last executing test programs:

519.84188ms ago: executing program 2 (id=3890):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r0, 0x100)
r1 = getpid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0xc)
r3 = getgid()
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={r1, r2, r3}, 0xc)
shutdown(r0, 0x0)
accept(r0, 0x0, 0x0)

517.660422ms ago: executing program 2 (id=3892):
r0 = socket$xdp(0x2c, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000000)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x40400)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x200, 0xffffffff}, 0x20)
r6 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r6, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "6b210acfeda5a0d6c477d874f77f552917"}], 0x28}}], 0x1, 0x4000000)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r8, @ANYBLOB="0b00000000000000cc001a8018000a80140007"], 0xec}, 0x1, 0x0, 0x0, 0x20000010}, 0x200080c4)
write$bt_hci(r7, &(0x7f0000000240)=ANY=[], 0x138)
sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x20, 0x1, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4004082)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000e0000001000000000000000000000000ac14142e0000000000000000000000000000030000000000020080802e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000fc0200000000000000000000000000010000000000000000000000000000000100030000000000000a000a000a0101010000000000000000000000007f000001000000000000000000000000ac141439000000000000000000000000ac14142c0000000000000000000000003c"], 0xec}, 0x1, 0x0, 0x0, 0xc000}, 0x4020800)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000083060101f7ffffffffffffff0000e8"], 0x20}, 0x1, 0x0, 0x0, 0x40c0}, 0x40000)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x21c000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0), 0x4)
r10 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)

410.71011ms ago: executing program 0 (id=3894):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffeff}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e24, @broadcast}], 0x5c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x9, 0x2}, &(0x7f0000000140)=0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@multicast1, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0xffffffffffffffff, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4)

408.729209ms ago: executing program 2 (id=3896):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00', 0x9}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000280), 0x4)
socket$rds(0x15, 0x5, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = getpid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r6}}, 0x40)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r7=>0x0}, 0x8)
r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r8, 0x0, 0x0}, 0x10)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x140f, 0x800, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x24004091)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r10, 0x1, 0x4000, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0xfffffa80}]}, 0x34}}, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffd44, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x44}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newnexthop={0x2c, 0x68, 0x400, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x3, 0x0, 0x12}, [@NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xd05}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1c1}, 0x20000814)

407.616002ms ago: executing program 1 (id=3897):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000001c0)={'broute\x00', 0x0, 0x3, 0xed, [0x0, 0xfffffffffffffffe, 0x38f, 0x2, 0x7ff, 0x7], 0x1, &(0x7f0000000180)=[{}], &(0x7f00000004c0)=""/237}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, 0x25, 0x319, 0x70bd26, 0x8000, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r1) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) (async)
close(0x3) (async)
r4 = socket$kcm(0x29, 0x2, 0x0)
close(r4) (async)
r5 = socket$kcm(0x2b, 0x1, 0x0)
close(r5) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x2cb) (async)
close(r5) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000100001082dbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0800f25ebb5707c0f57948db57c637e500000000e00a2cc74849d120734d2aa212c8441ccfae5b22cf8c9470fe6a28e57b9063a5462d67af149d3e052fb2436e131843ace07a5a92e432d12cdc2b36b01f237e2a63e71310"], 0x30}}, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000080)={0xa, 0x2, 0x200, @empty, 0xa}, 0x1c)

398.340157ms ago: executing program 0 (id=3898):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0xff}, 0x3}, [@migrate={0x50, 0x11, [{@in=@local, @in=@local, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0xff}, 0x0, 0x0, 0x0, 0x3000000, 0x11, 0xa}]}]}, 0xa0}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001240)={'gretap0\x00', &(0x7f0000001180)={'sit0\x00', <r1=>0x0, 0x700, 0x7, 0x0, 0xbaa, {{0x1a, 0x4, 0x3, 0x1, 0x68, 0x68, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast, {[@lsrr={0x83, 0xb, 0x6c, [@rand_addr=0x64010100, @remote]}, @end, @timestamp_addr={0x44, 0x1c, 0x89, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@empty, 0x9}, {@multicast2, 0xf76}]}, @end, @lsrr={0x83, 0x7, 0xbf, [@loopback]}, @timestamp_prespec={0x44, 0xc, 0x61, 0x3, 0x3, [{@remote, 0x2}]}, @ssrr={0x89, 0x17, 0x84, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x14}]}]}}}}})
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000001280)={<r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000013c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50)
pipe(&(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
splice(r5, 0x0, r6, &(0x7f0000000a00), 0x800000000000006, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, 0x0, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001440)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000001640)={<r8=>r0, &(0x7f0000001480)='[-,(:\x00', 0x100, &(0x7f0000001580)={@align=0x77, {0x800, 0x26, 0x2, 0x8}}, 0x1, &(0x7f00000015c0), &(0x7f0000001600)=0x5})
bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x2, 0x4, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x3, 0x2, 0x6, 0x3, 0x100, 0x8}, @alu={0x7, 0x1, 0x5, 0x2, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x80000000, 0x1000, &(0x7f0000000180)=""/4096, 0x41000, 0x8, '\x00', r1, @fallback=0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001300)={0x5, 0x6, 0xb, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001680)=[r3, r4, r6, r7, r8], 0x0, 0x10, 0x80}, 0x94)

