, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_deladdr={0x20, 0x15, 0x4, 0x70bd27, 0x25dfdbfe, {0xa, 0x80, 0x53, 0xfd, r8}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x20}}, 0xc0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r10 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r11)
sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"})

539.26803ms ago: executing program 3 (id=36776):
r0 = socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044)
r2 = socket(0x10, 0x803, 0x6)
r3 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0xa, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000180c2000000080047f800240000e00002119078000000000000000089035544041a93000000000000009078"], 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', <r5=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', <r7=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6}, 0x10)
sendto$packet(r0, &(0x7f0000000000)="ea92d2c62f06af98e71261176511dcf7709bbb3a5a39d941a80a2a591af8233a90d53fd2179462db29467833ae0bb191be3e67ba1efa029d159e67a72536154d1efd482ead06ba4e3e881e43bd1274f831a670d6870d37034a097fcc2a7f20a8c1a9a1addcc623d86dfd4fee46a72afde3b0e0e2d635102c91ad6ef04735eee5f19ccda69bd54cd108bf7a020dc87f02c4851cd2ee6308ff97882e82d192be7d21c3ef9f553c33247f9e204eb66812fc4644346154476744", 0xb8, 0x20008080, &(0x7f00000001c0)={0x11, 0x3, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
getsockname$packet(r2, 0x0, &(0x7f00000000c0))
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@deltfilter={0xb44, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0xf, 0x6}, {0x4, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xfa}}, @TCA_RATE={0x6, 0x5, {0x4, 0x80}}, @filter_kind_options=@f_u32={{0x8}, {0xaf8, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x7}, @TCA_U32_INDEV={0x14, 0x8, 'wlan0\x00'}, @TCA_U32_SEL={0x6f4, 0x5, {0xb, 0x80, 0x9, 0x2, 0x6, 0xb5, 0xb4, 0x4, [{0xa, 0x1, 0x80000000, 0x5}, {0x9, 0x0, 0x7, 0x5}, {0x934, 0xd, 0x800, 0x6}, {0x0, 0x400, 0x5, 0x8}, {0x80, 0x10000, 0x3ff}, {0x6, 0x2c2, 0x5, 0x6}, {0x0, 0x2, 0x510, 0x6}, {0x8d, 0xf19, 0x3, 0x1}, {0x3, 0x80000000, 0xffff1dc8, 0xbaa}, {0x6, 0x2, 0x1, 0x7}, {0x559, 0xc8a, 0x8, 0x2}, {0x0, 0x5, 0x16c8, 0x200}, {0xb, 0x0, 0x80000001, 0xd}, {0xc98, 0x7ff, 0x7fff, 0x4}, {0x200, 0x8000}, {0x3, 0x9, 0x3, 0x101}, {0x3f, 0x8, 0x3, 0x4}, {0x7, 0x2, 0x8000, 0x104d}, {0x9, 0x8001, 0x1800000, 0x16d24fb}, {0xfffffffd, 0x1, 0x7fff, 0x2}, {0x7, 0x401, 0x2, 0x1}, {0x0, 0xd146fc8c, 0xff, 0x200000}, {0xfffffffd, 0x34fb965d, 0x400, 0x9}, {0x7, 0x9393, 0x3, 0x5}, {0x1, 0x5, 0x1, 0x7}, {0xbe45, 0x40, 0x5, 0x6}, {0x2, 0x8, 0x4, 0x401}, {0x1ff, 0x8, 0x4, 0xffffffff}, {0x6, 0x8, 0x6, 0x80000001}, {0x4, 0x1, 0x4, 0x7fffffff}, {0xa, 0x10001, 0x9}, {0x0, 0x7, 0x3, 0x2}, {0x81, 0x6, 0x0, 0x3}, {0xffffff97, 0x2, 0x6, 0xbe}, {0xb264, 0xc1a7, 0x9d3}, {0x26, 0x1, 0x4, 0x7f}, {0xd, 0x8, 0x4, 0x6}, {0x2, 0x6, 0x3ff, 0x2}, {0x8, 0x709, 0x8, 0x4}, {0x7, 0x7ff, 0x800, 0x100000}, {0x9, 0x4, 0x0, 0x9}, {0x6, 0xffffa928, 0x80, 0x9}, {0x1, 0x5454, 0x10, 0x8}, {0x4, 0x8001, 0x1, 0x800}, {0xa4f, 0xf, 0x43, 0x4}, {0x0, 0x8, 0x9, 0x3}, {0xfffffffc, 0x1ff, 0x5, 0x5}, {0x0, 0x4, 0x3, 0x9}, {0x9, 0x5, 0xd, 0x200}, {0x7f, 0xa, 0x3ca, 0x9}, {0x5, 0x7, 0xa, 0x7}, {0xfffffff8, 0x1c9, 0x2001, 0x9}, {0x9, 0x8001, 0x78b, 0x7}, {0x2, 0x10, 0x3, 0x10000000}, {0x5, 0x0, 0x1}, {0x8, 0xeccb, 0x1, 0x1}, {0x5, 0x9, 0x7, 0x4607}, {0x9, 0x0, 0x81, 0x5}, {0x6, 0x3, 0x7, 0xffffff15}, {0x4, 0x6, 0x0, 0x1}, {0x9, 0x592e9911, 0x7, 0x3}, {0x5, 0x5, 0x400}, {0x5, 0x81, 0xf2f}, {0x40, 0xff, 0x4, 0xf7}, {0x3, 0x81, 0x47c, 0x5f3}, {0x4, 0x4, 0x3, 0x941c}, {0x9, 0x2, 0x5, 0x101}, {0x70, 0x1, 0xd7, 0x2}, {0x802e, 0x3, 0xfec6, 0x7}, {0x10, 0x8, 0x5, 0x7f}, {0x2, 0x3e4, 0x8, 0x1}, {0x0, 0x3, 0x8, 0x2}, {0x6, 0xffffbb2a, 0x3}, {0x7, 0x6, 0x7, 0xa46}, {0x7a72d115, 0x0, 0xd9f, 0xfffffff5}, {0xa8, 0x80000000, 0x80, 0x1}, {0x480, 0x4, 0x7, 0xc}, {0x4, 0x9, 0x3ff, 0x9}, {0xfffffff8, 0x1, 0xd, 0x1}, {0x7ff, 0x9, 0x1, 0x71}, {0x6, 0x9, 0x7, 0xffff8717}, {0x9, 0x8001, 0x5, 0x6}, {0x7, 0xe4dc, 0x80000001, 0x5}, {0x10, 0x8, 0xc, 0x7}, {0x2, 0xf021, 0x5}, {0x5, 0xffff8001, 0x1000}, {0x9, 0x4, 0x25f}, {0x3, 0x6, 0xf, 0x5}, {0x7, 0x9, 0x4fc, 0x1}, {0x4, 0x6, 0x4470, 0x6}, {0x2, 0x3, 0xffffffff, 0x2}, {0x1, 0x31bd, 0x6, 0xffff0001}, {0x80000000, 0x5, 0x4, 0x3}, {0x5, 0x9, 0xffff, 0x7}, {0x4, 0xfff, 0x4, 0x3}, {0xc6, 0x7, 0x8, 0x8}, {0xfffffff6, 0x7, 0x9, 0x7fff}, {0x2, 0x80000001, 0xfffffc00, 0x6}, {0x7, 0x3550, 0x4, 0x7}, {0x4, 0x2, 0x4ec, 0x6}, {0x8, 0x6, 0x3, 0x2}, {0x5, 0x3, 0xfffffffb, 0x9}, {0x2, 0x5, 0x8001, 0x2}, {0xffffff01, 0xfffffff9, 0x3, 0x6}, {0x8, 0x4, 0x8001}, {0x1, 0x2, 0xfffffffe, 0x9}, {0x1ff, 0x9, 0xd, 0x5e}, {0x1, 0xd9a23a, 0x9, 0x9}, {0x2, 0x657, 0x8, 0x614}, {0x5f39, 0x8b7, 0x539, 0xd2a8}]}}, @TCA_U32_HASH={0x8, 0x2, 0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0xc, 0xb}}, @TCA_U32_SEL={0x1d4, 0x5, {0x7, 0xff, 0x18, 0x1, 0x9, 0x35e3, 0xed21, 0xe, [{0x8, 0x7ff, 0x1, 0x7fff}, {0x360b, 0x2, 0x2, 0xfffffffe}, {0x6, 0x8, 0x9440, 0x2e8}, {0xd, 0x8, 0x80}, {0x5, 0x3, 0xff, 0xb019}, {0xd, 0x6747, 0x9, 0x4}, {0x2, 0x8000, 0x9, 0x7}, {0xffffffff, 0x25f, 0x6, 0x6}, {0xe24, 0x200, 0x3, 0x36}, {0x1ff, 0x5, 0x4, 0x4ba0afc1}, {0xfffffff9, 0x8, 0x0, 0x8}, {0x0, 0x4, 0xcc, 0x4}, {0x6, 0x8, 0x7fff, 0x5c}, {0x1, 0x1000, 0x3, 0x6fa}, {0x3, 0x3, 0x8}, {0x10000, 0x7fff, 0x6, 0x1}, {0x7, 0x7, 0x8, 0x3a25}, {0x800, 0x3, 0x8000, 0xc}, {0x1000, 0x9, 0x200000, 0x56f}, {0x1, 0x8, 0x6, 0x8000}, {0x10f1, 0x1, 0x4, 0x9b}, {0xe, 0x10001, 0x2, 0x9}, {0xa, 0x7, 0x1000, 0x9}, {0x8, 0x891c, 0x3, 0xffff}, {0xa, 0xe, 0x7, 0x9}, {0x200, 0x8, 0x0, 0x2d}, {0x1, 0xaa4, 0x8001, 0xa28d}, {0xc8, 0x5, 0x100, 0x6}]}}, @TCA_U32_SEL={0x164, 0x5, {0x10, 0x7, 0x9, 0x133e, 0x3, 0x7, 0x4, 0x5, [{0xc6dc, 0xfffffffb, 0x0, 0x3}, {0x7fff, 0x0, 0x0, 0x3858d984}, {0x9, 0x5d, 0x8, 0x4}, {0xffff, 0x1, 0x0, 0x10001}, {0x8, 0x6, 0x3800000}, {0x9, 0xfffffffe, 0x3, 0x1000}, {0x8000, 0x1, 0x9a4, 0x8}, {0x80f, 0xa, 0x20004, 0x7}, {0x353, 0x3, 0x4}, {0x3ff, 0x1, 0x8, 0x6}, {0x7, 0x200, 0x2, 0x6}, {0x7, 0x8000, 0xde70, 0x6}, {0x9, 0xffffffff, 0xbffe, 0x4}, {0x4, 0x19, 0xebdf, 0xb2}, {0x6, 0x3b, 0x9, 0x34a4}, {0x1, 0x7, 0x8, 0x3}, {0x80, 0x10001, 0xbd2, 0xfbaa}, {0x80, 0x9, 0x7, 0x1}, {0xae3, 0x81, 0xb4c, 0x8}, {0x608, 0xffffb78c, 0x9, 0x8}, {0x4, 0x7fff, 0x6, 0x400}]}}, @TCA_U32_SEL={0x94, 0x5, {0x0, 0x0, 0x80, 0x5, 0xffff, 0x4, 0x2, 0x7f2, [{0x2, 0x4, 0x2, 0x6}, {0x0, 0x1ff, 0x7fff, 0x1}, {0x9, 0x2, 0x2, 0xfff}, {0x3, 0x2, 0x7ff}, {0xffff, 0x10001, 0x4}, {0x10, 0x6, 0x6a, 0x2}, {0x7, 0x4, 0x9, 0x3ff}, {0x0, 0x6, 0x6}]}}, @TCA_U32_LINK={0x8, 0x3, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0xb44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xfff3, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'geneve0\x00', 0x2})
setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000280)={0x5e, @empty, 0x4e22, 0x2, 'wlc\x00', 0x28, 0x2, 0x36}, 0x2c)

486.467504ms ago: executing program 1 (id=36777):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000050c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000005100)={0x44, r2, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x40080)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000003000128008000100736974e7c7c1598e7655b300", @ANYRES32=0x0, @ANYBLOB="08000200ac14144005000900890000000600080017000000"], 0x50}}, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000)

331.184993ms ago: executing program 1 (id=36778):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r4, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}]}}]}, 0x4c}}, 0x20040054)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0xb0, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x88, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x78, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x308, {0x10005, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xfffffffffffffc5d, 0x1, {0xfffffffa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x49b}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x8, 0xf}}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4590, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)

231.370365ms ago: executing program 3 (id=36779):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newspdinfo={0x1c, 0x24, 0x9185f936229eeeb, 0x70bd26, 0x25ffdbfe, 0x7, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x19ed1dff5d6ad1da}, 0x14940)
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000000)='batadv_slave_1\x00')
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)={0x12})
write(r5, &(0x7f0000000340), 0x11000)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000001180)=0x1f, 0x4)
r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
bind$llc(r7, &(0x7f0000000140)={0x1a, 0x0, 0x40, 0xb, 0x2, 0x9, @local}, 0x10)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="40020000", @ANYRES16=r9, @ANYBLOB="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", @ANYBLOB='!'], 0x240}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "ef8966fd25129c15", "9da152000004b4991192c0029200", "b673ef60", "cbc5f9dc4dab64ec"}, 0x28)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "ff0f00", "1ded229a582ca2d4c26290787eb7ecd643b3e538d6bf67ed6966d5d0ab05cb1b", "b5480422", "52031d2df99e6577"}, 0x38)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000240))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)

170.006189ms ago: executing program 1 (id=36780):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
syz_emit_ethernet(0xc6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000d86dd6000000800903afffe80000000000000000000000000001fff0200000000000000000000000000018700907800000000fe8000000000000000000000000000aaff0200000000000000000000000000010101909f50c215620e0c7dfaf563ef0bef1a65091e7fc4a20e4f228ac0606870c495dd24944a5cbd149336182fc40d48d3c28c24c73f58e6721b7f5d93e62d9cde76782e22a0894477ca4b036d23c7a9efe97ebc8ddd1b69013f688da698067f11fdf3066b909d04"], 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-twofish-avx)\x00'}, 0x58)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(khazad)\x00'}, 0x58)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
getpeername$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48080}, 0x8c0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
sendmsg$IPSET_CMD_RENAME(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x5, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x90)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x54)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'veth1_macvtap\x00', 0x8000})
r7 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x2000400}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newlink={0x118, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x211}, [@IFLA_VF_PORTS={0xf8, 0x18, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f9a711768bef94f45e37db5402fd7212"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "292bbf68f353ea6b34b68687d5b85193"}, @IFLA_PORT_PROFILE={0x6, 0x2, ']\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x6}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "82e291e483d7637f60a6054997613bf1"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9bd93f0facf579a138bc718635fce286"}, @IFLA_PORT_VF={0x8, 0x1, 0xff000000}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "48dc7c21af19a4c50a501599fcc3277c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "29c57decdf3ee018d91f7a4705c77607"}, @IFLA_PORT_VF={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7f7de7334e24ea8b95214b56f8be01b1"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0e61e3a6a4c5d98c7849c427d7976a6c"}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000004700))
r10 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c2d4ceee1a5fb0cd210000000100039042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="031501002537a9401c0012800b00010067726574617000000c0002800800040001000080"], 0x3c}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0)

59.375224ms ago: executing program 2 (id=36781):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x48, r2, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5) (async)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan3\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7fffffff}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xd}]}, 0x5c}, 0x1, 0x0, 0x0, 0x854}, 0x4000080)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x188, 0x10, 0x713, 0x70bd29, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x4e22, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x0, 0x8, 0xa, 0x3, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x3, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}, @algo_auth_trunc={0x4c, 0x14, {{'blake2b-384\x00'}, 0x0, 0x80}}]}, 0x188}, 0x1, 0x0, 0x0, 0xd0}, 0x20004000) (async)
socket$kcm(0xa, 0x3, 0x87) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'bond0\x00', <r11=>0x0})
r12 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$sock_buf(r12, 0x1, 0xc, &(0x7f00000006c0)=""/43, &(0x7f0000000700)=0x2b) (async)
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x230, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x40005000, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x34}}, 0x4008000) (async)
r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) (async)
r14 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r14, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000d, 0x12, r14, 0x180000000) (async)
ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r15 = socket$kcm(0x2, 0xf, 0x2)
ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r13, &(0x7f0000000240)=ANY=[@ANYRES8=r12, @ANYBLOB="b838d5e94e69368b438276c1142bfe76a6650dafd901631b379cd32ccd5d62ee9a792292651f1908f117e7feda99684e59f28c45187e96527cd6105c288c27af8b7057832452aecad74566229101e8a3151d53da61e5dcdb616bd771d951ac7d3ec924518871ff323ed625dd7fa1567aec01382bafe5414b10b7a18462eefb9ba2f30b8f9da53ab97cfc59132e72960b7acb4ca54f5e2d9c4264ef6d9887b639887a"], 0xfdef)

0s ago: executing program 1 (id=36782):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000011c0), 0x340, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="04010000160001000000000000000000ac14140d000000000000000000000000fc000000000000000000000000000001fffe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010018000032000000ffffffff0000000000000000000000000000000000000000fcffffffffff0000000000000008e6000000000000000000000000000000000000000000000000040000000000000000000000000000040000000000000000000000000000000000000000000008000000000000000000000000000200000000000a000002000000000000000000000000000000000c0015005c"], 0x104}}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000140)={{0xeeef0000, 0x70000, 0x3, 0x9, 0x3, 0x8, 0x42, 0x4, 0x3, 0x3, 0x8, 0x9}, {0x100000, 0x0, 0x0, 0x5, 0x6, 0x5d, 0x80, 0x19, 0xb3, 0x4, 0x7, 0x2}, {0x3000, 0x10000, 0xc, 0x6, 0x1, 0x1, 0x5, 0xe, 0xd2, 0x1, 0x6, 0x83}, {0xdddd0000, 0x4000, 0xa, 0x7f, 0x8, 0x1, 0xc0, 0x5, 0x3, 0xb, 0x5d, 0x6}, {0x8080000, 0x54000, 0x10, 0x1, 0x22, 0x1, 0x1, 0xb5, 0x4, 0x2, 0xfe, 0x10}, {0x54000, 0xdddd0000, 0xe, 0xfe, 0xe, 0x4, 0x9, 0x1a, 0x9, 0x7, 0x9, 0x6}, {0x7000, 0x1000, 0xe, 0xb6, 0x2, 0x2c, 0x5, 0x3, 0x42, 0xfc, 0x8, 0x9f}, {0xf000, 0xfec00000, 0x4, 0x2, 0x5, 0x4, 0x9, 0x7, 0xff, 0x10, 0x2, 0x8}, {0x25000, 0xc8c}, {0x24000, 0x7}, 0x0, 0x0, 0x10000, 0x4, 0xc, 0x6000, 0xdddd0000, 0x2000000000, [0xffffffffffff1f82, 0x9, 0xf, 0xf]})

kernel console output (not intermixed with test programs):

04
[ 2471.275500][T11471] pgpgin 891529
[ 2471.276573][T11471] pgpgout 891529
[ 2471.277785][T11471] pgfault 1804101
[ 2471.278867][T11471] pgmajfault 20
[ 2471.279937][T11471] inactive_anon 0
[ 2471.280999][T11471] active_anon 0
[ 2471.282055][T11471] inactive_file 0
[ 2471.283126][T11471] active_file 0
[ 2471.284155][T11471] unevictable 0
[ 2471.285566][T11471] hierarchical_memory_limit 314572800
[ 2471.288098][T11471] hierarchical_memsw_limit 9223372036854771712
[ 2471.289903][T11471] total_cache 0
[ 2471.290916][T11471] total_rss 0
[ 2471.291855][T11471] total_rss_huge 0
[ 2471.292904][T11471] total_shmem 0
[ 2471.293846][T11471] total_mapped_file 0
[ 2471.295360][T11471] total_dirty 0
[ 2471.296373][T11471] total_writeback 0
[ 2471.297522][T11471] total_workingset_refault_anon 32
[ 2471.298969][T11471] total_workingset_refault_file 0
[ 2471.300377][T11471] total_swap 942080
[ 2471.301559][T11471] total_swapcached 2031616
[ 2471.302860][T11471] total_pgpgin 1254086
[ 2471.304569][T11471] total_pgpgout 1254085
[ 2471.305735][T11471] total_pgfault 2457374
[ 2471.308768][T11471] total_pgmajfault 48
[ 2471.310246][T11471] total_inactive_anon 0
[ 2471.313591][T11471] total_active_anon 4096
[ 2471.315687][T11471] total_inactive_file 0
[ 2471.317262][T11471] total_active_file 0
[ 2471.318683][T11471] total_unevictable 0
[ 2471.320095][T11471] anon_cost 0
[ 2471.321281][T11471] file_cost 0
[ 2471.322468][T11471] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2/syz0,task=syz.2.35771,pid=11471,uid=0
[ 2471.327379][T11471] Memory cgroup out of memory: Killed process 11471 (syz.2.35771) total-vm:102364kB, anon-rss:1240kB, file-rss:23080kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[ 2471.386089][T11495] netlink: 'syz.0.35778': attribute type 1 has an invalid length.
