last executing test programs:

1.89459057s ago: executing program 0 (id=1548):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x40000010)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x31, 0x70bd26, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r6)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r7, 0x2, 0x70bd26, 0x25dfdbff, {{}, {}, {0x10, 0x18, {0xe, @bearer=@l2={'eth', 0x3a, 'wg2\x00'}}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x20008000)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)

1.823154856s ago: executing program 0 (id=1551):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0xc02f}, 0x4040)

1.776250471s ago: executing program 0 (id=1552):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x100, 0x20060}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, {0xa}]}]}}}]}, 0x50}}, 0x40000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x3}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c020}, 0x8800)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10)

1.775533486s ago: executing program 0 (id=1554):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@mpls_newroute={0x3c, 0x18, 0x8, 0x70bd2c, 0x25dfdbfd, {0x1c, 0x14, 0x14, 0x8, 0xfc, 0x3, 0xfd, 0x4, 0xa00}, [@RTA_VIA={0x14, 0x12, {0x21, "01000000000000008000"}}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x11, 0xed, r1}}]}, 0x3c}}, 0xc800)

1.696149352s ago: executing program 0 (id=1556):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000077a8e8b300000c00000000000000000000000000000000000000000000007900000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffff69b54cd10200000000000008ffffffff00000000010006000000000044000500000000cd00000000000000ff0a010101000000003c00000002000000ac1414aa000000000000fb04de46f3b743d6acb2ae00"/179], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r3, 0x4)
accept4$unix(r3, 0x0, 0x0, 0x800)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000000)=0x3, 0x4)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x48, r4, 0x1, 0xf000000, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x200c4011}, 0x0)
sendmsg$key(r1, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x10}}, 0x40004)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(0xffffffffffffffff)
r7 = socket$kcm(0x29, 0x5, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
r9 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83", 0x6a}, {&(0x7f0000000880)="3aa854", 0x3}, {0x0}], 0x3}, 0xc854)
setsockopt$sock_int(r9, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6)
sendfile(r7, r8, 0x0, 0xffffffff000)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r10, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)

1.545872052s ago: executing program 2 (id=1561):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 32)
close(0x3) (rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004a623d8d770000000000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040805}, 0x4051)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) (async, rerun: 64)
r3 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async, rerun: 32)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) (rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008090)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000002dc0), 0xffffffffffffffff) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040), 0x4) (async)
setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x20008000) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)

1.104651076s ago: executing program 1 (id=1563):
r0 = socket(0x15, 0x5, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000008040000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="86db4e0cf9420000000000000000", 0x0, 0x55efa3f9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0)
recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}})
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

935.563189ms ago: executing program 1 (id=1564):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "4adb125cf7939455", "e9e0d9b972a2024b334a90d4e2d3c425", "ad0f0530", "fd627c1d4704bc8e"}, 0x28)
sendto$inet6(r0, &(0x7f0000000000)="01", 0x1, 0x8000, 0x0, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "000080", 0x64, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ef6c2fca06a9bd768d5f1", {"76c19815002000000000000000001000", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, r0, 0x5ac1a000)
sendto$inet6(r0, &(0x7f0000000100)='0', 0x12, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000006200028008004040", @ANYBLOB="bb90e3"], 0x3c}}, 0x20000000)

935.11306ms ago: executing program 1 (id=1565):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
close(0xffffffffffffffff)
close(0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYRESOCT, @ANYBLOB="988ac1f07082e406f0122971266608e765b238d88a0a2a12d787ab6864b85bf789a8823c62f6077f46e476a6148b8334eae666b33c4a1ed44edd8683a925be8b8357836aee042953914d7ef26eb7cb10e53dae08c8feca8f43d0ebffd8b2acc088e27782e273150b263a3ef5ab3c8fbaba65dd7b3fcde3076564f877e06ceaaddb095a6a79cf38dd", @ANYRESOCT, @ANYRES8=r1, @ANYRESDEC, @ANYRES32=r0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES64=r0, @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$inet(0x2, 0x3, 0x9)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x8, @empty}, {0x1, @broadcast}, 0x4a, {0x2, 0x102, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'dummy0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1)

864.491502ms ago: executing program 1 (id=1566):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x8, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f00000009c0)={'ip_vti0\x00', <r5=>0x0, 0x8, 0x9, 0xfff, 0xcbf, {{0x18, 0x4, 0x2, 0x1, 0x60, 0x68, 0x0, 0xf3, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x1c, 0x3f, 0x3, 0x8, [{@local, 0x989}, {@multicast2, 0x4}, {@local, 0x7f}]}, @end, @end, @lsrr={0x83, 0x2b, 0x97, [@loopback, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x15}, @broadcast, @broadcast, @private=0xa010101, @multicast2, @loopback, @local]}]}}}}})
r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e000000d9460000000800000100000022480700", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="050000000100000000007d9f9e8100"/24, @ANYRES32=r6, @ANYBLOB], 0x50)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x14, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000ff0800000000000000000000850000004100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
ppoll(&(0x7f00000000c0)=[{r10, 0x1400}, {r10, 0x1236}, {r10, 0x440}, {r10, 0x2000}], 0x4, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f00000002c0)={[0x1]}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb}, 0x38)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_int(r11, 0x29, 0x18, 0x0, &(0x7f00007d0000)=0x15)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000002060101000060c7cfe900000a00000005000400020000000900020073797a32000000001400078008001340ffffffff080012400000e54a050005000200000005000100060000000c000300686173683a6970"], 0x58}}, 0x80)
sendmsg$IPSET_CMD_DESTROY(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40011}, 0x40)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1d0, 0xffffffff, 0xffffffff, 0x1d0, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@mh={{0x28}, {"0ec8"}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5}, {0x2, 0x0, 0x2}, {0x3, 0x0, 0x1}, 0x200, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000)

853.637023ms ago: executing program 2 (id=1567):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400091400028008000240000000020800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24004804)

853.276574ms ago: executing program 2 (id=1568):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x11}}}], 0x18}, 0x922bac8556bdad8e)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x3c, r5, 0x1, 0xffffffff, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

852.631964ms ago: executing program 0 (id=1569):
socket$inet(0x10, 0x3, 0x0) (async)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001300)=@newtfilter={0x21cc, 0x2c, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x1, 0xa}, {0xfff1, 0x3}, {0xffe0, 0x26}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @TCA_CHAIN={0x8, 0xb, 0xfffffff7}, @filter_kind_options=@f_bpf={{0x8}, {0x2178, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x1, 0x2, 0x94, 0x80000000}]}}, @TCA_BPF_ACT={0x214c, 0x1, [@m_skbedit={0x15c, 0x1a, 0x0, 0x0, {{0xc}, {0x84, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x2, 0x7, 0xfffffffa, 0x100}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xfff1}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x5, 0x2, 0x81, 0x6}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x55829d3c26c097fd, 0xffe0}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x5}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x9, 0xffffffffffffffff, 0x0, 0x1ff}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xe}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}]}, {0xaf, 0x6, "e2c3614f35c83e059a32bdab2c287ce0ef83608ff31bf3ace2219dac4da51215aade67888fe91883883b20d1345847bfe8675a07e8236f5a0c4d4c2da82be14495ca6a425ae3a9ccde450e0ccdacd1dcb353b86d44ca935fd4c8a75f19638c3da3420a0cd063d205b9a7c0da059f832e53de05ac85e804726448ec2c7db4edf40ae9312c302c42be697729b01ef12610f7073ef940f7ebe34c80e27eb9c491f1d7517b57b842f13d54b98e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x1030, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0xc0, 0x1f, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x5}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x3, 0x0, 0xfffffffc}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x200, 0x20000000, 0x1, 0xf3b}, 0x1}}]}, {0x52, 0x6, "dcdd83e70753800238f4673c4a1a99743f30c50c5e29067379c5801c00ccbbd2358a78559508952af796cce06db9aa3acf54d4148e5762447598c25d5bb2b7e14e556353afd6a0b801bc086504f8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0xefc, 0x3, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x9, 0xffffff2b, 0xffffffffffffffff, 0xfff, 0x3}, 0x3f, 0x0, [{0x6, 0xb, 0x1, 0x8001, 0x2d832e7d, 0x6}]}, [{0x762b, 0x81f, 0x5, 0x26dd, 0x7, 0xf82}, {0x6, 0x80, 0x5, 0x3, 0x8, 0x2}, {0x9, 0x7, 0x8, 0x2, 0x0, 0x7fff}, {0x8000, 0x7fff, 0x5, 0x7, 0xfffffffb, 0x8}, {0xffff7fff, 0x401, 0x5, 0x9, 0x1, 0x5}, {0x2, 0x9, 0x5394, 0x0, 0xfffffbff, 0xf1}, {0xf, 0x3ff, 0xa80, 0x7, 0x1c, 0x7ff}, {0xbabc, 0x1, 0x3, 0xf, 0x2, 0x100000}, {0x4, 0x7, 0x0, 0x8, 0xff, 0x9}, {0x5, 0x7, 0x68, 0x9, 0xefa, 0x40000}, {0x800, 0xc, 0x101, 0xb, 0x1, 0xffffffff}, {0x4b9, 0x3, 0x0, 0x70e4, 0x4, 0x2}, {0x200000, 0x81d, 0xc48, 0xff, 0x3, 0x8}, {0x6, 0x850, 0x6, 0xe8b5, 0x7fffffff, 0x6}, {0x8, 0x8, 0x4, 0xb, 0x81, 0x1}, {0x3, 0x1, 0x133, 0x3, 0x1, 0x5}, {0x8000, 0x0, 0x4, 0x10000, 0x9c3f, 0x10000}, {0x7, 0x0, 0x1000, 0x2e, 0xd, 0x40}, {0x4, 0x7ff, 0x8bc5, 0x1, 0x1, 0x1000}, {0x6, 0x3, 0x0, 0x7, 0x5, 0xfff}, {0x7, 0x9, 0x8, 0x9, 0x5, 0x7}, {0x6, 0x2, 0x30eb, 0x10, 0xdbe0, 0x40}, {0x7, 0x10000, 0x80000000, 0x800, 0x85e, 0xdb}, {0x7, 0x7, 0x4, 0x800, 0x6, 0x4}, {0x10000, 0x9, 0x3, 0xb, 0x2, 0x1}, {0x10001, 0x9, 0x5, 0x5b59, 0x7, 0x1ff}, {0xd, 0x3, 0xc069, 0x1, 0x10000, 0x2}, {0x6, 0x2f, 0xfff, 0x3ff, 0x1, 0x6}, {0x5b3, 0x7, 0x4, 0x0, 0x7ff, 0x4}, {0x1, 0x1, 0x1, 0xb, 0xff, 0x2}, {0x9, 0xfffffff9, 0x7, 0x2000000, 0x800, 0x4}, {0x2, 0x9, 0x7f, 0x6, 0x0, 0x1000}, {0x10, 0x5, 0x7, 0x3ff, 0x8, 0x4}, {0x2, 0x40f, 0x6, 0xe, 0x7f, 0x80000000}, {0xffff, 0x4, 0x2, 0x3, 0x6, 0x4}, {0xffffa628, 0x47, 0x10, 0x800, 0x8000}, {0xfffffffc, 0x4, 0x7ff, 0x4, 0x937e, 0x710}, {0x0, 0x4, 0x7, 0x40, 0x0, 0x2}, {0x1000, 0x8, 0x7, 0x2, 0x10, 0x1}, {0x1, 0x7, 0xffffffa9, 0x8, 0x4, 0x8}, {0x6, 0x4, 0xff, 0x8, 0xf58, 0x1}, {0x6, 0x84ea, 0x8, 0x1, 0x6, 0x2}, {0x96, 0xafd5, 0x3ff, 0x5, 0x0, 0x4}, {0x6, 0x0, 0x6, 0x7, 0xffff8000, 0x5}, {0x2, 0x2, 0x7, 0x7, 0x1, 0x7779}, {0x2, 0x7, 0x6, 0x2, 0x9, 0x7ff}, {0x9, 0x8, 0x4, 0x3, 0x8001, 0x80}, {0x6, 0x2, 0x0, 0x4, 0x8000, 0x7}, {0x10000, 0x66, 0x4, 0xe, 0x2, 0xc72}, {0x2, 0x833, 0x3ff, 0x400, 0x100000, 0x6}, {0xc, 0x1, 0x3, 0xa, 0x9, 0x3}, {0x6, 0x10, 0x5, 0x1000, 0x1, 0x3ff}, {0x4, 0x0, 0xffffffff, 0x1, 0x2, 0x6}, {0x0, 0x2, 0xfffffffa, 0x1, 0x101, 0xa87}, {0x1, 0x7, 0x3eea, 0x2, 0x1, 0x8}, {0xa7fb, 0x0, 0x5, 0x0, 0x1ff}, {0xfffffffc, 0x4, 0xe7c, 0x8, 0x5, 0x80000000}, {0x9, 0x6b, 0xf9, 0x5, 0xfffffffd, 0x4fe125e6}, {0x4, 0xfffffffe, 0x1, 0xae2a, 0x8, 0x30e}, {0x7, 0x3, 0x0, 0x6, 0x6, 0x2}, {0x4, 0x8c8a, 0x81, 0x3, 0xa, 0x7}, {0x6e2, 0xc4d8, 0xf8d, 0x2, 0x3, 0x3}, {0x356, 0x401, 0xab, 0x4fa, 0x8, 0x80000001}, {0x1e20, 0x4, 0xffffffff, 0x8, 0x7, 0x6}, {0x400, 0x3, 0xfffffff8, 0x67, 0x8e76, 0x40}, {0x4, 0x3, 0x3, 0x6, 0x2, 0xc}, {0x9, 0x9, 0x6, 0x3, 0x6, 0xe6}, {0x3, 0x0, 0x0, 0x9, 0x674, 0x10000}, {0x7, 0x1, 0x6, 0x8001, 0x8, 0x4}, {0x0, 0x101, 0x5, 0x1, 0x3, 0xffff}, {0xfffffae7, 0x357aa07f, 0x7, 0xe7, 0x4, 0x8000}, {0x4, 0xd, 0xf7c, 0x40, 0x9, 0x1}, {0xf, 0x2, 0x8, 0x4, 0x7, 0x7}, {0x72de, 0x2, 0x6, 0x39, 0xfffff2e5, 0xbf}, {0x7f5f262, 0x9, 0x60, 0x2, 0x6, 0x6c4a}, {0xff, 0x40, 0x0, 0x8, 0x7, 0x9}, {0x5, 0x7, 0x76bf7174, 0x432, 0xefd, 0x2}, {0x3, 0x2, 0x5, 0x5, 0xffff, 0x8}, {0x6, 0x6, 0x38f, 0x2, 0x3, 0xf213}, {0x0, 0x6, 0x2, 0x9, 0x5, 0x5}, {0x5, 0x2, 0x5, 0x4, 0xffffffff, 0x800}, {0x3, 0x9, 0x8, 0x9, 0xfffffffb, 0x6}, {0x2, 0x7, 0x3, 0x5, 0x8, 0x7}, {0x0, 0x4, 0x7b5, 0x6, 0x0, 0x3}, {0x8, 0x612, 0x9, 0x5, 0x5, 0xea0}, {0x0, 0x3, 0x8, 0x6, 0x8, 0x9}, {0x4, 0x6, 0x1ff, 0x4, 0x3, 0x5}, {0x0, 0x4, 0x7ff, 0xd, 0x2, 0x80000000}, {0xfffffffa, 0xd8, 0x180, 0x8, 0x8, 0x94}, {0x424, 0x3, 0x3ff, 0xa}, {0x7ff, 0x1, 0x7ff, 0xaa2, 0xb2a, 0x4}, {0x4, 0x42, 0x3, 0xd421, 0xe0000000, 0x5c4}, {0xdba7, 0x2, 0x9, 0xe1b, 0x8, 0x3}, {0x0, 0x800, 0x3, 0x6f, 0x0, 0x200}, {0xfd, 0x91cc, 0xfffffffd, 0xd9, 0x400, 0x7}, {0x0, 0x8001, 0x4, 0xff, 0x4, 0x9}, {0x1000, 0x69d9b3f8, 0x0, 0x8001, 0x20000000, 0x5}, {0xffffff7f, 0x9, 0x9, 0x8, 0x10, 0x8}, {0xfffffff6, 0x2, 0x8, 0x3a, 0x1, 0x7}, {0x5, 0xfffffff9, 0x6, 0x9, 0x0, 0x80}, {0x8, 0x3, 0x9, 0x3, 0x5de13a8a, 0x2}, {0x6ad, 0x5, 0x3, 0x3, 0xb, 0x5}, {0x14a3516a, 0x1c24, 0x8b8, 0x1, 0x2, 0xfff}, {0x8, 0x6, 0x8, 0xc, 0x7, 0x3e3a}, {0x5, 0x2f34, 0x2, 0x5, 0x2, 0x61a}, {0x2, 0x0, 0x6f, 0x8ce5c1f0, 0x2, 0x1}, {0x4, 0x6e2f3818, 0x9, 0x7f, 0xfffffffc, 0x4}, {0x5, 0x4, 0xfffffffa, 0x6, 0xb67, 0x8001}, {0x0, 0x3, 0x7, 0x3, 0x75479727, 0x1}, {0xf9, 0x2, 0x4, 0x5, 0x7, 0x2}, {0x6, 0x4, 0x9, 0x5, 0x5, 0xd}, {0x1900000, 0xffffff80, 0x7, 0x40, 0x3, 0x4}, {0x7, 0x2, 0x39a3d4e4, 0x3, 0x0, 0x6}, {0x5, 0x10, 0x4, 0x8000, 0x3, 0x3}, {0x3ff, 0x7, 0x1, 0x3, 0x9, 0x5}, {0x8, 0x3, 0x7, 0x0, 0x9, 0x2}, {0x6, 0x7, 0x0, 0x6fd84632, 0xf31, 0x3}, {0x1, 0x5, 0x6, 0x3ff, 0xb81c, 0xc}, {0x6, 0x6, 0x8, 0x2, 0x8, 0x9}, {0xffff, 0xe, 0xfffff556, 0x95, 0x10000, 0x1000}, {0x0, 0x0, 0xfffffff8, 0x10000, 0x8, 0x9}, {0x6, 0x7fffffff, 0x4, 0x7, 0xea0, 0x7}, {0x98, 0x8, 0x3, 0x0, 0x7e6e, 0x5}, {0x5, 0x4, 0x28000000, 0x4182d4db, 0xfffffffc, 0x40}, {0x8, 0x7fffffff, 0x5, 0xfffffffe, 0x4, 0x1}, {0x1, 0x0, 0x9, 0x80000001, 0xee, 0xb}, {0x3, 0x8, 0x7, 0x7ff, 0x8, 0x7}, {0xffffffff, 0x5, 0xd1, 0xffffffff, 0x3, 0x6}], [{0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2}, {}, {0x3}, {0x3, 0xe716bbf71158f277}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x5}, {0x6, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x2, 0x2cf94b99b45f7a0b}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x5}, {0x1636cf5e31b2318, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x7}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x2}, {}, {0x1, 0x1}, {0x2}, {0x4}, {0x7}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x6}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x98, 0x6, "a84730f1f52221469ea8dd6b34e842c03624e96de7a2175775fef37c16c23c56adf83357c43fa8c9829880cfbd1551cbe6ac068cc7ac08d90727704d2a380a984f9952aa485ac1bef075456e785d8750b18902b5059cb52448fcbe90eb177b77788b4c6f0fcb69365ac734bfbe0afc622bff12dd17c3d079ded8d62ca8ba11ef366dd43e486ee6d7f0838b4f963ff85433d238cf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x21cc}}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
epoll_create1(0x0) (async)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x20000008})
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000100)={0x20000001}) (async)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000100)={0x20000001})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff, 0x8}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040014}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r10, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmmsg(r11, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
connect$inet(r10, &(0x7f0000000080)={0x2, 0x5e23, @multicast1}, 0x10) (async)
connect$inet(r10, &(0x7f0000000080)={0x2, 0x5e23, @multicast1}, 0x10)
setsockopt$sock_int(r10, 0x1, 0x3e, &(0x7f0000000180)=0x1, 0x4) (async)
setsockopt$sock_int(r10, 0x1, 0x3e, &(0x7f0000000180)=0x1, 0x4)
r12 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4)
connect$can_bcm(r12, &(0x7f00000005c0), 0x10)
recvmmsg(r12, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) (async)
recvmmsg(r12, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0)
sendmsg$can_bcm(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ec072, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