329.052283ms ago: executing program 0 (id=3899):
r0 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0xa, 0x4, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x18}, 0x922bac8576b92dde)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r3, &(0x7f0000002d00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x209, 0x1, 0x5, 0x0, 0x400, 0x6}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x9}}], 0x48, 0x44011}], 0x1, 0x4000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000700)={0x54, r5, 0x1, 0xfffffffd, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0c5}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448db}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES16=0x0, @ANYRES64=r0, @ANYRES16=r9, @ANYRES64=r2, @ANYRES64=r8, @ANYRES8=r3, @ANYRESOCT=r9, @ANYRES16=r2, @ANYBLOB="ee6b7ec415995c7f02cf66a5d646fbbe5bb0670a36409f4b77946eeef41ed60ed324c63613d6eb29468e5eb73b0a0f19ae03d98c101c3ebf9ab5c25ed2b3a46f85a03a5903ffe712824745e7b7d6e2a7e77d738479074593ab75e3c4b8326170373d867ae8f8e3d8b6f3c85640b5ffb2b550b6c036bd590491f40a6cda0e11de80807316e0a053faff21a9e0f4690cec58a1c0d2c38a334f4853491b8738f8a07373becdcfedcb8c89f56b49dc208a5820efc3bf86dc3c8e8ac86c3f270b2178fbf7ab4d3ec5981628604f368ff958781598752584cdbb74f471dc20d58249d126d62e8a6064c3f54dbd50159ed62068a66fdff902944f38ead3041236b668dea43fcdfe1fd43a8b38a8945dccf420780f6e10989366cd9bdf9200e9348d6fdbba52dfee6b65e0070fa366aee65af67b02a2858ff9566ea34abba87120642582f4b0c626c58e6493d19c0287d34464a345f17095d36459fd88d95534bb53f8e702775ad7c9398d41dd2a8b7ce89af529c9cdc739b05a86fc05f48021c4eb2516c37166f2333e68a539dfc5449a59b43c9da9e8a1b7cbd7f0527afae35f2ed35d477530b52cfd4fb4f1fc9fe2c780f88bb0378de4bff09f4a45362a5043f8677902eefc18be1ae4933ea2cdf6ed901a60761557881e1122b5b4262680bc2c50e0c651a065118a09f79acdc54577b71703c0b584ecfc859d1ef662dfdfa3372639b90694c37b81760f9268ebde557931f309088b322f8484b4f92c4c7a7c6dd01e282ac1354af4fb36873f946dd8064be8b215384f6101d33c7fb6805db971307e249bfdd0e0df6925097d1b621515b9c2ae7a9770259dae6a38844091277b88530ec3b5852e30e35cccef7e2b7ab611549769829117698404d64b18809abea9c94d9003db0f9c84cd8b64abbb2bd305d41a9cfe770f71fd035afc3d97f83ec939dcd802eca09edd59379862b1b942d6badbbbfaaabd7191fa29d4c1581429f02fc836b275dda2c8553e0e8c6a0542ab1ccab8ae33d6171f7587480fa704ff6f9be1e92b3729720c21d75e071aeac819a881872463f045da524be4e94c7e70588b767f8254d9c711271461abbc002d9047287cc61a9fb71000d8fea713ea77f22cebb556c9f8c79aad154963db74d5e5e5b69e4f45030669f0a8636069ef21d872bee09f99b424f721facfcb1e33dad9d6ed04950064301853f90e8f52197df35d027c79b7446029e713cde10d8648f497c21f5b49ecfcccc3eeccd9b3b8ea91cca67758edf6f87094a83cfaffda913aab6bd320fd327d40ce8933d5cc205156f984e0c3c3057304cf9f5d8311dc5de10e2a4d6dd650fa9c65338ccc1d05b22ad8313692c4e34ab36e25b550a9f20a52bafd907063d0639ece49be2f51562a596f8e31aae2713ebc58554c8da901b83b0c45c98be20200625f9cd1416749bd26601eb23d51613ffacb4eebc6b0cc76fb09c3036341447912575d3eb2eeb567a6923525958435844b4ea3a5f595a305d86841423d75db1a7d4fd33cca1f08c5b5ac37560461d00dfe03bd6da9d8210724992743cc9b1f5243ed83daae6e555a1392dd81c81081db40abbce5ece5cb4b71fd668eafa83bc91523135f485d7b56661cc18355a63ee73253038239b1ba04d244e1dfc7b9efca35ef4b2899b3700b0f5e4769a301dd9ba3494ba496ebe1da1404741b51e961b4de3d53e0eeaa8c65b0efd1e0d29c0734566855b2b847d41706c241b4c7aa2d684f89ba3e35eb679bd3a04b006b800055312932f57a5b255bff730c8ca8b9536e41175592e486e7caf218e447b52b81df5a99f7fe83fbaa1f78021b185cfbc2f23a23a00f43dbdabda6c33f767940e30cce5065eaa9b7316084714ae4586b9b54fad297b24df99412a0b9526d7a66e7e73c54addb57b4e7216d37345cbaf4a7aa5f49e8a6b9274879929b18a997a6633179574f2e96af9ce6a13c0fa39c68c891db18aa63f8d75dbe775db2bc57a770d6762a6c773bbc33613c1cbb11c958aca7d7dab763ec29d39376912480797bdee7eb30bf1646cd8d49e2fd63dc690831f6ef9d57dbf6b069d5381680edd395498a9bf10a35ee75f380fd720e2d2abe98d3f844352e65713166e3ad3999a2bea29dfcf7c6b43d107da1473f736bfe9dfd4023ba5d08c29bad7b558354cf50ae2d583ee174d8a3c0e3c8d81d65521e06251e458e26c41c88aed4f7aa38aedc404575615fd8f0b836e52d78a354b0d94aa482db170f953bffe28ad013a2f5c6c9aa58ac4f1f245b4eb2d01fe583dd507d674a46d825ef42a0720e828ce971ad1c33a176ad34af57869e4382559f7cebdc1f7588d696011c4b164378d662a527d1ec13e07fbd9ff99cdc3526b9a0f03233c1ed254a6637964381e80e7373bf729a65aaab9548613b0e31f82c9dd4f01c98ce21d46e0a6e859c27a1dcbf7f2bedebe371a2ab8244c0c2fbdad39ea530960e5e5eadaf50539369cc599dbff664d468a6cb26fbc76fe0207503aac48d01539188d88d471f6068ad1b8d008ea8166ddb39a18a6f5ef4f3a475c180ca9fa5b8b1620b9591c16383302594b8aafd38ee253a7c869b40de0bf1a0b596395e00590aa895ff1b9d0edc20d2b9cdc4a3bf30daa0d5ac0d0d89f1615be2fedd9f4aaf1a38ec6f02e203aa4218a4e8032d3909d25cc2e33ed7a9eaecc0ea109ea4456c700f6ec416bd778b32444407c2cb19bccfe9edc6eec03fb94dac9bb4c2bbba11c225e6e677310a998eae7def79261a57191afd42d325bdec7e65ef2042d02db41944c4f4933c02898487c39345476c977fca4779239da11d2282c9deeb631c93b67dbf894c0f7b1c1e807238865bfcd706e4d4881a268b0fc6ca087559d0c0bc81107ea6dd5fb399b3b3eb94ce45067c317974084c5e662ef5f7fe8b636b121f9ed1293ee24b55a45c7aadd801b8723b023cfefca0c6afd976b12206c7d827f786f833c1bcc9a64f3c578362d0d300bffca8a58cc5d0db1e5ac219f84030a15d2e1ac38f0a15cf249eddb16552acf0f8dc7376cde4da85c48d0bf1c14e554c3f2ff0a2500a03f43298c1b794484c8186b2e570ce9d0676ad705fbce75b73a5636151c405d584fc3f9bd87dae57b88284bc1bd236069b8d584b5ecd6373577797be6361d667c2685e5f8ce77b09b47d4ae8bbba722943938827c80a1933c13248b6f5521e1024b9ec3365fba040918aee7fc95d3e47ec0917f953a72cd8768d3098f40a1fef52bccf91afd87ce819435a222cbb14ee3f9bc1caabe08969bf619f4b534de212bae4035597d4be0a8f58fe021073d4c1270c18a0374d4c7d314f819a60e9ad4df35919a5d04fe1fd2bac909d521f2e882ba9c6c5400148efd1269248d435edac2638893ae7c2a8a1579d7d97d0a533eeff09739a5f5d7b05f865a15be809088f485eb6e921c49bbf8644727aab773d90e90ee5d24d58f1f349a58b2e47e58c6cabe396802a2c808b1ba37f0336fed1125f755e9b7ed65a4ea1679dbda88ad4180a46d070f047d191ac6049f48047a0ae11ad551e4a9d85204f21ed59567fd02fa0cec6cc6bcfcde44c7e0131a4bb41df50de0799cf19be5bfba24d1466b0d570528597c677432153f3cda74b9636dd44ad3e3b3480cf1b4c16cd5d9ee7204f50f0c81f498e3f25d0d557e06992cd717fb3d706851f75bf2127220e7bc29ac0e43c432a99136fd3a77a0855656fe904d3d90320e3ae45a8b2bde82ea01cf8fc8e3cc45c79b0d5d08ef64e570bbcdc824c12542d8038732613b3763b4fc00e877f44a466ed47375f34783367dd59e4a9cf3f21d5680c288b74e77dca6aad6c330736384b3c56b028c4f308a134d3d4ab5c47ca3d5899236cb02d79d29ac7c608e7e184133b4ce329063e9a441033766faf9eced4db61b29627ddec8f3a97d051a3a3434616d6dee5d2a2d5d4d3ca241dd7a54e3f2589532b408ab0df53f5aa91c5db8f79e0167d7176de7f5e68e79cb670fdaad1f694dab678ca8a8c0aac6d9ea0ac0b9dc81cfcd9d0ca61b518595a4992e479efe754a772e7031e0ed6bcb1dd9639a00b6b80bfb651ac15a2d8d901e1aced533c7e413f484a35aaa14a6f8ed85690a894cfbc2a2ec1f5180a5a5b31e73c29fd8f08593a3e90ef9599ab589eef3d3015aac554f77db56cb1794cc294cfae8b5d449d3b93b49183f9cdc7c706329d2958c6a5b7ee26b721771b1c89dcf55fb0fcfd8c3e9ea0faea85507669c180d194d004251b41c4c44daa10a23ffbb507f0551e7399c7e9216cdff52c1a3c05b70e54b8f69ffd711d6b50673bb1d5613ab18915946ec7d22f782e041bb95690c8bb3cce695109df47e409b31651c7bcf13b392af8b670cb12dd7b3c07f3bbb4c1b7cd1bc23e656c63d9147f0c524d1caf4d022ae765a21d29f1b8ba0c982a89ea60aa455bb7228cbf65044fb292fd902d744139da853e1bb2f3f9290889ae713332851ab3c162923b18dcf538814dd28695cbdd159ed877458f53b6f27bab81d70448471d487f0b14e7d0fe2c78c91ea314379bc93b1418a5d87b2d3be683780cf1b6f7570d0f3b2f99d95e3cb1ccda0ba0493b74eb60a0e49f4f183815866a31240d76ae610e2c964942900c52ec0d9225c2513d984255783a89f9d0b1c67afaab564366abf8fc6154d3bd4f11c30c44d8e4bdc51f2b71599b36ba15a7e5dc9773fdc56c44978bc5371962d8ef64b2d892f895688dbeba0cc0b6a47bdd5aae9e754f7577dbdf7709ad218c707d636b538f8ba97d74d48c4a4f694e16dda3f0c0f3941800c64b74bfffc58c8431b5012f399fd0cfaee362166f4558455c23c36cbdee215057f6b5f931526210a4401f6fde047bae8e78db5dc5a4e7a2a61fee7f923393fa1178a842a6456c104cc53d6651f3309cc5bb660e32f5a6badd5560584320a31c88f165c4ba7a54063cc83066602e343897555971d93b23cecb8a236bb43518f89f1a2296fcaaa97469fcc2932fb316d0e9a09e1c2be3ede9ab42293da8cf87a53416f8c22ab3d5bc6581740658f0f47efa60897f5a229b85564361359c9f8974b345e292d1b75344f19d448d947189040ae492764b878fcc99703646a8961eb0aa518208b7d059e37793619ff394c30e3ec501e4e9a24da6ad831a7aa84881497be6f2f89ab6a400eb3edea249092887c8997aedee03e146dbc27dbc6b080921d98e2a4720235ba90c1914ffa6e8e6d8c1230992756e5956cc5901d63cf9c6b914fbdbb47145b139efc2cf3c81bc1bf99c2fa19afb6151043ad5af9e11974ee7be517acc1382a838b86e83d4997dfa295aa4a359bee482ddb5aefc62eb7ae2f69b2990724ece74a41c9d10b837924ab7d1165fb1eab39c241febd4c7dc76d15e50f4b586ed2a0f65b3cae53e754399c2ba4cbbd03d57efbc40de8d66bc4f47018d368f2358b95f4c51304f027ed81375d5542982e2e9ef68cb5cce699b0b1feb12377adbb8dc94e2b8a6035c08f9d4b6f300cabd91b1a10aa9f28d0df536fa6e073b2656b7a6f15f6ab9c8f25e650da074ed408d2e55cb4ce6c8d6529f0e756d1f535eb10750dbd1ab8d9a10b5017196e0939beafec49e3903bab78a4e1b5fc2b8392cb6b402dfd7b938ac9161e5773b8ea1452b1dc05b8edddf82c2d09abde14411efa05f87e683b93c05e93ee166fdca2068e9116bc7055c7bda41c2bbce5220109dd5ac20f5271dd41ddb666628716f7687561636701ac40a1da2eccb8c5c2f7a5906f756c3e8e95d5225ba0c12961ab602e87b93e4edbb1322295e185f21b4201176"], 0x10)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r13)
sendmsg$TIPC_CMD_ENABLE_BEARER(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r15)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r15, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"})
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='\a'], 0x10)
connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x3fff}, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r9)

328.084557ms ago: executing program 2 (id=3900):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0xbb}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=<r6=>r5, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES16=r2, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES64=r6, @ANYRES64=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
connect$inet(r1, &(0x7f0000000240)={0x2, 0x8, @loopback}, 0x10)
sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac141410bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMRRU(r8, 0x4004743c, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r11, <r12=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r10}, 0x20)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=[0x6811c579, 0x100, 0xd, 0x7], 0x0, 0x6c4b, 0x4, 0x0, 0xffffffffffffffff}}, 0x40)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r12, &(0x7f00000001c0), 0x0}, 0x20)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x30, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)

230.172612ms ago: executing program 1 (id=3901):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008510ffff02000000851000000100000095000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) (async)
r2 = socket$igmp(0x2, 0x3, 0x2) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
r7 = socket$kcm(0x10, 0x2, 0x4)
connect$inet(r2, &(0x7f0000000240)={0x2, 0x8, @loopback}, 0x10) (async, rerun: 32)
sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac141410bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c) (async, rerun: 32)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) (async, rerun: 32)
ioctl$PPPIOCSMRRU(r8, 0x4004743c, 0x0) (async, rerun: 32)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff}) (async, rerun: 32)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) (rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r11, <r12=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r10}, 0x20)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r12, &(0x7f00000001c0), 0x0}, 0x20) (async, rerun: 64)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x30, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)

228.953077ms ago: executing program 2 (id=3902):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002380)=@newsa={0x138, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@empty, 0x4e20, 0x0, 0x4e23, 0xfff, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in=@multicast2, {0x0, 0x0, 0x2, 0x7, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@algo_crypt={0x48, 0x2, {{'ctr-camellia-aesni-avx2\x00'}}}]}, 0x138}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/84, 0x54}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f0000001680)=""/114, 0x72}, {&(0x7f0000000040)=""/75, 0x4b}, {&(0x7f00000001c0)=""/220, 0xdc}, {&(0x7f00000002c0)=""/127, 0x7f}], 0x8}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x9, 0x2000, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, &(0x7f0000000080)=0x5d)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
clock_gettime(0x8, &(0x7f0000000280))
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r4=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xa}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x51}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x4)