[ 2471.404737][T11495] bond401: entered promiscuous mode
[ 2471.410195][T11495] 8021q: adding VLAN 0 to HW filter on device bond401
[ 2471.460026][T11495] bond401: (slave bridge193): making interface the new active one
[ 2471.463337][T11495] bridge193: entered promiscuous mode
[ 2471.468143][T11495] bond401: (slave bridge193): Enslaving as an active interface with an up link
[ 2471.729283][T11508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.35782'.
[ 2471.785926][T11511] netlink: 'syz.1.35783': attribute type 1 has an invalid length.
[ 2471.827622][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35781'.
[ 2471.857338][T11511] 8021q: adding VLAN 0 to HW filter on device bond367
[ 2471.963562][T11521] netlink: 36 bytes leftover after parsing attributes in process `syz.0.35781'.
[ 2472.933721][T11557] xt_hashlimit: size too large, truncated to 1048576
[ 2472.985749][T11563] netlink: 'syz.1.35789': attribute type 1 has an invalid length.
[ 2473.002268][T11563] netlink: 224 bytes leftover after parsing attributes in process `syz.1.35789'.
[ 2473.755717][T11555] syz.2.35788 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 2473.761206][T11555] CPU: 0 UID: 0 PID: 11555 Comm: syz.2.35788 Not tainted syzkaller #0 PREEMPT(full) 
[ 2473.761220][T11555] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2473.761226][T11555] Call Trace:
[ 2473.761230][T11555]  <TASK>
[ 2473.761234][T11555]  dump_stack_lvl+0xe8/0x150
[ 2473.761251][T11555]  dump_header+0xd3/0x4c0
[ 2473.761264][T11555]  oom_kill_process+0x3ab/0x970
[ 2473.761279][T11555]  out_of_memory+0x106c/0x1410
[ 2473.761290][T11555]  ? try_charge_memcg+0xba6/0x1560
[ 2473.761304][T11555]  ? __pfx___mutex_lock+0x10/0x10
[ 2473.761319][T11555]  ? __pfx_out_of_memory+0x10/0x10
[ 2473.761329][T11555]  ? do_raw_spin_unlock+0xf5/0x210
[ 2473.761346][T11555]  try_charge_memcg+0xc53/0x1560
[ 2473.761377][T11555]  ? __pfx_try_charge_memcg+0x10/0x10
[ 2473.761397][T11555]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 2473.761411][T11555]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 2473.761432][T11555]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 2473.761446][T11555]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[ 2473.761469][T11555]  __swap_cache_prepare_and_add+0xe8/0x760
[ 2473.761490][T11555]  ? page_rmappable_folio+0x9a/0x170
[ 2473.761503][T11555]  swap_cache_alloc_folio+0xf1/0x240
[ 2473.761533][T11555]  swap_cluster_readahead+0x369/0x690
[ 2473.761555][T11555]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 2473.761586][T11555]  ? get_vma_policy+0x27b/0x3c0
[ 2473.761597][T11555]  swapin_readahead+0x196/0xc50
[ 2473.761609][T11555]  ? swap_table_get+0x1e/0x260
[ 2473.761621][T11555]  ? __pfx_swapin_readahead+0x10/0x10
[ 2473.761637][T11555]  ? swap_table_get+0x1e/0x260
[ 2473.761653][T11555]  ? swap_table_get+0x1e/0x260
[ 2473.761669][T11555]  ? swap_table_get+0x1e/0x260
[ 2473.761686][T11555]  ? swap_table_get+0x216/0x260
[ 2473.761700][T11555]  ? swap_cache_get_folio+0x513/0x520
[ 2473.761712][T11555]  do_swap_page+0x56f/0x5a20
[ 2473.761749][T11555]  ? do_swap_page+0x127/0x5a20
[ 2473.761766][T11555]  ? __pfx_do_swap_page+0x10/0x10
[ 2473.761781][T11555]  ? __pte_offset_map+0x1ae/0x240
[ 2473.761798][T11555]  ? pte_offset_map_rw_nolock+0xea/0x160
[ 2473.761817][T11555]  handle_mm_fault+0x12d2/0x3310
[ 2473.761849][T11555]  ? handle_mm_fault+0xee/0x3310
[ 2473.761875][T11555]  ? __pfx_handle_mm_fault+0x10/0x10
[ 2473.761885][T11555]  ? lock_vma_under_rcu+0x45a/0x500
[ 2473.761927][T11555]  do_user_addr_fault+0xa73/0x1340
[ 2473.761954][T11555]  ? rcu_is_watching+0x15/0xb0
[ 2473.761970][T11555]  ? trace_page_fault_user+0x84/0x1e0
[ 2473.761989][T11555]  exc_page_fault+0x6a/0xc0
[ 2473.762035][T11555]  asm_exc_page_fault+0x26/0x30
[ 2473.762049][T11555] RIP: 0033:0x7f748286a78c
[ 2473.762064][T11555] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[ 2473.762077][T11555] RSP: 002b:00007fff18bb11e0 EFLAGS: 00010202
[ 2473.762091][T11555] RAX: 0000000000000000 RBX: 00007f7482c16090 RCX: 0000555555de8808
[ 2473.762101][T11555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2473.762110][T11555] RBP: 00007f7482c17da0 R08: 0000000000000000 R09: 0000000000000000
[ 2473.762120][T11555] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000025be91
[ 2473.762129][T11555] R13: 00007f7482c1609c R14: 000000000025bccc R15: 00007f7482c16090
[ 2473.762148][T11555]  </TASK>
[ 2473.762256][T11555] memory: usage 307200kB, limit 307200kB, failcnt 4742
[ 2473.886125][T11555] memory+swap: usage 308108kB, limit 9007199254740988kB, failcnt 0
[ 2473.888811][T11555] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[ 2473.891195][T11555] Memory cgroup stats for /syz2:
[ 2473.891279][T11555] cache 0
[ 2473.894016][T11555] rss 0
[ 2473.895822][T11555] rss_huge 0
[ 2473.897032][T11555] shmem 0
[ 2473.898170][T11555] mapped_file 0
[ 2473.899130][T11555] dirty 0
[ 2473.899957][T11555] writeback 0
[ 2473.901019][T11555] workingset_refault_anon 22
[ 2473.902466][T11555] workingset_refault_file 0
[ 2473.903961][T11555] swap 32768
[ 2473.905074][T11555] swapcached 327680
[ 2473.906439][T11555] pgpgin 891535
[ 2473.907540][T11555] pgpgout 891535
[ 2473.908651][T11555] pgfault 1804101
[ 2473.909743][T11555] pgmajfault 20
[ 2473.910743][T11555] inactive_anon 0
[ 2473.911834][T11555] active_anon 0
[ 2473.912895][T11555] inactive_file 0
[ 2473.914044][T11555] active_file 0
[ 2473.917044][T11555] unevictable 0
[ 2473.918134][T11555] hierarchical_memory_limit 314572800
[ 2473.920747][T11555] hierarchical_memsw_limit 9223372036854771712
[ 2473.922651][T11555] total_cache 0
[ 2473.923803][T11555] total_rss 0
[ 2473.924933][T11555] total_rss_huge 0
[ 2473.926287][T11555] total_shmem 0
[ 2473.927328][T11555] total_mapped_file 0
[ 2473.928571][T11555] total_dirty 0
[ 2473.929583][T11555] total_writeback 0
[ 2473.930771][T11555] total_workingset_refault_anon 56
[ 2473.932369][T11555] total_workingset_refault_file 0
[ 2473.933906][T11555] total_swap 929792
[ 2473.935431][T11555] total_swapcached 2498560
[ 2473.944607][T11555] total_pgpgin 1255472
[ 2473.945870][T11555] total_pgpgout 1255468
[ 2473.947060][T11555] total_pgfault 2460193
[ 2473.948232][T11555] total_pgmajfault 67
[ 2473.949410][T11555] total_inactive_anon 16384
[ 2473.950773][T11555] total_active_anon 0
[ 2473.951966][T11555] total_inactive_file 0
[ 2473.953159][T11555] total_active_file 0
[ 2473.956257][T11555] total_unevictable 0
[ 2473.958361][T11555] anon_cost 0
[ 2473.959408][T11555] file_cost 0
[ 2473.960441][T11555] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2/syz0,task=syz.2.35788,pid=11555,uid=0
[ 2473.965175][T11555] Memory cgroup out of memory: Killed process 11555 (syz.2.35788) total-vm:102364kB, anon-rss:1240kB, file-rss:23020kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[ 2473.990573][T11603] netlink: 'syz.0.35796': attribute type 1 has an invalid length.
[ 2474.076548][T11605] 8021q: adding VLAN 0 to HW filter on device bond403
[ 2474.081748][T11605] bond402: (slave bond403): making interface the new active one
[ 2474.095657][T11605] bond402: (slave bond403): Enslaving as an active interface with an up link
[ 2474.125738][T11603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.35796'.
[ 2474.131418][T11603] 8021q: adding VLAN 0 to HW filter on device bond402
[ 2474.233991][T11609] netlink: 'syz.0.35797': attribute type 1 has an invalid length.
[ 2474.241022][T11609] workqueue: Failed to create a rescuer kthread for wq "bond404": -EINTR
[ 2475.365319][T11647] __nla_validate_parse: 1 callbacks suppressed
[ 2475.365337][T11647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.35805'.
[ 2475.379803][T11641] netlink: 'syz.2.35805': attribute type 16 has an invalid length.
[ 2475.382170][T11641] netlink: 'syz.2.35805': attribute type 17 has an invalid length.
[ 2475.418768][T11641] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[ 2475.422975][T14359] lo speed is unknown, defaulting to 1000
[ 2475.429577][T14370] ip6_vti0 speed is unknown, defaulting to 1000
[ 2475.431412][T14359] sqz0: Port: 1 Link ACTIVE
[ 2475.433794][T14370] syz2: Port: 1 Link ACTIVE
[ 2475.437882][T14370] lo speed is unknown, defaulting to 1000
[ 2475.441775][T14370] ip6_vti0 speed is unknown, defaulting to 1000
[ 2475.870797][ T5828] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 2475.895148][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 2475.895171][ T5828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2475.895181][ T5828] Call Trace:
[ 2475.895187][ T5828]  <TASK>
[ 2475.895195][ T5828]  dump_stack_lvl+0xe8/0x150
[ 2475.895223][ T5828]  dump_header+0xd3/0x4c0
[ 2475.895244][ T5828]  oom_kill_process+0x3ab/0x970
[ 2475.895270][ T5828]  out_of_memory+0x106c/0x1410
[ 2475.895289][ T5828]  ? try_charge_memcg+0xba6/0x1560
[ 2475.895313][ T5828]  ? __pfx___mutex_lock+0x10/0x10
[ 2475.895337][ T5828]  ? __pfx_out_of_memory+0x10/0x10
[ 2475.895355][ T5828]  ? do_raw_spin_unlock+0xf5/0x210
[ 2475.895381][ T5828]  try_charge_memcg+0xc53/0x1560
[ 2475.895419][ T5828]  ? __pfx_try_charge_memcg+0x10/0x10
[ 2475.895445][ T5828]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 2475.895469][ T5828]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 2475.895495][ T5828]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 2475.895520][ T5828]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[ 2475.895545][ T5828]  __swap_cache_prepare_and_add+0xe8/0x760
[ 2475.895570][ T5828]  ? page_rmappable_folio+0x9a/0x170
[ 2475.895598][ T5828]  swap_cache_alloc_folio+0xf1/0x240
[ 2475.895621][ T5828]  swap_cluster_readahead+0x53a/0x690
[ 2475.895645][ T5828]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 2475.895676][ T5828]  ? get_vma_policy+0x27b/0x3c0
[ 2475.895694][ T5828]  swapin_readahead+0x196/0xc50
[ 2475.895716][ T5828]  ? swap_table_get+0x1e/0x260
[ 2475.895738][ T5828]  ? __pfx_swapin_readahead+0x10/0x10
[ 2475.895758][ T5828]  ? swap_table_get+0x1e/0x260
[ 2475.895793][ T5828]  ? swap_table_get+0x1e/0x260
[ 2475.895808][ T5828]  ? swap_table_get+0x1e/0x260
[ 2475.895851][ T5828]  ? swap_table_get+0x216/0x260
[ 2475.895870][ T5828]  ? swap_cache_get_folio+0x513/0x520
[ 2475.895893][ T5828]  do_swap_page+0x56f/0x5a20
[ 2475.895930][ T5828]  ? do_swap_page+0x127/0x5a20
[ 2475.895951][ T5828]  ? __pfx_do_swap_page+0x10/0x10
[ 2475.895967][ T5828]  ? __pte_offset_map+0x1ae/0x240
[ 2475.895989][ T5828]  ? pte_offset_map_rw_nolock+0xea/0x160
[ 2475.896008][ T5828]  handle_mm_fault+0x12d2/0x3310
[ 2475.896036][ T5828]  ? handle_mm_fault+0xee/0x3310
[ 2475.896058][ T5828]  ? __pfx_handle_mm_fault+0x10/0x10
[ 2475.896073][ T5828]  ? lock_vma_under_rcu+0x45a/0x500
[ 2475.896115][ T5828]  do_user_addr_fault+0xa73/0x1340
[ 2475.896142][ T5828]  ? rcu_is_watching+0x15/0xb0
[ 2475.896163][ T5828]  ? trace_page_fault_user+0x84/0x1e0
[ 2475.896185][ T5828]  exc_page_fault+0x6a/0xc0
[ 2475.896204][ T5828]  asm_exc_page_fault+0x26/0x30
[ 2475.896220][ T5828] RIP: 0033:0x7f179fd5d60e
[ 2475.896234][ T5828] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2475.896247][ T5828] RSP: 002b:00007ffc57861628 EFLAGS: 00010246
[ 2475.896260][ T5828] RAX: 0000000000000000 RBX: 000055556d702500 RCX: 00007f179fd5d60e
[ 2475.896271][ T5828] RDX: 00007ffc57861680 RSI: 0000000000000000 RDI: 0000000000000000
[ 2475.896280][ T5828] RBP: 00007ffc578616ec R08: 0000000000000000 R09: 0000000000000000
[ 2475.896289][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 2475.896299][ T5828] R13: 00000000000927c0 R14: 000000000025c53a R15: 00007ffc57861740
[ 2475.896325][ T5828]  </TASK>
[ 2475.896369][ T5828] memory: usage 307200kB, limit 307200kB, failcnt 3096
[ 2476.028045][ T5828] memory+swap: usage 307604kB, limit 9007199254740988kB, failcnt 0
[ 2476.035302][ T5828] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0
[ 2476.041159][ T5828] Memory cgroup stats for /syz0:
[ 2476.041267][ T5828] cache 0
[ 2476.052510][ T5828] rss 0
[ 2476.057070][ T5828] rss_huge 0
[ 2476.060618][ T5828] shmem 0
[ 2476.062622][ T5828] mapped_file 0
[ 2476.068024][ T5828] dirty 0
[ 2476.070075][ T5828] writeback 0
[ 2476.072287][ T5828] workingset_refault_anon 133
[ 2476.075767][ T5828] workingset_refault_file 628
[ 2476.078638][ T5828] swap 413696
[ 2476.080647][ T5828] swapcached 1785856
[ 2476.083040][ T5828] pgpgin 1191075
[ 2476.084005][ T5828] pgpgout 1191075
[ 2476.088017][ T5828] pgfault 2374246
[ 2476.089536][ T5828] pgmajfault 103
[ 2476.090501][ T5828] inactive_anon 0
[ 2476.091574][ T5828] active_anon 0
[ 2476.092485][ T5828] inactive_file 0
[ 2476.093710][ T5828] active_file 0
[ 2476.097015][ T5828] unevictable 0
[ 2476.098020][ T5828] hierarchical_memory_limit 314572800
[ 2476.099461][ T5828] hierarchical_memsw_limit 9223372036854771712
[ 2476.101250][ T5828] total_cache 0
[ 2476.102405][ T5828] total_rss 0
[ 2476.103331][ T5828] total_rss_huge 0
[ 2476.105602][T11661] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 2476.107769][ T5828] total_shmem 0
[ 2476.108651][ T5828] total_mapped_file 0
[ 2476.110008][ T5828] total_dirty 0
[ 2476.111427][ T5828] total_writeback 0
[ 2476.113096][ T5828] total_workingset_refault_anon 133
[ 2476.120887][ T5828] total_workingset_refault_file 628
[ 2476.122695][ T5828] total_swap 413696
[ 2476.123941][ T5828] total_swapcached 1785856
[ 2476.126450][ T5828] total_pgpgin 1191095
[ 2476.128657][ T5828] total_pgpgout 1191095
[ 2476.130106][ T5828] total_pgfault 2374306
[ 2476.131335][ T5828] total_pgmajfault 103
[ 2476.135286][ T5828] total_inactive_anon 0
[ 2476.137577][ T5828] total_active_anon 0
[ 2476.139262][ T5828] total_inactive_file 0
[ 2476.140602][T11661] ip6tnl30: entered promiscuous mode
[ 2476.142237][ T5828] total_active_file 0
[ 2476.143336][ T5828] total_unevictable 0
[ 2476.145500][ T5828] anon_cost 0
[ 2476.146645][ T5828] file_cost 0
[ 2476.147648][ T5828] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.35806,pid=11637,uid=0
[ 2476.151966][ T5828] Memory cgroup out of memory: Killed process 11637 (syz.0.35806) total-vm:102364kB, anon-rss:1240kB, file-rss:23084kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[ 2476.157827][T11662] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 2476.232902][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35812'.