65.871496ms ago: executing program 2 (id=1570):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000002000010026bd7000fbdbdf2502101000090000060f00010008000200ac14142a08000b0006000000050016008900000008000100"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r1, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f00000002c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}], 0x18}, 0x4004000)
r2 = socket$kcm(0x1e, 0x1, 0x0)
recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000380)=""/231, 0xe7}], 0x1}, 0x12000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffff, 0x1, 0xfffff000, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x7, 0x20000000, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x100007}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

63.901772ms ago: executing program 2 (id=1571):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r3, 0x913e0000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x14, 0x56, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r3, 0x0)
mmap(&(0x7f0000708000/0x4000)=nil, 0x4000, 0x8fbc0e6f77c18ed3, 0x11, r6, 0x1000)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})
ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000000000)={r4})
recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x3fffffffffffed8, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket(0x2, 0xa, 0x300)
socket$packet(0x11, 0x3, 0x300)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'syz_tun\x00'})
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50)
close(0x3)

1.787475ms ago: executing program 1 (id=1572):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000004c0)=0x8) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64801}, 0x0) (async)
r6 = socket$igmp(0x2, 0x3, 0x2) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_ifindex=r7, @remote}, 0x10) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) (async)
r9 = getpid()
sendmsg$nl_route(r8, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@getlink={0x54, 0x12, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x120, 0x100}, [@IFLA_NET_NS_PID={0x8, 0x13, r9}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xf30e}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_TXQLEN={0x8, 0xd, 0x8001}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_IFALIASn={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r12=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r12, @ANYBLOB="60003080050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x4880) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r2, 0xcd}, &(0x7f0000000100)=0x8) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r4) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x2}}, 0x3, 0x2}, &(0x7f0000000180)=0x90) (async, rerun: 64)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x18, 0x2e, 0x9, 0x70bd27, 0x25dfdbff, {0x4}, [@nested={0x4, 0x1a}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

1.447083ms ago: executing program 2 (id=1573):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
bind$llc(r3, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
socket(0x1, 0x6, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500060000000c0016"], 0x38}}, 0x10)
recvmmsg(r4, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}], 0x8}, 0xfffffffd}], 0x1, 0x2000, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a010100000000e4000000010002000900010073797a30000000000900030073797a320a05000000000000000000010000050c00024000"], 0xa8}}, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r6, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=1574):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004c80), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000004cc0)={0x68, r1, 0x1, 0x70bd26, 0x25dfd3fe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:sshd_key_t:s0\x00'}]}, 0x68}}, 0x4080) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5}, 0x90) (async, rerun: 64)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$unix(r3, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0)

kernel console output (not intermixed with test programs):

15] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.304799][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.323550][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.329005][ T5484] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.336222][ T5484] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.358073][ T5484] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.364369][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.374726][ T5484] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.386634][ T5484] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.392601][ T5484] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.397742][ T5484] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.414454][ T5484] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.492118][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.498323][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.538665][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.547770][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.578883][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.585148][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.590396][ T5726] syzkaller0: entered promiscuous mode
[   65.592878][ T5726] syzkaller0: entered allmulticast mode
[   65.601048][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.605886][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.758420][ T5729] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.823984][ T5737] Zero length message leads to an empty skb
[   65.833318][ T5737] syzkaller0: entered promiscuous mode
[   65.836053][ T5737] syzkaller0: entered allmulticast mode
[   65.921726][ T5742] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET)
[   66.392230][ T5752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'.
[   66.434066][ T5752] Driver unsupported XDP return value 0 on prog  (id 4) dev N/A, expect packet loss!
[   66.525834][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'.
[   66.555818][ T5757] : entered promiscuous mode
[   66.619437][ T5763] vlan2: entered promiscuous mode
[   66.635047][ T5763] geneve1: entered promiscuous mode
[   66.636861][ T5763] vlan2: entered allmulticast mode
[   66.639435][ T5763] geneve1: entered allmulticast mode
[   66.759994][ T5770] netlink: 'syz.0.17': attribute type 11 has an invalid length.
[   66.846319][ T5772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'.
[   66.848955][ T5775] netlink: 'syz.0.19': attribute type 13 has an invalid length.
[   66.849083][ T5772] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18'.
[   66.852094][ T5775] netlink: 'syz.0.19': attribute type 17 has an invalid length.
[   66.906076][ T5001] Bluetooth: hci0: command tx timeout
[   66.906113][   T53] Bluetooth: hci1: command tx timeout
[   66.995363][   T53] Bluetooth: hci2: command tx timeout
[   67.732464][ T5796] netlink: 'syz.0.25': attribute type 1 has an invalid length.
[   67.740356][ T5796] bridge_slave_1: Device is already in use.
[   67.743013][ T5796] bridge_slave_1: Device is already in use.
[   67.869860][ T5690] IPVS: starting estimator thread 0...
[   67.954914][ T5800] IPVS: using max 62 ests per chain, 148800 per kthread
[   68.264038][ T5825] netlink: 44 bytes leftover after parsing attributes in process `syz.1.34'.
[   68.340577][ T5832] bond1: (slave bond_slave_1): Device is not our slave
[   68.343360][ T5832] bond1: option active_slave: invalid value (bond_slave_1)
[   68.349721][ T5832] bond1 (unregistering): Released all slaves
[   68.420526][ T5837] netlink: 'syz.1.37': attribute type 1 has an invalid length.
[   68.433037][ T5837] hsr_slave_0: entered allmulticast mode
[   68.532608][ T5839] netlink: 212320 bytes leftover after parsing attributes in process `syz.1.38'.
[   68.600267][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'.
[   68.619842][ T5842] veth0_macvtap: left promiscuous mode
[   68.659476][ T5844] netlink: 7 bytes leftover after parsing attributes in process `syz.2.40'.
[   68.666779][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.677382][ T5844] bridge_slave_0 (unregistering): left allmulticast mode
[   68.679959][ T5844] bridge_slave_0 (unregistering): left promiscuous mode
[   68.682337][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.722816][ T5845] atomic_op ffff8881af224998 conn xmit_atomic 0000000000000000
[   68.902945][ T5864] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   68.931876][ T5864] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   68.985766][   T53] Bluetooth: hci1: command tx timeout
[   68.995937][   T53] Bluetooth: hci0: command tx timeout
[   69.011101][ T5869] syzkaller0: entered promiscuous mode
[   69.013315][ T5869] syzkaller0: entered allmulticast mode
[   69.034390][ T5881] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.49'.
[   69.047294][   T32] cfg80211: failed to load regulatory.db
[   69.066197][   T53] Bluetooth: hci2: command tx timeout
[   69.077627][ T5885] netlink: 64 bytes leftover after parsing attributes in process `syz.2.50'.
[   69.487655][ T5899] xt_hashlimit: size too large, truncated to 1048576
[   69.540167][ T5901] netlink: 'syz.2.55': attribute type 1 has an invalid length.
[   70.369534][ T5963] bond1 (unregistering): Released all slaves
[   70.580239][ T5995] netlink: 'syz.2.59': attribute type 1 has an invalid length.
[   70.677028][ T5999] netlink: 'syz.1.61': attribute type 1 has an invalid length.
[   70.867882][ T6016] syzkaller0: entered promiscuous mode
[   70.869924][ T6016] syzkaller0: entered allmulticast mode
[   70.991596][ T6022] netlink: 'syz.1.68': attribute type 1 has an invalid length.
[   70.994935][ T6022] netlink: 'syz.1.68': attribute type 4 has an invalid length.
[   71.066084][   T53] Bluetooth: hci0: command tx timeout
[   71.066666][ T5001] Bluetooth: hci1: command tx timeout
[   71.145182][ T5001] Bluetooth: hci2: command tx timeout
[   71.392181][ T6051] tipc: Started in network mode
[   71.396446][ T6051] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[   71.401842][ T6051] tipc: Enabled bearer <eth:macvtap0>, priority 6
[   71.412189][ T6051] __nla_validate_parse: 10 callbacks suppressed
[   71.412200][ T6051] netlink: 36 bytes leftover after parsing attributes in process `syz.2.79'.
[   71.589115][ T6075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.85'.
[   71.659615][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'.
[   71.887320][ T6090] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   71.890644][ T6090] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   72.046044][ T6102] netlink: 'syz.1.95': attribute type 1 has an invalid length.
[   72.083490][ T6105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.137945][   T32] IPVS: starting estimator thread 0...
[   72.139955][ T6108] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[   72.142418][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'.
[   72.146396][ T6108] bond1 (unregistering): Released all slaves
[   72.226894][ T6109] IPVS: using max 80 ests per chain, 192000 per kthread
[   72.243055][ T6114] C: renamed from veth1_to_team (while UP)
[   72.249528][ T6114] netlink: 'syz.1.98': attribute type 8 has an invalid length.
[   72.252036][ T6114] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   72.304678][ T6120] netlink: 64 bytes leftover after parsing attributes in process `syz.1.99'.
[   72.368368][ T6124] netlink: 'syz.1.101': attribute type 83 has an invalid length.
[   72.372682][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'.
[   72.376490][ T6124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.101'.
[   72.419638][ T6126] netlink: 'syz.1.102': attribute type 2 has an invalid length.
[   72.451584][ T6128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.103'.
[   72.457716][ T6128] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[   72.460348][ T6128] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   72.467930][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'.
[   72.517620][   T32] tipc: Node number set to 9480874
[   72.641305][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.106'.
[   72.854363][ T6142] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component
[   72.903940][ T6145] netlink: 'syz.1.110': attribute type 13 has an invalid length.
[   72.909192][ T6145] netlink: 'syz.1.110': attribute type 17 has an invalid length.
[   72.984229][ T6145] hsr_slave_0: left allmulticast mode
[   72.989602][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   73.060737][ T6145] vlan2: left promiscuous mode
[   73.062871][ T6145] geneve1: left promiscuous mode
[   73.068415][ T6145] vlan2: left allmulticast mode
[   73.070613][ T6145] geneve1: left allmulticast mode
[   73.095588][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.098617][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.103015][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.106813][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.595298][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   73.718534][ T6160] IPv6: NLM_F_CREATE should be specified when creating new route
[   73.971440][ T6182] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   73.974476][ T6182] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   74.007986][ T6184] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[   74.138044][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   74.162244][ T6187] 8021q: VLANs not supported on vcan0
[   74.996696][ T6226] gre2: entered promiscuous mode
[   75.010311][ T6228] netlink: 'syz.1.133': attribute type 1 has an invalid length.
[   75.066631][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   75.212495][ T6242] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   75.217250][ T6242] vlan4: entered promiscuous mode
[   75.284295][ T6255] netlink: 'syz.0.144': attribute type 1 has an invalid length.
[   75.364246][ T6264] bond1: (slave bridge1): making interface the new active one
[   75.372173][ T6264] bond1: (slave bridge1): Enslaving as an active interface with an up link
[   75.387723][ T6255] macvlan2: entered promiscuous mode
[   75.390023][ T6255] macvlan2: entered allmulticast mode
[   75.392939][ T6255] bond1: entered promiscuous mode
[   75.396767][ T6255] bridge1: entered promiscuous mode
[   75.400842][ T6255] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   75.404370][ T6255] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   75.411441][ T6255] bond1: left promiscuous mode
[   75.415246][ T6255] bridge1: left promiscuous mode
[   75.500168][ T6274] netlink: 'syz.0.146': attribute type 1 has an invalid length.
[   75.527244][ T6274] 8021q: adding VLAN 0 to HW filter on device bond2
[   75.558249][ T6274] vlan2: entered allmulticast mode
[   75.560052][ T6274] bond2: entered allmulticast mode
[   75.560472][ T6281] openvswitch: netlink: Flow actions attr not present in new flow.
[   75.573223][ T6274] bond2: (slave geneve2): making interface the new active one
[   75.575850][ T6274] geneve2: entered allmulticast mode
[   75.579397][ T6274] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   75.589406][ T6274] syz.0.146 (6274) used greatest stack depth: 19808 bytes left
[   75.792726][ T6308] netlink: 'syz.1.155': attribute type 1 has an invalid length.
[   75.816437][ T6308] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.852309][ T6316] IPVS: Unknown mcast interface: caif0
[   76.121776][ T6342] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   76.139204][ T6342] bond1: (slave lo): Enslaving as an active interface with an up link
[   76.143351][ T6342] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   76.351884][ T6348] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.427258][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[   77.066808][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   78.840609][ T6313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   78.846949][ T6347] validate_nla: 1 callbacks suppressed
[   78.846962][ T6347] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[   78.852387][ T6347] __nla_validate_parse: 19 callbacks suppressed
[   78.852395][ T6347] netlink: 96 bytes leftover after parsing attributes in process `syz.2.164'.
[   78.864046][ T6347] netlink: 'syz.2.164': attribute type 1 has an invalid length.
[   78.867905][ T6347] netlink: 634 bytes leftover after parsing attributes in process `syz.2.164'.
[   78.871241][ T6347] netlink: 1 bytes leftover after parsing attributes in process `syz.2.164'.
[   78.958986][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.166'.
[   78.986624][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   79.004218][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   79.012979][ T6359] netlink: 156 bytes leftover after parsing attributes in process `syz.2.166'.
[   79.016594][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   79.016953][ T6368] netlink: 'syz.0.169': attribute type 1 has an invalid length.
[   79.024168][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   79.029457][ T6359] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   79.084751][ T6368] 8021q: adding VLAN 0 to HW filter on device bond4
[   79.089273][ T6368] bond3: (slave bond4): making interface the new active one
[   79.092207][ T6368] bond3: (slave bond4): Enslaving as an active interface with an up link
[   79.092306][ T6375] netlink: 'syz.2.171': attribute type 1 has an invalid length.
[   79.108244][ T6368] netlink: 104 bytes leftover after parsing attributes in process `syz.0.169'.
[   79.180690][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'.
[   79.189728][ T6375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.171'.
[   79.209916][ T6375] bond2: (slave bridge2): making interface the new active one
[   79.212872][ T6375] bond2: (slave bridge2): Enslaving as an active interface with an up link
[   79.220903][ T6375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.171'.
[   79.226544][ T6375] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.238156][ T6375] netlink: 44 bytes leftover after parsing attributes in process `syz.2.171'.
[   79.278498][ T6388] nftables ruleset with unbound chain
[   79.283329][ T6388] ;: renamed from vlan1 (while UP)
[   79.290448][ T6388] syz.2.174: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   79.295749][ T6388] CPU: 1 UID: 0 PID: 6388 Comm: syz.2.174 Not tainted syzkaller #0 PREEMPT(full) 
[   79.295760][ T6388] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.295765][ T6388] Call Trace:
[   79.295769][ T6388]  <TASK>
[   79.295772][ T6388]  dump_stack_lvl+0xe8/0x150
[   79.295786][ T6388]  warn_alloc+0x249/0x340
[   79.295798][ T6388]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[   79.295812][ T6388]  ? __pfx_warn_alloc+0x10/0x10
[   79.295824][ T6388]  ? kasan_save_track+0x4f/0x80
[   79.295834][ T6388]  ? kasan_save_track+0x3e/0x80
[   79.295844][ T6388]  ? __kasan_kmalloc+0x93/0xb0
[   79.295853][ T6388]  ? __kmalloc_cache_noprof+0x31c/0x660
[   79.295863][ T6388]  ? xskq_create+0x56/0x170
[   79.295872][ T6388]  ? xsk_setsockopt+0x54c/0x990
[   79.295881][ T6388]  ? do_sock_setsockopt+0x17c/0x1b0
[   79.295891][ T6388]  ? __x64_sys_setsockopt+0x13d/0x1b0
[   79.295902][ T6388]  ? do_syscall_64+0x15f/0xf80
[   79.295911][ T6388]  __vmalloc_node_range_noprof+0x132/0x1750
[   79.295932][ T6388]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   79.295944][ T6388]  ? __kasan_kmalloc+0x93/0xb0
[   79.295956][ T6388]  vmalloc_user_noprof+0xad/0xe0
[   79.295966][ T6388]  ? xskq_create+0xbf/0x170
[   79.295975][ T6388]  xskq_create+0xbf/0x170
[   79.295986][ T6388]  xsk_init_queue+0x8a/0xe0
[   79.295996][ T6388]  xsk_setsockopt+0x54c/0x990
[   79.296007][ T6388]  ? __pfx_xsk_setsockopt+0x10/0x10
[   79.296016][ T6388]  ? __pfx_aa_sk_perm+0x10/0x10
[   79.296027][ T6388]  ? aa_sock_opt_perm+0xff/0x1a0
[   79.296038][ T6388]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   79.296048][ T6388]  ? __pfx_xsk_setsockopt+0x10/0x10
[   79.296057][ T6388]  do_sock_setsockopt+0x17c/0x1b0
[   79.296069][ T6388]  __x64_sys_setsockopt+0x13d/0x1b0
[   79.296079][ T6388]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.296088][ T6388]  do_syscall_64+0x15f/0xf80
[   79.296097][ T6388]  ? trace_irq_disable+0x3b/0x140
[   79.296152][ T6388]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.296162][ T6388] RIP: 0033:0x7f81b819ce59
[   79.296173][ T6388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   79.296182][ T6388] RSP: 002b:00007f81b9124028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   79.296194][ T6388] RAX: ffffffffffffffda RBX: 00007f81b8415fa0 RCX: 00007f81b819ce59
[   79.296200][ T6388] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[   79.296205][ T6388] RBP: 00007f81b8232d6f R08: 0000000000000004 R09: 0000000000000000
[   79.296210][ T6388] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[   79.296215][ T6388] R13: 00007f81b8416038 R14: 00007f81b8415fa0 R15: 00007ffe54f76698
[   79.296226][ T6388]  </TASK>
[   79.296230][ T6388] Mem-Info:
[   79.339782][ T6390] Cannot find add_set index 0 as target
[   79.339953][ T6388] active_anon:5692 inactive_anon:0 isolated_anon:0
[   79.339953][ T6388]  active_file:12289 inactive_file:38328 isolated_file:0
[   79.339953][ T6388]  unevictable:1807 dirty:1587 writeback:0
[   79.339953][ T6388]  slab_reclaimable:9926 slab_unreclaimable:154146
[   79.339953][ T6388]  mapped:18226 shmem:2356 pagetables:954
[   79.339953][ T6388]  sec_pagetables:0 bounce:0
[   79.339953][ T6388]  kernel_misc_reclaimable:0
[   79.339953][ T6388]  free:1069157 free_pcp:16281 free_cma:0
[   79.403365][ T6388] Node 0 active_anon:11760kB inactive_anon:0kB active_file:10432kB inactive_file:140684kB unevictable:3644kB isolated(anon):0kB isolated(file):0kB mapped:28092kB dirty:140kB writeback:0kB shmem:4780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4624kB pagetables:2332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   79.414264][ T6388] Node 1 active_anon:11428kB inactive_anon:0kB active_file:38724kB inactive_file:12628kB unevictable:3584kB isolated(anon):0kB isolated(file):0kB mapped:44812kB dirty:6208kB writeback:0kB shmem:4812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7404kB pagetables:1568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[   79.425265][ T6388] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   79.434162][ T6388] lowmem_reserve[]: 0 1587 2117 2117 2117
[   79.435964][ T6388] Node 0 DMA32 free:1441140kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:172kB inactive_anon:0kB active_file:5584kB inactive_file:4kB unevictable:72kB writepending:104kB zspages:0kB present:2080636kB managed:1625236kB mlocked:72kB bounce:0kB free_pcp:15396kB local_pcp:160kB free_cma:0kB
[   79.445650][ T6388] lowmem_reserve[]: 0 0 530 530 530
[   79.447375][ T6388] Node 0 Normal free:13224kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11268kB inactive_anon:0kB active_file:4848kB inactive_file:140680kB unevictable:3572kB writepending:36kB zspages:0kB present:1572868kB managed:543152kB mlocked:36kB bounce:0kB free_pcp:4100kB local_pcp:600kB free_cma:0kB
[   79.459620][ T6388] lowmem_reserve[]: 0 0 0 0 0
[   79.462218][ T6388] Node 1 Normal free:2805696kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11428kB inactive_anon:0kB active_file:38724kB inactive_file:12628kB unevictable:3584kB writepending:6208kB zspages:0kB present:3670012kB managed:3594684kB mlocked:48kB bounce:0kB free_pcp:46328kB local_pcp:14960kB free_cma:0kB
[   79.473064][ T6388] lowmem_reserve[]: 0 0 0 0 0
[   79.474924][ T6388] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   79.479333][ T6388] Node 0 DMA32: 1337*4kB (UM) 80*8kB (UME) 95*16kB (UME) 62*32kB (UME) 40*64kB (UME) 29*128kB (UM) 14*256kB (UME) 15*512kB (UME) 11*1024kB (M) 11*2048kB (UME) 337*4096kB (M) = 1441172kB
[   79.485347][ T6388] Node 0 Normal: 556*4kB (U) 357*8kB (UM) 445*16kB (UM) 8*32kB (UM) 3*64kB (M) 2*128kB (M) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 13160kB
[   79.490441][ T6388] Node 1 Normal: 706*4kB (UME) 549*8kB (UME) 121*16kB (UE) 165*32kB (UME) 19*64kB (UME) 5*128kB (UM) 4*256kB (UM) 2*512kB (UE) 0*1024kB 1*2048kB (M) 680*4096kB (UM) = 2805664kB
[   79.496164][ T6388] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   79.499255][ T6388] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   79.502316][ T6388] 52996 total pagecache pages
[   79.503899][ T6388] 0 pages in swap cache
[   79.505518][ T6388] Free swap  = 124996kB
[   79.507015][ T6388] Total swap = 124996kB
[   79.508539][ T6388] 1834877 pages RAM
[   79.509852][ T6388] 0 pages HighMem/MovableOnly
[   79.511494][ T6388] 390269 pages reserved
[   79.512943][ T6388] 0 pages cma reserved
[   80.003772][ T6410] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.006331][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.046641][ T6410] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.058859][ T6410] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.192731][ T5484] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.200188][ T5484] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.205955][ T5484] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.212050][ T5484] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.218312][ T5484] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.223535][ T5484] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.227943][ T5484] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   80.231437][ T5484] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.276441][ T6440] ;: renamed from vlan1
[   80.478995][ T6451] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.583325][ T6461] syzkaller0: entered promiscuous mode