147.195905ms ago: executing program 1 (id=3903):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x24000800)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000100003042dbd70003d00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000380012800b00010067656e65766500002800028005000d0001000000140007000000000000000000000000000000000108000f404f"], 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x54}}, 0x20000000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6tnl0\x00', <r4=>0x0, 0x4, 0x0, 0x40, 0x7, 0xa, @remote, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x20, 0x7, 0x5, 0xfffffaa6}})
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r7=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6}, 0x90)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x11, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x3, 0xfc, &(0x7f0000000600)=""/252, 0x41000, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x4, 0xe, 0x9f4, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000780)=[{0x3, 0x5, 0x1, 0xa}, {0x1, 0x5, 0x3, 0x1}, {0x3, 0x3, 0x2, 0x9}], 0x10, 0x8001}, 0x94)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd017, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x7}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x18, r2}, 0x18)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50)
r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50)
r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0xffffffffffffffff, 0x8, 0x28}, 0xc)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r15, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94)
r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffb}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x7f, &(0x7f0000000300)=""/127, 0x40f00, 0x0, '\x00', r4, @sched_cls=0x2e, r5, 0x8, &(0x7f0000000480)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x4, 0x3, 0x3}, 0x10, r7, r8, 0x8, &(0x7f0000000b80)=[r9, r10, r11, r12, r13, r14, r15, r16, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x4, 0x2, 0x5, 0xa}, {0x1, 0x4, 0x1, 0xa}, {0x3, 0x1, 0x3, 0x4}, {0x2, 0x1, 0x8, 0xb}, {0x2, 0x2, 0x5, 0xc}, {0x0, 0x5, 0xb, 0x1}, {0x4, 0x4, 0xa, 0x5}, {0x3, 0x4, 0x2, 0x6}]}, 0x94)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0)

145.817106ms ago: executing program 1 (id=3904):
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
sendmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x4, 0x4, 0x0, 0x3}}, 0x80, 0x0}}], 0x2, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="dcd900d3d632b62900000000ffdbdf25017c0000080001804000000004000280"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x1}, 0x6)
ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f0000000400))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r5, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@getqdisc={0x30, 0x26, 0x1, 0x70bd2a, 0x25dfd3fe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0x10, 0xd}, {0x10, 0xc}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000)
r6 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x10, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x34008098)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r9, &(0x7f0000002880)={&(0x7f0000001f40)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @loopback}, 0xecf1}, 0x1c, 0x0, 0x0, &(0x7f0000002540)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000e8000000000000000a64000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000480340001800c0001007061796c6f616400240002800800044000000000080002400000000208000540000000000800064000000002140000001100010000000000000000000000000a"], 0x8c}}, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000001c0)={'ip6_vti0\x00', {0x2, 0x0, @multicast1}})
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000002c0)={r0, r3, 0xaf6, 0x2e, &(0x7f0000000280)="04dea7ee8296808926e691e08701ca60d01d9e00c2bf127966b786ab592a07e246da0de4f2ac1a788110c0cf9ad2", 0x6, 0x4, 0x8, 0x1ff, 0xa, 0x2, 0xd, 'syz0\x00'})
sendto$packet(r0, &(0x7f00000007c0)="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", 0x11b, 0x90, &(0x7f0000000540)={0x11, 0x9, r8, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000380)=0x1, 0x4)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)

144.40142ms ago: executing program 2 (id=3905):
socket$packet(0x11, 0x2, 0x300) (async)
r0 = socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044)
socket(0x10, 0x803, 0x6) (async)
r2 = socket(0x10, 0x803, 0x6)
socket$packet(0x11, 0x3, 0x300) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0xa, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000180c2000000080047f800240000e00002119078000000000000000089035544041a930000000000000090"], 0x0) (async)
syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000180c2000000080047f800240000e00002119078000000000000000089035544041a930000000000000090"], 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', <r5=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', <r7=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6}, 0x10) (async)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6}, 0x10)
sendto$packet(r0, &(0x7f0000000000)="ea92d2c62f06af98e71261176511dcf7709bbb3a5a39d941a80a2a591af8233a90d53fd2179462db29467833ae0bb191be3e67ba1efa029d159e67a72536154d1efd482ead06ba4e3e881e43bd1274f831a670d6870d37034a097fcc2a7f20a8c1a9a1addcc623d86dfd4fee46a72afde3b0e0e2d635102c91ad6ef04735eee5f19ccda69bd54cd108bf7a020dc87f02c4851cd2ee6308ff97882e82d192be7d21c3ef9f553c33247f9e204eb66812fc4644346154476744", 0xb8, 0x20008080, &(0x7f00000001c0)={0x11, 0x3, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
getsockname$packet(r2, 0x0, &(0x7f00000000c0))
r8 = socket$unix(0x1, 0x1, 0x0)
socket(0x2, 0x80805, 0x0) (async)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, 0x0, &(0x7f0000000100))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xfff3, 0x5}, {}, {0xa, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) (async)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'geneve0\x00', 0x2})

144.133894ms ago: executing program 0 (id=3906):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x0, 0x5, 0x307}]}, 0x40}, 0x1, 0x0, 0x0, 0x40081c4}, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r4=>0x0}) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x20}, 0xffffffff, 0xff, 'pim6reg\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x1, 0x3, 0x1}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x16, 0xffff, 0x8, 0x8001, '\x00', 'syz1\x00', {0x288}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @initdev={0xac, 0x1e, 0xfc, 0x0}, 0xffffffff, 0xffffff00, 'vlan1\x00', 'macsec0\x00', {}, {0xff}, 0x67, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1a, 0x300, 0x80100, 0xffffffff, '\x00', 'syz1\x00', {0x7fffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) (async)
sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x138, r3, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x4c}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x100, 0xbe, "0b86563d2a465ac5c90ad950021b0044912d7966d67fdb49bcfe580a8cce4b8cfbe19f05c7d7804fda70b94ae113d9c4bfce713a5cc8606ee12a01fd0757891b1f98aea6a5c737241b9a069bc8f6c89dc31baa9df337c71f05bf292d8747cca1b19efa94299c787148eaf2b1c3b125b6822b85402222b68f8d802aca28160c56a470c149ff4339800c6cded38299a9ad7b390b53c78949532f8b044f759a34993d2bec89f01259cd53446804a5f292d63d96dfc87487a211fdb0fa10c3328091277dc3fe240e44d16a3619dc02b810998499db603742c68fa61c6ba6ff168107d2eac4d9a39cc4fe949e0d5d071af84cc8e51f1d39cefcd66244a1bb"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xd89}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x138}, 0x1, 0x0, 0x0, 0x8890}, 0x4044840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESOCT=r1, @ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

69.890727ms ago: executing program 1 (id=3907):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48)
r4 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r3})
sendmmsg$inet(r4, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)="7fe1b33315b1fd8cd2523811f49a284c7da2c2dab8d7a3562386f41e36be53b97c6eb951e4cd864a0d49c5251ea819d1fb396061defd1768694a459ea9b8e4c53f8b742f21f50ec2a79795f2e2f94bf0da0d30ad6eac955cedbf65b0838294e2bcea1cbd94f308f0774bd9f4b60e9d6a1cf16cf7e6f45924e9d285da684857411a5b3d53f20d6832d37683ab1b1f2a8221086025", 0x94}, {&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019349e1be5cf505a9b501fbab07396bab3afec71f9767193f0b5309295e6d6188ce88368c55c5a2958d8800a3c2b81faff89887512fde0509148e68ab9788a6a6f8513e442607a7154e11fa396094eb9cc404b6b408c2c38b1ad77e8f41cbe776bf9a3e6961f39350c4a0c157f4dd8ed04ed53312ab6db19962fdc0d0f8cf23aff69951ac76e2deb4f3e8cd737a4f232eb5554096503e38701", 0xc0}, {&(0x7f0000000400)="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", 0xd0b}], 0x3}}, {{&(0x7f0000001400)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001440)="85ac6755b3764d9d8071a63907858eec8443bec7adaaea2c917ac41790a95d62511755a808b50539fb719daae0341b7d172229c58deb7f2d95c793aee3365bd04cc81c838294ad5237c74cd19b3ea8431a190ea1caf0524e623f56791d2d55bf1a24c7c7b42198afd133af01bbbd167d04159bceb80648e2e740f1d58b762d50ed842933815a8f167dc01363284d8f27e69a83509fd9f1dd0cdeca61ffdb9524f408d698154fbb2ff5381369933e1815ed1703e58405478629df4311893798ead4acd67bc6ab48", 0xc7}, {&(0x7f0000001540)="2aba9e4cc9b55274aa3a5dbd35f30d62249f7226e2ffa535df463037a323c732a94981bd91b9d134d79106da4929ddf57f26696b8911da0e8126ca4c7a6f10192c1ef6dc0191c8a10b6526df22206120b8767c1a1ec3be23fe90f3e3c0092aca4116e03096593f7964ac3c077036e624ff82f8348afba5254a1105", 0x7b}, {0x0}, {&(0x7f0000002980)="c61fc952e32af9d06ed135ef945ba121afc7dcbb95e00a15a1aebe2c9d63854ab7d8f30b55ce072b49867372e0c57347c9f93f5d57bbf8ab12ae426441b805834fd2c17e1de7d5e36d8fc36254b673a7ca8be8800bfd25196e325a8beb921abd1654c40b52cd19a01844", 0x6a}, {&(0x7f0000001700)="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", 0xfe}], 0x5}}, {{&(0x7f0000001880)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f00000019c0)}}], 0x3, 0x40)
close(r4)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
write(r5, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000015c0)={0x6, 'wg1\x00', {0x392}, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x0, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118ba000000000095"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'vlan0\x00', <r7=>0x0})
r8 = gettid()
r9 = socket(0x10, 0x803, 0x0)
shutdown(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)=ANY=[@ANYBLOB="0200000000000000568ddc26eb684b9a00007400f682ef3428134be56c8915f44cce7a7c3eb940e9048a1b", @ANYRES32=r7, @ANYBLOB="089805000750050008001300", @ANYRES32=r8, @ANYBLOB="1400350076657468305f6d616376746170000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @generic="3ed73cfccb"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x400c405}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)

69.465096ms ago: executing program 0 (id=3908):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev}}, 0x1e)
connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @private}}, 0x1e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000001c0)={'vlan0\x00'})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', <r5=>0x0, 0x29, 0x40, 0x7, 0xffff7fff, 0x4, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8020, 0x8000, 0xfffffffc, 0x4cc1}})
socket(0x2c, 0x6, 0x7)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=ANY=[@ANYBLOB="880000001000030500000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="40000000002200005c0012800800010068737200500002800a000400aaaaaaaaaabb000008000100", @ANYRES32=r4, @ANYBLOB="050006000000000005000700010000000a0004000180c2000001000005000300030000000a000400bbbbbbbbbbbb000008000100", @ANYRES32=r5, @ANYBLOB="0a00c725fe156a42677f0000"], 0x88}}, 0x0)