[ 2476.318751][ T5828] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[ 2476.337404][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 2476.337418][ T5828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2476.337424][ T5828] Call Trace:
[ 2476.337428][ T5828]  <TASK>
[ 2476.337433][ T5828]  dump_stack_lvl+0xe8/0x150
[ 2476.337450][ T5828]  dump_header+0xd3/0x4c0
[ 2476.337463][ T5828]  oom_kill_process+0x3ab/0x970
[ 2476.337478][ T5828]  out_of_memory+0x106c/0x1410
[ 2476.337489][ T5828]  ? try_charge_memcg+0xba6/0x1560
[ 2476.337503][ T5828]  ? __pfx___mutex_lock+0x10/0x10
[ 2476.337518][ T5828]  ? __pfx_out_of_memory+0x10/0x10
[ 2476.337534][ T5828]  ? do_raw_spin_unlock+0xf5/0x210
[ 2476.337548][ T5828]  try_charge_memcg+0xc53/0x1560
[ 2476.337568][ T5828]  ? __pfx_try_charge_memcg+0x10/0x10
[ 2476.337583][ T5828]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 2476.337596][ T5828]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 2476.337610][ T5828]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 2476.337624][ T5828]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[ 2476.337638][ T5828]  __swap_cache_prepare_and_add+0xe8/0x760
[ 2476.337652][ T5828]  ? page_rmappable_folio+0x9a/0x170
[ 2476.337664][ T5828]  swap_cache_alloc_folio+0xf1/0x240
[ 2476.337676][ T5828]  swap_cluster_readahead+0x53a/0x690
[ 2476.337690][ T5828]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 2476.337706][ T5828]  ? get_vma_policy+0x27b/0x3c0
[ 2476.337716][ T5828]  swapin_readahead+0x196/0xc50
[ 2476.337728][ T5828]  ? swap_table_get+0x1e/0x260
[ 2476.337740][ T5828]  ? __pfx_swapin_readahead+0x10/0x10
[ 2476.337751][ T5828]  ? swap_table_get+0x1e/0x260
[ 2476.337760][ T5828]  ? swap_table_get+0x1e/0x260
[ 2476.337768][ T5828]  ? swap_table_get+0x1e/0x260
[ 2476.337778][ T5828]  ? swap_table_get+0x216/0x260
[ 2476.337809][ T5828]  ? swap_cache_get_folio+0x513/0x520
[ 2476.337822][ T5828]  do_swap_page+0x56f/0x5a20
[ 2476.337842][ T5828]  ? do_swap_page+0x127/0x5a20
[ 2476.337851][ T5828]  ? __pfx_do_swap_page+0x10/0x10
[ 2476.337859][ T5828]  ? __pte_offset_map+0x1ae/0x240
[ 2476.337872][ T5828]  ? pte_offset_map_rw_nolock+0xea/0x160
[ 2476.337884][ T5828]  handle_mm_fault+0x12d2/0x3310
[ 2476.337900][ T5828]  ? handle_mm_fault+0xee/0x3310
[ 2476.337914][ T5828]  ? __pfx_handle_mm_fault+0x10/0x10
[ 2476.337922][ T5828]  ? lock_vma_under_rcu+0x45a/0x500
[ 2476.337946][ T5828]  do_user_addr_fault+0xa73/0x1340
[ 2476.337961][ T5828]  ? rcu_is_watching+0x15/0xb0
[ 2476.337973][ T5828]  ? trace_page_fault_user+0x84/0x1e0
[ 2476.337985][ T5828]  exc_page_fault+0x6a/0xc0
[ 2476.337996][ T5828]  asm_exc_page_fault+0x26/0x30
[ 2476.338004][ T5828] RIP: 0033:0x7f179fd5d60e
[ 2476.338013][ T5828] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2476.338020][ T5828] RSP: 002b:00007ffc57861628 EFLAGS: 00010246
[ 2476.338034][ T5828] RAX: 0000000000000000 RBX: 000055556d702500 RCX: 00007f179fd5d60e
[ 2476.338040][ T5828] RDX: 00007ffc57861680 RSI: 0000000000000000 RDI: 0000000000000000
[ 2476.338045][ T5828] RBP: 00007ffc578616ec R08: 0000000000000000 R09: 0000000000000000
[ 2476.338050][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 2476.338055][ T5828] R13: 00000000000927c0 R14: 000000000025c53a R15: 00007ffc57861740
[ 2476.338070][ T5828]  </TASK>
[ 2476.338073][ T5828] memory: usage 307200kB, limit 307200kB, failcnt 3263
[ 2476.428363][ T5828] memory+swap: usage 302916kB, limit 9007199254740988kB, failcnt 0
[ 2476.430445][ T5828] kmem: usage 301864kB, limit 9007199254740988kB, failcnt 0
[ 2476.432462][ T5828] Memory cgroup stats for /syz0:
[ 2476.432540][ T5828] cache 0
[ 2476.435387][ T5828] rss 8192
[ 2476.436277][ T5828] rss_huge 0
[ 2476.437193][ T5828] shmem 0
[ 2476.437982][ T5828] mapped_file 0
[ 2476.438877][ T5828] dirty 0
[ 2476.439640][ T5828] writeback 0
[ 2476.440507][ T5828] workingset_refault_anon 134
[ 2476.441933][ T5828] workingset_refault_file 628
[ 2476.443161][ T5828] swap 405504
[ 2476.443989][ T5828] swapcached 1794048
[ 2476.466433][ T5828] pgpgin 1191077
[ 2476.467428][ T5828] pgpgout 1191075
[ 2476.469522][ T5828] pgfault 2374250
[ 2476.470509][ T5828] pgmajfault 105
[ 2476.473147][ T5828] inactive_anon 0
[ 2476.482956][ T5828] active_anon 4096
[ 2476.484002][ T5828] inactive_file 0
[ 2476.485048][ T5828] active_file 0
[ 2476.485948][ T5828] unevictable 0
[ 2476.486888][ T5828] hierarchical_memory_limit 314572800
[ 2476.488290][ T5828] hierarchical_memsw_limit 9223372036854771712
[ 2476.489857][ T5828] total_cache 0
[ 2476.490736][ T5828] total_rss 8192
[ 2476.491875][ T5828] total_rss_huge 0
[ 2476.492870][ T5828] total_shmem 0
[ 2476.493792][ T5828] total_mapped_file 0
[ 2476.496182][ T5828] total_dirty 0
[ 2476.499223][ T5828] total_writeback 0
[ 2476.500176][ T5828] total_workingset_refault_anon 134
[ 2476.502937][ T5828] total_workingset_refault_file 628
[ 2476.504596][ T5828] total_swap 405504
[ 2476.505569][ T5828] total_swapcached 1794048
[ 2476.506740][ T5828] total_pgpgin 1191097
[ 2476.507827][ T5828] total_pgpgout 1191095
[ 2476.508955][ T5828] total_pgfault 2374310
[ 2476.510045][ T5828] total_pgmajfault 105
[ 2476.511142][ T5828] total_inactive_anon 0
[ 2476.512244][ T5828] total_active_anon 4096
[ 2476.513354][ T5828] total_inactive_file 0
[ 2476.516333][ T5828] total_active_file 0
[ 2476.517383][ T5828] total_unevictable 0
[ 2476.518342][ T5828] anon_cost 0
[ 2476.519138][ T5828] file_cost 0
[ 2476.519918][ T5828] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor,pid=5828,uid=0
[ 2476.523855][ T5828] Memory cgroup out of memory: Killed process 5828 (syz-executor) total-vm:98260kB, anon-rss:1276kB, file-rss:21728kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:0
[ 2476.635079][T11673] netlink: 36 bytes leftover after parsing attributes in process `syz.2.35813'.
[ 2477.228703][T11680] netlink: 'syz.1.35818': attribute type 4 has an invalid length.
[ 2477.297867][T11683] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2477.303649][T11683] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2477.307637][T11683] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2477.312865][T11683] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2477.329121][T11683] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2477.417563][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2477.420633][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2477.423559][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2477.426967][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2477.430075][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2477.510870][T11681] wg1 speed is unknown, defaulting to 1000
[ 2477.859034][T11681] lo speed is unknown, defaulting to 1000
[ 2477.908605][T11711] netlink: 72 bytes leftover after parsing attributes in process `syz.1.35823'.
[ 2477.917933][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35823'.
[ 2477.991621][T11681] ip6_vti0 speed is unknown, defaulting to 1000
[ 2478.077901][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35824'.
[ 2478.087794][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35824'.
[ 2478.139403][T11684] syz.2.35820 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[ 2478.142618][T11684] CPU: 1 UID: 0 PID: 11684 Comm: syz.2.35820 Not tainted syzkaller #0 PREEMPT(full) 
[ 2478.142649][T11684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2478.142656][T11684] Call Trace:
[ 2478.142661][T11684]  <TASK>
[ 2478.142666][T11684]  dump_stack_lvl+0xe8/0x150
[ 2478.142684][T11684]  dump_header+0xd3/0x4c0
[ 2478.142696][T11684]  oom_kill_process+0x3ab/0x970
[ 2478.142711][T11684]  out_of_memory+0x106c/0x1410
[ 2478.142722][T11684]  ? try_charge_memcg+0xba6/0x1560
[ 2478.142736][T11684]  ? __pfx___mutex_lock+0x10/0x10
[ 2478.142750][T11684]  ? __pfx_out_of_memory+0x10/0x10
[ 2478.142760][T11684]  ? do_raw_spin_unlock+0xf5/0x210
[ 2478.142774][T11684]  try_charge_memcg+0xc53/0x1560
[ 2478.142794][T11684]  ? __pfx_try_charge_memcg+0x10/0x10
[ 2478.142809][T11684]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 2478.142823][T11684]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 2478.142837][T11684]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[ 2478.142850][T11684]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[ 2478.142864][T11684]  __swap_cache_prepare_and_add+0xe8/0x760
[ 2478.142878][T11684]  ? page_rmappable_folio+0x9a/0x170
[ 2478.142890][T11684]  swap_cache_alloc_folio+0xf1/0x240
[ 2478.142903][T11684]  swap_cluster_readahead+0x369/0x690
[ 2478.142916][T11684]  ? __pfx_swap_cluster_readahead+0x10/0x10
[ 2478.142932][T11684]  ? get_vma_policy+0x27b/0x3c0
[ 2478.142942][T11684]  swapin_readahead+0x196/0xc50
[ 2478.142954][T11684]  ? swap_table_get+0x1e/0x260
[ 2478.142966][T11684]  ? __pfx_swapin_readahead+0x10/0x10
[ 2478.142977][T11684]  ? swap_table_get+0x1e/0x260
[ 2478.142986][T11684]  ? swap_table_get+0x1e/0x260
[ 2478.142994][T11684]  ? swap_table_get+0x1e/0x260
[ 2478.143004][T11684]  ? swap_table_get+0x216/0x260
[ 2478.143014][T11684]  ? swap_cache_get_folio+0x513/0x520
[ 2478.143026][T11684]  do_swap_page+0x56f/0x5a20
[ 2478.143046][T11684]  ? do_swap_page+0x127/0x5a20
[ 2478.143060][T11684]  ? __pfx_do_swap_page+0x10/0x10
[ 2478.143069][T11684]  ? __pte_offset_map+0x1ae/0x240
[ 2478.143081][T11684]  ? pte_offset_map_rw_nolock+0xea/0x160
[ 2478.143092][T11684]  handle_mm_fault+0x12d2/0x3310
[ 2478.143110][T11684]  ? handle_mm_fault+0xee/0x3310
[ 2478.143123][T11684]  ? __pfx_handle_mm_fault+0x10/0x10
[ 2478.143132][T11684]  ? lock_vma_under_rcu+0x45a/0x500
[ 2478.143156][T11684]  do_user_addr_fault+0xa73/0x1340
[ 2478.143171][T11684]  ? rcu_is_watching+0x15/0xb0
[ 2478.143183][T11684]  ? trace_page_fault_user+0x84/0x1e0
[ 2478.143195][T11684]  exc_page_fault+0x6a/0xc0
[ 2478.143206][T11684]  asm_exc_page_fault+0x26/0x30
[ 2478.143214][T11684] RIP: 0033:0x7f7482957f03
[ 2478.143224][T11684] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ae 67 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b
[ 2478.143231][T11684] RSP: 002b:00007fff18bb1170 EFLAGS: 00010246
[ 2478.143240][T11684] RAX: 0000000000000000 RBX: 0000555555de8500 RCX: 0000000000000000
[ 2478.143246][T11684] RDX: 00007fff18bb11b0 RSI: 0000000000000000 RDI: 0000000000000000
[ 2478.143251][T11684] RBP: 00007f7482c17da0 R08: 0000000000000000 R09: 0000000000000000
[ 2478.143256][T11684] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000025cfad
[ 2478.143261][T11684] R13: 00007f7482c15fac R14: 000000000025cd85 R15: 00007f7482c15fa0
[ 2478.143276][T11684]  </TASK>
[ 2478.143280][T11684] memory: usage 307200kB, limit 307200kB, failcnt 5106
[ 2478.246374][T11684] memory+swap: usage 308124kB, limit 9007199254740988kB, failcnt 0
[ 2478.249321][T11684] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[ 2478.251890][T11684] Memory cgroup stats for /syz2:
[ 2478.251991][T11684] cache 0
[ 2478.255234][T11684] rss 0
[ 2478.256552][T11684] rss_huge 0
[ 2478.257901][T11684] shmem 0
[ 2478.259042][T11684] mapped_file 0
[ 2478.260356][T11684] dirty 0
[ 2478.261487][T11684] writeback 0
[ 2478.262760][T11684] workingset_refault_anon 23
[ 2478.264643][T11684] workingset_refault_file 0
[ 2478.266767][T11684] swap 28672
[ 2478.268119][T11684] swapcached 356352
[ 2478.269569][T11684] pgpgin 891542
[ 2478.270911][T11684] pgpgout 891541
[ 2478.272276][T11684] pgfault 1804101
[ 2478.273674][T11684] pgmajfault 20
[ 2478.280524][T11684] inactive_anon 0
[ 2478.282139][T11684] active_anon 4096
[ 2478.283795][T11684] inactive_file 0
[ 2478.285940][T11684] active_file 0
[ 2478.287437][T11684] unevictable 0
[ 2478.288784][T11684] hierarchical_memory_limit 314572800
[ 2478.290659][T11684] hierarchical_memsw_limit 9223372036854771712
[ 2478.292855][T11684] total_cache 0
[ 2478.299051][T11684] total_rss 0
[ 2478.300384][T11684] total_rss_huge 0
[ 2478.301901][T11684] total_shmem 0
[ 2478.303539][T11684] total_mapped_file 0
[ 2478.305253][T11684] total_dirty 0
[ 2478.306915][T11684] total_writeback 0
[ 2478.308448][T11684] total_workingset_refault_anon 68
[ 2478.310362][T11684] total_workingset_refault_file 0
[ 2478.312122][T11684] total_swap 946176
[ 2478.314724][T11684] total_swapcached 2920448
[ 2478.316084][T11684] total_pgpgin 1259922
[ 2478.317285][T11684] total_pgpgout 1259920
[ 2478.321078][T11684] total_pgfault 2469236
[ 2478.325847][T11684] total_pgmajfault 85
[ 2478.327005][T11684] total_inactive_anon 4096
[ 2478.336177][T11684] total_active_anon 4096
[ 2478.337459][T11684] total_inactive_file 0
[ 2478.342033][T11684] total_active_file 0
[ 2478.343253][T11684] total_unevictable 0
[ 2478.351738][T11684] anon_cost 0
[ 2478.357011][T11684] file_cost 0
[ 2478.358002][T11684] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2/syz0,task=syz.2.35820,pid=11684,uid=0
[ 2478.372928][T11684] Memory cgroup out of memory: Killed process 11684 (syz.2.35820) total-vm:102496kB, anon-rss:1240kB, file-rss:23020kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[ 2478.507424][T11681] chnl_net:caif_netlink_parms(): no params data found
[ 2478.742404][T11681] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2478.751744][T11681] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2478.756603][T11681] bridge_slave_0: entered allmulticast mode
[ 2478.771890][T11681] bridge_slave_0: entered promiscuous mode
[ 2478.786490][T11681] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2478.797109][T11681] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2478.797531][T11739] netlink: 'syz.1.35828': attribute type 1 has an invalid length.
[ 2478.808613][T11681] bridge_slave_1: entered allmulticast mode
[ 2478.817140][T11681] bridge_slave_1: entered promiscuous mode
[ 2478.857235][T11739] bond368: entered promiscuous mode
[ 2478.859219][T11739] 8021q: adding VLAN 0 to HW filter on device bond368
[ 2478.920197][T11739] macvtap47: entered allmulticast mode
[ 2478.932763][T11743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.35829'.
[ 2478.945651][T11741] macvtap48: entered allmulticast mode
[ 2478.955509][T11681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2478.997892][T11739] bond368: (slave bridge206): making interface the new active one
[ 2479.000871][T11739] bridge206: entered promiscuous mode
[ 2479.007970][T11739] bond368: (slave bridge206): Enslaving as an active interface with an up link
[ 2479.017894][T11681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2479.042028][T11744] netlink: 'syz.2.35829': attribute type 13 has an invalid length.
[ 2479.052814][T11744] netlink: 'syz.2.35829': attribute type 17 has an invalid length.
[ 2479.156029][T11744] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[ 2479.210048][T11681] team0: Port device team_slave_0 added
[ 2479.223388][T11681] team0: Port device team_slave_1 added
[ 2479.349619][T11681] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2479.355165][T11681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2479.373856][T11681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2479.394857][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35832'.
[ 2479.402460][T11681] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2479.409553][T11681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2479.420606][T11681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2479.461845][T11681] hsr_slave_0: entered promiscuous mode
[ 2479.465161][T11681] hsr_slave_1: entered promiscuous mode
[ 2479.496205][T11683] Bluetooth: hci2: command tx timeout
[ 2479.896839][T11779] wg1 speed is unknown, defaulting to 1000
[ 2479.927904][T11783] netlink: 'syz.1.35838': attribute type 1 has an invalid length.
[ 2480.016217][T11783] 8021q: adding VLAN 0 to HW filter on device bond369
[ 2480.060618][T11783] bond369: (slave bridge207): making interface the new active one
[ 2480.066298][T11783] bond369: (slave bridge207): Enslaving as an active interface with an up link
[ 2480.072074][T11681] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 2480.135488][T11681] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2480.149988][T11779] lo speed is unknown, defaulting to 1000
[ 2480.150126][T11681] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 2480.173052][T11681] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2480.183425][T11681] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 2480.202190][T11681] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2480.209218][T11681] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 2480.217730][T11681] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2480.306741][T11797] ipt_ECN: cannot use operation on non-tcp rule
[ 2480.311160][T11795] veth219: entered promiscuous mode
[ 2480.331025][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35837'.
[ 2480.359528][T11681] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2480.381307][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35840'.
[ 2480.387244][T11681] 8021q: adding VLAN 0 to HW filter on device team0
[ 2480.399844][T11779] ip6_vti0 speed is unknown, defaulting to 1000
[ 2480.411320][T30020] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2480.413489][T30020] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2480.435844][T30020] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2480.438030][T30020] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2480.529616][T11802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.35842'.
[ 2480.772690][T11681] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2480.810703][T11811] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2480.830698][T11811] tipc: Resetting bearer <eth:syzkaller0>
[ 2480.859613][T11681] veth0_vlan: entered promiscuous mode
[ 2480.888277][T11681] veth1_vlan: entered promiscuous mode
[ 2480.946928][T11681] veth0_macvtap: entered promiscuous mode
[ 2480.949253][T11818] netlink: 72 bytes leftover after parsing attributes in process `syz.1.35844'.
[ 2480.957074][T11681] veth1_macvtap: entered promiscuous mode
[ 2480.974966][T11681] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2481.009883][T11681] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2481.026783][T10704] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2481.034217][T10704] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2481.048621][T10704] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2481.054011][T10704] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2481.271459][T16860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2481.275031][T16860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2481.379576][T30327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2481.382749][T30327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2481.565104][T11683] Bluetooth: hci2: command tx timeout
[ 2481.570515][T11828] netlink: 292 bytes leftover after parsing attributes in process `syz.2.35846'.
[ 2481.716780][T11831] batman_adv: batadv0: Adding interface: ipvlan2
[ 2481.719261][T11831] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2481.728516][T11831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2481.732120][T11831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2481.735800][T11831] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[ 2481.862244][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35850'.
[ 2482.031328][T11845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35851'.
[ 2482.146392][T11840] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 2482.191822][T11848] dvmrp0: entered allmulticast mode
[ 2482.241594][T11850] 8021q: VLANs not supported on gre0
[ 2482.289249][T11853] batman_adv: batadv0: Adding interface: ipvlan3
[ 2482.291835][T11853] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2482.302321][T11853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2482.306507][T11853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2482.310442][T11853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[ 2482.314735][T11853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2482.318329][T11853] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[ 2482.354501][T11856] veth1: Caught tx_queue_len zero misconfig
[ 2482.630315][T11876] sctp: [Deprecated]: syz.1.35864 (pid 11876) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2482.630315][T11876] Use struct sctp_sack_info instead
[ 2482.648490][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35863'.
[ 2482.666616][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35863'.
[ 2482.681522][T10704] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2482.688272][T10704] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2482.702870][T10704] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2482.711184][T10704] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2482.968199][T11898] netlink: 'syz.1.35871': attribute type 1 has an invalid length.
[ 2483.038705][T11898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.35871'.