[   80.587267][ T6461] syzkaller0: entered allmulticast mode
[   81.438003][ T6476] bridge3: entered promiscuous mode
[   81.439646][ T6476] bridge3: entered allmulticast mode
[   81.443660][ T6476] team0: Port device bridge3 added
[   81.473645][ T6479] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20002
[   81.595615][ T6490] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.601642][ T6490] 8021q: adding VLAN 0 to HW filter on device team0
[   81.622379][ T6490] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.649030][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.652781][ T6490] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.658943][ T6490] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   81.662997][ T6490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.671250][ T6490] veth1_vlan: left promiscuous mode
[   81.674745][ T6490] veth0_vlan: left promiscuous mode
[   81.677749][ T6490] veth0_vlan: entered promiscuous mode
[   81.681437][ T6490] veth1_vlan: entered promiscuous mode
[   81.686423][ T6490] veth1_macvtap: left promiscuous mode
[   81.690155][ T6490] veth1_macvtap: entered promiscuous mode
[   81.697044][ T6490] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.701437][ T6490] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.704666][ T6490] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.709128][ T6490] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.715630][ T6490] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.735055][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.737401][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.746333][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.748995][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.778557][ T5484] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   81.783578][ T5484] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.790346][ T5484] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   81.799148][ T5484] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.817491][ T5484] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   81.823061][ T5484] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.831955][ T5484] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   81.838669][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   81.850858][ T5484] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.880752][ T6516] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   81.906442][ T6523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.961023][ T6523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   81.966234][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   81.996809][ T6536] netlink: 'syz.2.204': attribute type 1 has an invalid length.
[   82.040514][ T6536] bond3: (slave veth3): Enslaving as an active interface with a down link
[   82.046162][ T6543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.063831][ T6536] bond3: (slave veth5): Enslaving as an active interface with a down link
[   82.074005][ T6536] 8021q: adding VLAN 0 to HW filter on device bond3
[   82.131982][ T6558] ;: renamed from vlan1 (while UP)
[   82.176769][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   82.180597][    C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected!
[   82.319009][ T6574] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component
[   82.614954][ T6579] syzkaller0: entered promiscuous mode
[   82.616801][ T6579] syzkaller0: entered allmulticast mode
[   83.471617][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   83.477606][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   83.528228][ T6593] openvswitch: netlink: Tunnel attr 78 out of range max 16
[   83.756844][ T6616] syzkaller0: entered promiscuous mode
[   83.758612][ T6616] syzkaller0: entered allmulticast mode
[   83.859209][ T6620] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.873942][ T6622] __nla_validate_parse: 10 callbacks suppressed
[   83.873950][ T6622] netlink: 80 bytes leftover after parsing attributes in process `syz.1.230'.
[   83.880856][ T6622] netlink: 'syz.1.230': attribute type 1 has an invalid length.
[   83.931445][ T6622] bond2: entered promiscuous mode
[   83.933203][ T6622] bond2: entered allmulticast mode
[   83.935510][ T6622] 8021q: adding VLAN 0 to HW filter on device bond2
[   84.036667][ T6632] 8021q: VLANs not supported on vxcan0
[   84.065704][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   84.092706][ T6638] netlink: 'syz.1.235': attribute type 8 has an invalid length.
[   84.096823][ T6638] netlink: 'syz.1.235': attribute type 1 has an invalid length.
[   84.098873][ T6641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.237'.
[   84.110517][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.2.236'.
[   84.113501][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.2.236'.
[   84.170393][ T6644] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   84.343526][ T6658] netlink: 36 bytes leftover after parsing attributes in process `syz.2.242'.
[   84.360961][ T6656] netlink: 'syz.1.240': attribute type 4 has an invalid length.
[   84.406673][ T6660] aD: renamed from lo
[   84.538415][ T6676] Bluetooth: MGMT ver 1.23
[   84.627005][ T6682] netlink: 40 bytes leftover after parsing attributes in process `syz.2.249'.
[   84.703906][ T6684] bridge4: entered promiscuous mode
[   84.706603][ T6684] bridge4: entered allmulticast mode
[   84.711025][ T6684] team0: Port device bridge4 added
[   84.753617][ T6684] bridge5: entered promiscuous mode
[   84.756205][ T6684] bridge5: entered allmulticast mode
[   84.759762][ T6684] team0: Port device bridge5 added
[   84.763410][ T6684] bridge0: port 1(team0) entered blocking state
[   84.766267][ T6684] bridge0: port 1(team0) entered disabled state
[   84.769039][ T6684] team0: entered allmulticast mode
[   84.771013][ T6684] team_slave_0: entered allmulticast mode
[   84.773247][ T6684] team_slave_1: entered allmulticast mode
[   84.778690][ T6684] team0: entered promiscuous mode
[   84.780557][ T6684] team_slave_0: entered promiscuous mode
[   84.782490][ T6684] team_slave_1: entered promiscuous mode
[   84.786786][ T6684] bridge0: port 1(team0) entered blocking state
[   84.789494][ T6684] bridge0: port 1(team0) entered forwarding state
[   85.252517][ T6695] netlink: 'syz.1.253': attribute type 21 has an invalid length.
[   85.256555][ T6695] netlink: 'syz.1.253': attribute type 1 has an invalid length.
[   85.260365][ T6695] netlink: 132 bytes leftover after parsing attributes in process `syz.1.253'.
[   85.380134][ T6707] netlink: 'syz.0.257': attribute type 13 has an invalid length.
[   85.394583][ T6709] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.534406][ T6716] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[   85.649691][ T6722] netlink: 'syz.0.262': attribute type 13 has an invalid length.
[   85.652761][ T6722] netlink: 'syz.0.262': attribute type 17 has an invalid length.
[   85.707813][ T6722] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[   85.731871][ T6722] gre2: left promiscuous mode
[   85.734921][ T6722] 8021q: adding VLAN 0 to HW filter on device bond1
[   85.739171][ T6722] vlan2: left allmulticast mode
[   85.740794][ T6722] bond2: left allmulticast mode
[   85.742286][ T6722] geneve2: left allmulticast mode
[   85.749734][ T6722] 8021q: adding VLAN 0 to HW filter on device bond3
[   85.809440][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.262'.
[   85.814468][ T6728] bond1: (slave lo): Releasing backup interface
[   85.821186][ T6728] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[   85.829371][ T6728] team0: left allmulticast mode
[   85.830919][ T6728] team_slave_0: left allmulticast mode
[   85.832708][ T6728] team_slave_1: left allmulticast mode
[   85.836789][ T6728] team0: left promiscuous mode
[   85.838479][ T6728] team_slave_0: left promiscuous mode
[   85.840372][ T6728] team_slave_1: left promiscuous mode
[   85.843918][ T6728] bridge0: port 1(team0) entered disabled state
[   85.851317][ T6728] bridge_slave_1: left allmulticast mode
[   85.853506][ T6728] bridge_slave_1: left promiscuous mode
[   85.856867][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.865954][ T6728] bond0: (slave bond_slave_0): Releasing backup interface
[   85.872437][ T6728] bond0: (slave bond_slave_1): Releasing backup interface
[   85.883979][ T6728] team0: Port device team_slave_0 removed
[   85.892473][ T6728] team0: Port device team_slave_1 removed
[   85.896748][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.899604][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.903441][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.909582][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.913636][ T6728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   86.421387][ T6771] syzkaller0: entered promiscuous mode
[   86.423269][ T6771] syzkaller0: entered allmulticast mode
[   86.441580][ T6771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.267'.
[   86.645030][ T6791] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   86.701135][ T6791] syzkaller0: entered promiscuous mode
[   86.702956][ T6791] syzkaller0: entered allmulticast mode
[   87.145570][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   87.651755][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'.
[   87.744028][ T6815] bridge0: entered allmulticast mode
[   88.174206][ T6841] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component
[   88.326177][ T6858] netlink: 'syz.2.289': attribute type 13 has an invalid length.
[   88.406318][ T6858] syzkaller0: entered promiscuous mode
[   88.408980][ T6858] syzkaller0: entered allmulticast mode
[   88.765560][ T6865] block nbd0: server does not support multiple connections per device.
[   88.773129][ T6865] block nbd0: shutting down sockets
[   88.778994][ T6879] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[   88.999545][ T6893] __nla_validate_parse: 5 callbacks suppressed
[   88.999560][ T6893] netlink: 14 bytes leftover after parsing attributes in process `syz.2.298'.
[   89.289277][ T6902] validate_nla: 2 callbacks suppressed
[   89.289291][ T6902] netlink: 'syz.0.301': attribute type 1 has an invalid length.
[   89.325400][ T6902] bond5: entered promiscuous mode
[   89.327962][ T6902] 8021q: adding VLAN 0 to HW filter on device bond5
[   89.376065][ T6902] bond5: (slave bridge3): making interface the new active one
[   89.380790][ T6902] bridge3: entered promiscuous mode
[   89.391826][ T6902] bond5: (slave bridge3): Enslaving as an active interface with an up link
[   89.510574][ T6899] syzkaller1: entered promiscuous mode
[   89.514318][ T6899] syzkaller1: entered allmulticast mode
[   89.561357][ T6918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.652216][ T6920] syz_tun: entered allmulticast mode
[   89.727960][ T6924] netlink: 'syz.1.309': attribute type 1 has an invalid length.
[   89.763515][ T6924] 8021q: adding VLAN 0 to HW filter on device bond3
[   89.787783][ T6924] bond3: (slave veth3): Enslaving as an active interface with a down link
[   89.802790][ T6924] netlink: 14 bytes leftover after parsing attributes in process `syz.1.309'.
[   89.959532][ T6937] netlink: 'syz.2.314': attribute type 1 has an invalid length.
[   89.982954][ T6937] 8021q: adding VLAN 0 to HW filter on device bond5
[   89.996531][ T6940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.313'.
[   90.002417][ T6937] vlan1: entered promiscuous mode
[   90.004621][ T6937] bond5: entered promiscuous mode
[   90.007293][ T6937] vlan1: entered allmulticast mode
[   90.009522][ T6937] bond5: entered allmulticast mode
[   90.020544][ T6934] netlink: 'syz.1.313': attribute type 10 has an invalid length.
[   90.032755][ T6934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.313'.
[   90.190004][ T6949] netlink: 40 bytes leftover after parsing attributes in process `syz.2.317'.
[   90.292588][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'.
[   90.300229][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'.
[   90.444255][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'.
[   90.448379][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'.
[   90.452241][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'.
[   90.931797][ T6977] tipc: Started in network mode
[   90.933855][ T6977] tipc: Node identity d2f611f50461, cluster identity 4711
[   90.938983][ T6977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.964000][ T6977] syzkaller0: entered promiscuous mode
[   90.966183][ T6977] syzkaller0: entered allmulticast mode
[   90.968591][ T6977] tipc: Resetting bearer <eth:syzkaller0>
[   90.978191][ T6974] tipc: Resetting bearer <eth:syzkaller0>
[   91.457470][ T6993] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[   91.927029][ T6974] tipc: Disabling bearer <eth:syzkaller0>
[   91.941949][ T6992] : entered promiscuous mode
[   92.042567][ T7004] pim6reg: entered allmulticast mode
[   92.048006][ T7008] openvswitch: : Dropping previously announced user features
[   92.079173][ T7010] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004
[   92.121692][ T7021] netlink: 'syz.0.339': attribute type 3 has an invalid length.
[   92.121735][ T7022] netlink: 'syz.0.339': attribute type 3 has an invalid length.
[   92.456547][ T7045] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   92.460466][ T7045] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   92.712912][ T7060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.770552][ T7061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.856534][ T7003] pim6reg: left allmulticast mode
[   94.347755][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   95.713941][ T7060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   95.771196][ T7096] __nla_validate_parse: 18 callbacks suppressed
[   95.771206][ T7096] netlink: 104 bytes leftover after parsing attributes in process `syz.0.364'.
[   95.819893][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'.
[   95.844043][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'.
[   95.846968][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'.
[   95.864726][ T7110] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component
[   95.871112][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'.
[   95.873878][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'.
[   95.876728][ T7110] netlink: 'syz.2.368': attribute type 18 has an invalid length.
[   96.008395][ T7124] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   96.029479][ T7124] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   96.097630][ T7126] vlan1: entered allmulticast mode
[   96.099448][ T7126] bond0: entered allmulticast mode
[   96.101183][ T7126] bond_slave_0: entered allmulticast mode
[   96.103180][ T7126] bond_slave_1: entered allmulticast mode
[   96.247733][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'.
[   96.603318][ T7176] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.607342][ T7176] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.719263][ T7176] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.723984][ T7176] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.749221][ T7185] netlink: 48 bytes leftover after parsing attributes in process `syz.2.386'.
[   96.791890][ T7176] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.801807][ T7176] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.880761][ T7176] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   96.884741][ T7176] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.137760][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   97.141491][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.154438][   T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   97.158731][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.168785][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   97.171698][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.181959][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.185501][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.217176][ T7202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.390'.
[   97.261832][ T7203] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   97.293805][ T7205] syzkaller0: entered promiscuous mode
[   97.295763][ T7205] syzkaller0: entered allmulticast mode
[   98.450356][ T7230] netlink: 96 bytes leftover after parsing attributes in process `syz.0.397'.
[   98.545627][ T7238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.548303][ T7238] syzkaller0: entered promiscuous mode
[   98.550680][ T7238] syzkaller0: entered allmulticast mode
[   98.570591][ T7238] tipc: Resetting bearer <eth:syzkaller0>
[   98.581887][ T7237] tipc: Resetting bearer <eth:syzkaller0>
[   98.610856][ T7237] tipc: Disabling bearer <eth:syzkaller0>
[   98.742727][ T7247] netlink: 'syz.0.403': attribute type 10 has an invalid length.
[   98.747094][ T7247] syz_tun: entered promiscuous mode
[   98.769070][ T7247] syz_tun: entered allmulticast mode
[   99.270893][ T7288] IPVS: length: 23 != 8
[   99.573405][ T7293] netlink: 'syz.0.414': attribute type 1 has an invalid length.
[   99.580949][ T7293] netlink: 'syz.0.414': attribute type 2 has an invalid length.
[  100.018700][ T7326] ipt_REJECT: ECHOREPLY no longer supported.
[  100.179472][ T7332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.262415][ T7332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.331272][ T7332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.415649][ T7332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.492026][ T5667] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.502255][ T5667] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.514294][ T5667] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.522531][ T5667] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.594521][ T7345] nbd: must specify at least one socket
[  100.602287][ T7347] lo: Caught tx_queue_len zero misconfig
[  100.611725][ T7347] openvswitch: netlink: Missing key (keys=40, expected=80)
[  100.737942][ T7356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.937422][ T7361] netlink: 'syz.1.434': attribute type 21 has an invalid length.
[  100.939961][ T7361] netlink: 'syz.1.434': attribute type 21 has an invalid length.
[  100.949432][ T7361] __nla_validate_parse: 6 callbacks suppressed
[  100.949440][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'.
[  100.954203][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.434'.
[  100.957896][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'.
[  100.960628][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.434'.
[  101.131568][ T7372] netlink: 88 bytes leftover after parsing attributes in process `syz.1.436'.
[  101.134448][ T7372] nbd: must specify a size in bytes for the device
[  101.200987][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'.
[  101.358875][ T7395] netlink: 68 bytes leftover after parsing attributes in process `syz.0.442'.
[  101.361774][ T7396] netlink: 68 bytes leftover after parsing attributes in process `syz.0.442'.
[  101.430095][ T7398] netlink: 'syz.0.443': attribute type 1 has an invalid length.
[  101.432458][ T7398] netlink: 256 bytes leftover after parsing attributes in process `syz.0.443'.
[  101.458997][ T7400] openvswitch: : Dropping previously announced user features
[  101.620680][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'.
[  101.720995][ T7423] openvswitch: : Dropping previously announced user features
[  101.761261][ T7426] netlink: 'syz.0.450': attribute type 1 has an invalid length.
[  101.815406][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  101.820616][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  101.834256][ T7428] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  101.869398][ T7431] openvswitch: netlink: IPv4 tun info is not correct
[  102.094239][ T7436] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.098481][ T7436] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.123732][ T7436] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.132150][ T7436] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.178977][ T7444] openvswitch: : Dropping previously announced user features
[  102.191869][ T7436] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.199364][ T7436] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.248950][ T7436] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.252970][ T7436] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.344114][ T6436] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.354997][ T6436] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.377857][ T6436] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.380647][ T6436] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.399994][ T6436] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.402759][ T6436] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.431000][ T5667] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.435941][ T5667] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.491300][ T7451] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.494407][ T7451] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.551807][ T7454] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  102.558259][ T7454] netlink: 'syz.0.462': attribute type 2 has an invalid length.
[  102.558916][ T7451] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.560729][ T7454] netlink: 'syz.0.462': attribute type 1 has an invalid length.
[  102.567059][ T7451] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.622866][ T7451] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.628943][ T7451] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.684117][ T7451] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.705128][ T7451] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.140662][ T7479] syzkaller1: entered promiscuous mode