760.253µs ago: executing program 1 (id=3909):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1ff, 0x8}, 0x10, 0x0, r0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x102a, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1401000003010103060000000000000001e40000082edb45cc61d598c82329eb9d30d460795340a0fe23e46ccd6ecdb32eab87a11b2ce9dd78990c0524d454a19a26e9169cfb661af2f24a8b3793d6c490f484f951e86d967749078c095e4ad0470fd87a8473e93fcfa7d23e2c3e6375bd0000400000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40008087}, 0x2d1c97c1054d85c4)
r3 = socket$kcm(0x2, 0x1, 0x0)
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
read(r7, &(0x7f0000000080)=""/38, 0x26)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r4, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000980)=[{r9, 0x1}], 0x1, 0x0, 0x0, 0x0)
epoll_wait(r9, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0x7, 0x403}]})
bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r10, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r11 = socket$kcm(0x10, 0x2, 0x4)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r11, 0x4058587a, &(0x7f0000000500)={{r11, &(0x7f0000000080)='\\#\x00', 0x28000, &(0x7f00000000c0)={@_ha_fsid={[0x4, 0x7fffffff]}, {0x2, 0x5, 0x724, 0x797}}, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x2}, {[0x5, 0x7, 0x69, 0xeb82]}, 0x3, 0xa1, &(0x7f0000000440)=""/161})

0s ago: executing program 0 (id=3910):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc}, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4)
write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='+io0+devices +net -hugetlb -blkio +s '], 0x2b)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001280)="27050200340f14000600002fb96dbcf706e10500000086ddff48601969ff1145ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b000000000000002143ce554b6df654cb01736f7c4e2eaa2eb5035d135958831197684b763f499a2fafc724413afe7a9fcbb58fc9e5a0a8af5ebb84f5b53e61532895bae8d3f0f02cc4e729883f078a2552275a1486218834476323059f91a91c500e035c5c70afee9d16b5acd7cd4b94e3600c9c69aeb79e259488e089b1c59bc6fca826d38a7b3229ccd5b1bde01e63f1edd3c0f933e5c02936de55f2a4ee254bbe8aed1d2260c97783b615850d2e8b7f0c4a80715bed3cf1adb2dafbb7672328e2300fa2623704da7b9889a57e231be318f5eb6d294a302e75cdade1a329bd280e4f65202e3e75307c544fde0fbb9928e6752d15bf99e02c3d366fa091326029d899c493df701ad6c37c55598f3a19e748f58475398fda5f6153cb11a4ffde399dc21f96bed56d31fd6bfa0a75", 0x176}, {&(0x7f0000002200)="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", 0xe07}], 0x2}, 0x800)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000000))
bind$alg(r1, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000400)={0x3, [0x0, 0x0, 0x0]})
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000440)={'team0\x00', <r7=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="02658edc15824614fd61908d0a89e0a592f657fd86d1232043c35bd7a3a9d7058f1f8739b461ef447c2b65721c724f3bd066aa031ffefa9fa1"], 0x0}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fddbdf251b0000000400cc0008009a00"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1e0000000100000008000000a209000015060000", @ANYRES32=r5, @ANYBLOB="001000"/20, @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB="0200000003000000000000000c00"/28], 0x50)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41040000015001001800128008000100677470000c00028008000100", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x800)
close(0x4)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)='K', 0x1)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="98000000020601020000000000000000050000030500010007ff00002c0073c8060005404e24000005000300080000001800018014000240fc01000000686173683a6e65742c69666163650000df89d85e7714f460628c073405000400000000002c00078005000700ff0000000500150009000000080006400000000708000a400000002008000940000000060500040001000000"], 0x98}}, 0x800)

kernel console output (not intermixed with test programs):