[ 2483.052009][T11898] 8021q: adding VLAN 0 to HW filter on device bond370
[ 2483.302098][T11914] bond409: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[ 2483.315021][T11914] bond409 (unregistering): Released all slaves
[ 2483.501688][T11924] netlink: 'syz.2.35880': attribute type 1 has an invalid length.
[ 2483.570835][T11924] bond409: entered promiscuous mode
[ 2483.573223][T11924] 8021q: adding VLAN 0 to HW filter on device bond409
[ 2483.587657][T11928] macvtap42: entered allmulticast mode
[ 2483.618382][T11924] macvtap43: entered allmulticast mode
[ 2483.647000][T11683] Bluetooth: hci2: command tx timeout
[ 2483.647040][T11924] bond409: (slave bridge195): making interface the new active one
[ 2483.651772][T11924] bridge195: entered promiscuous mode
[ 2483.662816][T11924] bond409: (slave bridge195): Enslaving as an active interface with an up link
[ 2483.732367][T11936] netlink: 9 bytes leftover after parsing attributes in process `syz.2.35882'.
[ 2484.099881][ T4539] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2484.113467][ T4539] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2484.120370][ T4539] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2484.126264][ T4539] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2484.380881][T11969] netlink: 'syz.2.35894': attribute type 1 has an invalid length.
[ 2484.387845][T11967] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 2484.391154][T11967] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 2484.469695][T11972] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2484.472805][T11972] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2484.595788][T11972] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2484.609761][T11972] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2484.853332][ T4539] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2484.862023][ T4539] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2484.865399][ T4539] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2484.868713][ T4539] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2484.872203][ T4539] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2484.883873][ T4539] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2484.897942][ T4539] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2484.904164][ T4539] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2484.941290][T11980] syzkaller0: entered promiscuous mode
[ 2484.943458][T11980] syzkaller0: entered allmulticast mode
[ 2485.057949][T11987] netlink: 'syz.2.35899': attribute type 21 has an invalid length.
[ 2485.061005][T11987] netlink: 'syz.2.35899': attribute type 6 has an invalid length.
[ 2485.216976][T11991] workqueue: Failed to create a rescuer kthread for wq "bond410": -EINTR
[ 2485.401786][T12001] __nla_validate_parse: 11 callbacks suppressed
[ 2485.401806][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35903'.
[ 2485.413537][T12001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35903'.
[ 2485.418114][T12001] netlink: 'syz.1.35903': attribute type 20 has an invalid length.
[ 2485.724616][T11683] Bluetooth: hci2: command tx timeout
[ 2486.013832][T12003] netlink: 'syz.2.35904': attribute type 11 has an invalid length.
[ 2486.113112][T12006] netlink: 9 bytes leftover after parsing attributes in process `syz.3.35905'.
[ 2486.117484][T12006] gretap0: entered promiscuous mode
[ 2486.121366][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35905'.
[ 2486.130061][T12006] netlink: 5 bytes leftover after parsing attributes in process `syz.3.35905'.
[ 2486.133409][T12006] 0{X: renamed from gretap0
[ 2486.138412][T12006] 0{X: left promiscuous mode
[ 2486.139991][T12006] 0{X: entered allmulticast mode
[ 2486.143314][T12006] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[ 2486.261975][T12010] batman_adv: batadv0: Adding interface: ipvlan4
[ 2486.264897][T12010] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2486.273419][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2486.277185][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2486.281103][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2
[ 2486.285291][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2486.288737][T12010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3
[ 2486.292141][T12010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2486.295792][T12010] batman_adv: batadv0: Not using interface ipvlan4 (retrying later): interface not active
[ 2486.446148][T12014] syzkaller1: entered promiscuous mode
[ 2486.448247][T12014] syzkaller1: entered allmulticast mode
[ 2486.568036][ T6325] IPVS: starting estimator thread 0...
[ 2486.571087][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35910'.
[ 2486.576833][T12016] batman_adv: batadv0: Removing interface: ipvlan2
[ 2486.583001][T12016] batman_adv: batadv0: Removing interface: ipvlan3
[ 2486.589636][T12016] batman_adv: batadv0: Removing interface: ipvlan4
[ 2486.595731][T12016] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2486.675153][T12017] IPVS: using max 68 ests per chain, 163200 per kthread
[ 2487.127504][T12039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35915'.
[ 2487.130019][T12036] syzkaller0: entered promiscuous mode
[ 2487.132700][T12036] syzkaller0: entered allmulticast mode
[ 2487.279706][T12046] 8021q: adding VLAN 0 to HW filter on device bond35
[ 2488.571865][T12057] nbd: must specify a size in bytes for the device
[ 2488.576989][T12057] netlink: 132 bytes leftover after parsing attributes in process `syz.2.35920'.
[ 2494.374188][T12054] : left promiscuous mode
[ 2494.401089][T12054] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[ 2494.498223][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.35923'.
[ 2494.813257][T12084] Bluetooth: hci0: Opcode 0x0401 failed: -22
[ 2495.020888][T12094] netlink: 48 bytes leftover after parsing attributes in process `syz.3.35930'.
[ 2495.068964][T12098] netlink: 'syz.1.35931': attribute type 1 has an invalid length.
[ 2495.181618][T12103] bridge1: the hash_elasticity option has been deprecated and is always 16
[ 2495.185513][T12103] bridge1: entered allmulticast mode
[ 2495.413599][T12112] netlink: 'syz.1.35935': attribute type 39 has an invalid length.
[ 2495.529572][T12118] netlink: 'syz.1.35939': attribute type 11 has an invalid length.
[ 2495.773727][T12128] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[ 2495.777571][T12128] pim6reg1: entered promiscuous mode
[ 2495.779230][T12128] pim6reg1: entered allmulticast mode
[ 2496.399726][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35951'.
[ 2496.482424][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35952'.
[ 2496.651701][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35954'.
[ 2496.664451][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35954'.
[ 2496.668745][T12163] netlink: 'syz.1.35954': attribute type 18 has an invalid length.
[ 2497.116981][T12173] netlink: 'syz.1.35958': attribute type 28 has an invalid length.
[ 2497.241512][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35959'.
[ 2497.507768][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35965'.
[ 2497.512799][T12197] openvswitch: netlink: Message has 52 unknown bytes.
[ 2497.551536][T12197] wg1 speed is unknown, defaulting to 1000
[ 2497.693506][T12205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35968'.
[ 2497.747888][T12205] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2497.797190][T12209] bond1: (slave veth3): Enslaving as an active interface with an up link
[ 2497.812451][T12197] lo speed is unknown, defaulting to 1000
[ 2497.839194][T12205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.35968'.
[ 2497.856646][T12200] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[ 2497.884162][T12205] bond1: (slave bridge2): Enslaving as an active interface with an up link
[ 2497.926772][T12200] bond410: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[ 2497.935893][T12200] bond410: entered promiscuous mode
[ 2497.939491][T12200] 8021q: adding VLAN 0 to HW filter on device bond410
[ 2497.984236][T12216] netlink: 'syz.3.35971': attribute type 1 has an invalid length.
[ 2498.021168][T12216] 8021q: adding VLAN 0 to HW filter on device bond2
[ 2498.051388][T12197] ip6_vti0 speed is unknown, defaulting to 1000
[ 2498.127422][T12224] bond2: (slave ip6gretap1): making interface the new active one
[ 2498.139350][T12224] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 2498.923484][T12245] netlink: 'syz.2.35979': attribute type 10 has an invalid length.
[ 2499.127777][T12250] sctp: [Deprecated]: syz.2.35980 (pid 12250) Use of int in max_burst socket option.
[ 2499.127777][T12250] Use struct sctp_assoc_value instead
[ 2499.537697][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35984'.
[ 2499.545593][T12262] netlink: 'syz.2.35983': attribute type 21 has an invalid length.
[ 2499.552515][T12262] netlink: 128 bytes leftover after parsing attributes in process `syz.2.35983'.
[ 2499.562721][T12262] netlink: 'syz.2.35983': attribute type 4 has an invalid length.
[ 2499.572872][T12262] netlink: 'syz.2.35983': attribute type 3 has an invalid length.
[ 2499.584833][T12262] netlink: 3 bytes leftover after parsing attributes in process `syz.2.35983'.
[ 2499.723172][T12262] wg1 speed is unknown, defaulting to 1000
[ 2499.729021][T12263] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[ 2499.906820][T12262] lo speed is unknown, defaulting to 1000
[ 2500.015201][T12262] ip6_vti0 speed is unknown, defaulting to 1000
[ 2500.310410][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35988'.
[ 2500.631578][T12283] "syz.2.35989" (12283) uses obsolete ecb(arc4) skcipher
[ 2501.127064][T12305] netlink: 'syz.1.35996': attribute type 1 has an invalid length.
[ 2501.213504][T12305] bond372: entered promiscuous mode
[ 2501.223334][T12305] 8021q: adding VLAN 0 to HW filter on device bond372
[ 2501.341549][T12305] bond372: (slave bridge208): making interface the new active one
[ 2501.349571][T12305] bridge208: entered promiscuous mode
[ 2501.353179][T12305] bond372: (slave bridge208): Enslaving as an active interface with an up link
[ 2501.413924][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35998'.
[ 2501.511907][T12323] syzkaller0: entered promiscuous mode
[ 2501.513540][T12323] syzkaller0: entered allmulticast mode
[ 2501.796127][T12333] veth1: Caught tx_queue_len zero misconfig
[ 2501.812773][T12333] wg2: entered allmulticast mode
[ 2501.862705][T12335] bond4 (unregistering): Released all slaves
[ 2501.902818][T12338] sctp: [Deprecated]: syz.2.36005 (pid 12338) Use of int in max_burst socket option.
[ 2501.902818][T12338] Use struct sctp_assoc_value instead
[ 2502.217081][T12354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.36011'.
[ 2502.228657][T12354] smc: ib device syz2 ibport 1 applied user defined pnetid S
[ 2502.239744][T12354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.36011'.
[ 2502.249545][T12354] netlink: 'syz.3.36011': attribute type 7 has an invalid length.
[ 2502.257698][T12354] netlink: 'syz.3.36011': attribute type 8 has an invalid length.
[ 2502.258736][T12356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.36012'.
[ 2502.266099][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36011'.
[ 2502.293947][T12354] 0{X: entered promiscuous mode
[ 2502.306942][T12354] 0{X: left promiscuous mode
[ 2502.806465][T12371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2502.851950][T12373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.36018'.
[ 2502.977727][T12379] vlan2: entered promiscuous mode
[ 2502.979679][T12379] 0{X: entered promiscuous mode
[ 2503.138622][T12381] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[ 2503.293424][ T8710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2503.299737][ T8710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2503.359244][T12391] veth0_to_batadv: entered allmulticast mode
[ 2503.453901][T12396] block nbd2: not configured, cannot reconfigure
[ 2503.614239][T12406] netlink: 'syz.3.36027': attribute type 16 has an invalid length.
[ 2503.619320][T12405] netlink: 'syz.3.36027': attribute type 16 has an invalid length.
[ 2503.625548][T12406] netlink: 'syz.3.36027': attribute type 17 has an invalid length.
[ 2503.631629][T12405] netlink: 'syz.3.36027': attribute type 17 has an invalid length.
[ 2503.644124][T12406] 0{X: left allmulticast mode
[ 2503.676588][T12406] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2503.681225][T12406] 8021q: adding VLAN 0 to HW filter on device team0
[ 2503.688039][T12406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2503.698714][T12405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2503.826418][T12411] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6)
[ 2503.831897][T12411] bond4 (unregistering): Released all slaves
[ 2504.060454][T12421] vlan23: entered promiscuous mode
[ 2504.368882][T12436] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2504.665548][T12447] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[ 2504.670553][T12448] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[ 2504.758280][T12451] wg1 speed is unknown, defaulting to 1000
[ 2504.930185][T12451] lo speed is unknown, defaulting to 1000
[ 2505.119043][T12451] ip6_vti0 speed is unknown, defaulting to 1000
[ 2505.271576][T12456] netlink: 'syz.1.36044': attribute type 1 has an invalid length.
[ 2505.305131][T12456] 8021q: adding VLAN 0 to HW filter on device bond373
[ 2505.325400][T12456] __nla_validate_parse: 2 callbacks suppressed
[ 2505.325417][T12456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.36044'.
[ 2505.699144][T12467] bond0: (slave wlan0): Enslaving as an active interface with a down link
[ 2505.726370][T16860] wlan1: Trigger new scan to find an IBSS to join
[ 2506.848462][T12504] netlink: 'syz.3.36058': attribute type 1 has an invalid length.
[ 2506.880653][T12504] 8021q: adding VLAN 0 to HW filter on device bond4
[ 2506.896655][T12504] vlan2: entered promiscuous mode
[ 2506.898608][T12504] bond4: entered promiscuous mode
[ 2506.900591][T12504] vlan2: entered allmulticast mode
[ 2506.902387][T12504] bond4: entered allmulticast mode
[ 2506.908607][T12504] netlink: 44 bytes leftover after parsing attributes in process `syz.3.36058'.
[ 2506.923702][T12504] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 2506.931371][T12504] bond4: (slave batadv1): making interface the new active one
[ 2506.933465][T12504] batadv1: entered promiscuous mode
[ 2506.935490][T12504] batadv1: entered allmulticast mode
[ 2506.937876][T12504] bond4: (slave batadv1): Enslaving as an active interface with an up link
[ 2507.295625][T12517] netlink: 'syz.3.36062': attribute type 1 has an invalid length.
[ 2507.303392][T12517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36062'.
[ 2507.319350][T12517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36062'.
[ 2507.332721][T12517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36062'.
[ 2507.347515][T12517] netlink: 'syz.3.36062': attribute type 6 has an invalid length.
[ 2507.428303][ T5664] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2507.441009][ T5664] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2507.447669][ T5664] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2507.452692][ T5664] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2507.748237][T12528] bond411: entered allmulticast mode
[ 2508.253296][T12540] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8
[ 2508.690888][T30329] wlan1: Trigger new scan to find an IBSS to join
[ 2508.866248][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36071'.
[ 2508.869575][T12553] netlink: 'syz.1.36071': attribute type 14 has an invalid length.
[ 2508.871858][T12553] netlink: 32 bytes leftover after parsing attributes in process `syz.1.36071'.
[ 2509.139895][T12563] netlink: 'syz.1.36074': attribute type 1 has an invalid length.
[ 2509.162470][T12563] bond374: entered promiscuous mode
[ 2509.166568][T12563] 8021q: adding VLAN 0 to HW filter on device bond374
[ 2509.172952][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36075'.
[ 2509.185453][T12566] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[ 2509.186043][T12563] ipvlan15: entered allmulticast mode
[ 2509.189946][T12563] bond374: entered allmulticast mode
[ 2509.201539][T12563] ipvlan16: entered allmulticast mode
[ 2509.223110][T12563] bond374: (slave bridge209): making interface the new active one
[ 2509.225938][T12563] bridge209: entered promiscuous mode
[ 2509.228088][T12563] bridge209: entered allmulticast mode
[ 2509.232172][T12563] bond374: (slave bridge209): Enslaving as an active interface with an up link
[ 2509.432010][T12581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36079'.
[ 2509.442440][T12581] netlink: 'syz.1.36079': attribute type 14 has an invalid length.
[ 2509.446540][T12581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.36079'.
[ 2509.693591][T12585] bond375: option all_slaves_active: invalid value (7)
[ 2509.705519][T12585] bond375 (unregistering): Released all slaves
[ 2509.876301][T12593] bond412 (unregistering): Released all slaves
[ 2510.117712][T12608] netlink: 'syz.2.36087': attribute type 14 has an invalid length.
[ 2510.812166][T12620] netlink: 'syz.1.36091': attribute type 1 has an invalid length.
[ 2511.511166][T12633] __nla_validate_parse: 4 callbacks suppressed
[ 2511.511185][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36095'.
[ 2511.531111][T12633] netlink: 'syz.2.36095': attribute type 14 has an invalid length.
[ 2511.539985][T12633] netlink: 32 bytes leftover after parsing attributes in process `syz.2.36095'.
[ 2511.724930][T30329] wlan1: Trigger new scan to find an IBSS to join
[ 2512.209331][T12644] netlink: 'syz.3.36099': attribute type 4 has an invalid length.
[ 2512.245230][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2512.330328][T12646] wg1 speed is unknown, defaulting to 1000
[ 2512.336391][T12649] netlink: 'syz.3.36099': attribute type 4 has an invalid length.
[ 2512.374737][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2512.512411][T12646] lo speed is unknown, defaulting to 1000
[ 2512.611529][T12646] ip6_vti0 speed is unknown, defaulting to 1000
[ 2512.625232][T30329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2512.902647][T12653] netlink: 'syz.2.36101': attribute type 1 has an invalid length.
[ 2512.960349][T12653] bond412: entered promiscuous mode
[ 2512.962324][T12653] bond412: entered allmulticast mode
[ 2512.965434][T12653] 8021q: adding VLAN 0 to HW filter on device bond412
[ 2513.016400][T12655] macvlan15: entered promiscuous mode
[ 2513.018494][T12655] macvlan15: entered allmulticast mode
[ 2513.022945][T12655] 8021q: adding VLAN 0 to HW filter on device macvlan15
[ 2513.220690][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36102'.
[ 2513.235477][T12657] netlink: 'syz.3.36102': attribute type 14 has an invalid length.
[ 2513.245148][T12657] netlink: 32 bytes leftover after parsing attributes in process `syz.3.36102'.
[ 2513.372112][T12661] netlink: 'syz.2.36104': attribute type 21 has an invalid length.
[ 2513.389672][T12661] netlink: 36 bytes leftover after parsing attributes in process `syz.2.36104'.
[ 2513.474182][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36105'.
[ 2513.489453][T12668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.36106'.
[ 2513.553340][T12671] netlink: 'syz.1.36107': attribute type 1 has an invalid length.
[ 2513.618231][T12673] netlink: 20 bytes leftover after parsing attributes in process `syz.1.36107'.
[ 2513.677439][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36107'.
[ 2513.768306][T12672] wg1 speed is unknown, defaulting to 1000
[ 2513.934787][T12672] lo speed is unknown, defaulting to 1000
[ 2514.061841][T12672] ip6_vti0 speed is unknown, defaulting to 1000
[ 2514.327445][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2514.332624][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2514.341738][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2514.522246][ T4539] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2514.529897][ T4539] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2514.538146][ T4539] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2514.548087][ T4539] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2514.656222][T12708] netlink: 'syz.3.36115': attribute type 1 has an invalid length.
[ 2514.677443][T12708] netlink: 'syz.3.36115': attribute type 1 has an invalid length.
[ 2514.889785][T12717] netlink: 'syz.2.36118': attribute type 1 has an invalid length.
[ 2514.904445][T12717] netlink: 'syz.2.36118': attribute type 2 has an invalid length.
[ 2515.039212][T12725] xt_TCPMSS: Only works on TCP SYN packets
[ 2515.107555][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36120'.
[ 2515.738055][T12745] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[ 2516.072212][T12756] x_tables: ip_tables: ah match: only valid for protocol 51
[ 2516.397401][T12776] wg1 speed is unknown, defaulting to 1000
[ 2516.584177][T12776] lo speed is unknown, defaulting to 1000
[ 2516.737510][T12776] ip6_vti0 speed is unknown, defaulting to 1000
[ 2517.234198][T12804] __nla_validate_parse: 12 callbacks suppressed
[ 2517.234212][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36144'.
[ 2517.248399][T12804] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2517.275443][T12804] pim6reg1: entered promiscuous mode
[ 2517.277046][T12804] pim6reg1: entered allmulticast mode
[ 2517.644950][T11683] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 2517.674949][ T5664] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2517.680593][ T5664] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2517.689314][ T5664] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2517.695397][ T5664] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2517.705074][T12815] netlink: 20 bytes leftover after parsing attributes in process `syz.3.36148'.
[ 2517.830334][T12818] veth1_to_bond: entered allmulticast mode
[ 2517.832641][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36149'.
[ 2517.837150][T12818] veth1_to_bond (unregistering): left allmulticast mode
[ 2517.846517][T12818] bond0: (slave bond_slave_1): Releasing backup interface
[ 2518.013028][T12821] bond375: Removing last ns target with arp_interval on
[ 2518.398715][T12836] xt_hashlimit: size too large, truncated to 1048576
[ 2518.669452][T12842] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.36156'.