[  103.142575][ T7479] syzkaller1: entered allmulticast mode
[  103.294171][ T7483] bond6 (unregistering): Released all slaves
[  103.377525][ T7482] netlink: 'syz.2.472': attribute type 1 has an invalid length.
[  103.576802][ T7506] hsr_slave_0: left promiscuous mode
[  103.579102][ T7506] hsr_slave_1: left promiscuous mode
[  103.735794][ T7520] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y
[  103.735794][ T7520] 3UH5rBn
[  103.919251][ T7523] netlink: 'syz.2.483': attribute type 1 has an invalid length.
[  104.021363][ T7529] veth1_to_bond: Caught tx_queue_len zero misconfig
[  104.047345][ T7529] syzkaller0: entered promiscuous mode
[  104.049186][ T7529] syzkaller0: entered allmulticast mode
[  104.055150][ T7529] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  104.967720][ T7532] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.980288][ T7528] tipc: Resetting bearer <eth:syzkaller0>
[  104.994527][ T7528] tipc: Disabling bearer <eth:syzkaller0>
[  105.005078][ T5667] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  105.007888][ T5667] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.015495][ T5667] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.018107][ T5667] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.024166][ T5667] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.028819][ T5667] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.049136][ T5667] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.051644][ T5667] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.256004][ T7559] dvmrp0: entered allmulticast mode
[  105.363424][ T7565] tipc: Started in network mode
[  105.366802][ T7565] tipc: Node identity b6039b7cfb51, cluster identity 4711
[  105.369444][ T7565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.379153][ T7565] syzkaller0: entered promiscuous mode
[  105.380854][ T7565] syzkaller0: entered allmulticast mode
[  105.420078][ T7565] tipc: Resetting bearer <eth:syzkaller0>
[  105.440093][ T7564] tipc: Resetting bearer <eth:syzkaller0>
[  105.453491][ T7564] tipc: Disabling bearer <eth:syzkaller0>
[  105.960578][ T7571] netlink: 'syz.0.497': attribute type 4 has an invalid length.
[  106.008886][ T7573] netlink: 'syz.0.498': attribute type 1 has an invalid length.
[  106.122823][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x3
[  106.188309][ T7584] __nla_validate_parse: 11 callbacks suppressed
[  106.188321][ T7584] netlink: 5 bytes leftover after parsing attributes in process `syz.2.501'.
[  106.197204][ T7584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  106.261984][   T13] tipc: Subscription rejected, illegal request
[  106.367609][ T7593] syzkaller0: entered promiscuous mode
[  106.369889][ T7593] syzkaller0: entered allmulticast mode
[  106.377418][ T7593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.504'.
[  106.478729][ T7596] netlink: 'syz.0.505': attribute type 10 has an invalid length.
[  106.498864][ T7596] team0: Failed to send options change via netlink (err -105)
[  106.501380][ T7596] team0: Port device dummy0 added
[  106.649729][ T7609] netlink: 9 bytes leftover after parsing attributes in process `syz.0.508'.
[  106.653415][ T7609] 0: renamed from hsr0 (while UP)
[  106.659584][ T7609] 0: entered allmulticast mode
[  106.661174][ T7609] hsr_slave_0: entered allmulticast mode
[  106.662899][ T7609] hsr_slave_1: entered allmulticast mode
[  106.665819][ T7609] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  106.677595][ T7609] bridge5: entered promiscuous mode
[  106.679376][ T7609] bridge5: entered allmulticast mode
[  106.862391][ T7615] netlink: 830 bytes leftover after parsing attributes in process `syz.0.510'.
[  106.999826][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'.
[  107.002626][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.511'.
[  107.045282][ T7625] netlink: 'syz.2.512': attribute type 6 has an invalid length.
[  107.050043][ T7625] netlink: 232 bytes leftover after parsing attributes in process `syz.2.512'.
[  107.064194][ T7625] netlink: 5252 bytes leftover after parsing attributes in process `syz.2.512'.
[  107.108246][ T7635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.514'.
[  107.520997][ T7665] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  107.604759][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'.
[  107.890218][ T7692] netlink: 'syz.0.523': attribute type 30 has an invalid length.
[  107.909912][ T5667] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.913869][ T7692] netlink: 'syz.0.523': attribute type 30 has an invalid length.
[  107.914775][ T5667] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.922369][ T5667] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.943872][ T5667] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.965257][ T7694] 8021q: VLANs not supported on wg2
[  108.086832][ T7700] xt_TPROXY: Can be used only with -p tcp or -p udp
[  108.309462][ T7710] tunl0: Caught tx_queue_len zero misconfig
[  108.446776][ T7718] netlink: 'syz.2.532': attribute type 3 has an invalid length.
[  108.633218][ T7732] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.658294][ T7732] syzkaller0: entered promiscuous mode
[  108.660238][ T7732] syzkaller0: entered allmulticast mode
[  108.663674][ T7732] tipc: Resetting bearer <eth:syzkaller0>
[  108.674093][ T7731] tipc: Resetting bearer <eth:syzkaller0>
[  109.656805][ T7731] tipc: Disabling bearer <eth:syzkaller0>
[  109.705216][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  109.783117][ T7740] netlink: 'syz.1.539': attribute type 1 has an invalid length.
[  109.783125][ T7741] netlink: 'syz.1.539': attribute type 1 has an invalid length.
[  109.783146][ T7741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.785588][ T7740] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.900914][ T7746] netem: change failed
[  109.988585][ T7760] syzkaller0: entered promiscuous mode
[  109.990733][ T7760] syzkaller0: entered allmulticast mode
[  110.060333][ T7763] pim6reg: entered allmulticast mode
[  110.089175][ T7763] bridge0: port 3(vlan5) entered blocking state
[  110.093419][ T7763] bridge0: port 3(vlan5) entered disabled state
[  110.096156][ T7763] vlan5: entered allmulticast mode
[  110.097806][ T7763] geneve0: entered allmulticast mode
[  110.100412][ T7763] vlan5: entered promiscuous mode
[  110.102041][ T7763] geneve0: entered promiscuous mode
[  110.188883][ T7772] IPv6: sit1: Disabled Multicast RS
[  112.954308][ T7761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  113.035509][ T7799] macsec0: entered promiscuous mode
[  113.052930][ T7803] __nla_validate_parse: 10 callbacks suppressed
[  113.052942][ T7803] netlink: 156 bytes leftover after parsing attributes in process `syz.1.556'.
[  113.065824][ T7792] macsec0: left promiscuous mode
[  113.133942][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'.
[  113.148754][ T5001] Bluetooth: hci2: link tx timeout
[  113.150612][ T5001] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  113.158087][   T53] Bluetooth: hci2: link tx timeout
[  113.161271][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  113.196615][   T53] Bluetooth: hci2: link tx timeout
[  113.198592][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  113.229356][   T53] Bluetooth: hci2: link tx timeout
[  113.231361][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  113.336888][   T53] Bluetooth: hci2: link tx timeout
[  113.339097][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  113.406512][ T7824] tipc: Resetting bearer <eth:macvtap0>
[  113.429891][ T7824] bridge3: left allmulticast mode
[  113.434121][ T7824] bridge4: left allmulticast mode
[  113.437247][ T7824] bridge5: left allmulticast mode
[  113.442799][ T7824] vlan1: left promiscuous mode
[  113.444440][ T7824] bond5: left promiscuous mode
[  113.446194][ T7824] vlan1: left allmulticast mode
[  113.448177][ T7824] bond5: left allmulticast mode
[  113.457787][ T5484] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.465123][ T5484] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.468624][ T5484] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.472125][ T5484] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.476484][ T5484] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  113.479901][ T5484] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.487644][   T53] Bluetooth: hci2: link tx timeout
[  113.489473][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  113.492960][   T53] Bluetooth: hci2: link tx timeout
[  113.494618][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  113.553297][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'.
[  113.572956][ T7836] netlink: 132 bytes leftover after parsing attributes in process `syz.2.562'.
[  113.635903][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'.
[  113.713910][ T7841] syzkaller0: entered promiscuous mode
[  113.715976][ T7841] syzkaller0: entered allmulticast mode
[  113.996609][ T7847] netlink: 88 bytes leftover after parsing attributes in process `syz.0.566'.
[  114.000363][ T7847] netlink: 5 bytes leftover after parsing attributes in process `syz.0.566'.
[  114.003857][ T7847] netlink: 5 bytes leftover after parsing attributes in process `syz.0.566'.
[  114.061621][ T7849] netlink: 104 bytes leftover after parsing attributes in process `syz.0.567'.
[  114.066047][ T7849] netlink: 'syz.0.567': attribute type 4 has an invalid length.
[  114.070161][ T7849] netlink: 'syz.0.567': attribute type 4 has an invalid length.
[  114.508537][   T53] Bluetooth: hci2: link tx timeout
[  114.510170][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  114.512560][   T53] Bluetooth: hci2: link tx timeout
[  114.514242][   T53] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  115.224952][   T53] Bluetooth: hci2: command 0x0406 tx timeout
[  115.307824][   T53] Bluetooth: hci2: link tx timeout
[  117.227142][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'.
[  117.325352][ T7892] tipc: Can't bind to reserved service type 2
[  117.779726][ T7928] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.782501][ T7928] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.734536][ T7986] bridge2: the hash_elasticity option has been deprecated and is always 16
[  118.737493][ T7986] bridge2: entered allmulticast mode
[  118.790059][ T7996] syzkaller0: entered promiscuous mode
[  118.792109][ T7996] syzkaller0: entered allmulticast mode
[  118.834941][ T7999] openvswitch: : Dropping previously announced user features
[  118.963336][ T8010] __nla_validate_parse: 7 callbacks suppressed
[  118.963353][ T8010] netlink: 32 bytes leftover after parsing attributes in process `syz.1.614'.
[  118.976584][ T8012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.614'.
[  118.980303][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'.
[  119.029565][ T8011] gretap1: entered allmulticast mode
[  119.070095][ T8022] openvswitch: : Dropping previously announced user features
[  119.176187][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'.
[  119.180459][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'.
[  119.187394][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'.
[  119.390485][ T8040] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  119.394317][ T8040] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  119.633905][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'.
[  119.693231][ T8048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.624'.
[  119.791298][ T8054] openvswitch: : Dropping previously announced user features
[  119.849652][ T8056] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.853126][ T8056] syzkaller0: entered promiscuous mode
[  119.856118][ T8056] syzkaller0: entered allmulticast mode
[  119.860230][ T8056] syzkaller0: mtu greater than device maximum
[  119.866068][ T8055] tipc: Resetting bearer <eth:syzkaller0>
[  119.883098][ T8055] tipc: Disabling bearer <eth:syzkaller0>
[  119.956733][ T8059] netlink: 'syz.2.627': attribute type 83 has an invalid length.
[  120.002899][ T8062] netlink: 64 bytes leftover after parsing attributes in process `syz.2.628'.
[  120.006924][ T8062] netlink: 64 bytes leftover after parsing attributes in process `syz.2.628'.
[  120.296226][ T8068] netlink: 'syz.1.629': attribute type 1 has an invalid length.
[  120.307584][ T8068] gtp0: entered promiscuous mode
[  120.309910][ T8068] gtp0: entered allmulticast mode
[  120.314201][ T8068] team0: Device gtp0 is of different type
[  120.426237][ T8072] xt_hashlimit: size too large, truncated to 1048576
[  120.681558][ T8090] netlink: 'syz.1.635': attribute type 16 has an invalid length.
[  120.901668][ T8101] team0: Port device dummy0 removed
[  120.911411][ T8101] bridge_slave_0: left allmulticast mode
[  120.913906][ T8101] bridge_slave_0: left promiscuous mode
[  120.917304][ T8101] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.924068][ T8101] bridge_slave_1: left allmulticast mode
[  120.926912][ T8101] bridge_slave_1: left promiscuous mode
[  120.929530][ T8101] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.937563][ T8101] vlan5: left promiscuous mode
[  120.939862][ T8101] geneve0: left promiscuous mode
[  120.949727][ T8101] bond0: (slave bond_slave_0): Releasing backup interface
[  120.953620][ T8101] bond_slave_0: left allmulticast mode
[  120.963867][ T8101] bond0: (slave bond_slave_1): Releasing backup interface
[  120.971657][ T8101] bond_slave_1: left allmulticast mode
[  120.987738][ T8101] team0: Port device team_slave_0 removed
[  121.003115][ T8101] team0: Port device team_slave_1 removed
[  121.011933][ T8101] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.018062][ T8101] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.023694][ T8101] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.027731][ T8101] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.033233][ T8101] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  121.141492][ T8107] 8021q: adding VLAN 0 to HW filter on device team0
[  121.164208][ T8107] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.297839][ T8107] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  121.567214][ T8135] x_tables: duplicate underflow at hook 1
[  121.667725][ T8138] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  121.867807][ T8155] netlink: 'syz.2.646': attribute type 1 has an invalid length.
[  121.920537][ T8155] 8021q: adding VLAN 0 to HW filter on device bond7
[  121.928088][ T8155] bond6: (slave bond7): making interface the new active one
[  121.931688][ T8155] bond6: (slave bond7): Enslaving as an active interface with an up link
[  121.965826][ T8163] xt_hashlimit: size too large, truncated to 1048576
[  121.968338][ T8165] netlink: 'syz.1.648': attribute type 1 has an invalid length.
[  121.972160][ T8165] netlink: 'syz.1.648': attribute type 1 has an invalid length.
[  121.979390][ T8165] netlink: 'syz.1.648': attribute type 1 has an invalid length.
[  121.983995][ T8165] netlink: 'syz.1.648': attribute type 1 has an invalid length.
[  121.988594][ T8165] netlink: 'syz.1.648': attribute type 1 has an invalid length.
[  121.991510][ T8165] netlink: 'syz.1.648': attribute type 1 has an invalid length.
[  122.185120][ T8201] bridge7: the hash_elasticity option has been deprecated and is always 16
[  122.187940][ T8201] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  122.407295][ T8223] sch_tbf: peakrate 4 is lower than or equals to rate 8 !
[  122.442770][ T8227] bridge0: entered allmulticast mode
[  122.553515][ T8232] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  122.999751][ T8256] syzkaller0: entered promiscuous mode
[  123.002298][ T8256] syzkaller0: entered allmulticast mode
[  123.768998][ T8298] Bluetooth: MGMT ver 1.23
[  123.801789][ T8299] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  123.805830][ T8299] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  124.035075][ T8301] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  124.038513][ T8301] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  124.957427][ T8326] __nla_validate_parse: 58 callbacks suppressed
[  124.957444][ T8326] netlink: 104 bytes leftover after parsing attributes in process `syz.0.691'.
[  124.993558][ T8328] netlink: 72 bytes leftover after parsing attributes in process `syz.0.692'.
[  125.009569][ T8328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'.
[  125.024705][ T8328] validate_nla: 27 callbacks suppressed
[  125.024719][ T8328] netlink: 'syz.0.692': attribute type 1 has an invalid length.
[  125.237164][ T8344] netlink: 28 bytes leftover after parsing attributes in process `syz.0.697'.
[  125.244006][ T8344] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  125.368612][ T8353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.699'.
[  125.372357][ T8353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.699'.
[  125.378732][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'.
[  125.383886][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'.
[  125.400624][ T8352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'.
[  125.440778][ T8351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.700'.
[  126.570612][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.575442][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.660159][ T8418] netlink: 'syz.1.719': attribute type 30 has an invalid length.
[  126.849717][ T8436] netlink: 'syz.0.723': attribute type 4 has an invalid length.
[  127.123916][ T8455] bond6 (unregistering): Released all slaves
[  128.778869][ T8510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.969079][ T8518] netlink: 'syz.0.749': attribute type 1 has an invalid length.
[  128.994668][ T8518] 8021q: adding VLAN 0 to HW filter on device bond6
[  129.010398][ T8518] 8021q: adding VLAN 0 to HW filter on device batadv1
[  129.015330][ T8518] bond6: (slave batadv1): making interface the new active one
[  129.019055][ T8518] bond6: (slave batadv1): Enslaving as an active interface with an up link
[  129.761444][ T8545] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  130.120352][ T8569] openvswitch: : Dropping previously announced user features
[  130.202685][ T8575] __nla_validate_parse: 16 callbacks suppressed
[  130.202697][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'.
[  130.219004][ T8575] 8021q: adding VLAN 0 to HW filter on device bond7
[  130.233234][ T8575] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  130.362641][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.771'.
[  130.398346][ T8585] netlink: 'syz.0.772': attribute type 58 has an invalid length.
[  130.621114][ T8592] netlink: 'syz.0.774': attribute type 21 has an invalid length.
[  130.623764][ T8592] netlink: 'syz.0.774': attribute type 22 has an invalid length.
[  130.626898][ T8592] netlink: 'syz.0.774': attribute type 23 has an invalid length.
[  130.629397][ T8592] netlink: 'syz.0.774': attribute type 25 has an invalid length.
[  130.631875][ T8592] netlink: 'syz.0.774': attribute type 26 has an invalid length.
[  130.634280][ T8592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.774'.
[  131.053099][ T8630] bond8: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  131.058785][ T8630] bond8 (unregistering): Released all slaves
[  131.189388][ T8636] openvswitch: : Dropping previously announced user features
[  131.291737][ T8641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.787'.
[  131.303269][ T8641] netlink: 164 bytes leftover after parsing attributes in process `syz.2.787'.
[  131.360743][ T8647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.789'.
[  131.363962][ T8647] netlink: 32 bytes leftover after parsing attributes in process `syz.2.789'.
[  131.369618][ T8647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.789'.
[  131.372721][ T8647] netlink: 32 bytes leftover after parsing attributes in process `syz.2.789'.
[  131.614990][ T8659] netlink: 64 bytes leftover after parsing attributes in process `syz.1.792'.
[  131.719721][ T8667] gre3: entered allmulticast mode
[  131.739261][ T8669] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.752630][ T8669] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.837219][ T8669] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.843512][ T8669] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.901115][ T8669] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.904582][ T8669] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.953784][ T8669] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  131.957338][ T8669] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.961289][ T8680] tipc: Failed to remove unknown binding: 66,1,1/0:2204566646/2204566648
[  131.967522][ T8680] tipc: Failed to remove unknown binding: 66,1,1/0:2204566646/2204566648
[  131.971491][ T8680] tipc: Failed to remove unknown binding: 66,1,1/0:2204566646/2204566648
[  131.975538][ T8680] netlink: 'syz.0.800': attribute type 1 has an invalid length.
[  132.018171][ T5667] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  132.022878][ T5667] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.041758][ T5667] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  132.044561][ T5667] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.062726][ T5667] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  132.065802][ T5667] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.074653][ T5667] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  132.084913][ T5667] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.629328][ T8706] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.632350][ T8706] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.635496][ T8706] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.638315][ T8706] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.672651][ T8706] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  132.699594][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  132.883440][ T8716] netlink: 'syz.2.810': attribute type 1 has an invalid length.