 Interface  may have been left with an inconsistent configuration, please check.
[  284.674441][T15063] netlink: 'syz.1.2363': attribute type 15 has an invalid length.
[  284.745936][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  284.756413][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  284.776172][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  284.786266][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  285.018956][T15075]  speed is unknown, defaulting to 1000
[  285.036817][T15075] lo speed is unknown, defaulting to 1000
[  285.239089][T15079] syzkaller0: entered promiscuous mode
[  285.241362][T15079] syzkaller0: entered allmulticast mode
[  285.299664][T15075] hsr0 speed is unknown, defaulting to 1000
[  285.447796][T15085] batadv_slave_1: entered promiscuous mode
[  285.470618][T15085] batadv_slave_1 (unregistering): left promiscuous mode
[  285.895941][T15094] ipvlan0: entered promiscuous mode
[  285.930050][T15102] __nla_validate_parse: 4 callbacks suppressed
[  285.930061][T15102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2372'.
[  285.979104][T15096] netlink: 'syz.2.2371': attribute type 2 has an invalid length.
[  285.988465][T15096] netlink: 'syz.2.2371': attribute type 2 has an invalid length.
[  286.048147][T15106] netlink: 336 bytes leftover after parsing attributes in process `syz.0.2373'.
[  286.084833][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2374'.
[  286.094400][T15110] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2375'.
[  286.162483][T15112] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  286.166195][T15112] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  286.168933][T15112] veth0_virt_wifi: entered allmulticast mode
[  286.174442][T15112] veth0_virt_wifi: entered promiscuous mode
[  286.182108][T15112] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.223367][T15112] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.326921][T15112] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.401767][T15112] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.493852][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  286.503598][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  286.531689][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  286.557048][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  286.643482][T15132] Cannot find add_set index 2 as target
[  286.738955][T15139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2384'.
[  286.787294][T15139] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2384'.
[  287.022592][T15160] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2391'.
[  287.337312][T15199] IPVS: sed: FWM 3 0x00000003 - no destination available
[  287.387059][T15203] netlink: 'syz.0.2399': attribute type 1 has an invalid length.
[  287.404265][T15206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2400'.
[  287.419294][T15203] 8021q: adding VLAN 0 to HW filter on device bond25
[  287.424037][T15206] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2400'.
[  287.438649][T15203] bond25: (slave veth33): Enslaving as an active interface with a down link
[  287.443512][T15203] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2399'.
[  287.472006][T15208] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  287.496039][T15210] netlink: 'syz.1.2400': attribute type 28 has an invalid length.
[  287.558253][T15213] hsr0: entered promiscuous mode
[  287.655278][T15212] hsr0: left promiscuous mode
[  287.899825][T15220] block nbd0: not configured, cannot reconfigure
[  287.933793][T15225]  speed is unknown, defaulting to 1000
[  287.937445][T15225] lo speed is unknown, defaulting to 1000
[  288.026567][T15225] hsr0 speed is unknown, defaulting to 1000
[  288.387554][T15245] erspan0: left promiscuous mode
[  288.420820][T15245] ip6gretap0: left promiscuous mode
[  288.432281][T15245] bridge0: left promiscuous mode
[  288.435400][T15245] 8021q: adding VLAN 0 to HW filter on device team0
[  288.463201][T15245] veth0_to_team: left promiscuous mode
[  288.475505][T15245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  288.480522][T15245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  288.486217][T15245] hsr0: left promiscuous mode
[  288.488563][T15245] veth1_vlan: left promiscuous mode
[  288.492670][T15245] veth0_vlan: left promiscuous mode
[  288.496054][T15245] veth0_vlan: entered promiscuous mode
[  288.501865][T15245] veth1_vlan: entered promiscuous mode
[  288.513522][T15245] veth1_macvtap: left promiscuous mode
[  288.519161][T15245] veth1_macvtap: entered promiscuous mode
[  288.526683][T15245] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  288.539041][T11129] lo speed is unknown, defaulting to 1000
[  288.543780][T11129] sqz0: Port: 1 Link ACTIVE
[  288.576754][T14257] bridge0: port 4(team0) entered blocking state
[  288.579252][T14257] bridge0: port 4(team0) entered forwarding state
[  288.585313][ T5675] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  288.588119][ T5675] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  288.600727][T11129] lo speed is unknown, defaulting to 1000
[  288.603042][   T24] hsr0 speed is unknown, defaulting to 1000
[  288.605236][   T24] syz2: Port: 1 Link ACTIVE
[  288.609295][ T5675] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  288.612247][ T5675] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  288.858991][T15250]  speed is unknown, defaulting to 1000
[  288.863701][T15250] lo speed is unknown, defaulting to 1000
[  288.993468][T15250] hsr0 speed is unknown, defaulting to 1000
[  289.272870][T15264] netlink: 'syz.0.2415': attribute type 6 has an invalid length.
[  289.276124][T15264] netlink: 'syz.0.2415': attribute type 7 has an invalid length.
[  289.280088][T15264] netlink: 'syz.0.2415': attribute type 8 has an invalid length.
[  289.362364][T15267] netlink: 'syz.0.2416': attribute type 1 has an invalid length.
[  289.718197][T15285] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[  289.960417][T14258] wlan1: Trigger new scan to find an IBSS to join
[  290.133741][T15306] vlan0: entered promiscuous mode
[  290.136153][T15306] veth0_to_bond: entered promiscuous mode
[  290.198097][T15303] mac80211_hwsim hwsim28 wlan1: Caught tx_queue_len zero misconfig
[  290.274667][T15310] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  290.281434][T15302] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  290.285502][T15302] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  290.559634][T15327] netlink: 'syz.1.2433': attribute type 1 has an invalid length.
[  291.257301][T15341] __nla_validate_parse: 79 callbacks suppressed
[  291.257320][T15341] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2439'.
[  291.445516][T15357] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2443'.
[  291.506106][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'.
[  291.562403][T15364] bond26: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  291.569870][T15364] bond26 (unregistering): Released all slaves
[  291.588496][T15367] openvswitch: : Dropping previously announced user features
[  291.626992][T15370] syzkaller1: entered promiscuous mode
[  291.631094][T15370] syzkaller1: entered allmulticast mode
[  291.750728][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2449'.
[  291.756093][T15374] bond11: (slave vxcan1): Releasing backup interface
[  291.760904][T15374] bond11: Destroying bond
[  291.768163][T15374] bond11 (unregistering): Released all slaves
[  291.804645][T15378] xt_limit: Overflow, try lower: 324382443/0
[  291.844227][T15380] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  291.898578][   T33] audit: type=1804 audit(1778609378.686:7): pid=15385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2452" name="/newroot/782/cgroup.controllers" dev="tmpfs" ino=4012 res=1 errno=0
[  291.910693][   T33] audit: type=1800 audit(1778609378.696:8): pid=15385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2452" name="cgroup.controllers" dev="tmpfs" ino=4012 res=0 errno=0
[  291.929111][   T33] audit: type=1804 audit(1778609378.706:9): pid=15386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2452" name="/newroot/782/cgroup.controllers" dev="tmpfs" ino=4012 res=1 errno=0
[  291.984691][T15389] netlink: 'syz.1.2453': attribute type 4 has an invalid length.
[  292.023536][T15391] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2454'.
[  292.408633][T15410] netlink: 'syz.1.2461': attribute type 4 has an invalid length.
[  292.528210][T15420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2463'.
[  292.582845][T15419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2463'.
[  292.652724][T15429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2466'.
[  292.687508][T15431]  speed is unknown, defaulting to 1000
[  292.690476][T15431] lo speed is unknown, defaulting to 1000
[  292.763831][T15434] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2468'.
[  292.794801][T15431] hsr0 speed is unknown, defaulting to 1000
[  292.814962][T15439] hsr0 speed is unknown, defaulting to 1000
[  292.869889][T15444] xt_hashlimit: size too large, truncated to 1048576
[  292.994165][T11854] wlan1: Trigger new scan to find an IBSS to join
[  293.107149][T15456] netlink: 'syz.1.2475': attribute type 32 has an invalid length.
[  293.322400][T15467] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2480'.
[  293.366739][T15469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.898212][T15565] ip6gre1: entered promiscuous mode
[  294.901012][T15565] ip6gre1: entered allmulticast mode
[  295.176396][T15586] netlink: 'syz.0.2503': attribute type 1 has an invalid length.
[  295.223189][T15593] bond21: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  295.227376][T15593] bond21 (unregistering): Released all slaves
[  295.244609][T15597] syzkaller0: entered promiscuous mode
[  295.246727][T15597] syzkaller0: entered allmulticast mode
[  295.317550][T15601] openvswitch: netlink: Flow key attr not present in new flow.
[  295.372481][T15605] netlink: 'syz.0.2508': attribute type 1 has an invalid length.
[  295.399467][T15605] 8021q: adding VLAN 0 to HW filter on device bond11
[  295.414243][T15605] vlan1: entered allmulticast mode
[  295.416583][T15605] bond11: entered allmulticast mode
[  295.509752][T15617] team0: entered promiscuous mode
[  295.512126][T15617] bridge5: entered promiscuous mode
[  295.514734][T15617] bridge6: entered promiscuous mode
[  295.517994][T15617] bridge7: entered promiscuous mode
[  295.520385][T15617] bridge9: entered promiscuous mode
[  295.524339][T15619] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.596104][T15627] Unsupported ieee802154 address type: 0
[  295.618509][T15624] smc: net device lo applied user defined pnetid SYZ2
[  295.622001][T15624] smc: net device lo erased user defined pnetid SYZ2
[  295.711494][T15630]  speed is unknown, defaulting to 1000
[  295.723949][T15630] lo speed is unknown, defaulting to 1000
[  295.826978][T15638] vlan2: entered promiscuous mode
[  295.835746][T15638] gretap0: entered promiscuous mode
[  296.036041][T15651] pim6reg: entered allmulticast mode
[  296.040825][T15652] pim6reg: left allmulticast mode
[  296.063807][T15630] hsr0 speed is unknown, defaulting to 1000
[  296.504497][T15688] netlink: 'syz.0.2529': attribute type 21 has an invalid length.
[  296.642522][T15696] __nla_validate_parse: 15 callbacks suppressed
[  296.642535][T15696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2532'.
[  296.691818][T15696] netlink: 'syz.0.2532': attribute type 21 has an invalid length.
[  296.695628][T15696] netlink: 'syz.0.2532': attribute type 22 has an invalid length.
[  296.700262][T15696] netlink: 'syz.0.2532': attribute type 23 has an invalid length.
[  296.703090][T15696] netlink: 'syz.0.2532': attribute type 25 has an invalid length.
[  296.706655][T15696] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2532'.
[  296.708752][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2531'.
[  297.000231][T15719] netlink: 676 bytes leftover after parsing attributes in process `syz.2.2536'.
[  297.133881][T15732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  297.230341][T15735] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20003
[  297.373936][T15745] validate_nla: 1 callbacks suppressed
[  297.373953][T15745] netlink: 'syz.0.2542': attribute type 4 has an invalid length.
[  297.871001][T15774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2549'.
[  297.905470][T15769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2549'.
[  297.990186][T15778] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2552'.
[  298.127650][T15780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2553'.
[  298.161262][T15780] netlink: 180568 bytes leftover after parsing attributes in process `syz.2.2553'.
[  298.401062][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2555'.
[  298.982358][T15829] netlink: 'syz.1.2567': attribute type 1 has an invalid length.
[  299.089045][ T5675] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  299.091799][ T5675] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  299.096167][ T5675] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  299.102585][ T5675] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  299.111886][T15839]  speed is unknown, defaulting to 1000
[  299.115160][T15839] lo speed is unknown, defaulting to 1000
[  299.226264][T15839] hsr0 speed is unknown, defaulting to 1000
[  299.954517][T15879] netlink: 'syz.1.2575': attribute type 4 has an invalid length.
[  300.242936][T15895] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  300.275204][T15895] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  301.127210][T15917]  speed is unknown, defaulting to 1000
[  301.152299][T15917] lo speed is unknown, defaulting to 1000
[  301.415621][T15917] hsr0 speed is unknown, defaulting to 1000