[ 2518.673374][T12842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.36156'.
[ 2518.788117][T12847] validate_nla: 2 callbacks suppressed
[ 2518.788132][T12847] netlink: 'syz.2.36158': attribute type 21 has an invalid length.
[ 2518.793216][T12847] netlink: 'syz.2.36158': attribute type 22 has an invalid length.
[ 2518.800080][T12847] netlink: 'syz.2.36158': attribute type 23 has an invalid length.
[ 2518.802967][T12847] netlink: 'syz.2.36158': attribute type 25 has an invalid length.
[ 2518.806449][T12847] netlink: 'syz.2.36158': attribute type 26 has an invalid length.
[ 2518.809385][T12847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.36158'.
[ 2518.816645][T12847] netlink: 'syz.2.36158': attribute type 1 has an invalid length.
[ 2518.846905][T12847] 8021q: adding VLAN 0 to HW filter on device bond413
[ 2518.981989][T12859] netlink: 'syz.2.36160': attribute type 33 has an invalid length.
[ 2518.985243][T12859] netlink: 152 bytes leftover after parsing attributes in process `syz.2.36160'.
[ 2519.020888][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36161'.
[ 2519.024994][T12861] netlink: 'syz.2.36161': attribute type 14 has an invalid length.
[ 2519.027868][T12861] netlink: 32 bytes leftover after parsing attributes in process `syz.2.36161'.
[ 2519.174024][T12866] netlink: 'syz.2.36163': attribute type 1 has an invalid length.
[ 2519.205526][T12866] 8021q: adding VLAN 0 to HW filter on device bond414
[ 2519.357754][T12866] netlink: 36 bytes leftover after parsing attributes in process `syz.2.36163'.
[ 2519.380197][T12866] bond414: (slave bridge0): making interface the new active one
[ 2519.384870][T12866] bond414: (slave bridge0): Enslaving as an active interface with an up link
[ 2519.809336][T12879] block nbd1: reconnected socket
[ 2519.933589][ T7033] block nbd1: Receive control failed (result -32)
[ 2520.010815][T12884] xt_TCPMSS: Only works on TCP SYN packets
[ 2520.338127][T12888] wg1 speed is unknown, defaulting to 1000
[ 2520.514051][T12888] lo speed is unknown, defaulting to 1000
[ 2520.608301][T12888] ip6_vti0 speed is unknown, defaulting to 1000
[ 2521.038358][T12897] wg1 speed is unknown, defaulting to 1000
[ 2521.712483][T12897] lo speed is unknown, defaulting to 1000
[ 2521.880790][T12897] ip6_vti0 speed is unknown, defaulting to 1000
[ 2522.244014][T12932] __nla_validate_parse: 5 callbacks suppressed
[ 2522.244025][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36184'.
[ 2522.281099][T12932] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[ 2522.296069][T12932] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[ 2522.326441][T12936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36183'.
[ 2522.332784][T12936] netlink: 'syz.2.36183': attribute type 13 has an invalid length.
[ 2522.343941][T12936] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[ 2522.466395][T12942] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 2522.470108][T12942] mac80211_hwsim hwsim210 syzkaller0: entered promiscuous mode
[ 2522.472688][T12942] mac80211_hwsim hwsim210 syzkaller0: entered allmulticast mode
[ 2522.673325][T12949] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 2522.849906][T12958] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.36190'.
[ 2522.859111][T12958] ksmbd: Unknown IPC event: 1, ignore.
[ 2523.361523][T12978] syzkaller0: entered promiscuous mode
[ 2523.375082][T12978] syzkaller0: entered allmulticast mode
[ 2523.665489][T12994] netlink: 7 bytes leftover after parsing attributes in process `syz.3.36193'.
[ 2523.702767][T12995] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 2523.724715][T12995] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 2523.823047][T12997] tipc: Resetting bearer <eth:ipvlan0>
[ 2523.853974][T12997] tipc: Resetting bearer <eth:ipvlan0>
[ 2524.385172][T13000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36195'.
[ 2524.437994][T13002] validate_nla: 1 callbacks suppressed
[ 2524.438005][T13002] netlink: 'syz.3.36196': attribute type 1 has an invalid length.
[ 2524.485364][T13002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.36196'.
[ 2524.512443][T13002] bond5: (slave bridge3): making interface the new active one
[ 2524.520216][T13002] bond5: (slave bridge3): Enslaving as an active interface with an up link
[ 2524.554242][T13002] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link
[ 2524.575059][T13008] xt_TCPMSS: Only works on TCP SYN packets
[ 2524.840343][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36202'.
[ 2524.843298][T13022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36202'.
[ 2524.893008][T13024] sock: sock_timestamping_bind_phc: sock not bind to device
[ 2525.833695][T13040] xt_TCPMSS: Only works on TCP SYN packets
[ 2525.917273][T13043] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20004
[ 2526.036518][T13045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.36208'.
[ 2526.068751][T13047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.36209'.
[ 2526.123396][T13045] macvtap1: entered promiscuous mode
[ 2526.128172][T13045] macvtap1: entered allmulticast mode
[ 2526.130297][T13045] veth1_vlan: entered allmulticast mode
[ 2526.149352][T13045] macvtap2: entered promiscuous mode
[ 2526.153679][T13045] macvtap2: entered allmulticast mode
[ 2526.201826][T13049] wg2: Caught tx_queue_len zero misconfig
[ 2526.597406][T13066] xt_TCPMSS: Only works on TCP SYN packets
[ 2527.248110][T13080] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2527.291835][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36220'.
[ 2527.313716][T13083] netlink: 28 bytes leftover after parsing attributes in process `syz.1.36221'.
[ 2527.351602][T13080] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2527.377603][T13081] syzkaller1: entered promiscuous mode
[ 2527.379799][T13081] syzkaller1: entered allmulticast mode
[ 2527.426161][T13086] xt_TCPMSS: Only works on TCP SYN packets
[ 2527.458424][T13088] netlink: 'syz.3.36223': attribute type 13 has an invalid length.
[ 2527.507660][T13080] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2527.564180][T13080] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 2527.622602][ T4539] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2527.634019][ T4539] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2527.670840][T11978] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2527.683783][T13100] netlink: 14 bytes leftover after parsing attributes in process `syz.1.36227'.
[ 2527.693368][T10704] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2527.704212][T13100] block nbd2: Unsupported socket: should be TCP or UNIX.
[ 2527.720639][T13100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.36227'.
[ 2527.804117][T13103] netlink: 'syz.1.36228': attribute type 15 has an invalid length.
[ 2527.813224][T13103] netlink: 666 bytes leftover after parsing attributes in process `syz.1.36228'.
[ 2527.822359][T13103] netlink: 'syz.1.36228': attribute type 32 has an invalid length.
[ 2527.877035][T13105] netlink: 'syz.1.36229': attribute type 4 has an invalid length.
[ 2527.943629][T13106] netlink: 'syz.1.36229': attribute type 4 has an invalid length.
[ 2529.042997][T13117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.36234'.
[ 2529.075188][T13117] netlink: 'syz.1.36234': attribute type 1 has an invalid length.
[ 2529.242663][T13127] netlink: 'syz.2.36236': attribute type 1 has an invalid length.
[ 2529.281956][T13127] bond415: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 2529.288057][T13127] bond415: (slave vxcan1): Error -95 calling set_mac_address
[ 2529.308941][T13117] netlink: 36 bytes leftover after parsing attributes in process `syz.1.36234'.
[ 2529.324140][T13130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.36236'.
[ 2529.337805][T13130] bond415: (slave bridge196): Enslaving as an active interface with a down link
[ 2529.368839][T13127] macvlan15: entered promiscuous mode
[ 2529.370615][T13127] macvlan15: entered allmulticast mode
[ 2529.375017][T13127] bond415: entered promiscuous mode
[ 2529.377498][T13127] 8021q: adding VLAN 0 to HW filter on device macvlan15
[ 2529.381955][T13127] bond415: left promiscuous mode
[ 2529.758623][T13143] netlink: 'syz.2.36239': attribute type 4 has an invalid length.
[ 2529.791949][T20037] lo speed is unknown, defaulting to 1000
[ 2529.796911][T20037] sqz0: Port: 1 Link DOWN
[ 2529.798805][T20037] lo speed is unknown, defaulting to 1000
[ 2529.848963][T13143] netlink: 'syz.2.36239': attribute type 1 has an invalid length.
[ 2529.855454][T13143] netlink: 'syz.2.36239': attribute type 4 has an invalid length.
[ 2529.863134][T20037] lo speed is unknown, defaulting to 1000
[ 2529.866121][T20037] sqz0: Port: 1 Link ACTIVE
[ 2529.867995][T20037] lo speed is unknown, defaulting to 1000
[ 2530.225058][T20037] lo speed is unknown, defaulting to 1000
[ 2530.229269][T17103] ip6_vti0 speed is unknown, defaulting to 1000
[ 2530.229303][T20037] sqz0: Port: 1 Link DOWN
[ 2530.233126][ T5664] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2530.238574][ T5664] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2530.238706][T17103] syz2: Port: 1 Link DOWN
[ 2530.243238][T20037] lo speed is unknown, defaulting to 1000
[ 2530.246812][ T5664] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2530.251691][ T5664] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2530.256950][T17103] ip6_vti0 speed is unknown, defaulting to 1000
[ 2530.719891][T13177] xt_addrtype: ipv6 does not support BROADCAST matching
[ 2530.875864][T13181] syzkaller1: entered promiscuous mode
[ 2530.877909][T13181] syzkaller1: entered allmulticast mode
[ 2531.051669][T13185] netlink: 'syz.2.36251': attribute type 1 has an invalid length.
[ 2531.073945][T13185] 8021q: adding VLAN 0 to HW filter on device bond416
[ 2531.141793][T13188] netlink: 'syz.2.36252': attribute type 1 has an invalid length.
[ 2531.191330][T13188] veth221: entered promiscuous mode
[ 2531.203433][T13188] bond417: (slave veth221): Enslaving as a backup interface with a down link
[ 2531.210715][T13188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.36252'.
[ 2531.216405][T13188] 8021q: adding VLAN 0 to HW filter on device bond417
[ 2531.304074][T13193] netlink: 'syz.1.36254': attribute type 1 has an invalid length.
[ 2531.400945][T13203] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[ 2531.403999][T13203] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 2531.770370][T13210] netlink: 'syz.1.36259': attribute type 8 has an invalid length.
[ 2531.864547][T13215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.36261'.
[ 2531.868671][T13215] openvswitch: netlink: Flow key attr not present in new flow.
[ 2532.000467][T13221] wg1 speed is unknown, defaulting to 1000
[ 2532.039540][T13225] netlink: 'syz.3.36262': attribute type 1 has an invalid length.
[ 2532.123991][T13225] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 2532.147827][T13225] bond6: (slave vxcan3): Error -95 calling set_mac_address
[ 2532.161284][T13221] lo speed is unknown, defaulting to 1000
[ 2532.168640][T13229] netlink: 'syz.2.36263': attribute type 1 has an invalid length.
[ 2532.197694][T13229] bond418: entered promiscuous mode
[ 2532.199792][T13229] bond418: entered allmulticast mode
[ 2532.201887][T13229] 8021q: adding VLAN 0 to HW filter on device bond418
[ 2532.290002][T13221] ip6_vti0 speed is unknown, defaulting to 1000
[ 2532.492123][T13239] netlink: 'syz.2.36266': attribute type 8 has an invalid length.
[ 2532.599604][T13243] __nla_validate_parse: 1 callbacks suppressed
[ 2532.599622][T13243] netlink: 368 bytes leftover after parsing attributes in process `syz.2.36267'.
[ 2532.781932][T13245] bond419: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[ 2532.821027][T13245] bond419 (unregistering): Released all slaves
[ 2532.890454][T13250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.36270'.
[ 2533.002181][T13260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36272'.
[ 2533.171430][T13275] netlink: 228 bytes leftover after parsing attributes in process `syz.1.36277'.
[ 2533.176559][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36277'.
[ 2533.187992][T13267] 8021q: adding VLAN 0 to HW filter on device bond7
[ 2533.592008][T13284] bond8: entered allmulticast mode
[ 2533.594422][T13284] 8021q: adding VLAN 0 to HW filter on device bond8
[ 2533.612067][T13293] tipc: Resetting bearer <eth:syzkaller0>
[ 2533.682043][T13295] veth1_vlan: left allmulticast mode
[ 2533.724649][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2533.729535][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2533.760540][T13296] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2533.766672][T13296] 8021q: adding VLAN 0 to HW filter on device team0
[ 2533.773837][T13296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2533.780095][T11978] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2533.783406][T11978] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2533.789197][T11978] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2533.792552][T11978] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2533.797488][T13301] netlink: 328 bytes leftover after parsing attributes in process `syz.1.36282'.
[ 2534.405671][T13318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36287'.
[ 2534.412285][T13318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36287'.
[ 2534.537218][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36289'.
[ 2534.569541][ T4539] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2534.573043][ T4539] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2534.577324][ T4539] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2534.584638][ T4539] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2534.722337][T13346] netlink: 32 bytes leftover after parsing attributes in process `syz.1.36294'.
[ 2534.853635][T13354] vlan23: entered promiscuous mode
[ 2535.002848][T13365] validate_nla: 10 callbacks suppressed
[ 2535.002864][T13365] netlink: 'syz.1.36300': attribute type 1 has an invalid length.
[ 2535.043811][T13365] bond376: entered promiscuous mode
[ 2535.046436][T13365] bond376: entered allmulticast mode
[ 2535.049016][T13365] 8021q: adding VLAN 0 to HW filter on device bond376
[ 2535.122313][T13372] bond395: (slave batadv12): Releasing active interface
[ 2535.141907][T13372] bond396: (slave veth201): Releasing active interface
[ 2535.146371][T13372] bond396: (slave veth201): the permanent HWaddr of slave - 7a:4a:c4:bf:5e:0e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 2535.153895][T13372] bond396: (slave veth203): Releasing active interface
[ 2535.154011][T13376] netlink: 'syz.3.36305': attribute type 8 has an invalid length.
[ 2535.163588][T13372] bond397: (slave veth205): Releasing active interface
[ 2535.169644][T13372] bond401: (slave bridge190): Releasing backup interface
[ 2535.177698][T13372] bond403: (slave bridge191): Releasing backup interface
[ 2535.183545][T13372] bond404: (slave bridge192): Releasing backup interface
[ 2535.190423][T13372] bond407: (slave bridge193): Releasing active interface
[ 2535.195701][T13372] bond409: (slave bridge195): Releasing backup interface
[ 2535.198051][T13372] bridge195: left promiscuous mode
[ 2535.203535][T13372] bond414: (slave bridge0): Releasing active interface
[ 2535.209552][T13372] bond415: (slave bridge196): Releasing active interface
[ 2535.219070][T13372] bond417: (slave veth221): Releasing backup interface
[ 2535.388220][T13398] netlink: 'syz.2.36309': attribute type 1 has an invalid length.
[ 2535.416682][T13398] bond420: entered promiscuous mode
[ 2535.421972][T13398] 8021q: adding VLAN 0 to HW filter on device bond420
[ 2535.459407][T13398] macvtap44: entered allmulticast mode
[ 2535.480871][T13398] macvtap45: entered allmulticast mode
[ 2535.531673][T13398] bond420: (slave bridge198): making interface the new active one
[ 2535.536468][T13398] bridge198: entered promiscuous mode
[ 2535.541760][T13398] bond420: (slave bridge198): Enslaving as an active interface with an up link
[ 2535.618782][ T6325] lo speed is unknown, defaulting to 1000
[ 2535.622171][ T6325] sqz0: Port: 1 Link ACTIVE
[ 2535.640675][ T6325] lo speed is unknown, defaulting to 1000
[ 2535.728365][T13427] netlink: 'syz.3.36317': attribute type 1 has an invalid length.
[ 2535.744227][T13427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2535.750983][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2535.927530][T13447] openvswitch: netlink: Flow key attribute not present in set flow.
[ 2535.943505][T13450] netlink: 'syz.3.36324': attribute type 8 has an invalid length.
[ 2536.089974][T13466] SET target dimension over the limit!
[ 2536.098383][T13466] SET target dimension over the limit!
[ 2536.139081][T13474] netlink: 'syz.2.36330': attribute type 1 has an invalid length.
[ 2536.177146][T13474] bond421: (slave geneve0): Opening slave failed
[ 2536.209563][T13480] pim6reg1: entered promiscuous mode
[ 2536.211444][T13480] pim6reg1: entered allmulticast mode
[ 2536.228915][T13474] 8021q: adding VLAN 0 to HW filter on device bond421
[ 2536.268124][T13482] xt_hashlimit: size too large, truncated to 1048576
[ 2536.320207][T13489] netlink: 'syz.1.36333': attribute type 1 has an invalid length.
[ 2536.374917][T13489] 8021q: adding VLAN 0 to HW filter on device bond378
[ 2536.382710][T13489] bond377: (slave bond378): making interface the new active one
[ 2536.386716][T13489] bond377: (slave bond378): Enslaving as an active interface with an up link
[ 2536.561197][T13494] netlink: 'syz.1.36336': attribute type 11 has an invalid length.
[ 2536.580328][T13487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2536.675708][T13502] vlan10: entered promiscuous mode
[ 2536.929361][T13512] netlink: 'syz.1.36342': attribute type 8 has an invalid length.
[ 2537.203317][T13539] netlink: 'syz.3.36351': attribute type 8 has an invalid length.
[ 2537.251397][T13542] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 2537.271782][T13542] bond3: (slave lo): Enslaving as an active interface with an up link
[ 2537.278347][T13542] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 2537.296471][T13542] netlink: 'syz.3.36352': attribute type 1 has an invalid length.
[ 2537.488009][T13557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2537.501286][T20037] lo speed is unknown, defaulting to 1000
[ 2537.504096][T20037] sqz0: Port: 1 Link DOWN
[ 2537.509341][T13559] bridge0: entered promiscuous mode
[ 2537.515387][T13559] bridge0: entered allmulticast mode
[ 2537.533594][T20037] lo speed is unknown, defaulting to 1000
[ 2537.615831][T13566] __nla_validate_parse: 15 callbacks suppressed
[ 2537.615849][T13566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36361'.
[ 2537.642345][T13566] bond423: entered promiscuous mode
[ 2537.645722][T13566] 8021q: adding VLAN 0 to HW filter on device bond423
[ 2537.950329][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36366'.
[ 2538.188415][T13608] wg1 speed is unknown, defaulting to 1000
[ 2538.408830][T13608] lo speed is unknown, defaulting to 1000
[ 2538.488452][T13611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.36372'.
[ 2538.681730][T13616] vlan23: entered promiscuous mode
[ 2538.746732][T13608] ip6_vti0 speed is unknown, defaulting to 1000
[ 2539.238763][T13626] veth179: entered promiscuous mode
[ 2539.284096][T13627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.36377'.
[ 2539.414696][T13629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36378'.
[ 2539.636360][T13638] syzkaller0: entered promiscuous mode
[ 2539.638083][T13638] syzkaller0: entered allmulticast mode
[ 2539.724078][T13641] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2539.752316][T13640] bond379: entered promiscuous mode
[ 2539.754012][T13640] 8021q: adding VLAN 0 to HW filter on device bond379
[ 2539.775466][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36383'.
[ 2539.783335][T13640] netlink: 16 bytes leftover after parsing attributes in process `syz.1.36383'.
[ 2540.014239][T13651] validate_nla: 10 callbacks suppressed
[ 2540.023239][T13651] netlink: 'syz.1.36387': attribute type 1 has an invalid length.
[ 2540.054684][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2540.059424][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2540.063646][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2540.069197][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2540.081492][T13654] netlink: 'syz.2.36388': attribute type 8 has an invalid length.