[  132.973699][ T8716] 8021q: adding VLAN 0 to HW filter on device bond8
[  133.168443][ T8728] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.408735][ T8740] netlink: 'syz.0.817': attribute type 6 has an invalid length.
[  133.412050][ T8740] netlink: del zone limit has 8 unknown bytes
[  133.503747][ T8749] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  133.608031][ T8756] netlink: 'syz.2.822': attribute type 2 has an invalid length.
[  133.626557][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  133.626837][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  133.635849][    C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected!
[  133.812272][ T8769] 8021q: adding VLAN 0 to HW filter on device bond8
[  133.833883][ T8769] bond8: (slave ip6gretap1): making interface the new active one
[  133.838985][ T8769] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link
[  133.892126][ T8772] xt_TCPMSS: Only works on TCP SYN packets
[  134.041174][ T8786] syzkaller1: entered promiscuous mode
[  134.046992][ T8786] syzkaller1: entered allmulticast mode
[  134.350962][ T8803] gtp0: entered allmulticast mode
[  134.428771][ T8807] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  134.431695][ T8807] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  134.443551][ T8807] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.492653][ T8811] syzkaller1: entered promiscuous mode
[  134.495120][ T8811] syzkaller1: entered allmulticast mode
[  134.670252][ T8815] xt_socket: unknown flags 0x8
[  134.672946][ T8815] nftables ruleset with unbound set
[  134.763032][ T8819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.769822][ T8819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.826851][ T8822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.883773][ T8819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.181208][ T8838] bond9: entered allmulticast mode
[  135.193045][ T8838] ip6gretap1: entered allmulticast mode
[  135.196370][ T8838] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link
[  135.337057][ T8857] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[  135.340771][ T8857] __nla_validate_parse: 19 callbacks suppressed
[  135.340783][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'.
[  135.347197][ T8857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.857'.
[  135.359195][ T8857] geneve2: entered promiscuous mode
[  135.361396][ T8857] geneve2: entered allmulticast mode
[  135.366625][ T5667] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  135.370283][ T5667] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[  135.373792][ T5667] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[  135.424553][ T8859] netlink: 64 bytes leftover after parsing attributes in process `syz.2.858'.
[  135.488756][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'.
[  135.492409][ T8863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.860'.
[  135.526784][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.861'.
[  135.556276][  T993] tipc: Node number set to 3600224757
[  135.668192][ T5484] nci: nci_data_exchange_complete: no rx callback, dropping rx data...
[  135.686051][ T8876] veth0_vlan: entered allmulticast mode
[  135.719543][ T8881] validate_nla: 4 callbacks suppressed
[  135.719555][ T8881] netlink: 'syz.2.865': attribute type 4 has an invalid length.
[  135.796406][ T8886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.866'.
[  135.921978][ T8890] syzkaller0: entered promiscuous mode
[  135.924316][ T8890] syzkaller0: entered allmulticast mode
[  135.945753][   T53] Bluetooth: hci2: command 0x0406 tx timeout
[  136.064649][ T8892] netlink: 'syz.1.867': attribute type 1 has an invalid length.
[  136.081349][ T8892] 8021q: adding VLAN 0 to HW filter on device bond6
[  136.179010][ T8894] bond6: (slave geneve2): making interface the new active one
[  136.183829][ T8894] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  136.367649][ T8897] netlink: 'syz.1.868': attribute type 3 has an invalid length.
[  136.601603][ T8899] netlink: 'syz.1.869': attribute type 1 has an invalid length.
[  136.780710][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'.
[  137.866690][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  138.582287][ T8870] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  138.681265][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.875'.
[  138.719489][ T8913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.873'.
[  138.759396][ T8920] netlink: 'syz.0.875': attribute type 4 has an invalid length.
[  138.870010][ T8936] netlink: 'syz.2.879': attribute type 4 has an invalid length.
[  139.415409][ T8965] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  139.421643][ T8965] bond9: (slave lo): Enslaving as an active interface with an up link
[  139.424347][ T8965] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  139.431079][ T8965] bond9: option mode: unable to set because the bond device has slaves
[  139.871581][ T5667] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.879562][ T5667] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.887170][ T5667] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.891074][ T5667] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.898243][ T5667] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.908661][ T5667] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.919004][ T5667] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  139.928965][ T5667] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  139.968612][ T8993] openvswitch: netlink: Flow actions attr not present in new flow.
[  140.147102][ T9011] netlink: 'syz.0.904': attribute type 3 has an invalid length.
[  140.253494][ T9021] netlink: 'syz.0.907': attribute type 10 has an invalid length.
[  140.341989][ T9026] vlan0: entered promiscuous mode
[  140.344304][ T9026] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  140.427935][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  140.835694][ T9054] __nla_validate_parse: 13 callbacks suppressed
[  140.835706][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'.
[  140.840949][ T9054] netlink: 'syz.1.916': attribute type 30 has an invalid length.
[  140.894559][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.916'.
[  140.904359][ T9049] netlink: 'syz.1.916': attribute type 30 has an invalid length.
[  141.183942][ T9073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.918'.
[  141.414071][ T9088] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.416546][ T9088] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.419132][ T9088] bridge0: entered allmulticast mode
[  141.479778][ T9093] netlink: 'syz.1.923': attribute type 3 has an invalid length.
[  141.482692][ T9093] netlink: 152 bytes leftover after parsing attributes in process `syz.1.923'.
[  141.903072][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'.
[  142.027423][ T9118] xt_hashlimit: overflow, try lower: 9/9223372036854775808
[  142.106426][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'.
[  142.664328][ T9127] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  142.669603][ T9127] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  143.006785][ T9133] pim6reg1: entered promiscuous mode
[  143.016828][ T9133] pim6reg1: entered allmulticast mode
[  143.089466][ T9141] netlink: 64 bytes leftover after parsing attributes in process `syz.2.938'.
[  143.131319][ T9133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.188038][ T9144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.939'.
[  143.284687][ T9151] ip6erspan0: entered allmulticast mode
[  143.438424][ T9164] openvswitch: netlink: IP tunnel dst address not specified
[  143.465788][ T9166] netlink: 'syz.2.945': attribute type 1 has an invalid length.
[  143.487683][ T9166] 8021q: adding VLAN 0 to HW filter on device bond10
[  143.514022][ T9166] bond11: Unable to set up delay as MII monitoring is disabled
[  143.521268][ T9166] bond11 (unregistering): Released all slaves
[  143.550046][ T9170] netlink: 'syz.2.945': attribute type 1 has an invalid length.
[  143.576414][ T9170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.945'.
[  143.698493][ T9175] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check.
[  143.878303][ T9186] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  143.882007][ T9186] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  144.132577][ T9190] tipc: Resetting bearer <eth:macvtap0>
[  144.362659][ T9194] netlink: 60 bytes leftover after parsing attributes in process `syz.0.953'.
[  144.812206][ T9202] debugfs: '1^!Y
[  144.812206][ T9202] 3UH5rBn\' already exists in 'ieee80211'
[  145.421657][ T9236] hsr_slave_1 (unregistering): left promiscuous mode
[  145.479604][ T9238] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[  145.579811][ T9242] xt_hashlimit: size too large, truncated to 1048576
[  145.664921][ T9247] lo speed is unknown, defaulting to 1000
[  145.667514][ T9247] lo speed is unknown, defaulting to 1000
[  145.672288][ T9247] lo speed is unknown, defaulting to 1000
[  145.675636][ T9247] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  145.680686][ T9247] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  145.690069][ T9247] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  145.695469][ T9247] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  145.703617][ T9247] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  145.725663][ T9247] lo speed is unknown, defaulting to 1000
[  145.728992][ T9247] lo speed is unknown, defaulting to 1000
[  145.732824][ T9247] lo speed is unknown, defaulting to 1000
[  145.812382][ T9255] macsec0: entered promiscuous mode
[  145.829993][ T9257] netlink: 'syz.2.973': attribute type 1 has an invalid length.
[  145.836735][ T9255] macsec0: left promiscuous mode
[  145.903505][ T9259] __nla_validate_parse: 9 callbacks suppressed
[  145.903597][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.974'.
[  146.153593][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8881b96f6000: rx timeout, send abort
[  146.204633][ T9283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.980'.
[  146.272516][ T9292] netlink: 'syz.0.983': attribute type 1 has an invalid length.
[  146.309003][ T9292] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  146.353776][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.985'.
[  146.370631][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.986'.
[  146.373508][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.985'.
[  146.572424][ T9318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.991'.
[  146.629629][ T9333] netlink: 180 bytes leftover after parsing attributes in process `syz.1.995'.
[  146.642819][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'.
[  146.653863][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8881b96f7000: rx timeout, send abort
[  146.658151][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8881b96f6000: abort rx timeout. Force session deactivation
[  146.677363][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'.
[  146.688541][ T9333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.995'.
[  146.761789][ T9342] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.155136][ T9383] block nbd2: Receive control failed (result -32)
[  147.156688][    C1] vxcan1: j1939_tp_rxtimer: 0xffff8881b96f7000: abort rx timeout. Force session deactivation
[  147.157943][ T9157] block nbd2: Receive control failed (result -32)
[  147.218920][ T9393] xt_l2tp: invalid flags combination: 0
[  147.221945][ T9393] netlink: 'syz.2.1011': attribute type 1 has an invalid length.
[  147.512124][ T9415] netlink: 'syz.0.1018': attribute type 21 has an invalid length.
[  147.755470][    T9] tipc: Node number set to 1297259388
[  148.607943][ T9455] netlink: 'syz.0.1027': attribute type 1 has an invalid length.
[  148.622385][ T9455] 8021q: adding VLAN 0 to HW filter on device bond10
[  149.612191][ T9467] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  151.000374][ T9436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  151.089826][ T9471] __nla_validate_parse: 10 callbacks suppressed
[  151.089836][ T9471] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1031'.
[  151.162568][ T9480] netlink: 'syz.1.1032': attribute type 13 has an invalid length.
[  151.169671][ T9480] netlink: 'syz.1.1032': attribute type 17 has an invalid length.
[  151.293444][ T9479] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.298069][ T9479] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.462597][ T9480] bridge0: left allmulticast mode
[  151.470078][ T9480] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.473600][ T9480] 8021q: adding VLAN 0 to HW filter on device team0
[  151.478784][ T9480] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.519908][ T9480] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.522172][ T9480] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.538833][ T9480] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.541274][ T9480] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.551706][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.555615][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.563971][ T9480] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  151.596908][ T5484] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  151.599692][ T5484] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.603779][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  151.612955][ T5484] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  151.625099][ T5484] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.634650][ T5484] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  151.642418][ T5484] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.648734][ T5484] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  151.652197][ T5484] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.944047][ T9536] bond12: Unable to set peer notification delay as MII monitoring is disabled
[  151.954237][ T9536] bond12 (unregistering): Released all slaves
[  152.142380][ T9558] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1048'.
[  152.254374][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'.
[  152.257389][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1052'.
[  152.260893][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1052'.
[  152.263746][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1052'.
[  152.354233][ T9570] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1053'.
[  152.542249][ T9579] ipt_rpfilter: unknown options
[  152.776429][ T9591] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  152.878653][ T5484] tipc: Subscription rejected, illegal request
[  153.253564][ T9605] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1063'.
[  153.288902][ T9607] netlink: 'syz.2.1064': attribute type 1 has an invalid length.
[  153.385229][ T9610] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1065'.
[  153.388369][ T9610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1065'.
[  153.620744][ T9614] : renamed from bond0 (while UP)
[  153.930030][ T9640] netlink: 'syz.0.1074': attribute type 9 has an invalid length.
[  154.089650][ T9647] aD: renamed from lo
[  154.161012][ T9651] bond9: (slave 26aD): Releasing backup interface
[  154.165430][ T9651] bond9: (slave 26aD): last VLAN challenged slave left bond - VLAN blocking is removed
[  154.181976][ T9651] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  154.199877][    T9] aD speed is unknown, defaulting to 1000
[  154.372543][ T9664] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  154.428824][ T9673] bond11: option arp_interval: invalid value (18446744073709551615)
[  154.432288][ T9673] bond11: option arp_interval: allowed values 0 - 2147483647
[  154.438634][ T9673] bond11 (unregistering): Released all slaves
[  154.689325][ T9691] netlink: 'syz.0.1090': attribute type 1 has an invalid length.
[  154.706835][ T9691] 8021q: adding VLAN 0 to HW filter on device bond11
[  154.712823][ T9691] IPv6: NLM_F_CREATE should be specified when creating new route
[  155.945644][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  157.736234][ T9696] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  157.894615][ T9734] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.912585][ T9751] __nla_validate_parse: 15 callbacks suppressed
[  157.912596][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1103'.
[  157.978892][ T9756] netlink: 'syz.1.1106': attribute type 23 has an invalid length.
[  158.036358][ T9763] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1107'.
[  158.072601][ T9765] sctp: [Deprecated]: syz.2.1108 (pid 9765) Use of int in maxseg socket option.
[  158.072601][ T9765] Use struct sctp_assoc_value instead
[  158.241869][ T9795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'.
[  158.353645][ T9800] aD speed is unknown, defaulting to 1000
[  158.413652][ T9815] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1118'.
[  158.423410][ T9815] veth1_to_team: entered promiscuous mode
[  158.474698][ T9815] veth1_to_team: left promiscuous mode
[  158.639537][ T9832] netlink: 'syz.0.1123': attribute type 1 has an invalid length.
[  158.682584][ T9832] bond13: (slave dummy0): making interface the new active one
[  158.685969][ T9832] bond13: (slave dummy0): Enslaving as an active interface with an up link
[  158.692428][ T9832] bond13: entered promiscuous mode
[  158.694561][ T9832] dummy0: entered promiscuous mode
[  158.699741][ T9832] bond13: (slave dummy0): Releasing active interface
[  158.702016][ T9832] dummy0: left promiscuous mode
[  158.708872][ T9832] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  158.737215][ T9831] bond13: left promiscuous mode
[  158.766375][ T9837] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1125'.
[  158.855780][ T9841] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1126'.
[  158.984388][ T9855] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1130'.
[  159.161217][ T9868] netlink: 'syz.2.1134': attribute type 29 has an invalid length.
[  159.272697][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'.
[  159.435241][ T9887] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1142'.
[  159.940912][ T9890] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0
[  160.000469][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'.
[  160.049976][ T9892] syzkaller1: tun_chr_ioctl cmd 1074025677
[  160.052226][ T9892] syzkaller1: linktype set to 776
[  160.178324][ T9894] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.181093][ T9894] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.196761][ T9895] netlink: 'syz.1.1145': attribute type 13 has an invalid length.
[  160.214183][ T9895] netlink: 'syz.1.1145': attribute type 17 has an invalid length.
[  160.237412][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.259732][ T9899] IPVS: set_ctl: invalid protocol: 143 172.20.20.170:20000
[  160.281344][ T9894] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.392535][ T9895] 8021q: adding VLAN 0 to HW filter on device 
[  160.395789][ T9895] 8021q: adding VLAN 0 to HW filter on device team0
[  160.399511][ T9895] 8021q: adding VLAN 0 to HW filter on device batadv0
[  160.424130][ T9895] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.427776][ T9895] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.432443][ T9895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  160.435999][ T9895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  160.440738][ T9895] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  160.476252][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.481958][ T8191] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.502189][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.504769][ T8191] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.527406][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  160.562608][ T9908] netlink: 'syz.1.1148': attribute type 1 has an invalid length.
[  160.601089][ T9908] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.621115][ T9910] bond0: (slave ip6gretap1): making interface the new active one
[  160.626234][ T9910] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[  160.834562][ T9939] netlink: 'syz.1.1157': attribute type 11 has an invalid length.
[  161.372418][ T9985] ip6tnl3: entered allmulticast mode
[  161.426549][ T9989] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  161.515961][ T9995] xt_CT: You must specify a L4 protocol and not use inversions on it
[  162.272668][T10019] netlink: 'syz.0.1184': attribute type 1 has an invalid length.
[  162.293055][T10019] bond14: entered promiscuous mode
[  162.296061][T10019] 8021q: adding VLAN 0 to HW filter on device bond14
[  162.532769][T10029] netlink: 'syz.0.1188': attribute type 21 has an invalid length.
[  162.830944][T10054] netlink: 'syz.2.1196': attribute type 11 has an invalid length.
[  162.909161][T10058] netlink: 'syz.2.1197': attribute type 1 has an invalid length.
[  162.929047][T10058] bond12: entered promiscuous mode
[  162.931082][T10058] 8021q: adding VLAN 0 to HW filter on device bond12
[  162.940270][T10058] __nla_validate_parse: 19 callbacks suppressed
[  162.940279][T10058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1197'.
[  162.947133][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1197'.