[  301.523054][T15934] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  301.767474][T15948] __nla_validate_parse: 9 callbacks suppressed
[  301.767485][T15948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2595'.
[  301.777411][T15948] syzkaller0: entered promiscuous mode
[  301.780639][T15948] syzkaller0: entered allmulticast mode
[  301.887632][T15960] Cannot find map_set index 2 as target
[  301.958488][T15962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2599'.
[  301.981593][T15964] netlink: 'syz.2.2600': attribute type 49 has an invalid length.
[  302.248102][T15979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2603'.
[  302.252849][T15979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2603'.
[  302.286767][T15983] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2602'.
[  302.366019][T15990] netlink: 'syz.0.2606': attribute type 2 has an invalid length.
[  302.366023][T15989] netlink: 'syz.0.2606': attribute type 2 has an invalid length.
[  302.630847][T15993] IPVS: Error connecting to the multicast addr
[  302.687674][T16003] netlink: 'syz.1.2609': attribute type 4 has an invalid length.
[  302.696242][T16003] netlink: 'syz.1.2609': attribute type 4 has an invalid length.
[  302.781002][T16005] netlink: 'syz.1.2610': attribute type 21 has an invalid length.
[  302.785944][T16005] IPv6: NLM_F_CREATE should be specified when creating new route
[  302.792962][T16005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  302.796242][T16005] IPv6: NLM_F_CREATE should be set when creating new route
[  302.799402][T16005] IPv6: NLM_F_CREATE should be set when creating new route
[  302.802277][T16005] IPv6: NLM_F_CREATE should be set when creating new route
[  302.852703][T16009] netlink: 'syz.1.2612': attribute type 12 has an invalid length.
[  302.902342][T16014] netlink: 'syz.0.2613': attribute type 17 has an invalid length.
[  302.911491][T16016] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2614'.
[  303.009876][T16021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'.
[  303.036718][T16021] : entered promiscuous mode
[  303.042169][T16021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2616'.
[  303.049449][T16021] openvswitch: : Dropping previously announced user features
[  303.153592][T16023] netlink: 'syz.1.2617': attribute type 2 has an invalid length.
[  303.160055][T16023] netlink: 'syz.1.2617': attribute type 2 has an invalid length.
[  303.168030][T16023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2617'.
[  303.218198][T16039] can: request_module (can-proto-0) failed.
[  303.221016][T16039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2621'.
[  303.370477][T16054] netlink: 'syz.2.2626': attribute type 1 has an invalid length.
[  303.401531][T16054] 8021q: adding VLAN 0 to HW filter on device bond13
[  303.725822][T16084] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  303.740286][T16084] CPU: 0 UID: 0 PID: 16084 Comm: syz.1.2634 Not tainted syzkaller #0 PREEMPT(full) 
[  303.740302][T16084] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  303.740309][T16084] Call Trace:
[  303.740314][T16084]  <TASK>
[  303.740319][T16084]  dump_stack_lvl+0xe8/0x150
[  303.740334][T16084]  sysfs_warn_dup+0x8e/0xa0
[  303.740348][T16084]  sysfs_do_create_link_sd+0xc0/0x110
[  303.740359][T16084]  device_add_class_symlinks+0x1cf/0x240
[  303.740373][T16084]  device_add+0x475/0xbb0
[  303.740384][T16084]  wiphy_register+0x1fb1/0x2fe0
[  303.740399][T16084]  ? __pfx_wiphy_register+0x10/0x10
[  303.740408][T16084]  ? __pfx_netdev_run_todo+0x10/0x10
[  303.740416][T16084]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  303.740431][T16084]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  303.740446][T16084]  ieee80211_register_hw+0x3c53/0x4910
[  303.740459][T16084]  ? ieee80211_register_hw+0x1901/0x4910
[  303.740480][T16084]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  303.740494][T16084]  ? __asan_memset+0x22/0x50
[  303.740505][T16084]  ? __hrtimer_setup+0x1b7/0x260
[  303.740515][T16084]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  303.740527][T16084]  mac80211_hwsim_new_radio+0x3327/0x57e0
[  303.740548][T16084]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  303.740558][T16084]  ? kstrndup+0xbf/0x160
[  303.740570][T16084]  hwsim_new_radio_nl+0xe20/0x26e0
[  303.740579][T16084]  ? unwind_next_frame+0xa6/0x2550
[  303.740595][T16084]  ? is_bpf_text_address+0x26/0x2b0
[  303.740608][T16084]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  303.740617][T16084]  ? __kernel_text_address+0xd/0x30
[  303.740627][T16084]  ? unwind_get_return_address+0x4d/0x90
[  303.740637][T16084]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  303.740650][T16084]  ? arch_stack_walk+0xfb/0x150
[  303.740664][T16084]  ? stack_trace_save+0xa9/0x100
[  303.740675][T16084]  ? __pfx_stack_trace_save+0x10/0x10
[  303.740687][T16084]  ? stack_depot_save_flags+0x33/0x810
[  303.740703][T16084]  ? __nla_validate_parse+0x2480/0x2dc0
[  303.740713][T16084]  ? ____sys_sendmsg+0x972/0x9f0
[  303.740723][T16084]  ? ___sys_sendmsg+0x2a5/0x360
[  303.740742][T16084]  ? __pfx___nla_validate_parse+0x10/0x10
[  303.740761][T16084]  ? rcu_is_watching+0x15/0xb0
[  303.740770][T16084]  ? trace_kmalloc+0x2a/0xf0
[  303.740805][T16084]  ? __nla_parse+0x40/0x60
[  303.740820][T16084]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  303.740831][T16084]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  303.740843][T16084]  genl_family_rcv_msg_doit+0x22a/0x330
[  303.740855][T16084]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  303.740871][T16084]  ? bpf_lsm_capable+0x9/0x20
[  303.740879][T16084]  ? security_capable+0x7e/0x2c0
[  303.740893][T16084]  genl_rcv_msg+0x61c/0x7a0
[  303.740905][T16084]  ? __pfx_genl_rcv_msg+0x10/0x10
[  303.740919][T16084]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  303.740935][T16084]  netlink_rcv_skb+0x232/0x4b0
[  303.740946][T16084]  ? __pfx_genl_rcv_msg+0x10/0x10
[  303.740955][T16084]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  303.740972][T16084]  ? down_read+0x270/0x2e0
[  303.740981][T16084]  ? genl_rcv+0xd/0x40
[  303.740990][T16084]  genl_rcv+0x28/0x40
[  303.740998][T16084]  netlink_unicast+0x75c/0x8e0
[  303.741014][T16084]  netlink_sendmsg+0x813/0xb40
[  303.741029][T16084]  ? __pfx_netlink_sendmsg+0x10/0x10
[  303.741042][T16084]  ? aa_sock_msg_perm+0xf1/0x1b0
[  303.741055][T16084]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  303.741067][T16084]  ____sys_sendmsg+0x972/0x9f0
[  303.741079][T16084]  ? __might_fault+0xaf/0x130
[  303.741091][T16084]  ? __pfx_____sys_sendmsg+0x10/0x10
[  303.741105][T16084]  ? import_iovec+0x73/0xa0
[  303.741120][T16084]  ___sys_sendmsg+0x2a5/0x360
[  303.741132][T16084]  ? __lock_acquire+0x6b5/0x2cf0
[  303.741142][T16084]  ? __pfx____sys_sendmsg+0x10/0x10
[  303.741156][T16084]  ? futex_wait+0x2a2/0x390
[  303.741177][T16084]  ? __fget_files+0x2a/0x420
[  303.741186][T16084]  ? __fget_files+0x3a0/0x420
[  303.741199][T16084]  __x64_sys_sendmsg+0x1bd/0x2a0
[  303.741211][T16084]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  303.741227][T16084]  ? fput+0xa0/0xd0
[  303.741238][T16084]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.741247][T16084]  do_syscall_64+0x15f/0xf80
[  303.741254][T16084]  ? trace_irq_disable+0x3b/0x140
[  303.741267][T16084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.741275][T16084] RIP: 0033:0x7fe99299cdd9
[  303.741285][T16084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  303.741297][T16084] RSP: 002b:00007fe99386e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  303.741310][T16084] RAX: ffffffffffffffda RBX: 00007fe992c15fa0 RCX: 00007fe99299cdd9
[  303.741319][T16084] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  303.741327][T16084] RBP: 00007fe992a32d69 R08: 0000000000000000 R09: 0000000000000000
[  303.741336][T16084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  303.741344][T16084] R13: 00007fe992c16038 R14: 00007fe992c15fa0 R15: 00007fff8ae54968
[  303.741359][T16084]  </TASK>
[  303.996944][T16090] bond21: entered promiscuous mode
[  304.005140][T16090] 8021q: adding VLAN 0 to HW filter on device bond21
[  304.010829][T16094] netlink: 'syz.0.2636': attribute type 21 has an invalid length.
[  304.024836][T16094] netlink: 'syz.0.2636': attribute type 6 has an invalid length.
[  304.218233][T16119] syzkaller0: entered promiscuous mode
[  304.221709][T16119] syzkaller0: entered allmulticast mode
[  304.473630][T16138] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  304.671027][T16148] syzkaller0: entered promiscuous mode
[  304.673152][T16148] syzkaller0: entered allmulticast mode
[  307.161247][T16151] bond14: entered promiscuous mode
[  307.163253][T16151] 8021q: adding VLAN 0 to HW filter on device bond14
[  307.176260][T16154] bond14: (slave bridge14): making interface the new active one
[  307.179716][T16154] bridge14: entered promiscuous mode
[  307.183279][T16154] bond14: (slave bridge14): Enslaving as an active interface with an up link
[  307.190100][T16174] wg2: entered allmulticast mode
[  307.244681][T16178] xt_hashlimit: size too large, truncated to 1048576
[  307.317996][T16183] xt_hashlimit: size too large, truncated to 1048576
[  307.403406][T16183] __nla_validate_parse: 16 callbacks suppressed
[  307.403418][T16183] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2654'.
[  307.679609][T16203]  speed is unknown, defaulting to 1000
[  307.682487][T16203] lo speed is unknown, defaulting to 1000
[  307.864043][T16203] hsr0 speed is unknown, defaulting to 1000
[  307.880021][T16209] vlan4: entered promiscuous mode
[  308.127099][T16220]  speed is unknown, defaulting to 1000
[  308.134771][T16220] lo speed is unknown, defaulting to 1000
[  308.151709][T16222] wg1: entered allmulticast mode
[  308.179546][T16221] wg1: left allmulticast mode
[  308.232102][T16225] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2664'.
[  308.285692][T16220] hsr0 speed is unknown, defaulting to 1000
[  308.653475][T16246] validate_nla: 3 callbacks suppressed
[  308.653488][T16246] netlink: 'syz.0.2669': attribute type 16 has an invalid length.
[  308.673009][T16246] netlink: 'syz.0.2669': attribute type 17 has an invalid length.
[  308.676286][T16246] tunl0: left promiscuous mode
[  308.682947][T16246] erspan0: left promiscuous mode
[  308.691416][T16246] team0: left promiscuous mode
[  308.693066][T16246] bridge5: left promiscuous mode
[  308.694698][T16246] bridge6: left promiscuous mode
[  308.696482][T16246] bridge7: left promiscuous mode
[  308.698201][T16246] bridge9: left promiscuous mode
[  308.702620][T16246] 8021q: adding VLAN 0 to HW filter on device team0
[  308.758678][T16246] bond_slave_1: left allmulticast mode
[  308.773684][T16246] veth0_to_team: left promiscuous mode
[  308.802871][T16246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  308.811090][T16246] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  308.842229][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2672'.
[  309.427363][T16279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2676'.
[  309.581804][T16284] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma?
[  309.586412][T16284] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  309.893219][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'.
[  309.907963][T16291] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  309.916339][T16291] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  310.045141][T16330] netlink: 'syz.1.2690': attribute type 1 has an invalid length.
[  310.079198][T16330] 8021q: adding VLAN 0 to HW filter on device bond23
[  310.092173][T16330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.094557][T16334] netlink: 'syz.0.2691': attribute type 4 has an invalid length.
[  310.099402][T16335] netlink: 'syz.0.2691': attribute type 4 has an invalid length.
[  310.544349][T16357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2695'.
[  310.574870][T16355] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  310.587874][T16355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2696'.
[  310.710699][T16365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2698'.
[  310.934985][T16373] syzkaller0: entered promiscuous mode
[  310.938544][T16373] syzkaller0: entered allmulticast mode
[  310.943118][T16373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2702'.
[  310.975570][T16373] openvswitch: netlink: Key type 142 is out of range max 32
[  311.595081][T16385] bond15: entered promiscuous mode
[  311.597245][T16385] 8021q: adding VLAN 0 to HW filter on device bond15
[  311.676797][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2705'.
[  312.485346][T16405] __nla_validate_parse: 1 callbacks suppressed
[  312.485364][T16405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2707'.
[  312.708082][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2712'.
[  312.741414][T16426] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2713'.
[  312.912752][T16445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2718'.
[  312.994642][T16453] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4
[  313.087914][T16465] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2721'.
[  313.124896][T16467] Cannot find del_set index 8192 as target
[  313.127956][T16468] Cannot find del_set index 8192 as target
[  313.135516][T16467] netlink: 'syz.2.2722': attribute type 1 has an invalid length.
[  313.139378][T16467] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2722'.
[  313.285739][T16482] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2725'.
[  313.289220][T16482] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2725'.
[  313.384545][T16486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2728'.
[  314.050724][T16491] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2730'.