[ 2540.110767][T13655] bond380: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 2540.116960][T13655] bond380: (slave vxcan1): Error -95 calling set_mac_address
[ 2540.145244][T13651] macvlan0: entered promiscuous mode
[ 2540.149979][T13651] macvlan0: entered allmulticast mode
[ 2540.159988][T13651] bond380: entered promiscuous mode
[ 2540.166506][T13651] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 2540.181474][T13651] bond380: left promiscuous mode
[ 2540.209724][T13658] netlink: 424 bytes leftover after parsing attributes in process `syz.2.36389'.
[ 2540.212617][T13658] netlink: 'syz.2.36389': attribute type 1 has an invalid length.
[ 2540.216512][T13658] mac80211_hwsim hwsim210 syzkaller0: left promiscuous mode
[ 2540.218984][T13658] mac80211_hwsim hwsim210 syzkaller0: left allmulticast mode
[ 2540.307429][T13665] netlink: 'syz.2.36390': attribute type 8 has an invalid length.
[ 2540.429983][T30327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2540.436394][T30327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2540.514152][T30329] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 2540.646875][T13682] wg1 speed is unknown, defaulting to 1000
[ 2541.026081][T13682] lo speed is unknown, defaulting to 1000
[ 2541.256108][T13682] ip6_vti0 speed is unknown, defaulting to 1000
[ 2541.327531][T29226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2541.332858][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2541.337850][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2541.558956][T13692] syzkaller0: entered promiscuous mode
[ 2541.560673][T13692] syzkaller0: entered allmulticast mode
[ 2541.723630][T13696] netlink: 32 bytes leftover after parsing attributes in process `syz.3.36397'.
[ 2541.841423][T13701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36398'.
[ 2541.901193][T13701] xt_hashlimit: size too large, truncated to 1048576
[ 2542.269939][T13710] bond9 (unregistering): Released all slaves
[ 2542.587829][T13723] net_ratelimit: 1 callbacks suppressed
[ 2542.587846][T13723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 2542.789195][T13739] tipc: Resetting bearer <eth:syzkaller0>
[ 2542.791160][T13739] tipc: Resetting bearer <eth:syzkaller0>
[ 2542.815298][T13739] netlink: 'syz.1.36406': attribute type 16 has an invalid length.
[ 2542.834484][T13739] netlink: 'syz.1.36406': attribute type 17 has an invalid length.
[ 2542.872876][T13739] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[ 2543.138017][T13763] pim6reg1: left promiscuous mode
[ 2543.139943][T13763] pim6reg1: left allmulticast mode
[ 2543.144220][T13765] netlink: 'syz.2.36413': attribute type 1 has an invalid length.
[ 2543.201423][T13765] bond424: (slave bridge199): making interface the new active one
[ 2543.206312][T13765] bond424: (slave bridge199): Enslaving as an active interface with an up link
[ 2543.223497][T13768] netlink: 'syz.1.36414': attribute type 1 has an invalid length.
[ 2543.227636][T13765] bond424: (slave vlan10): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 2543.285316][T13768] bond381: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 2543.289185][T13768] bond381: (slave vxcan1): Error -95 calling set_mac_address
[ 2543.358233][T13770] bond381: (slave bridge213): Enslaving as an active interface with a down link
[ 2543.383750][T13768] macvlan0: entered promiscuous mode
[ 2543.386437][T13768] macvlan0: entered allmulticast mode
[ 2543.389925][T13768] bond381: entered promiscuous mode
[ 2543.392363][T13768] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 2543.399395][T13768] bond381: left promiscuous mode
[ 2543.509401][T13780] netlink: 'syz.1.36417': attribute type 1 has an invalid length.
[ 2543.571135][T13780] 8021q: adding VLAN 0 to HW filter on device bond382
[ 2543.599681][T13785] bond382: (slave veth179): Enslaving as an active interface with an up link
[ 2543.626019][T13780] netlink: 'syz.1.36417': attribute type 1 has an invalid length.
[ 2543.648933][T13780] 8021q: adding VLAN 0 to HW filter on device batadv10
[ 2543.663790][T13780] bond382: (slave batadv10): Enslaving as an active interface with an up link
[ 2543.952184][T13806] __nla_validate_parse: 3 callbacks suppressed
[ 2543.952202][T13806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.36424'.
[ 2543.960992][T13804] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2544.656101][T13836] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[ 2544.667226][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36433'.
[ 2544.758152][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36435'.
[ 2544.826136][T13856] wg1: Caught tx_queue_len zero misconfig
[ 2544.833866][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36437'.
[ 2544.838085][T13856] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 2544.983805][T13867] netlink: 9 bytes leftover after parsing attributes in process `syz.3.36443'.
[ 2544.992756][T13868] netlink: 116 bytes leftover after parsing attributes in process `syz.2.36442'.
[ 2545.036666][T13867] 0: renamed from hsr_slave_1
[ 2545.042522][T13867] 0: entered allmulticast mode
[ 2545.048460][T13867] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[ 2545.236494][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36444'.
[ 2545.538728][T13895] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[ 2545.544131][T13895] syzkaller0: left promiscuous mode
[ 2545.549365][T13895] tipc: Resetting bearer <eth:syzkaller0>
[ 2545.602806][T13899] validate_nla: 3 callbacks suppressed
[ 2545.602817][T13899] netlink: 'syz.1.36452': attribute type 1 has an invalid length.
[ 2545.611061][T13899] workqueue: Failed to create a rescuer kthread for wq "bond383": -EINTR
[ 2545.643442][T13905] netlink: 'syz.1.36454': attribute type 1 has an invalid length.
[ 2545.709754][T13905] 8021q: adding VLAN 0 to HW filter on device bond384
[ 2545.719963][T13905] bond383: (slave bond384): making interface the new active one
[ 2545.723090][T13905] bond383: (slave bond384): Enslaving as an active interface with an up link
[ 2546.016884][T13934] netlink: 'syz.2.36462': attribute type 9 has an invalid length.
[ 2546.173687][T13942] netlink: 'syz.2.36463': attribute type 1 has an invalid length.
[ 2546.228584][T13942] 8021q: adding VLAN 0 to HW filter on device bond425
[ 2546.316366][T13943] vlan10: entered promiscuous mode
[ 2546.320576][T13943] bond425: entered promiscuous mode
[ 2546.327877][T13943] vlan10: entered allmulticast mode
[ 2546.334677][T13943] bond425: entered allmulticast mode
[ 2546.341473][T10704] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2546.344073][T10704] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2546.347678][T10704] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2546.350356][T10704] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2546.551640][T13961] bond10: (slave gre0): Device is not bonding slave
[ 2546.554100][T13961] bond10: option active_slave: invalid value (gre0)
[ 2546.559630][T13961] bond10 (unregistering): Released all slaves
[ 2546.579165][T13966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36466'.
[ 2546.651718][T13966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36466'.
[ 2546.799534][T13974] wg1 speed is unknown, defaulting to 1000
[ 2546.995143][T13974] lo speed is unknown, defaulting to 1000
[ 2547.001263][T13981] netlink: 'syz.3.36470': attribute type 1 has an invalid length.
[ 2547.052237][T13981] bond10: entered promiscuous mode
[ 2547.055843][T13981] 8021q: adding VLAN 0 to HW filter on device bond10
[ 2547.106185][T13981] bond10: (slave bridge4): making interface the new active one
[ 2547.108988][T13981] bridge4: entered promiscuous mode
[ 2547.112458][T13981] bond10: (slave bridge4): Enslaving as an active interface with an up link
[ 2547.267984][T13974] ip6_vti0 speed is unknown, defaulting to 1000
[ 2547.339503][T13985] xfrm1: entered allmulticast mode
[ 2547.546867][T13994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.36472'.
[ 2547.935807][T14009] netlink: 'syz.2.36478': attribute type 8 has an invalid length.
[ 2548.282264][T14019] netlink: 'syz.3.36481': attribute type 1 has an invalid length.
[ 2548.372749][T14019] bond11: entered promiscuous mode
[ 2548.375357][T14019] 8021q: adding VLAN 0 to HW filter on device bond11
[ 2548.423557][T14021] macvtap2: entered allmulticast mode
[ 2548.443564][T14019] macvtap3: entered allmulticast mode
[ 2548.474229][T14021] bond11: (slave bridge5): making interface the new active one
[ 2548.477349][T14021] bridge5: entered promiscuous mode
[ 2548.482223][T14021] bond11: (slave bridge5): Enslaving as an active interface with an up link
[ 2548.569246][T14023] netlink: 'syz.3.36482': attribute type 32 has an invalid length.
[ 2548.587032][T14023] bond12: option coupled_control: invalid value (9)
[ 2548.590836][T14023] bond12 (unregistering): Released all slaves
[ 2548.742253][T14028] netlink: 'syz.3.36484': attribute type 21 has an invalid length.
[ 2549.046112][T14043] netlink: 'syz.3.36490': attribute type 1 has an invalid length.
[ 2549.098102][T14043] __nla_validate_parse: 9 callbacks suppressed
[ 2549.098114][T14043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.36490'.
[ 2549.105299][T14043] 8021q: adding VLAN 0 to HW filter on device bond12
[ 2549.148286][T14043] 8021q: adding VLAN 0 to HW filter on device bond12
[ 2549.163082][T14043] bond12: (slave geneve2): making interface the new active one
[ 2549.169547][T14043] bond12: (slave geneve2): Enslaving as an active interface with an up link
[ 2549.172161][ T5664] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[ 2549.176703][ T5664] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[ 2549.182552][ T5664] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[ 2549.192375][ T5664] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[ 2549.287832][T14056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.36493'.
[ 2549.290711][T14056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.36493'.
[ 2549.382884][T14060] bond426: entered promiscuous mode
[ 2549.385784][T14060] 8021q: adding VLAN 0 to HW filter on device bond426
[ 2549.461364][T14063] wg1 speed is unknown, defaulting to 1000
[ 2549.507724][T14065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.36497'.
[ 2549.561054][T14063] lo speed is unknown, defaulting to 1000
[ 2549.649347][T14063] ip6_vti0 speed is unknown, defaulting to 1000
[ 2550.090381][T14070] bond385: (slave bridge214): making interface the new active one
[ 2550.095323][T14070] bond385: (slave bridge214): Enslaving as an active interface with an up link
[ 2550.191966][T14074] netlink: 44 bytes leftover after parsing attributes in process `syz.1.36500'.
[ 2550.210104][T14074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.36500'.
[ 2550.226968][T14074] xt_AUDIT: Audit type out of range (valid range: 0..2)
[ 2550.486935][T14090] bond3: (slave lo): Releasing backup interface
[ 2550.499066][T14090] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 2550.512832][T14090] bridge_slave_0: left allmulticast mode
[ 2550.518193][T14090] bridge_slave_0: left promiscuous mode
[ 2550.520643][T14090] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2550.541665][T14090] bridge_slave_1: left allmulticast mode
[ 2550.547045][T14090] bridge_slave_1: left promiscuous mode
[ 2550.550424][T14090] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2550.560540][T14090] bond0: (slave bond_slave_0): Releasing backup interface
[ 2550.567053][T14090] team0: Port device team_slave_0 removed
[ 2550.582594][T14090] team0: Port device team_slave_1 removed
[ 2550.585674][T14090] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2550.592277][T14090] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 2550.686097][T14093] netlink: 68 bytes leftover after parsing attributes in process `syz.1.36505'.
[ 2550.995782][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36510'.
[ 2551.052129][T14116] validate_nla: 4 callbacks suppressed
[ 2551.052139][T14116] netlink: 'syz.2.36512': attribute type 1 has an invalid length.
[ 2551.149800][T14122] bond427: (slave bridge200): making interface the new active one
[ 2551.153690][T14122] bond427: (slave bridge200): Enslaving as an active interface with an up link
[ 2551.160885][T14116] netlink: 44 bytes leftover after parsing attributes in process `syz.2.36512'.
[ 2551.164854][T14116] bond427: entered promiscuous mode
[ 2551.166769][T14116] bridge200: entered promiscuous mode
[ 2551.168545][T14116] bond427: entered allmulticast mode
[ 2551.170278][T14116] bridge200: entered allmulticast mode
[ 2551.173289][T14116] 8021q: adding VLAN 0 to HW filter on device bond427
[ 2551.219533][T14125] netlink: 'syz.1.36514': attribute type 1 has an invalid length.
[ 2551.239813][T14125] bond387: entered promiscuous mode
[ 2551.241244][T14125] bond387: entered allmulticast mode
[ 2551.243549][T14125] 8021q: adding VLAN 0 to HW filter on device bond387
[ 2551.341071][T14135] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[ 2551.353340][T14126] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[ 2551.360695][T14141] netlink: 'syz.2.36517': attribute type 1 has an invalid length.
[ 2551.382989][T14141] 8021q: adding VLAN 0 to HW filter on device bond428
[ 2551.453761][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36516'.
[ 2551.458551][T14145] bond429: option packets_per_slave: invalid value (1048582)
[ 2551.463581][T14145] bond429: option packets_per_slave: allowed values 0 - 65535
[ 2551.469666][T14145] bond429 (unregistering): Released all slaves
[ 2551.518204][T14154] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[ 2551.561146][T14157] wg1 speed is unknown, defaulting to 1000
[ 2551.704009][T14157] lo speed is unknown, defaulting to 1000
[ 2551.814933][T14157] ip6_vti0 speed is unknown, defaulting to 1000
[ 2552.020583][T14174] wg1 speed is unknown, defaulting to 1000
[ 2552.249557][T14174] lo speed is unknown, defaulting to 1000
[ 2552.253461][T14178] netlink: 'syz.3.36528': attribute type 1 has an invalid length.
[ 2552.318548][T14178] 8021q: adding VLAN 0 to HW filter on device bond13
[ 2552.466517][T14192] netlink: 'syz.3.36531': attribute type 10 has an invalid length.
[ 2552.469343][T14192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2552.472656][T14192] hsr0: Slave B (c0) is not up; please bring it up to get a fully working HSR network
[ 2552.476909][T14192] hsr0: entered promiscuous mode
[ 2552.481777][T14192] bridge0: port 1(hsr0) entered blocking state
[ 2552.483826][T14192] bridge0: port 1(hsr0) entered disabled state
[ 2552.488412][T14192] hsr0: entered allmulticast mode
[ 2552.489975][T14192] hsr_slave_0: entered allmulticast mode
[ 2552.536503][T14174] ip6_vti0 speed is unknown, defaulting to 1000
[ 2552.861459][T11978] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2552.866089][T11978] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2552.869398][T11978] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2552.872771][T11978] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2553.661632][T14213] wg1 speed is unknown, defaulting to 1000
[ 2553.949682][T14213] lo speed is unknown, defaulting to 1000
[ 2553.949847][T14222] wg1 speed is unknown, defaulting to 1000
[ 2554.208864][T14213] ip6_vti0 speed is unknown, defaulting to 1000
[ 2554.222479][T14222] lo speed is unknown, defaulting to 1000
[ 2554.386397][T14244] bond420: (slave bridge198): Releasing backup interface
[ 2554.393580][T14244] bridge198: left promiscuous mode
[ 2554.401115][T14244] bond424: (slave bridge199): Releasing active interface
[ 2554.410370][T14244] bond427: (slave bridge200): Releasing active interface
[ 2554.413011][T14244] bridge200: left promiscuous mode
[ 2554.415705][T14244] bridge200: left allmulticast mode
[ 2554.507260][T14222] ip6_vti0 speed is unknown, defaulting to 1000
[ 2555.639460][T14264] bond388: entered promiscuous mode
[ 2555.657434][T14263] vcan0: entered promiscuous mode
[ 2555.659002][T14263] vcan0: entered allmulticast mode
[ 2555.661406][T14263] bond388: (slave vcan0): The slave device specified does not support setting the MAC address
[ 2555.667247][T14263] bond388: (slave vcan0): Error -95 calling set_mac_address
[ 2555.809202][T14275] __nla_validate_parse: 7 callbacks suppressed
[ 2555.809217][T14275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36551'.
[ 2555.860151][T14275] bond15: entered promiscuous mode
[ 2555.862125][T14275] bond15: entered allmulticast mode
[ 2555.904176][T14285] vlan3: entered promiscuous mode
[ 2556.110459][T14289] wg1 speed is unknown, defaulting to 1000
[ 2556.213000][T14289] lo speed is unknown, defaulting to 1000
[ 2556.247852][T14293] netlink: 192 bytes leftover after parsing attributes in process `syz.3.36554'.
[ 2556.372876][T14289] ip6_vti0 speed is unknown, defaulting to 1000
[ 2557.552998][T14252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2557.720458][T14308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2557.742253][T14308] ip6tnl3: entered allmulticast mode
[ 2557.749906][ T5664] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[ 2557.755398][T14308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2557.831133][T14319] geneve3: entered promiscuous mode
[ 2557.834124][T14319] geneve3: entered allmulticast mode
[ 2557.845599][ T5664] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 2557.848597][ T5664] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 2557.853210][ T5664] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 2557.856955][ T5664] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 2557.911354][T14330] netlink: 'syz.3.36562': attribute type 9 has an invalid length.
[ 2558.031818][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36565'.
[ 2558.094049][T14342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36564'.
[ 2558.255026][T14349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36565'.
[ 2558.930714][T14376] netlink: 'syz.3.36572': attribute type 1 has an invalid length.
[ 2558.980141][T14368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.36572'.
[ 2559.013673][T14374] IPVS: persistence engine module ip_vs_pe_ not found
[ 2559.030543][T14368] bond17: (slave gretap2): making interface the new active one
[ 2559.036652][T14368] bond17: (slave gretap2): Enslaving as an active interface with an up link
[ 2559.042586][T14383] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[ 2559.102599][T14385] netlink: 88 bytes leftover after parsing attributes in process `syz.1.36574'.
[ 2559.261693][T14382] tipc: Resetting bearer <eth:syzkaller0>
[ 2559.399573][T14368] team0: Port device bridge7 added
[ 2559.408406][T14376] macvlan2: entered promiscuous mode
[ 2559.410794][T14376] macvlan2: entered allmulticast mode
[ 2559.472496][T14388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36575'.
[ 2559.505867][T14388] 8021q: adding VLAN 0 to HW filter on device bond18
[ 2559.927743][T14405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36581'.
[ 2560.039883][T14408] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 2560.053424][T14408] mac80211_hwsim hwsim210 syzkaller0: entered promiscuous mode
[ 2560.073492][T14408] mac80211_hwsim hwsim210 syzkaller0: entered allmulticast mode
[ 2560.161526][T14415] vlan3: entered promiscuous mode
[ 2560.189018][T14408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36582'.
[ 2560.305052][T14421] sctp: [Deprecated]: syz.2.36586 (pid 14421) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2560.305052][T14421] Use struct sctp_sack_info instead
[ 2560.422119][T14429] netlink: 'syz.2.36589': attribute type 1 has an invalid length.
[ 2560.427380][T14428] ip6gre14: entered promiscuous mode
[ 2560.429731][T14428] ip6gre14: entered allmulticast mode
[ 2560.467327][T14431] netlink: 'syz.3.36590': attribute type 13 has an invalid length.
[ 2560.469755][T14431] netlink: 'syz.3.36590': attribute type 17 has an invalid length.
[ 2560.476920][   T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2560.479536][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0
[ 2560.482161][   T13] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[ 2560.485191][   T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2560.487676][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0
[ 2560.490115][   T13] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[ 2560.492732][   T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2560.495798][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0
[ 2560.498591][   T13] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[ 2560.527174][T14433] bond429: (slave bridge202): making interface the new active one
[ 2560.534237][T14433] bond429: (slave bridge202): Enslaving as an active interface with an up link
[ 2560.537945][   T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 2560.540513][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0
[ 2560.543251][   T13] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[ 2560.550910][T14429] bond429: entered promiscuous mode
[ 2560.558477][T14429] bridge202: entered promiscuous mode
[ 2560.560277][T14429] bond429: entered allmulticast mode
[ 2560.562107][T14429] bridge202: entered allmulticast mode
[ 2560.564492][T14429] 8021q: adding VLAN 0 to HW filter on device bond429
[ 2560.717766][T14439] vlan19: entered promiscuous mode
[ 2560.969298][T14445] mac80211_hwsim hwsim210 syzkaller0: left promiscuous mode
[ 2560.971739][T14445] mac80211_hwsim hwsim210 syzkaller0: left allmulticast mode
[ 2561.135268][T14451] bridge203: entered promiscuous mode
[ 2561.137387][T14451] bridge203: entered allmulticast mode
[ 2561.337101][T14454] syzkaller0: left allmulticast mode
[ 2561.342673][T14454] tipc: Resetting bearer <eth:syzkaller0>
[ 2561.433914][T14466] netlink: 'syz.1.36603': attribute type 1 has an invalid length.