[  163.012169][T10063] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1199'.
[  163.901694][T10070] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1201'.
[  163.910221][T10070] netlink: 'syz.2.1201': attribute type 30 has an invalid length.
[  163.943979][T10075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1202'.
[  163.964308][T10077] netlink: 'syz.2.1203': attribute type 1 has an invalid length.
[  163.980804][T10077] 8021q: adding VLAN 0 to HW filter on device bond14
[  163.983464][T10077] bond14: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  163.988485][T10077] bond14: entered allmulticast mode
[  164.011162][T10082] openvswitch: netlink: IPv4 tun info is not correct
[  164.053103][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'.
[  164.059676][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1206'.
[  164.086067][T10089] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1207'.
[  164.303436][T10104] netlink: 'syz.0.1211': attribute type 10 has an invalid length.
[  164.306410][T10104] netlink: 'syz.0.1211': attribute type 17 has an invalid length.
[  164.417099][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'.
[  164.425343][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  164.937531][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'.
[  165.209267][T10122] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  165.889053][T10124] netlink: 'syz.1.1217': attribute type 7 has an invalid length.
[  165.891507][T10124] netlink: 'syz.1.1217': attribute type 8 has an invalid length.
[  165.897647][T10124] erspan0: entered promiscuous mode
[  165.899998][T10124] gretap0: entered promiscuous mode
[  165.902224][T10124] erspan0: left promiscuous mode
[  165.904231][T10124] gretap0: left promiscuous mode
[  168.035144][T10114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  168.112673][T10129] __nla_validate_parse: 2 callbacks suppressed
[  168.112687][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'.
[  168.189245][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'.
[  168.265666][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1223'.
[  168.272905][T10146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1223'.
[  168.297351][T10146] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1223'.
[  168.452141][T10161] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  168.455381][T10161] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  168.464325][T10154] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  168.789609][T10193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1239'.
[  168.827685][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'.
[  168.923900][T10200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1241'.
[  169.005853][T10205] netlink: 'syz.0.1242': attribute type 2 has an invalid length.
[  169.010026][T10205] netlink: 'syz.0.1242': attribute type 1 has an invalid length.
[  169.012654][T10205] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1242'.
[  172.062235][T10211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  172.067003][T10220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1244'.
[  172.800438][T10287] netlink: 'syz.0.1261': attribute type 12 has an invalid length.
[  172.803226][T10287] : renamed from bond0
[  173.065842][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  173.254658][T10299] aD speed is unknown, defaulting to 1000
[  173.455185][T10307] __nla_validate_parse: 3 callbacks suppressed
[  173.455195][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1267'.
[  173.467943][ T5484] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  173.468002][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1267'.
[  173.474699][ T5484] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  173.491350][ T5484] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  173.591284][ T9157] block nbd3: Receive control failed (result -32)
[  173.751132][T10330] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1275'.
[  173.754677][T10330] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1275'.
[  173.836349][ T5001] Bluetooth: hci2: link tx timeout
[  173.838435][ T5001] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  173.887858][T10347] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1279'.
[  173.972956][T10353] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1281'.
[  173.981392][T10353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1281'.
[  173.991341][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'.
[  175.865326][ T5001] Bluetooth: hci2: command 0x0406 tx timeout
[  184.456201][T10410] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1288'.
[  184.466526][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1289'.
[  184.498349][T10415] : renamed from virt_wifi0
[  184.552281][T10413] aD speed is unknown, defaulting to 1000
[  184.661629][T10428] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  184.739089][T10434] macvtap0: entered promiscuous mode
[  184.740988][T10434] macvtap0: entered allmulticast mode
[  184.742859][T10434] veth1_vlan: entered allmulticast mode
[  184.753615][T10434] macvtap1: entered promiscuous mode
[  184.757088][T10434] macvtap1: entered allmulticast mode
[  184.891790][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'.
[  184.913552][T10450] netlink: 'syz.1.1298': attribute type 13 has an invalid length.
[  184.917218][T10450] netlink: 'syz.1.1298': attribute type 17 has an invalid length.
[  184.933194][T10450] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  185.019055][T10452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1300'.
[  185.061973][T10462] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  185.102712][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'.
[  185.108623][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'.
[  185.113672][T10464] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1302'.
[  185.117911][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'.
[  185.121544][T10464] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1302'.
[  185.126425][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'.
[  185.202840][T10477] netlink: 'syz.2.1307': attribute type 1 has an invalid length.
[  185.205409][T10477] netlink: 'syz.2.1307': attribute type 1 has an invalid length.
[  185.217171][T10477] Cannot find add_set index 2 as target
[  185.519361][T10510] syzkaller1: entered promiscuous mode
[  185.521257][T10510] syzkaller1: entered allmulticast mode
[  185.530383][T10510] 0: left allmulticast mode
[  185.531982][T10510] hsr_slave_0: left allmulticast mode
[  185.534151][T10510] vlan0: left promiscuous mode
[  185.537894][T10510] bond5: left promiscuous mode
[  185.539526][T10510] bridge3: left promiscuous mode
[  185.541398][T10510] vlan1: left allmulticast mode
[  185.543030][T10510] : left allmulticast mode
[  185.545190][T10510] bridge5: left promiscuous mode
[  185.547235][T10510] bridge5: left allmulticast mode
[  185.549055][T10510] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  185.551394][T10510] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  185.555499][T10510] gre3: left allmulticast mode
[  185.557324][T10510] gtp0: left allmulticast mode
[  185.559622][T10510] ip6tnl3: left allmulticast mode
[  185.561578][T10510] bond14: left promiscuous mode
[  185.563562][T10510] syzkaller1: left promiscuous mode
[  185.565528][T10510] syzkaller1: left allmulticast mode
[  185.663849][T10512] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  185.680461][T10512] bond0 (unregistering): Released all slaves
[  186.024928][ T5001] Bluetooth: hci1: command 0x0406 tx timeout
[  186.062215][T10543] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  186.275799][T10554] bridge7: entered promiscuous mode
[  186.278188][T10554] bridge7: entered allmulticast mode
[  186.283051][T10554] team0: Port device bridge7 added
[  186.292215][T10554] bridge0: port 1(team0) entered blocking state
[  186.296226][T10554] bridge0: port 1(team0) entered disabled state
[  186.299005][T10554] team0: entered allmulticast mode
[  186.301131][T10554] bridge3: entered allmulticast mode
[  186.303293][T10554] bridge4: entered allmulticast mode
[  186.307133][T10554] bridge5: entered allmulticast mode
[  186.322887][T10554] team0: left allmulticast mode
[  186.335194][T10554] bridge3: left allmulticast mode
[  186.339922][T10554] bridge4: left allmulticast mode
[  186.344216][T10554] bridge5: left allmulticast mode
[  186.400837][T10565] xt_hl: Unknown Hop Limit match mode: 206
[  186.776388][T10534] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  186.818167][T10582] netlink: 'syz.1.1329': attribute type 1 has an invalid length.
[  186.841124][T10582] 8021q: adding VLAN 0 to HW filter on device bond7
[  186.853861][T10582] vlan5: entered promiscuous mode
[  186.855968][T10582] bond7: entered promiscuous mode
[  186.857691][T10582] vlan5: entered allmulticast mode
[  186.859819][T10582] bond7: entered allmulticast mode
[  186.919807][T10586] netlink: 'syz.1.1330': attribute type 1 has an invalid length.
[  186.923244][T10587] netlink: 'syz.1.1330': attribute type 1 has an invalid length.
[  186.942379][T10586] 8021q: adding VLAN 0 to HW filter on device bond8
[  186.955111][T10586] bond8: (slave geneve3): making interface the new active one
[  186.958342][T10586] bond8: (slave geneve3): Enslaving as an active interface with an up link
[  186.962851][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.966543][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.970642][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.974266][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  187.134774][T10596] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  187.253611][T10607] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  187.259703][T10607] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  187.425851][T10613] tipc: Resetting bearer <eth:syzkaller0>
[  188.197470][T10645] openvswitch: netlink: Flow key attribute not present in set flow.
[  188.249663][T10647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.306620][T10647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.364475][T10647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.543458][T10667] bridge0: entered allmulticast mode
[  188.717017][T10681] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  188.848321][T10690] netlink: 'syz.0.1358': attribute type 13 has an invalid length.
[  188.856527][T10690] netlink: 'syz.0.1358': attribute type 17 has an invalid length.
[  188.956071][T10690] 8021q: adding VLAN 0 to HW filter on device 
[  188.967832][T10690] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.049747][T10690] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  189.062799][T10690] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  189.069788][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  189.076884][ T6427] aD speed is unknown, defaulting to 1000
[  189.079568][ T6427] syz2: Port: 1 Link ACTIVE
[  189.232754][T10702] netlink: 'syz.0.1361': attribute type 1 has an invalid length.
[  189.597462][T10717] __nla_validate_parse: 19 callbacks suppressed
[  189.597481][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'.
[  189.655253][T10719] gretap1: entered allmulticast mode
[  189.679330][T10722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1366'.
[  189.697696][T10722] 8021q: adding VLAN 0 to HW filter on device bond15
[  189.721448][T10722] bond15: (slave veth7): Enslaving as an active interface with a down link
[  189.731559][T10722] 8021q: adding VLAN 0 to HW filter on device batadv1
[  189.737075][T10722] bond15: (slave batadv1): making interface the new active one
[  189.740385][T10722] batadv1: entered promiscuous mode
[  189.742622][T10722] bond15: (slave batadv1): Enslaving as an active interface with an up link
[  189.763537][T10722] bond15 (unregistering): (slave veth7): Releasing active interface
[  189.770271][T10722] bond15 (unregistering): (slave batadv1): Releasing active interface
[  189.779075][T10722] bond15 (unregistering): Released all slaves
[  189.998654][T10744] xt_hashlimit: invalid rate
[  190.042561][T10749] validate_nla: 3 callbacks suppressed
[  190.042574][T10749] netlink: 'syz.2.1372': attribute type 2 has an invalid length.
[  190.186441][T10757] netlink: 'syz.2.1374': attribute type 8 has an invalid length.
[  190.223145][T10761] pimreg: entered allmulticast mode
[  190.279626][T10763] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  190.336905][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'.
[  190.347910][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'.
[  190.351447][T10764] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1376'.
[  190.356713][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'.
[  190.360254][T10764] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1376'.
[  190.363925][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'.
[  190.403437][T10767] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  190.410952][T10767] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  190.437212][T10771] netlink: 'syz.2.1378': attribute type 3 has an invalid length.
[  190.446354][T10771] nbd: nbd2 already in use
[  190.448590][T10771] block nbd2: NBD_DISCONNECT
[  190.450446][T10771] block nbd2: Send disconnect failed -32
[  190.452968][T10771] block nbd2: Send disconnect failed -32
[  190.457931][T10771] block nbd2: shutting down sockets
[  190.536936][T10771] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  190.600677][T10781] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1381'.
[  190.741825][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'.
[  190.808604][T10794] netlink: 'syz.2.1387': attribute type 83 has an invalid length.
[  192.033636][T10819] xt_hashlimit: invalid rate
[  192.088872][T10819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  193.461685][T10856] gtp0: entered promiscuous mode
[  193.463744][T10856] gtp0: entered allmulticast mode
[  193.467366][T10856] team0: Device gtp0 is of different type
[  193.853514][T10923] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  193.952663][T10931] xt_hashlimit: size too large, truncated to 1048576
[  194.089201][T10941] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  194.093512][T10941] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  194.427506][T10949] sctp: [Deprecated]: syz.0.1418 (pid 10949) Use of int in max_burst socket option.
[  194.427506][T10949] Use struct sctp_assoc_value instead
[  194.967780][T10971] aD speed is unknown, defaulting to 1000
[  195.190629][T10983] netlink: 'syz.2.1429': attribute type 1 has an invalid length.
[  195.217047][T10983] bond15: entered promiscuous mode
[  195.219725][T10983] 8021q: adding VLAN 0 to HW filter on device bond15
[  195.237001][T10983] 8021q: adding VLAN 0 to HW filter on device bond15
[  195.243247][T10983] bond15: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  195.248062][T10983] bond15: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  195.258903][T10983] bond15: (slave ip6gre2): making interface the new active one
[  195.262293][T10983] ip6gre2: entered promiscuous mode
[  195.267100][T10983] bond15: (slave ip6gre2): Enslaving as an active interface with an up link
[  195.288778][T10986] __nla_validate_parse: 137 callbacks suppressed
[  195.288797][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1430'.
[  195.375820][T10986] gretap1: entered allmulticast mode
[  195.532141][T10997] netlink: 'syz.2.1433': attribute type 8 has an invalid length.
[  195.719662][T11015] bridge0: port 1(erspan0) entered blocking state
[  195.722040][T11015] bridge0: port 1(erspan0) entered disabled state
[  195.724584][T11015] erspan0: entered allmulticast mode
[  195.727803][T11015] erspan0: entered promiscuous mode
[  195.729923][T11015] vlan5: entered promiscuous mode
[  195.731896][T11015] geneve0: entered promiscuous mode
[  195.734436][T11015] bridge0: port 1(erspan0) entered blocking state
[  195.737172][T11015] bridge0: port 1(erspan0) entered listening state
[  195.790660][T11018] netlink: 'syz.0.1440': attribute type 1 has an invalid length.
[  195.793937][T11018] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1440'.
[  196.267674][T11043] netlink: 'syz.1.1447': attribute type 13 has an invalid length.
[  196.341549][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'.
[  196.385846][T11043] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.389036][T11043] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.454153][T11043] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.465078][T11043] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.555240][T11043] veth1_vlan: left allmulticast mode
[  196.613971][T11053] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  196.627759][ T5484] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.637692][ T5484] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.648059][ T5484] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.655735][ T5484] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.782248][T11062] aD speed is unknown, defaulting to 1000
[  196.788574][T11069] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1454'.
[  196.818884][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1454'.
[  196.822267][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1454'.
[  196.909170][T11083] netlink: 'syz.2.1457': attribute type 9 has an invalid length.
[  197.023347][T11086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.088301][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1461'.
[  197.097856][T11091] netlink: 'syz.2.1461': attribute type 1 has an invalid length.
[  197.118792][T11091] 8021q: adding VLAN 0 to HW filter on device bond16
[  197.131690][T11091] netlink: 'syz.2.1461': attribute type 4 has an invalid length.
[  197.140357][T11091] netlink: 'syz.2.1461': attribute type 12 has an invalid length.
[  197.145388][T11091] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1461'.
[  197.173657][T11094] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  197.320928][T11113] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1466'.
[  197.343739][T11108] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  197.752733][T11126] netlink: 'syz.0.1471': attribute type 1 has an invalid length.
[  197.776173][T11126] 8021q: adding VLAN 0 to HW filter on device bond15
[  197.827652][T11137] openvswitch: netlink: IPv4 tunnel dst address is zero
[  197.969625][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'.
[  198.083326][T11157] unsupported nla_type 216
[  198.377053][T11178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  198.432340][T11178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  198.486898][T11178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  199.003186][T11185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  199.147478][T11202] netlink: 'syz.2.1493': attribute type 1 has an invalid length.
[  199.304367][T11209] 8021q: adding VLAN 0 to HW filter on device bond16
[  199.307832][ T1380] ieee802154 phy0 wpan0: encryption failed: -22
[  199.328993][T11209] bond16: (slave veth0_to_bond): making interface the new active one
[  199.338571][T11209] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  199.353570][T11209] macvlan3: entered promiscuous mode
[  199.357190][T11209] macvlan3: entered allmulticast mode
[  199.361026][T11209] bond16: entered promiscuous mode
[  199.364337][T11209] veth0_to_bond: entered promiscuous mode
[  199.367417][T11209] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  199.371968][T11209] bond16: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  199.380655][T11209] bond16: left promiscuous mode
[  199.383894][T11209] veth0_to_bond: left promiscuous mode
[  199.487761][T11215] 8021q: adding VLAN 0 to HW filter on device bond17
[  199.530153][T11219] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  199.547881][T11219] netem: change failed
[  199.699814][T11223] dummy0: entered promiscuous mode
[  200.167249][T11255] sctp: [Deprecated]: syz.2.1507 (pid 11255) Use of int in maxseg socket option.
[  200.167249][T11255] Use struct sctp_assoc_value instead
[  200.234009][T11263] siw: device registration error -23
[  200.840188][T11268] validate_nla: 3 callbacks suppressed
[  200.840203][T11268] netlink: 'syz.0.1512': attribute type 3 has an invalid length.
[  200.849852][T11268] nbd: must specify a size in bytes for the device
[  200.852777][T11268] nbd: couldn't find device at index 0
[  200.861674][T11268] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  200.866200][T11268] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  200.871388][T11268] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  200.879651][T11268] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  201.024149][T11274] ieee802154 phy0 wpan0: encryption failed: -22
[  201.028004][T11274] netlink: 'syz.0.1514': attribute type 9 has an invalid length.
[  201.033093][T11274] netlink: 'syz.0.1514': attribute type 6 has an invalid length.
[  201.036978][T11274] netlink: 'syz.0.1514': attribute type 7 has an invalid length.
[  201.041436][T11274] netlink: 'syz.0.1514': attribute type 8 has an invalid length.
[  201.103009][T11278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.114626][T11280] __nla_validate_parse: 13 callbacks suppressed
[  201.114635][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1516'.
[  201.152674][T11284] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  201.162493][T11285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.167660][T11284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1519'.