[  314.066519][T16479] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  314.235911][T16512] netlink: 'syz.2.2736': attribute type 1 has an invalid length.
[  314.554437][T16535] ip6tnl4: entered promiscuous mode
[  314.582710][T16540] netlink: 'syz.2.2744': attribute type 1 has an invalid length.
[  314.604654][T16540] bond16: (slave bridge15): making interface the new active one
[  314.607717][T16540] bond16: (slave bridge15): Enslaving as an active interface with an up link
[  314.653505][T16543] ipt_rpfilter: unknown options
[  315.539309][T16571] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  315.625402][T16586] netlink: 'syz.2.2755': attribute type 1 has an invalid length.
[  315.636167][T16590] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  315.783763][T16597] netlink: 'syz.1.2758': attribute type 7 has an invalid length.
[  315.787013][T16597] netlink: 'syz.1.2758': attribute type 8 has an invalid length.
[  316.933059][T16490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  317.053378][T16643] netlink: 'syz.1.2773': attribute type 2 has an invalid length.
[  317.179697][T16648] sctp: [Deprecated]: syz.0.2775 (pid 16648) Use of struct sctp_assoc_value in delayed_ack socket option.
[  317.179697][T16648] Use struct sctp_sack_info instead
[  317.192157][T16648] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  317.195092][T16648] syzkaller0: entered promiscuous mode
[  317.197394][T16648] syzkaller0: entered allmulticast mode
[  317.207814][T16648] tipc: Resetting bearer <eth:syzkaller0>
[  317.222444][T16648] tipc: Resetting bearer <eth:syzkaller0>
[  317.238743][T16648] tipc: Disabling bearer <eth:syzkaller0>
[  317.504370][T16663] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  317.507084][T16663] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  317.555677][T16669] hmac(sh: entered promiscuous mode
[  317.626482][T16675] __nla_validate_parse: 17 callbacks suppressed
[  317.626493][T16675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2782'.
[  317.632787][T16675] bond12: (slave batadv0): Releasing backup interface
[  317.691751][T16678] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2783'.
[  317.704451][T16682] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  317.723593][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2783'.
[  317.761911][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2783'.
[  318.003828][T16701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2789'.
[  318.010554][T16701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2789'.
[  318.054316][T16708] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2791'.
[  318.085021][T16710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2792'.
[  318.089571][T16710] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  318.093312][T16710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2792'.
[  318.136580][T16716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2794'.
[  318.150496][T16716] bond27: entered promiscuous mode
[  318.152467][T16716] 8021q: adding VLAN 0 to HW filter on device bond27
[  318.219684][T16718] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  318.222673][T16718] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  328.133826][T16721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2797'.
[  328.156644][T16724] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  328.161409][T16725] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  328.164403][T16725] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  328.185624][T16728] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2798'.
[  328.195680][T16728] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2798'.
[  328.339937][T16746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2803'.
[  328.499704][T16756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2805'.
[  328.505073][T16756] openvswitch: netlink: nsh attr 1647 is out of range max 3
[  328.519812][T16761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2807'.
[  328.569324][T16766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2809'.
[  328.578961][T16769] xt_hashlimit: max too large, truncated to 1048576
[  328.597099][T16768] macsec2: entered promiscuous mode
[  328.602960][T16768] bridge0: entered promiscuous mode
[  328.731396][T16783] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2814'.
[  328.744048][T16785] netlink: 'syz.2.2816': attribute type 10 has an invalid length.
[  328.803599][T16786] netlink: 'syz.2.2816': attribute type 10 has an invalid length.
[  328.970959][T16785] nbd0: detected capacity change from 0 to 63
[  328.978836][   T55] block nbd0: Receive control failed (result -104)
[  328.984991][ T7736] block nbd0: Receive control failed (result -32)
[  329.021149][T16788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2817'.
[  329.285709][T16802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2821'.
[  329.524699][T16808] siw: device registration error -23
[  329.614087][T16815] netlink: 'syz.0.2825': attribute type 13 has an invalid length.
[  329.618636][T16815] netlink: 'syz.0.2825': attribute type 17 has an invalid length.
[  329.655281][T16815] 8021q: adding VLAN 0 to HW filter on device team0
[  329.696477][T16815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  329.703715][T16815] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  329.783118][T16818] netlink: 'syz.1.2826': attribute type 1 has an invalid length.
[  329.786924][T16818] netlink: 'syz.1.2826': attribute type 2 has an invalid length.
[  329.792721][T16818] netlink: 'syz.1.2826': attribute type 2 has an invalid length.
[  329.796266][T16818] netlink: 'syz.1.2826': attribute type 2 has an invalid length.
[  329.801153][T16818] netlink: 'syz.1.2826': attribute type 1 has an invalid length.
[  329.804958][T16818] netlink: 'syz.1.2826': attribute type 2 has an invalid length.
[  330.146037][T16851] syzkaller0: entered promiscuous mode
[  330.152359][T16851] syzkaller0: entered allmulticast mode
[  330.253416][T16862] erspan0: left promiscuous mode
[  333.161487][T16856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  333.244301][T16883] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  333.251308][T16883] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  333.294225][T16888] x_tables: ip_tables: icmp match: only valid for protocol 1
[  333.542488][T16904]  speed is unknown, defaulting to 1000
[  333.546679][T16904] lo speed is unknown, defaulting to 1000
[  333.637075][T16904] hsr0 speed is unknown, defaulting to 1000
[  333.981072][T16911] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  333.984168][T16911] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  333.994658][T16911] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  333.996649][T16911] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  334.118596][T16919] xt_TPROXY: Can be used only with -p tcp or -p udp
[  334.345538][T16942] IPv6: NLM_F_CREATE should be specified when creating new route
[  334.350680][T16942] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  334.353753][T16942] IPv6: NLM_F_CREATE should be set when creating new route
[  334.356730][T16942] IPv6: NLM_F_CREATE should be set when creating new route
[  334.359831][T16942] IPv6: NLM_F_CREATE should be set when creating new route
[  334.370032][T16942] validate_nla: 2 callbacks suppressed
[  334.370048][T16942] netlink: 'syz.2.2854': attribute type 10 has an invalid length.
[  337.166797][T16924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  337.177648][T16928] __nla_validate_parse: 8 callbacks suppressed
[  337.177663][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2851'.
[  337.281372][T16953] netlink: 'syz.1.2856': attribute type 1 has an invalid length.
[  337.284597][T16953] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2856'.
[  337.293377][T16953] nbd: must specify an index to disconnect
[  337.310139][T16955] netlink: 'syz.2.2858': attribute type 1 has an invalid length.
[  337.347151][T16958] netlink: 'syz.1.2859': attribute type 21 has an invalid length.
[  337.350908][T16955] gretap4: entered allmulticast mode
[  337.354178][T16958] netlink: 'syz.1.2859': attribute type 20 has an invalid length.
[  337.361620][T16955] bond17: (slave gretap4): making interface the new active one
[  337.367038][T16955] bond17: (slave gretap4): Enslaving as an active interface with an up link
[  337.367041][T16960] netlink: 'syz.1.2859': attribute type 21 has an invalid length.
[  337.367058][T16960] netlink: 'syz.1.2859': attribute type 20 has an invalid length.
[  337.426920][T16969] x_tables: unsorted underflow at hook 2
[  337.452227][T16968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2861'.
[  337.456118][T16968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2861'.
[  337.459615][T16968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2861'.
[  337.462580][T16968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2861'.
[  337.568055][T16977] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2865'.
[  337.572529][T16977] netlink: 'syz.1.2865': attribute type 1 has an invalid length.
[  337.576587][T16977] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2865'.
[  337.600302][T16973] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2860'.
[  337.622724][T16983] ipt_rpfilter: unknown options
[  337.698699][T16985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2867'.
[  338.009596][T16994] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  338.011960][T16994] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  338.041672][T16996] veth0: entered promiscuous mode
[  338.067794][T16996] veth0: left promiscuous mode
[  338.778617][T17045] bridge0: port 2(veth1_virt_wifi) entered blocking state
[  338.781019][T17045] bridge0: port 2(veth1_virt_wifi) entered disabled state
[  338.783534][T17045] veth1_virt_wifi: entered allmulticast mode
[  338.786503][T17045] veth1_virt_wifi: left allmulticast mode
[  338.837458][T17047] sctp: [Deprecated]: syz.1.2886 (pid 17047) Use of struct sctp_assoc_value in delayed_ack socket option.
[  338.837458][T17047] Use struct sctp_sack_info instead
[  338.846618][T17047] sctp: [Deprecated]: syz.1.2886 (pid 17047) Use of struct sctp_assoc_value in delayed_ack socket option.
[  338.846618][T17047] Use struct sctp_sack_info instead
[  339.011223][T17060] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  339.166694][T17066] sctp: [Deprecated]: syz.0.2891 (pid 17066) Use of struct sctp_assoc_value in delayed_ack socket option.
[  339.166694][T17066] Use struct sctp_sack_info instead
[  339.227984][T17073] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  339.562181][T17106] netlink: 'syz.1.2900': attribute type 13 has an invalid length.
[  339.562305][T17111] netlink: 'syz.1.2900': attribute type 13 has an invalid length.
[  339.624329][T17119] ipt_rpfilter: unknown options
[  339.626326][T17121] xt_ecn: cannot match TCP bits for non-tcp packets
[  339.725374][T17128] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  339.805590][T17136] syzkaller0: entered promiscuous mode
[  339.808054][T17136] syzkaller0: entered allmulticast mode
[  339.817286][T17136] tc action pedit offset must be on 32 bit boundaries
[  340.045361][T17158] bond25: entered allmulticast mode
[  340.095323][T17162]  speed is unknown, defaulting to 1000
[  340.098106][T17162] lo speed is unknown, defaulting to 1000
[  340.165141][T17167]  speed is unknown, defaulting to 1000
[  340.180245][T17167] bridge17: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  340.202821][T17162] hsr0 speed is unknown, defaulting to 1000
[  340.313010][T17172] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  340.316015][T17172] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  340.713922][T17200] netlink: 'syz.0.2925': attribute type 1 has an invalid length.
[  340.716790][T17200] netlink: 'syz.0.2925': attribute type 2 has an invalid length.
[  340.998008][T17235] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  341.000449][T17235] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  341.002817][T17235] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  341.230264][T17266] netlink: 'syz.1.2942': attribute type 1 has an invalid length.
[  341.275451][T17266] 8021q: adding VLAN 0 to HW filter on device bond26
[  341.366543][T17271] 8021q: adding VLAN 0 to HW filter on device bond28
[  341.383335][T17271] bond28: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  341.475470][T17282]  speed is unknown, defaulting to 1000
[  341.478657][ T5443] bond28: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  341.488111][T17282] lo speed is unknown, defaulting to 1000
[  341.588531][   T12] bond28: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  341.624261][T17282] hsr0 speed is unknown, defaulting to 1000
[  342.113979][T17332] netlink: 'syz.2.2958': attribute type 7 has an invalid length.
[  342.116974][T17332] netlink: 'syz.2.2958': attribute type 8 has an invalid length.
[  342.256998][T17342] __nla_validate_parse: 27 callbacks suppressed
[  342.257010][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2962'.
[  342.264244][T17342] netlink: 'syz.1.2962': attribute type 22 has an invalid length.
[  342.267531][T17342] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2962'.
[  342.273060][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2962'.
[  342.456209][T17347] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  342.630049][T17354] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.718737][T17340] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.799029][T17340] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.813755][T17364] bond16: (slave ): Releasing backup interface
[  342.818047][T17364] bond16: (slave ): last VLAN challenged slave left bond - VLAN blocking is removed