[ 2561.463864][T14468] 8021q: adding VLAN 0 to HW filter on device bond3
[ 2561.477495][T14467] __nla_validate_parse: 1 callbacks suppressed
[ 2561.477506][T14467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.36603'.
[ 2561.489615][T14466] bond389: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 2561.493941][T14466] bond389: (slave vxcan1): Error -95 calling set_mac_address
[ 2561.538296][T14467] bond389: (slave bridge216): Enslaving as an active interface with a down link
[ 2561.568117][T14460] bond3: (slave ip6gretap3): Enslaving as a backup interface with an up link
[ 2561.588166][T11978] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 2561.653865][T14475] netlink: 'syz.3.36605': attribute type 1 has an invalid length.
[ 2561.655953][T14473] netlink: 'syz.1.36604': attribute type 1 has an invalid length.
[ 2561.713987][T14473] bond390: entered promiscuous mode
[ 2561.719918][T14473] 8021q: adding VLAN 0 to HW filter on device bond390
[ 2561.730211][T14475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.36605'.
[ 2561.738056][ T5664] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 2561.748466][T14478] macvtap49: entered allmulticast mode
[ 2561.788309][T14473] macvtap50: entered allmulticast mode
[ 2561.807652][T14473] bond390: (slave bridge217): making interface the new active one
[ 2561.810390][T14473] bridge217: entered promiscuous mode
[ 2561.816449][T14473] bond390: (slave bridge217): Enslaving as an active interface with an up link
[ 2561.823044][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36606'.
[ 2561.852741][T14480] netlink: 36 bytes leftover after parsing attributes in process `syz.3.36606'.
[ 2561.866708][T14480] bridge_slave_1: entered allmulticast mode
[ 2561.883360][T14482] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[ 2562.027113][T14491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36610'.
[ 2562.037783][T14492] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[ 2562.159076][T14503] IPv6: NLM_F_CREATE should be specified when creating new route
[ 2562.775613][T14535] wg1 speed is unknown, defaulting to 1000
[ 2562.870266][T14542] vlan19: entered promiscuous mode
[ 2562.941222][T14546] netlink: 'syz.1.36619': attribute type 4 has an invalid length.
[ 2562.961230][T14546] netlink: 'syz.1.36619': attribute type 4 has an invalid length.
[ 2563.000760][T14546] tipc: Resetting bearer <eth:syzkaller0>
[ 2563.025777][T14535] lo speed is unknown, defaulting to 1000
[ 2563.164755][T11683] Bluetooth: hci2: command tx timeout
[ 2563.328729][T14535] ip6_vti0 speed is unknown, defaulting to 1000
[ 2563.333926][T14577] netlink: 296 bytes leftover after parsing attributes in process `syz.2.36626'.
[ 2563.344220][T14578] netlink: 296 bytes leftover after parsing attributes in process `syz.2.36626'.
[ 2563.372024][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36627'.
[ 2563.390803][T14577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36626'.
[ 2563.400673][T14577] netlink: 36 bytes leftover after parsing attributes in process `syz.2.36626'.
[ 2563.518921][T14586] x_tables: arp_tables: NFQUEUE target: not valid for this family
[ 2563.680097][T14592] wg1 speed is unknown, defaulting to 1000
[ 2564.292871][T14592] lo speed is unknown, defaulting to 1000
[ 2564.533865][T14592] ip6_vti0 speed is unknown, defaulting to 1000
[ 2564.937003][T14622] tipc: Enabling of bearer <udp:s> rejected, already enabled
[ 2565.107475][T14631] vlan19: entered promiscuous mode
[ 2565.262312][T14641] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2565.268800][T14641] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 2565.587958][T14652] bond21: option fail_over_mac: invalid value (127)
[ 2565.593109][T14652] bond21 (unregistering): Released all slaves
[ 2566.046046][T14670] syzkaller1: entered promiscuous mode
[ 2566.048356][T14670] syzkaller1: entered allmulticast mode
[ 2566.314220][T14683] netlink: 'syz.2.36658': attribute type 1 has an invalid length.
[ 2566.354687][T14684] bond430: (slave vxcan1): The slave device specified does not support setting the MAC address
[ 2566.359054][T14684] bond430: (slave vxcan1): Error -95 calling set_mac_address
[ 2566.387359][T14683] bond430: (slave bridge204): Enslaving as an active interface with a down link
[ 2566.452746][T14690] netlink: 'syz.1.36660': attribute type 1 has an invalid length.
[ 2566.486473][T14690] bond391: entered promiscuous mode
[ 2566.488842][T14690] 8021q: adding VLAN 0 to HW filter on device bond391
[ 2566.651050][T14702] __nla_validate_parse: 14 callbacks suppressed
[ 2566.651078][T14702] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36663'.
[ 2566.709925][T14709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36665'.
[ 2566.713014][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.36665'.
[ 2566.730006][T14709] 8021q: adding VLAN 0 to HW filter on device bond392
[ 2566.752764][T14709] 8021q: adding VLAN 0 to HW filter on device bond393
[ 2566.759817][T14709] bond392: (slave bond393): Enslaving as an active interface with an up link
[ 2566.762817][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36665'.
[ 2566.794068][T14709] bond392 (unregistering): (slave bond393): Releasing backup interface
[ 2566.809713][T14709] bond392 (unregistering): Released all slaves
[ 2566.902932][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36663'.
[ 2567.059257][T14731] netlink: 'syz.1.36667': attribute type 13 has an invalid length.
[ 2567.273936][T14728] mac80211_hwsim hwsim210 syzkaller0: Caught tx_queue_len zero misconfig
[ 2567.299071][T14724] syzkaller0: Caught tx_queue_len zero misconfig
[ 2567.339945][T14730] wg1 speed is unknown, defaulting to 1000
[ 2567.451961][T14741] netlink: 152 bytes leftover after parsing attributes in process `syz.1.36672'.
[ 2567.458753][T14741] : Caught tx_queue_len zero misconfig
[ 2567.572187][T14730] lo speed is unknown, defaulting to 1000
[ 2567.591343][T14749] dvmrp1: entered allmulticast mode
[ 2567.691959][T14753] wg1 speed is unknown, defaulting to 1000
[ 2567.859660][T14730] ip6_vti0 speed is unknown, defaulting to 1000
[ 2567.987606][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36678'.
[ 2568.010306][T14766] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 2568.026962][T14766] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[ 2568.166798][T14753] lo speed is unknown, defaulting to 1000
[ 2568.412429][T14777] tipc: Started in network mode
[ 2568.416894][T14777] tipc: Node identity 267ab8df7d34, cluster identity 4711
[ 2568.419562][T14777] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2568.426038][T14771] syzkaller0: entered promiscuous mode
[ 2568.432624][T14771] syzkaller0: entered allmulticast mode
[ 2568.477006][T14770] tipc: Resetting bearer <eth:syzkaller0>
[ 2568.503975][T14779] netlink: 14 bytes leftover after parsing attributes in process `syz.2.36681'.
[ 2568.531916][T14770] tipc: Disabling bearer <eth:syzkaller0>
[ 2568.626335][T14753] ip6_vti0 speed is unknown, defaulting to 1000
[ 2568.701517][T14785] netlink: 'syz.2.36684': attribute type 1 has an invalid length.
[ 2568.755594][T14787] netlink: 'syz.2.36685': attribute type 1 has an invalid length.
[ 2568.955519][T14794] 8021q: adding VLAN 0 to HW filter on device bond432
[ 2568.983944][T14794] bond431: (slave bond432): making interface the new active one
[ 2568.989513][T14794] bond431: (slave bond432): Enslaving as an active interface with an up link
[ 2569.011520][T14794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.36685'.
[ 2569.023980][T14794] 8021q: adding VLAN 0 to HW filter on device bond431
[ 2569.067513][T14801] netlink: 'syz.3.36687': attribute type 1 has an invalid length.
[ 2569.176298][T14801] 8021q: adding VLAN 0 to HW filter on device bond21
[ 2569.679739][T14824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.36692'.
[ 2569.699358][T14824] xt_AUDIT: Audit type out of range (valid range: 0..2)
[ 2569.703322][T14824] netlink: 'syz.3.36692': attribute type 30 has an invalid length.
[ 2570.039121][T14839] netlink: 'syz.3.36694': attribute type 1 has an invalid length.
[ 2570.139011][T14839] bond23: entered promiscuous mode
[ 2570.140773][T14839] 8021q: adding VLAN 0 to HW filter on device bond23
[ 2570.376466][T14851] netlink: 'syz.3.36697': attribute type 1 has an invalid length.
[ 2570.420400][T14851] bond24: entered promiscuous mode
[ 2570.422197][T14851] 8021q: adding VLAN 0 to HW filter on device bond24
[ 2570.461640][T14851] macvtap4: entered allmulticast mode
[ 2570.474106][T14851] macvtap5: entered allmulticast mode
[ 2570.490179][T14851] bond24: (slave bridge9): making interface the new active one
[ 2570.492629][T14851] bridge9: entered promiscuous mode
[ 2570.501818][T14851] bond24: (slave bridge9): Enslaving as an active interface with an up link
[ 2570.513837][T14860] netlink: 'syz.2.36698': attribute type 10 has an invalid length.
[ 2570.731140][T14875] syzkaller0: entered promiscuous mode
[ 2570.736370][T14875] syzkaller0: entered allmulticast mode
[ 2570.741143][T14875] tipc: Resetting bearer <eth:syzkaller0>
[ 2571.751381][T14925] __nla_validate_parse: 6 callbacks suppressed
[ 2571.751394][T14925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36717'.
[ 2571.880745][T14931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36721'.
[ 2571.998157][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36723'.
[ 2572.019440][T14939] 8021q: adding VLAN 0 to HW filter on device bond433
[ 2572.042446][T14939] 8021q: adding VLAN 0 to HW filter on device bond434
[ 2572.055833][T14939] bond433: (slave bond434): Enslaving as an active interface with an up link
[ 2572.064021][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36723'.
[ 2572.082802][T14939] bond433 (unregistering): (slave bond434): Releasing backup interface
[ 2572.093081][T14939] bond433 (unregistering): Released all slaves
[ 2572.186653][T14944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.36724'.
[ 2572.212713][T14947] netlink: 'syz.2.36725': attribute type 4 has an invalid length.
[ 2572.228451][T29226] lo speed is unknown, defaulting to 1000
[ 2572.231849][T29226] sqz0: Port: 1 Link ACTIVE
[ 2572.238755][T29226] lo speed is unknown, defaulting to 1000
[ 2572.329416][T14956] mac80211_hwsim hwsim210 syzkaller0: entered promiscuous mode
[ 2572.332585][T14956] mac80211_hwsim hwsim210 syzkaller0: entered allmulticast mode
[ 2572.347950][T14960] netlink: 'syz.3.36728': attribute type 1 has an invalid length.
[ 2572.371000][T14960] bond26: entered promiscuous mode
[ 2572.373030][T14960] 8021q: adding VLAN 0 to HW filter on device bond26
[ 2572.384509][T14957] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[ 2572.443698][T14964] netlink: 'syz.3.36730': attribute type 21 has an invalid length.
[ 2572.551930][T14968] bond394: invalid ARP target 0.0.0.0 specified for addition
[ 2572.555193][T14968] bond394: option arp_ip_target: invalid value (0)
[ 2572.562218][T14968] bond394 (unregistering): Released all slaves
[ 2572.582443][T14964] ip6erspan1: entered allmulticast mode
[ 2572.638936][T14979] netlink: 36 bytes leftover after parsing attributes in process `syz.3.36733'.
[ 2572.714991][T14984] wg1 speed is unknown, defaulting to 1000
[ 2572.815697][T14984] lo speed is unknown, defaulting to 1000
[ 2572.916748][T14984] ip6_vti0 speed is unknown, defaulting to 1000
[ 2573.685248][T15001] smc: ib device syz2 ibport 1 erased user defined pnetid S
[ 2573.744027][T15003] netlink: 3 bytes leftover after parsing attributes in process `syz.1.36741'.
[ 2573.747240][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36741'.
[ 2573.749931][T15003] netlink: 3 bytes leftover after parsing attributes in process `syz.1.36741'.
[ 2573.752888][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36741'.
[ 2574.096838][T15017] 8021q: adding VLAN 0 to HW filter on device bond433
[ 2574.108969][T15017] bond433: entered promiscuous mode
[ 2574.110652][T15017] bond433: entered allmulticast mode
[ 2574.120047][T15017] 8021q: adding VLAN 0 to HW filter on device bond433
[ 2574.125708][T15017] team0: Port device bond433 added
[ 2574.204078][T15028] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2574.289031][T15034] validate_nla: 1 callbacks suppressed
[ 2574.289042][T15034] netlink: 'syz.2.36752': attribute type 13 has an invalid length.
[ 2574.292786][T15034] netlink: 'syz.2.36752': attribute type 17 has an invalid length.
[ 2574.312577][T15034] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[ 2574.326760][T29226] ip6_vti0 speed is unknown, defaulting to 1000
[ 2574.329109][T29226] syz2: Port: 1 Link ACTIVE
[ 2574.331048][T29226] ip6_vti0 speed is unknown, defaulting to 1000
[ 2574.373936][T15037] netlink: 'syz.3.36753': attribute type 1 has an invalid length.
[ 2574.420829][T15037] veth9: entered allmulticast mode
[ 2574.430511][T15037] bond27: (slave veth9): Enslaving as a backup interface with a down link
[ 2574.550776][T15045] 8021q: adding VLAN 0 to HW filter on device bond28
[ 2574.557770][T15045] bond28: entered promiscuous mode
[ 2574.559809][T15045] bond28: entered allmulticast mode
[ 2574.565862][T15045] 8021q: adding VLAN 0 to HW filter on device bond28
[ 2574.571540][T15045] team0: Port device bond28 added
[ 2574.575300][T15045] team_slave_1: entered promiscuous mode
[ 2574.763939][T15052] netlink: 'syz.3.36756': attribute type 1 has an invalid length.
[ 2574.782253][T15052] bond29: entered promiscuous mode
[ 2574.784884][T15052] 8021q: adding VLAN 0 to HW filter on device bond29
[ 2574.874869][T15056] bond29: (slave bridge10): making interface the new active one
[ 2574.883051][T15056] bridge10: entered promiscuous mode
[ 2574.888069][T15056] bond29: (slave bridge10): Enslaving as an active interface with an up link
[ 2575.355153][T15067] netlink: 'syz.2.36760': attribute type 1 has an invalid length.
[ 2575.439407][T15072] 8021q: adding VLAN 0 to HW filter on device bond394
[ 2575.520159][T15048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2575.526704][T15082] bond394: entered promiscuous mode
[ 2575.529742][T15082] bond394: entered allmulticast mode
[ 2575.718176][T15087] netlink: 'syz.3.36766': attribute type 7 has an invalid length.
[ 2576.245829][T14370] lo speed is unknown, defaulting to 1000
[ 2576.248020][T14370] sqz0: Port: 1 Link DOWN
[ 2576.251352][T17103] ip6_vti0 speed is unknown, defaulting to 1000
[ 2576.254054][T17103] syz2: Port: 1 Link DOWN
[ 2576.269662][T17103] ip6_vti0 speed is unknown, defaulting to 1000
[ 2576.269737][T20038] lo speed is unknown, defaulting to 1000
[ 2576.371256][T15113] netlink: 'syz.3.36770': attribute type 1 has an invalid length.
[ 2576.403023][T15113] 8021q: adding VLAN 0 to HW filter on device bond30
[ 2576.413980][T15113] macvlan0: entered promiscuous mode
[ 2576.417531][T15113] macvlan0: entered allmulticast mode
[ 2576.419910][T15113] bond30: entered allmulticast mode
[ 2576.421979][T15113] bond30: entered promiscuous mode
[ 2576.425412][T15113] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 2576.435292][T15113] team0: Port device macvlan0 added
[ 2576.465802][T15113] netlink: 'syz.3.36770': attribute type 1 has an invalid length.
[ 2576.470358][T15113] netlink: 'syz.3.36770': attribute type 1 has an invalid length.
[ 2576.540022][T15122] netlink: 'syz.3.36772': attribute type 20 has an invalid length.
[ 2576.653773][T15127] bond31: Unable to set peer notification delay as MII monitoring is disabled
[ 2576.661710][T15127] bond31 (unregistering): Released all slaves
[ 2576.720631][T15128] bond436: entered promiscuous mode
[ 2576.723015][T15128] 8021q: adding VLAN 0 to HW filter on device bond436
[ 2576.744154][T15132] vlan23: entered promiscuous mode
[ 2576.746317][T15132] vlan23: entered allmulticast mode
[ 2576.825512][T15139] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[ 2576.946057][T15144] veth0: entered promiscuous mode
[ 2576.960940][T15144] bond0: entered promiscuous mode
[ 2576.993274][T15146] __nla_validate_parse: 19 callbacks suppressed
[ 2576.993306][T15146] netlink: 36 bytes leftover after parsing attributes in process `syz.1.36777'.
[ 2577.107288][T15149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.36778'.
[ 2577.132930][T15149] vlan24: entered promiscuous mode
[ 2577.137909][T15149] bridge0: entered promiscuous mode
[ 2577.140261][T15149] vlan22: entered promiscuous mode
[ 2577.142170][T15149] geneve0: entered promiscuous mode
[ 2577.151167][T15141] bond0: left promiscuous mode
[ 2577.153126][T15141] veth0: left promiscuous mode
[ 2577.423341][T15165] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[ 2577.548821][T15160] 
[ 2577.552979][T15160] ======================================================
[ 2577.555207][T15160] WARNING: possible circular locking dependency detected
[ 2577.557372][T15160] syzkaller #0 Not tainted
[ 2577.558851][T15160] ------------------------------------------------------
[ 2577.560702][T15160] syz.2.36781/15160 is trying to acquire lock:
[ 2577.562513][T15160] ffff8881012a5210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4ed/0x5c0
[ 2577.565715][T15160] 
[ 2577.565715][T15160] but task is already holding lock:
[ 2577.568280][T15160] ffff8881012a5180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[ 2577.571472][T15160] 
[ 2577.571472][T15160] which lock already depends on the new lock.