[  201.219957][T11278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.227320][T11278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.281293][T11299] dvmrp8: entered allmulticast mode
[  201.320568][T11296] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  201.402868][T11305] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  201.438844][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1525'.
[  201.442054][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1525'.
[  201.446529][T11307] netlink: 'syz.0.1525': attribute type 15 has an invalid length.
[  201.539643][T11313] netlink: 'syz.0.1526': attribute type 1 has an invalid length.
[  201.565327][T11313] 8021q: adding VLAN 0 to HW filter on device bond17
[  201.690711][T11329] netlink: 'syz.1.1531': attribute type 1 has an invalid length.
[  201.695286][T11329] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1531'.
[  201.822663][T11329] netlink: 'syz.1.1531': attribute type 10 has an invalid length.
[  201.829725][T11329] netlink: 'syz.1.1531': attribute type 10 has an invalid length.
[  202.006232][T11348] bond18 (unregistering): Released all slaves
[  202.099553][T11366] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1543'.
[  202.104413][T11366] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1543'.
[  202.110421][T11368] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1543'.
[  202.127002][T11370] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1544'.
[  202.407942][T11400] openvswitch: : Dropping previously announced user features
[  202.618066][T11426] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.1560'.
[  202.653762][T11427] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  202.665160][T11427] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  203.547580][T11453] nbd2: detected capacity change from 0 to 63
[  203.552223][T11458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.605111][T11458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.609091][   T55] block nbd2: Receive control failed (result -104)
[  204.297647][T11472] 
[  204.298492][T11472] ======================================================
[  204.300683][T11472] WARNING: possible circular locking dependency detected
[  204.303144][T11472] syzkaller #0 Not tainted
[  204.305079][T11472] ------------------------------------------------------
[  204.307834][T11472] syz.2.1573/11472 is trying to acquire lock:
[  204.310245][T11472] ffffffff8ea85420 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690
[  204.314223][T11472] 
[  204.314223][T11472] but task is already holding lock:
[  204.317190][T11472] ffff8881b72d1530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_dec+0x39/0x330
[  204.320933][T11472] 
[  204.320933][T11472] which lock already depends on the new lock.
[  204.320933][T11472] 
[  204.325181][T11472] 
[  204.325181][T11472] the existing dependency chain (in reverse order) is:
[  204.328827][T11472] 
[  204.328827][T11472] -> #7 (&idev->mc_lock){+.+.}-{4:4}:
[  204.331405][T11472]        __mutex_lock+0x1a3/0x1550
[  204.333556][T11472]        __ipv6_dev_mc_inc+0x4e/0xa50
[  204.335729][T11472]        __ipv6_sock_mc_join+0x503/0x750
[  204.338055][T11472]        do_ipv6_mcast_group_source+0x3df/0x4c0
[  204.340532][T11472]        do_ipv6_setsockopt+0x16e9/0x3150
[  204.342779][T11472]        ipv6_setsockopt+0x59/0x170
[  204.344916][T11472]        do_sock_setsockopt+0x17c/0x1b0
[  204.347199][T11472]        __x64_sys_setsockopt+0x13d/0x1b0
[  204.349548][T11472]        do_syscall_64+0x15f/0xf80
[  204.351477][T11472]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.354090][T11472] 
[  204.354090][T11472] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  204.357198][T11472]        lock_sock_nested+0x41/0x100
[  204.358868][T11472]        inet_shutdown+0x6a/0x390
[  204.360435][T11472]        nbd_mark_nsock_dead+0x2e9/0x560
[  204.362269][T11472]        sock_shutdown+0x15e/0x260
[  204.363963][T11472]        nbd_clear_sock+0x24/0x170
[  204.365605][T11472]        nbd_config_put+0x2dd/0x580
[  204.367251][T11472]        nbd_genl_connect+0x19d5/0x1cf0
[  204.369017][T11472]        genl_family_rcv_msg_doit+0x22a/0x330
[  204.370906][T11472]        genl_rcv_msg+0x61c/0x7a0
[  204.372547][T11472]        netlink_rcv_skb+0x232/0x4b0
[  204.374199][T11472]        genl_rcv+0x28/0x40
[  204.375613][T11472]        netlink_unicast+0x75c/0x8e0
[  204.377297][T11472]        netlink_sendmsg+0x813/0xb40
[  204.378975][T11472]        ____sys_sendmsg+0x972/0x9f0
[  204.380620][T11472]        ___sys_sendmsg+0x2a5/0x360
[  204.382365][T11472]        __x64_sys_sendmsg+0x1bd/0x2a0
[  204.384088][T11472]        do_syscall_64+0x15f/0xf80
[  204.385712][T11472]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.387738][T11472] 
[  204.387738][T11472] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  204.390538][T11472]        __mutex_lock+0x1a3/0x1550
[  204.392401][T11472]        nbd_queue_rq+0x37b/0x1100
[  204.394536][T11472]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  204.396961][T11472]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  204.399641][T11472]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  204.402235][T11472]        blk_mq_run_hw_queue+0x348/0x4f0
[  204.404513][T11472]        blk_mq_dispatch_list+0xd16/0xe10
[  204.406789][T11472]        blk_mq_flush_plug_list+0x48d/0x570
[  204.409121][T11472]        __blk_flush_plug+0x3ed/0x4d0
[  204.411906][T11472]        __submit_bio+0x28d/0x580
[  204.413838][T11472]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  204.416207][T11472]        block_read_full_folio+0x599/0x830
[  204.418377][T11472]        filemap_read_folio+0x137/0x3b0
[  204.420377][T11472]        do_read_cache_folio+0x358/0x590
[  204.422374][T11472]        read_part_sector+0xb6/0x2b0
[  204.424151][T11472]        adfspart_check_ICS+0xb1/0x960
[  204.426197][T11472]        bdev_disk_changed+0x817/0x1770
[  204.428111][T11472]        blkdev_get_whole+0x380/0x510
[  204.429857][T11472]        bdev_open+0x31e/0xd30
[  204.431411][T11472]        blkdev_open+0x470/0x610
[  204.433054][T11472]        do_dentry_open+0x785/0x14e0
[  204.434740][T11472]        vfs_open+0x3b/0x340
[  204.436264][T11472]        path_openat+0x2e08/0x3860
[  204.438004][T11472]        do_file_open+0x23e/0x4a0
[  204.439796][T11472]        do_sys_openat2+0x113/0x200
[  204.441906][T11472]        __x64_sys_openat+0x138/0x170
[  204.444039][T11472]        do_syscall_64+0x15f/0xf80
[  204.446091][T11472]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.448696][T11472] 
[  204.448696][T11472] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  204.451621][T11472]        __mutex_lock+0x1a3/0x1550
[  204.453727][T11472]        nbd_queue_rq+0xc6/0x1100
[  204.455799][T11472]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  204.458273][T11472]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  204.461048][T11472]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  204.463637][T11472]        blk_mq_run_hw_queue+0x348/0x4f0
[  204.465899][T11472]        blk_mq_dispatch_list+0xd16/0xe10
[  204.468180][T11472]        blk_mq_flush_plug_list+0x48d/0x570
[  204.470452][T11472]        __blk_flush_plug+0x3ed/0x4d0
[  204.472559][T11472]        __submit_bio+0x28d/0x580
[  204.474599][T11472]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  204.477129][T11472]        block_read_full_folio+0x599/0x830
[  204.479399][T11472]        filemap_read_folio+0x137/0x3b0
[  204.481581][T11472]        do_read_cache_folio+0x358/0x590
[  204.483779][T11472]        read_part_sector+0xb6/0x2b0
[  204.485836][T11472]        adfspart_check_ICS+0xb1/0x960
[  204.487977][T11472]        bdev_disk_changed+0x817/0x1770
[  204.490194][T11472]        blkdev_get_whole+0x380/0x510
[  204.492366][T11472]        bdev_open+0x31e/0xd30
[  204.494371][T11472]        blkdev_open+0x470/0x610
[  204.496402][T11472]        do_dentry_open+0x785/0x14e0
[  204.498576][T11472]        vfs_open+0x3b/0x340
[  204.500484][T11472]        path_openat+0x2e08/0x3860
[  204.502558][T11472]        do_file_open+0x23e/0x4a0
[  204.504616][T11472]        do_sys_openat2+0x113/0x200
[  204.506755][T11472]        __x64_sys_openat+0x138/0x170
[  204.508920][T11472]        do_syscall_64+0x15f/0xf80
[  204.510946][T11472]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.513472][T11472] 
[  204.513472][T11472] -> #3 (set->srcu){.+.+}-{0:0}:
[  204.516260][T11472]        __synchronize_srcu+0xca/0x300
[  204.518431][T11472]        elevator_switch+0x1e8/0x7a0
[  204.520566][T11472]        elevator_change+0x2cc/0x450
[  204.522702][T11472]        elevator_set_default+0x36c/0x430
[  204.524944][T11472]        blk_register_queue+0x3e9/0x4e0
[  204.527145][T11472]        __add_disk+0x677/0xd50
[  204.529033][T11472]        add_disk_fwnode+0xfb/0x480
[  204.531112][T11472]        nbd_dev_add+0x72c/0xb50
[  204.533152][T11472]        nbd_init+0x168/0x1f0
[  204.535052][T11472]        do_one_initcall+0x250/0x870
[  204.537137][T11472]        do_initcall_level+0x104/0x190
[  204.539330][T11472]        do_initcalls+0x59/0xa0
[  204.541297][T11472]        kernel_init_freeable+0x2a6/0x3e0
[  204.543610][T11472]        kernel_init+0x1d/0x1d0
[  204.545588][T11472]        ret_from_fork+0x514/0xb70
[  204.547574][T11472]        ret_from_fork_asm+0x1a/0x30
[  204.549733][T11472] 
[  204.549733][T11472] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  204.552906][T11472]        __mutex_lock+0x1a3/0x1550
[  204.554991][T11472]        elevator_change+0x1b3/0x450
[  204.557126][T11472]        elevator_set_none+0xb5/0x140
[  204.559246][T11472]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  204.561769][T11472]        nbd_start_device+0x17f/0xb10
[  204.563825][T11472]        nbd_genl_connect+0x165b/0x1cf0
[  204.565985][T11472]        genl_family_rcv_msg_doit+0x22a/0x330
[  204.568338][T11472]        genl_rcv_msg+0x61c/0x7a0
[  204.570314][T11472]        netlink_rcv_skb+0x232/0x4b0
[  204.572387][T11472]        genl_rcv+0x28/0x40
[  204.574239][T11472]        netlink_unicast+0x75c/0x8e0
[  204.576380][T11472]        netlink_sendmsg+0x813/0xb40
[  204.578545][T11472]        ____sys_sendmsg+0x972/0x9f0
[  204.580688][T11472]        ___sys_sendmsg+0x2a5/0x360
[  204.582836][T11472]        __x64_sys_sendmsg+0x1bd/0x2a0
[  204.585049][T11472]        do_syscall_64+0x15f/0xf80
[  204.587153][T11472]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.589768][T11472] 
[  204.589768][T11472] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  204.593170][T11472]        blk_alloc_queue+0x546/0x680
[  204.595260][T11472]        __blk_mq_alloc_disk+0x197/0x390
[  204.597542][T11472]        nbd_dev_add+0x499/0xb50
[  204.599583][T11472]        nbd_init+0x168/0x1f0
[  204.601451][T11472]        do_one_initcall+0x250/0x870
[  204.603589][T11472]        do_initcall_level+0x104/0x190
[  204.605829][T11472]        do_initcalls+0x59/0xa0
[  204.607798][T11472]        kernel_init_freeable+0x2a6/0x3e0
[  204.610125][T11472]        kernel_init+0x1d/0x1d0
[  204.612125][T11472]        ret_from_fork+0x514/0xb70
[  204.614243][T11472]        ret_from_fork_asm+0x1a/0x30
[  204.616435][T11472] 
[  204.616435][T11472] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  204.619386][T11472]        __lock_acquire+0x15a5/0x2cf0
[  204.621433][T11472]        lock_acquire+0x106/0x350
[  204.623364][T11472]        fs_reclaim_acquire+0x71/0x100
[  204.625550][T11472]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  204.628143][T11472]        __alloc_skb+0x27d/0x7d0
[  204.630142][T11472]        inet6_ifmcaddr_notify+0xfa/0x1e0
[  204.632468][T11472]        __ipv6_dev_mc_dec+0x2dc/0x330
[  204.634729][T11472]        ipv6_mc_destroy_dev+0x33c/0x5a0
[  204.636987][T11472]        addrconf_ifdown+0x1561/0x1a40
[  204.639201][T11472]        addrconf_notify+0x1bc/0x1050
[  204.641383][T11472]        notifier_call_chain+0x1ad/0x3d0
[  204.643701][T11472]        unregister_netdevice_many_notify+0x17a5/0x22c0
[  204.646510][T11472]        unregister_netdevice_queue+0x31f/0x360
[  204.649046][T11472]        nsim_destroy+0x277/0x7f0
[  204.651012][T11472]        __nsim_dev_port_del+0x14f/0x200
[  204.653237][T11472]        nsim_dev_reload_destroy+0x288/0x490
[  204.655569][T11472]        nsim_dev_reload_down+0x8a/0xc0
[  204.657915][T11472]        devlink_reload+0x1eb/0x8c0
[  204.660062][T11472]        devlink_nl_reload_doit+0xaaa/0xc80
[  204.662437][T11472]        genl_family_rcv_msg_doit+0x22a/0x330
[  204.664746][T11472]        genl_rcv_msg+0x61c/0x7a0
[  204.666816][T11472]        netlink_rcv_skb+0x232/0x4b0
[  204.668929][T11472]        genl_rcv+0x28/0x40
[  204.670692][T11472]        netlink_unicast+0x75c/0x8e0
[  204.672704][T11472]        netlink_sendmsg+0x813/0xb40
[  204.674884][T11472]        ____sys_sendmsg+0x972/0x9f0
[  204.677060][T11472]        ___sys_sendmsg+0x2a5/0x360
[  204.679149][T11472]        __x64_sys_sendmsg+0x1bd/0x2a0
[  204.681152][T11472]        do_syscall_64+0x15f/0xf80
[  204.682723][T11472]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.685025][T11472] 
[  204.685025][T11472] other info that might help us debug this:
[  204.685025][T11472] 
[  204.688237][T11472] Chain exists of:
[  204.688237][T11472]   fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock
[  204.688237][T11472] 
[  204.692012][T11472]  Possible unsafe locking scenario:
[  204.692012][T11472] 
[  204.694490][T11472]        CPU0                    CPU1
[  204.696534][T11472]        ----                    ----
[  204.698698][T11472]   lock(&idev->mc_lock);
[  204.700475][T11472]                                lock(sk_lock-AF_INET6);
[  204.703315][T11472]                                lock(&idev->mc_lock);
[  204.706060][T11472]   lock(fs_reclaim);
[  204.707719][T11472] 
[  204.707719][T11472]  *** DEADLOCK ***
[  204.707719][T11472] 
[  204.710467][T11472] 5 locks held by syz.2.1573/11472:
[  204.712069][T11472]  #0: ffffffff8fe40dc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  204.714607][T11472]  #1: ffff8881b71d5128 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x34a/0x490
[  204.718447][T11472]  #2: ffff8881b71d4258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x360/0x490
[  204.722878][T11472]  #3: ffffffff8fdd1440 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x7f0
[  204.726480][T11472]  #4: ffff8881b72d1530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_dec+0x39/0x330
[  204.730410][T11472] 
[  204.730410][T11472] stack backtrace:
[  204.732814][T11472] CPU: 1 UID: 0 PID: 11472 Comm: syz.2.1573 Not tainted syzkaller #0 PREEMPT(full) 
[  204.732832][T11472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.732844][T11472] Call Trace:
[  204.732851][T11472]  <TASK>
[  204.732859][T11472]  dump_stack_lvl+0xe8/0x150
[  204.732879][T11472]  print_circular_bug+0x2e1/0x300
[  204.732900][T11472]  check_noncircular+0x12e/0x150
[  204.732919][T11472]  __lock_acquire+0x15a5/0x2cf0
[  204.732934][T11472]  ? __nsim_dev_port_del+0x14f/0x200
[  204.732953][T11472]  ? nsim_dev_reload_destroy+0x288/0x490
[  204.732969][T11472]  ? nsim_dev_reload_down+0x8a/0xc0
[  204.732986][T11472]  ? genl_family_rcv_msg_doit+0x22a/0x330
[  204.733000][T11472]  ? genl_rcv_msg+0x61c/0x7a0
[  204.733012][T11472]  ? netlink_rcv_skb+0x232/0x4b0
[  204.733029][T11472]  ? genl_rcv+0x28/0x40
[  204.733040][T11472]  ? netlink_unicast+0x75c/0x8e0
[  204.733055][T11472]  ? netlink_sendmsg+0x813/0xb40
[  204.733073][T11472]  ? ____sys_sendmsg+0x972/0x9f0
[  204.733093][T11472]  ? ___sys_sendmsg+0x2a5/0x360
[  204.733112][T11472]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[  204.733132][T11472]  ? do_syscall_64+0x15f/0xf80
[  204.733145][T11472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.733160][T11472]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  204.733177][T11472]  lock_acquire+0x106/0x350
[  204.733190][T11472]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  204.733211][T11472]  fs_reclaim_acquire+0x71/0x100
[  204.733229][T11472]  ? kmem_cache_alloc_node_noprof+0x4a/0x690
[  204.733247][T11472]  kmem_cache_alloc_node_noprof+0x4a/0x690
[  204.733264][T11472]  ? __alloc_skb+0x27d/0x7d0
[  204.733278][T11472]  ? __alloc_skb+0x186/0x7d0
[  204.733293][T11472]  __alloc_skb+0x27d/0x7d0
[  204.733311][T11472]  inet6_ifmcaddr_notify+0xfa/0x1e0
[  204.733325][T11472]  ? __pfx_inet6_ifmcaddr_notify+0x10/0x10
[  204.733351][T11472]  __ipv6_dev_mc_dec+0x2dc/0x330
[  204.733370][T11472]  ipv6_mc_destroy_dev+0x33c/0x5a0
[  204.733391][T11472]  addrconf_ifdown+0x1561/0x1a40
[  204.733411][T11472]  ? tls_dev_event+0x745/0xf00
[  204.733421][T11472]  ? __pfx_addrconf_ifdown+0x10/0x10
[  204.733439][T11472]  addrconf_notify+0x1bc/0x1050
[  204.733456][T11472]  notifier_call_chain+0x1ad/0x3d0
[  204.733471][T11472]  unregister_netdevice_many_notify+0x17a5/0x22c0
[  204.733488][T11472]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  204.733502][T11472]  ? lock_acquire+0x106/0x350
[  204.733515][T11472]  ? __kfree_rcu_sheaf+0x1f/0x5d0
[  204.733536][T11472]  unregister_netdevice_queue+0x31f/0x360
[  204.733551][T11472]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  204.733562][T11472]  ? kvfree_call_rcu+0x9f/0x430
[  204.733584][T11472]  nsim_destroy+0x277/0x7f0
[  204.733601][T11472]  __nsim_dev_port_del+0x14f/0x200
[  204.733617][T11472]  nsim_dev_reload_destroy+0x288/0x490
[  204.733633][T11472]  nsim_dev_reload_down+0x8a/0xc0
[  204.733648][T11472]  devlink_reload+0x1eb/0x8c0
[  204.733700][T11472]  ? __pfx_devlink_reload+0x10/0x10
[  204.733719][T11472]  ? devlink_resources_validate+0xa7/0xd0
[  204.733738][T11472]  ? devlink_resources_validate+0xa7/0xd0
[  204.733755][T11472]  devlink_nl_reload_doit+0xaaa/0xc80
[  204.733775][T11472]  ? __pfx_devlink_nl_reload_doit+0x10/0x10
[  204.733793][T11472]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  204.733806][T11472]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  204.733820][T11472]  genl_family_rcv_msg_doit+0x22a/0x330
[  204.733832][T11472]  ? __asan_memcpy+0x40/0x70
[  204.733846][T11472]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  204.733863][T11472]  ? bpf_lsm_capable+0x9/0x20
[  204.733876][T11472]  ? security_capable+0x7e/0x2c0
[  204.733893][T11472]  genl_rcv_msg+0x61c/0x7a0
[  204.733905][T11472]  ? __pfx_genl_rcv_msg+0x10/0x10
[  204.733916][T11472]  ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10
[  204.733931][T11472]  ? __pfx_devlink_nl_reload_doit+0x10/0x10
[  204.733947][T11472]  ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10
[  204.733963][T11472]  ? __pfx_ref_tracker_free+0x10/0x10
[  204.733982][T11472]  netlink_rcv_skb+0x232/0x4b0
[  204.734002][T11472]  ? __pfx_genl_rcv_msg+0x10/0x10
[  204.734015][T11472]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  204.734036][T11472]  ? down_read+0x270/0x2e0
[  204.734047][T11472]  ? genl_rcv+0xd/0x40
[  204.734059][T11472]  genl_rcv+0x28/0x40
[  204.734072][T11472]  netlink_unicast+0x75c/0x8e0
[  204.734091][T11472]  netlink_sendmsg+0x813/0xb40
[  204.734111][T11472]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.734126][T11472]  ? aa_sock_msg_perm+0xf1/0x1b0
[  204.734143][T11472]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  204.734158][T11472]  ____sys_sendmsg+0x972/0x9f0
[  204.734177][T11472]  ? __might_fault+0xaf/0x130
[  204.734192][T11472]  ? __pfx_____sys_sendmsg+0x10/0x10
[  204.734211][T11472]  ? import_iovec+0x73/0xa0
[  204.734229][T11472]  ___sys_sendmsg+0x2a5/0x360
[  204.734245][T11472]  ? __lock_acquire+0x6b5/0x2cf0
[  204.734260][T11472]  ? __pfx____sys_sendmsg+0x10/0x10
[  204.734280][T11472]  ? futex_wait+0x2a2/0x390
[  204.734305][T11472]  ? __fget_files+0x2a/0x420
[  204.734320][T11472]  ? __fget_files+0x3a0/0x420
[  204.734348][T11472]  __x64_sys_sendmsg+0x1bd/0x2a0
[  204.734369][T11472]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  204.734392][T11472]  ? rcu_is_watching+0x15/0xb0
[  204.734413][T11472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.734427][T11472]  do_syscall_64+0x15f/0xf80
[  204.734440][T11472]  ? trace_irq_disable+0x3b/0x140
[  204.734460][T11472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.734474][T11472] RIP: 0033:0x7f81b819ce59
[  204.734488][T11472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.734500][T11472] RSP: 002b:00007f81b9124028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.734516][T11472] RAX: ffffffffffffffda RBX: 00007f81b8415fa0 RCX: 00007f81b819ce59
[  204.734525][T11472] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  204.734533][T11472] RBP: 00007f81b8232d6f R08: 0000000000000000 R09: 0000000000000000
[  204.734540][T11472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.734547][T11472] R13: 00007f81b8416038 R14: 00007f81b8415fa0 R15: 00007ffe54f76698
[  204.734562][T11472]  </TASK>
[  204.991849][T11472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  204.995447][T11472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  205.045334][T11472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  205.049002][T11472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  205.107650][T11472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  205.111585][T11472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  205.214938][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  205.217640][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  205.222380][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  205.225619][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  205.231266][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  205.233959][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  205.239839][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  205.242620][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