[ 2577.571472][T15160] 
[ 2577.574953][T15160] 
[ 2577.574953][T15160] the existing dependency chain (in reverse order) is:
[ 2577.577615][T15160] 
[ 2577.577615][T15160] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[ 2577.580303][T15160]        down_write+0x96/0x200
[ 2577.581651][T15160]        kernfs_add_one+0x41/0x5c0
[ 2577.583138][T15160]        kernfs_create_dir_ns+0xde/0x130
[ 2577.584962][T15160]        internal_create_group+0x425/0x1180
[ 2577.586611][T15160]        cpuhp_invoke_callback+0x445/0x860
[ 2577.588105][T15160]        cpuhp_issue_call+0x430/0x7a0
[ 2577.589724][T15160]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[ 2577.591478][T15160]        __cpuhp_setup_state+0x3f/0x60
[ 2577.592870][T15160]        do_one_initcall+0x250/0x870
[ 2577.594434][T15160]        do_initcall_level+0x104/0x190
[ 2577.596118][T15160]        do_initcalls+0x59/0xa0
[ 2577.597494][T15160]        kernel_init_freeable+0x2a6/0x3e0
[ 2577.599256][T15160]        kernel_init+0x1d/0x1d0
[ 2577.600896][T15160]        ret_from_fork+0x514/0xb70
[ 2577.602575][T15160]        ret_from_fork_asm+0x1a/0x30
[ 2577.604059][T15160] 
[ 2577.604059][T15160] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[ 2577.606236][T15160] 
[ 2577.606236][T15160] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[ 2577.608371][T15160]        cpus_read_lock+0x42/0x160
[ 2577.610137][T15160]        static_key_slow_inc+0x12/0x30
[ 2577.611778][T15160]        nbd_genl_reconfigure+0x132f/0x1ea0
[ 2577.613509][T15160]        genl_family_rcv_msg_doit+0x22a/0x330
[ 2577.615190][T15160]        genl_rcv_msg+0x61c/0x7a0
[ 2577.616558][T15160]        netlink_rcv_skb+0x232/0x4b0
[ 2577.617993][T15160]        genl_rcv+0x28/0x40
[ 2577.619376][T15160]        netlink_unicast+0x75c/0x8e0
[ 2577.621125][T15160]        netlink_sendmsg+0x813/0xb40
[ 2577.622715][T15160]        ____sys_sendmsg+0x972/0x9f0
[ 2577.624400][T15160]        ___sys_sendmsg+0x2a5/0x360
[ 2577.625851][T15160]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 2577.627447][T15160]        do_syscall_64+0x15f/0xf80
[ 2577.628814][T15160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2577.630910][T15160] 
[ 2577.630910][T15160] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[ 2577.633083][T15160]        __mutex_lock+0x1a3/0x1550
[ 2577.634721][T15160]        nbd_queue_rq+0x37b/0x1100
[ 2577.636408][T15160]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 2577.638478][T15160]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 2577.640630][T15160]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 2577.642784][T15160]        blk_mq_run_hw_queue+0x348/0x4f0
[ 2577.644401][T15160]        blk_mq_dispatch_list+0xd16/0xe10
[ 2577.645996][T15160]        blk_mq_flush_plug_list+0x48d/0x570
[ 2577.648008][T15160]        __blk_flush_plug+0x3ed/0x4d0
[ 2577.649859][T15160]        __submit_bio+0x28d/0x580
[ 2577.651351][T15160]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 2577.653309][T15160]        block_read_full_folio+0x599/0x830
[ 2577.655146][T15160]        filemap_read_folio+0x137/0x3b0
[ 2577.657325][T15160]        do_read_cache_folio+0x358/0x590
[ 2577.659002][T15160]        read_part_sector+0xb6/0x2b0
[ 2577.660663][T15160]        adfspart_check_ICS+0xb1/0x960
[ 2577.662188][T15160]        bdev_disk_changed+0x817/0x1770
[ 2577.663818][T15160]        blkdev_get_whole+0x380/0x510
[ 2577.665395][T15160]        bdev_open+0x31e/0xd30
[ 2577.666931][T15160]        blkdev_open+0x470/0x610
[ 2577.668369][T15160]        do_dentry_open+0x785/0x14e0
[ 2577.669985][T15160]        vfs_open+0x3b/0x340
[ 2577.671508][T15160]        path_openat+0x2e08/0x3860
[ 2577.673085][T15160]        do_file_open+0x23e/0x4a0
[ 2577.674722][T15160]        do_sys_openat2+0x113/0x200
[ 2577.676581][T15160]        __x64_sys_openat+0x138/0x170
[ 2577.678512][T15160]        do_syscall_64+0x15f/0xf80
[ 2577.680294][T15160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2577.682367][T15160] 
[ 2577.682367][T15160] -> #5 (&cmd->lock){+.+.}-{4:4}:
[ 2577.684403][T15160]        __mutex_lock+0x1a3/0x1550
[ 2577.685906][T15160]        nbd_queue_rq+0xc6/0x1100
[ 2577.687283][T15160]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 2577.689038][T15160]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 2577.690986][T15160]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 2577.692800][T15160]        blk_mq_run_hw_queue+0x348/0x4f0
[ 2577.694402][T15160]        blk_mq_dispatch_list+0xd16/0xe10
[ 2577.696004][T15160]        blk_mq_flush_plug_list+0x48d/0x570
[ 2577.697932][T15160]        __blk_flush_plug+0x3ed/0x4d0
[ 2577.699793][T15160]        __submit_bio+0x28d/0x580
[ 2577.701613][T15160]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 2577.703799][T15160]        block_read_full_folio+0x599/0x830
[ 2577.705897][T15160]        filemap_read_folio+0x137/0x3b0
[ 2577.707767][T15160]        do_read_cache_folio+0x358/0x590
[ 2577.709364][T15160]        read_part_sector+0xb6/0x2b0
[ 2577.710850][T15160]        adfspart_check_ICS+0xb1/0x960
[ 2577.712424][T15160]        bdev_disk_changed+0x817/0x1770
[ 2577.714180][T15160]        blkdev_get_whole+0x380/0x510
[ 2577.715742][T15160]        bdev_open+0x31e/0xd30
[ 2577.717127][T15160]        blkdev_open+0x470/0x610
[ 2577.718565][T15160]        do_dentry_open+0x785/0x14e0
[ 2577.720176][T15160]        vfs_open+0x3b/0x340
[ 2577.721814][T15160]        path_openat+0x2e08/0x3860
[ 2577.723340][T15160]        do_file_open+0x23e/0x4a0
[ 2577.724825][T15160]        do_sys_openat2+0x113/0x200
[ 2577.726336][T15160]        __x64_sys_openat+0x138/0x170
[ 2577.727873][T15160]        do_syscall_64+0x15f/0xf80
[ 2577.729434][T15160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2577.731319][T15160] 
[ 2577.731319][T15160] -> #4 (set->srcu){.+.+}-{0:0}:
[ 2577.733399][T15160]        __synchronize_srcu+0xca/0x300
[ 2577.734955][T15160]        elevator_switch+0x1e8/0x7a0
[ 2577.736476][T15160]        elevator_change+0x2cc/0x450
[ 2577.737991][T15160]        elevator_set_default+0x36c/0x430
[ 2577.739674][T15160]        blk_register_queue+0x3e9/0x4e0
[ 2577.741388][T15160]        __add_disk+0x677/0xd50
[ 2577.742826][T15160]        add_disk_fwnode+0xfb/0x480
[ 2577.744367][T15160]        nbd_dev_add+0x72c/0xb50
[ 2577.745763][T15160]        nbd_init+0x168/0x1f0
[ 2577.747167][T15160]        do_one_initcall+0x250/0x870
[ 2577.748744][T15160]        do_initcall_level+0x104/0x190
[ 2577.750501][T15160]        do_initcalls+0x59/0xa0
[ 2577.752225][T15160]        kernel_init_freeable+0x2a6/0x3e0
[ 2577.754065][T15160]        kernel_init+0x1d/0x1d0
[ 2577.755560][T15160]        ret_from_fork+0x514/0xb70
[ 2577.757003][T15160]        ret_from_fork_asm+0x1a/0x30
[ 2577.758579][T15160] 
[ 2577.758579][T15160] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[ 2577.760946][T15160]        __mutex_lock+0x1a3/0x1550
[ 2577.762439][T15160]        elevator_change+0x1b3/0x450
[ 2577.764033][T15160]        elevator_set_none+0xb5/0x140
[ 2577.765774][T15160]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[ 2577.767635][T15160]        nbd_start_device+0x17f/0xb10
[ 2577.769405][T15160]        nbd_genl_connect+0x165b/0x1cf0
[ 2577.771295][T15160]        genl_family_rcv_msg_doit+0x22a/0x330
[ 2577.772919][T15160]        genl_rcv_msg+0x61c/0x7a0
[ 2577.774421][T15160]        netlink_rcv_skb+0x232/0x4b0
[ 2577.776196][T15160]        genl_rcv+0x28/0x40
[ 2577.777676][T15160]        netlink_unicast+0x75c/0x8e0
[ 2577.779246][T15160]        netlink_sendmsg+0x813/0xb40
[ 2577.780767][T15160]        ____sys_sendmsg+0x972/0x9f0
[ 2577.782351][T15160]        ___sys_sendmsg+0x2a5/0x360
[ 2577.783844][T15160]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 2577.785409][T15160]        do_syscall_64+0x15f/0xf80
[ 2577.786845][T15160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2577.788797][T15160] 
[ 2577.788797][T15160] -> #2 (&q->q_usage_counter(io)#72){++++}-{0:0}:
[ 2577.791907][T15160]        blk_alloc_queue+0x546/0x680
[ 2577.793446][T15160]        __blk_mq_alloc_disk+0x197/0x390
[ 2577.795228][T15160]        nbd_dev_add+0x499/0xb50
[ 2577.796666][T15160]        nbd_genl_connect+0x962/0x1cf0
[ 2577.798260][T15160]        genl_family_rcv_msg_doit+0x22a/0x330
[ 2577.800117][T15160]        genl_rcv_msg+0x61c/0x7a0
[ 2577.801645][T15160]        netlink_rcv_skb+0x232/0x4b0
[ 2577.803445][T15160]        genl_rcv+0x28/0x40
[ 2577.805041][T15160]        netlink_unicast+0x75c/0x8e0
[ 2577.807017][T15160]        netlink_sendmsg+0x813/0xb40
[ 2577.808922][T15160]        ____sys_sendmsg+0x972/0x9f0
[ 2577.810782][T15160]        ___sys_sendmsg+0x2a5/0x360
[ 2577.812662][T15160]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 2577.814607][T15160]        do_syscall_64+0x15f/0xf80
[ 2577.816509][T15160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2577.818841][T15160] 
[ 2577.818841][T15160] -> #1 (fs_reclaim){+.+.}-{0:0}:
[ 2577.821444][T15160]        fs_reclaim_acquire+0x71/0x100
[ 2577.823397][T15160]        kmem_cache_alloc_noprof+0x40/0x650
[ 2577.825417][T15160]        __kernfs_iattrs+0xdf/0x320
[ 2577.827188][T15160]        kernfs_iop_setattr+0xea/0x3f0
[ 2577.829086][T15160]        notify_change+0xc1a/0xf40
[ 2577.830957][T15160]        do_truncate+0x1c2/0x250
[ 2577.832779][T15160]        path_openat+0x2f89/0x3860
[ 2577.834651][T15160]        do_file_open+0x23e/0x4a0
[ 2577.836488][T15160]        do_sys_openat2+0x113/0x200
[ 2577.838374][T15160]        __x64_sys_openat+0x138/0x170
[ 2577.840262][T15160]        do_syscall_64+0x15f/0xf80
[ 2577.842064][T15160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2577.844324][T15160] 
[ 2577.844324][T15160] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[ 2577.847256][T15160]        __lock_acquire+0x15a5/0x2cf0
[ 2577.849038][T15160]        lock_acquire+0x106/0x350
[ 2577.850723][T15160]        down_write+0x96/0x200
[ 2577.852244][T15160]        kernfs_link_sibling+0x4ed/0x5c0
[ 2577.853997][T15160]        kernfs_add_one+0x1ca/0x5c0
[ 2577.855901][T15160]        kernfs_create_dir_ns+0xde/0x130
[ 2577.857839][T15160]        sysfs_create_dir_ns+0x12f/0x2a0
[ 2577.859717][T15160]        kobject_add_internal+0x62b/0xd00
[ 2577.861387][T15160]        kobject_add+0x163/0x240
[ 2577.862841][T15160]        elevator_change_done+0x28a/0x5f0
[ 2577.864728][T15160]        elv_update_nr_hw_queues+0x22f/0x290
[ 2577.866455][T15160]        blk_mq_update_nr_hw_queues+0x11ab/0x1a60
[ 2577.868506][T15160]        nbd_start_device+0x17f/0xb10
[ 2577.870158][T15160]        nbd_genl_connect+0x165b/0x1cf0
[ 2577.871851][T15160]        genl_family_rcv_msg_doit+0x22a/0x330
[ 2577.873659][T15160]        genl_rcv_msg+0x61c/0x7a0
[ 2577.875062][T15160]        netlink_rcv_skb+0x232/0x4b0
[ 2577.876812][T15160]        genl_rcv+0x28/0x40
[ 2577.878483][T15160]        netlink_unicast+0x75c/0x8e0
[ 2577.880410][T15160]        netlink_sendmsg+0x813/0xb40
[ 2577.882340][T15160]        ____sys_sendmsg+0x972/0x9f0
[ 2577.884212][T15160]        ___sys_sendmsg+0x2a5/0x360
[ 2577.886036][T15160]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 2577.887886][T15160]        do_syscall_64+0x15f/0xf80
[ 2577.889722][T15160]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2577.891584][T15160] 
[ 2577.891584][T15160] other info that might help us debug this:
[ 2577.891584][T15160] 
[ 2577.894452][T15160] Chain exists of:
[ 2577.894452][T15160]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[ 2577.894452][T15160] 
[ 2577.898234][T15160]  Possible unsafe locking scenario:
[ 2577.898234][T15160] 
[ 2577.900304][T15160]        CPU0                    CPU1
[ 2577.901728][T15160]        ----                    ----
[ 2577.903252][T15160]   lock(&root->kernfs_rwsem);
[ 2577.904849][T15160]                                lock(cpuhp_state_mutex);
[ 2577.907152][T15160]                                lock(&root->kernfs_rwsem);
[ 2577.909306][T15160]   lock(&root->kernfs_iattr_rwsem);
[ 2577.910885][T15160] 
[ 2577.910885][T15160]  *** DEADLOCK ***
[ 2577.910885][T15160] 
[ 2577.913176][T15160] 5 locks held by syz.2.36781/15160:
[ 2577.914674][T15160]  #0: ffffffff8fe3de08 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 2577.916977][T15160]  #1: ffffffff8fe3dc40 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[ 2577.919657][T15160]  #2: ffff88802927c1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60
[ 2577.922841][T15160]  #3: ffff88802927c0d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60
[ 2577.925929][T15160]  #4: ffff8881012a5180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0
[ 2577.928664][T15160] 
[ 2577.928664][T15160] stack backtrace:
[ 2577.930284][T15160] CPU: 1 UID: 0 PID: 15160 Comm: syz.2.36781 Not tainted syzkaller #0 PREEMPT(full) 
[ 2577.930295][T15160] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 2577.930302][T15160] Call Trace:
[ 2577.930307][T15160]  <TASK>
[ 2577.930313][T15160]  dump_stack_lvl+0xe8/0x150
[ 2577.930326][T15160]  print_circular_bug+0x2e1/0x300
[ 2577.930340][T15160]  check_noncircular+0x12e/0x150
[ 2577.930353][T15160]  __lock_acquire+0x15a5/0x2cf0
[ 2577.930365][T15160]  ? __lock_acquire+0x6b5/0x2cf0
[ 2577.930377][T15160]  ? kernfs_link_sibling+0x4ed/0x5c0
[ 2577.930387][T15160]  lock_acquire+0x106/0x350
[ 2577.930397][T15160]  ? kernfs_link_sibling+0x4ed/0x5c0
[ 2577.930410][T15160]  down_write+0x96/0x200
[ 2577.930421][T15160]  ? kernfs_link_sibling+0x4ed/0x5c0
[ 2577.930432][T15160]  ? __pfx_down_write+0x10/0x10
[ 2577.930442][T15160]  ? kernfs_root+0x1c/0x230
[ 2577.930451][T15160]  ? kernfs_root+0x1c/0x230
[ 2577.930461][T15160]  ? kernfs_root+0x1ea/0x230
[ 2577.930470][T15160]  kernfs_link_sibling+0x4ed/0x5c0
[ 2577.930483][T15160]  kernfs_add_one+0x1ca/0x5c0
[ 2577.930494][T15160]  kernfs_create_dir_ns+0xde/0x130
[ 2577.930506][T15160]  sysfs_create_dir_ns+0x12f/0x2a0
[ 2577.930517][T15160]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 2577.930525][T15160]  ? __lock_acquire+0x6b5/0x2cf0
[ 2577.930535][T15160]  ? rcu_is_watching+0x15/0xb0
[ 2577.930547][T15160]  kobject_add_internal+0x62b/0xd00
[ 2577.930560][T15160]  kobject_add+0x163/0x240
[ 2577.930570][T15160]  ? __blk_mq_unfreeze_queue+0x182/0x220
[ 2577.930582][T15160]  ? __pfx_kobject_add+0x10/0x10
[ 2577.930591][T15160]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[ 2577.930602][T15160]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2577.930612][T15160]  elevator_change_done+0x28a/0x5f0
[ 2577.930621][T15160]  ? __pfx_elevator_change_done+0x10/0x10
[ 2577.930634][T15160]  ? elv_update_nr_hw_queues+0x20c/0x290
[ 2577.930643][T15160]  elv_update_nr_hw_queues+0x22f/0x290
[ 2577.930651][T15160]  blk_mq_update_nr_hw_queues+0x11ab/0x1a60
[ 2577.930665][T15160]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[ 2577.930677][T15160]  ? sysfs_add_file_mode_ns+0x259/0x300
[ 2577.930688][T15160]  nbd_start_device+0x17f/0xb10
[ 2577.930699][T15160]  ? device_create_file+0xf4/0x1b0
[ 2577.930708][T15160]  nbd_genl_connect+0x165b/0x1cf0
[ 2577.930716][T15160]  ? __pfx___nla_validate_parse+0x10/0x10
[ 2577.930726][T15160]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 2577.930735][T15160]  ? rcu_is_watching+0x15/0xb0
[ 2577.930745][T15160]  ? trace_kmalloc+0x2a/0xf0
[ 2577.930758][T15160]  ? __nla_parse+0x40/0x60
[ 2577.930765][T15160]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[ 2577.930775][T15160]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 2577.930785][T15160]  genl_family_rcv_msg_doit+0x22a/0x330
[ 2577.930795][T15160]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2577.930806][T15160]  ? __lock_acquire+0x6b5/0x2cf0
[ 2577.930817][T15160]  genl_rcv_msg+0x61c/0x7a0
[ 2577.930827][T15160]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2577.930835][T15160]  ? __pfx_nbd_genl_connect+0x10/0x10
[ 2577.930845][T15160]  netlink_rcv_skb+0x232/0x4b0
[ 2577.930856][T15160]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2577.930864][T15160]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2577.930877][T15160]  ? down_read+0x270/0x2e0
[ 2577.930887][T15160]  ? genl_rcv+0xd/0x40
[ 2577.930894][T15160]  genl_rcv+0x28/0x40
[ 2577.930901][T15160]  netlink_unicast+0x75c/0x8e0
[ 2577.930913][T15160]  netlink_sendmsg+0x813/0xb40
[ 2577.930926][T15160]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2577.930937][T15160]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2577.930948][T15160]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2577.930960][T15160]  ____sys_sendmsg+0x972/0x9f0
[ 2577.930971][T15160]  ? __might_fault+0xaf/0x130
[ 2577.930983][T15160]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2577.930995][T15160]  ? import_iovec+0x73/0xa0
[ 2577.931004][T15160]  ___sys_sendmsg+0x2a5/0x360
[ 2577.931014][T15160]  ? __lock_acquire+0x6b5/0x2cf0
[ 2577.931024][T15160]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2577.931037][T15160]  ? futex_wait+0x2a2/0x390
[ 2577.931050][T15160]  ? __fget_files+0x2a/0x420
[ 2577.931059][T15160]  ? __fget_files+0x3a0/0x420
[ 2577.931070][T15160]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 2577.931082][T15160]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2577.931095][T15160]  ? rcu_is_watching+0x15/0xb0
[ 2577.931107][T15160]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2577.931115][T15160]  do_syscall_64+0x15f/0xf80
[ 2577.931124][T15160]  ? trace_irq_disable+0x3b/0x140
[ 2577.931154][T15160]  ? clear_bhb_loop+0x40/0x90
[ 2577.931163][T15160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2577.931171][T15160] RIP: 0033:0x7f748299cdd9
[ 2577.931181][T15160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2577.931188][T15160] RSP: 002b:00007f74838db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2577.931197][T15160] RAX: ffffffffffffffda RBX: 00007f7482c15fa0 RCX: 00007f748299cdd9
[ 2577.931202][T15160] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006
[ 2577.931208][T15160] RBP: 00007f7482a32d69 R08: 0000000000000000 R09: 0000000000000000
[ 2577.931213][T15160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2577.931217][T15160] R13: 00007f7482c16038 R14: 00007f7482c15fa0 R15: 00007fff18bb1078
[ 2577.931227][T15160]  </TASK>
[ 2578.163927][ T7033] block nbd2: Receive control failed (result -32)
[ 2578.166018][   T55] block nbd2: Receive control failed (result -32)