[  342.835628][T17364] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  342.844297][   T31]  speed is unknown, defaulting to 1000
[  342.846866][   T24]  speed is unknown, defaulting to 1000
[  342.851288][   T24] sy2: Port: 1 Link DOWN
[  342.856626][T17340] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.915291][T17340] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.960713][T17371] 8021q: adding VLAN 0 to HW filter on device bond29
[  343.017472][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.063168][ T5659] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.087139][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.099749][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.344231][T17397] openvswitch: netlink: Key type 30 is not supported
[  343.391239][T17417] syzkaller0: entered promiscuous mode
[  343.393114][T17417] syzkaller0: entered allmulticast mode
[  343.540323][T17434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2987'.
[  343.542682][T17431]  speed is unknown, defaulting to 1000
[  343.544037][T17434] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2987'.
[  343.553788][T17431] lo speed is unknown, defaulting to 1000
[  343.749659][T17431] hsr0 speed is unknown, defaulting to 1000
[  343.927089][T17456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2993'.
[  343.933121][T17449] netlink: 'syz.0.2992': attribute type 4 has an invalid length.
[  343.955894][   T24]  speed is unknown, defaulting to 1000
[  343.962388][   T24] sy2: Port: 1 Link ACTIVE
[  344.027758][T17458] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2994'.
[  344.075711][T17460] syzkaller1: entered promiscuous mode
[  344.084741][T17460] syzkaller1: entered allmulticast mode
[  344.142921][T17463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2996'.
[  344.164977][T17463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2996'.
[  344.257559][T17465] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2997'.
[  344.261614][T17465] SET target dimension over the limit!
[  344.316985][T17465] netlink: 'syz.1.2997': attribute type 4 has an invalid length.
[  344.478189][T17486] smc: net device wlan0 applied user defined pnetid SYZ0
[  344.604476][T17499] GUP no longer grows the stack in syz.0.3009 (17499): 200000003000-20000000a000 (200000001000)
[  344.610879][T17499] CPU: 1 UID: 0 PID: 17499 Comm: syz.0.3009 Not tainted syzkaller #0 PREEMPT(full) 
[  344.610894][T17499] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  344.610900][T17499] Call Trace:
[  344.610904][T17499]  <TASK>
[  344.610909][T17499]  dump_stack_lvl+0xe8/0x150
[  344.610924][T17499]  __get_user_pages+0x2378/0x2720
[  344.610937][T17499]  ? __gup_longterm_locked+0xc4e/0x1630
[  344.610953][T17499]  ? __gup_longterm_locked+0xc4e/0x1630
[  344.610962][T17499]  ? down_read_killable+0x1bb/0x340
[  344.610975][T17499]  __gup_longterm_locked+0xdcf/0x1630
[  344.610986][T17499]  ? lock_acquire+0x106/0x350
[  344.611003][T17499]  gup_fast_fallback+0x1d84/0x20d0
[  344.611024][T17499]  ? __pfx_gup_fast_fallback+0x10/0x10
[  344.611034][T17499]  ? is_valid_gup_args+0x11f/0x200
[  344.611044][T17499]  ? get_user_pages_fast+0x4d/0xb0
[  344.611056][T17499]  __iov_iter_get_pages_alloc+0x370/0xa10
[  344.611071][T17499]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  344.611086][T17499]  iov_iter_get_pages2+0x5e/0xa0
[  344.611099][T17499]  __se_sys_vmsplice+0x7c7/0x1620
[  344.611117][T17499]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  344.611128][T17499]  ? __pfx_futex_wake+0x10/0x10
[  344.611142][T17499]  ? lockdep_hardirqs_on+0x7a/0x110
[  344.611176][T17499]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.611184][T17499]  do_syscall_64+0x15f/0xf80
[  344.611192][T17499]  ? trace_irq_disable+0x3b/0x140
[  344.611205][T17499]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.611212][T17499] RIP: 0033:0x7f592259cdd9
[  344.611221][T17499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  344.611228][T17499] RSP: 002b:00007f5923386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  344.611239][T17499] RAX: ffffffffffffffda RBX: 00007f5922815fa0 RCX: 00007f592259cdd9
[  344.611244][T17499] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009
[  344.611249][T17499] RBP: 00007f5922632d69 R08: 0000000000000000 R09: 0000000000000000
[  344.611254][T17499] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  344.611258][T17499] R13: 00007f5922816038 R14: 00007f5922815fa0 R15: 00007ffecb723688
[  344.611279][T17499]  </TASK>
[  344.694393][T17501] x_tables: duplicate underflow at hook 3
[  345.008118][T17534] netlink: 'syz.1.3015': attribute type 13 has an invalid length.
[  345.861988][T17556] ip6gre1: entered promiscuous mode
[  345.863915][T17556] ip6gre1: entered allmulticast mode
[  345.868147][T17556] netlink: 'syz.0.3019': attribute type 6 has an invalid length.
[  345.876702][T17551] netlink: 'syz.0.3019': attribute type 6 has an invalid length.
[  345.887233][T17550] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  345.891031][T17550] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  346.013410][T17558] syzkaller0: entered promiscuous mode
[  346.015917][T17558] syzkaller0: entered allmulticast mode
[  349.642839][T17570]  speed is unknown, defaulting to 1000
[  349.647582][T17570] lo speed is unknown, defaulting to 1000
[  349.684650][T17579] __nla_validate_parse: 13 callbacks suppressed
[  349.684663][T17579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3025'.
[  349.700251][T17579] bridge0: port 4(team0) entered disabled state
[  349.786672][T17570] hsr0 speed is unknown, defaulting to 1000
[  350.028142][T17583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3026'.
[  350.033096][T17583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3026'.
[  350.109660][T17583] bond27: option resend_igmp: invalid value (2878)
[  350.112323][T17583] bond27: option resend_igmp: allowed values 0 - 255
[  350.115684][T17583] bond27 (unregistering): Released all slaves
[  350.196794][T17587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3027'.
[  350.226331][T17589] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3028'.
[  350.260412][T17591] Unsupported ieee802154 address type: 0
[  350.376208][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'.
[  350.383861][T17599] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3031'.
[  350.608597][T17615] xt_l2tp: v2 doesn't support IP mode
[  350.701253][T17619] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  350.719832][T17619] ip6gre2: entered allmulticast mode
[  350.723134][T17619] ip6gre2: entered promiscuous mode
[  350.725035][T17619] team0: Device ip6gre2 is of different type
[  351.242545][T17625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3041'.
[  351.382039][T17633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3044'.
[  351.390400][T17633] netlink: 65011 bytes leftover after parsing attributes in process `syz.0.3044'.
[  351.405215][T17634] sctp: [Deprecated]: syz.2.3042 (pid 17634) Use of int in maxseg socket option.
[  351.405215][T17634] Use struct sctp_assoc_value instead
[  351.511672][T17640] syzkaller0: entered promiscuous mode
[  351.514393][T17640] syzkaller0: entered allmulticast mode
[  351.518629][T17638] syzkaller1: entered promiscuous mode
[  351.521736][T17638] syzkaller1: entered allmulticast mode
[  351.741842][T17642] syzkaller0: entered promiscuous mode
[  351.744415][T17642] syzkaller0: entered allmulticast mode
[  351.856747][T17644] netlink: 'syz.0.3048': attribute type 13 has an invalid length.
[  351.859735][T17644] netlink: 'syz.0.3048': attribute type 17 has an invalid length.
[  351.872640][T17644] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  352.295107][T17652]  speed is unknown, defaulting to 1000
[  352.298082][T17652] lo speed is unknown, defaulting to 1000
[  352.510077][T17652] hsr0 speed is unknown, defaulting to 1000
[  352.721674][T17673] bond27: entered allmulticast mode
[  352.737136][T17673] macvlan1: entered promiscuous mode
[  352.739099][T17673] macvlan1: entered allmulticast mode
[  352.760800][T17676] "syz.0.3056" (17676) uses obsolete ecb(arc4) skcipher
[  352.824911][T17681] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  352.872207][T17684] netlink: 'syz.0.3058': attribute type 1 has an invalid length.
[  353.256139][T17705] netlink: 'syz.1.3065': attribute type 1 has an invalid length.
[  353.892849][T17764] netlink: 'syz.2.3078': attribute type 4 has an invalid length.
[  353.901727][T17767] workqueue: Failed to create a rescuer kthread for wq "phy6": -EINTR
[  353.920089][   T31] lo speed is unknown, defaulting to 1000
[  353.930636][   T31] sqz0: Port: 1 Link DOWN
[  353.939369][   T31] lo speed is unknown, defaulting to 1000
[  354.081400][T17779]  speed is unknown, defaulting to 1000
[  354.095129][T17779] lo speed is unknown, defaulting to 1000
[  354.104399][T17776]  speed is unknown, defaulting to 1000
[  354.209487][T17779] hsr0 speed is unknown, defaulting to 1000
[  354.210100][T17776] lo speed is unknown, defaulting to 1000
[  354.226195][T17790] netlink: 'syz.0.3086': attribute type 4 has an invalid length.
[  354.241455][T11130]  speed is unknown, defaulting to 1000
[  354.244635][T11130] sy2: Port: 1 Link DOWN
[  354.317936][T17795] syzkaller0: entered promiscuous mode
[  354.328603][T17795] syzkaller0: entered allmulticast mode
[  354.419846][T17776] hsr0 speed is unknown, defaulting to 1000
[  354.931639][T17825] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  355.005940][T17831] xt_TPROXY: Can be used only with -p tcp or -p udp
[  355.033759][T17831] __nla_validate_parse: 22 callbacks suppressed
[  355.033769][T17831] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3098'.
[  355.074994][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3100'.
[  355.097161][T17838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3100'.
[  355.934554][T17850]  speed is unknown, defaulting to 1000
[  355.937728][T17850] lo speed is unknown, defaulting to 1000
[  355.968912][T17856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3104'.
[  356.009976][T17854] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  356.021270][T17859] netlink: 'syz.0.3105': attribute type 21 has an invalid length.
[  356.057333][T17854] syzkaller1: entered promiscuous mode
[  356.062043][T17854] syzkaller1: entered allmulticast mode
[  356.065654][T17859] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3105'.
[  356.157650][T17864] syzkaller0: entered promiscuous mode
[  356.160518][T17864] syzkaller0: entered allmulticast mode
[  356.163729][T17850] hsr0 speed is unknown, defaulting to 1000
[  357.674983][T17868] netlink: 'syz.2.3107': attribute type 1 has an invalid length.
[  357.796121][T17874] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3108'.
[  357.849893][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3108'.
[  357.949458][T17884] netlink: 'syz.0.3108': attribute type 1 has an invalid length.
[  358.058093][T17889] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3110'.
[  358.264261][T17895] netlink: 'syz.0.3113': attribute type 1 has an invalid length.
[  358.396261][T17905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3116'.
[  358.543667][T17926]  speed is unknown, defaulting to 1000
[  358.548260][T17926] lo speed is unknown, defaulting to 1000
[  358.680956][T17926] hsr0 speed is unknown, defaulting to 1000
[  358.774272][T17934] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  358.776829][T17934] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  358.854468][T17937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3123'.
[  358.859290][T17937] netlink: 'syz.1.3123': attribute type 4 has an invalid length.
[  358.897897][T17939] netlink: 'syz.1.3124': attribute type 1 has an invalid length.
[  358.920871][T17939] 8021q: adding VLAN 0 to HW filter on device bond28
[  358.964664][T17939] bond28: (slave ip6gretap3): making interface the new active one
[  358.972377][T17939] bond28: (slave ip6gretap3): Enslaving as an active interface with an up link
[  359.099949][T17946] netlink: 'syz.2.3127': attribute type 1 has an invalid length.
[  359.181523][T17952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  359.295487][T17965] netlink: 'syz.1.3133': attribute type 13 has an invalid length.
[  359.299557][T17965] netlink: 'syz.1.3133': attribute type 17 has an invalid length.
[  359.344305][T17965] bridge0: left promiscuous mode
[  359.346678][T17965] dummy0: left promiscuous mode
[  359.362565][T17965] wg2: left allmulticast mode
[  359.367736][T17968] nbd: illegal input index -1113835520
[  359.380577][T17965] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  359.384011][T17965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  359.390407][T17965] veth1_macvtap: left promiscuous mode
[  359.392980][T17965] veth0_macvtap: left promiscuous mode
[  359.404310][T17965] veth0_macvtap: entered promiscuous mode
[  359.417023][T17965] veth1_macvtap: entered promiscuous mode
[  359.422418][T17965] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  359.466858][T14260] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  359.469360][T14260] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  359.473552][ T1247] block nbd0: Connection timed out, retrying (0/2 alive)
[  359.475847][ T1247] block nbd0: Connection timed out, retrying (0/2 alive)
[  359.478089][ T1247] block nbd0: Connection timed out, retrying (0/2 alive)
[  359.480845][ T1247] block nbd0: Connection timed out, retrying (0/2 alive)
[  359.483388][ T1247] block nbd0: Dead connection, failed to find a fallback
[  359.485695][ T1247] block nbd0: shutting down sockets
[  359.487373][ T1247] blk_print_req_error: 138 callbacks suppressed
[  359.487380][ T1247] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  359.497029][ T1247] buffer_io_error: 138 callbacks suppressed
[  359.497041][ T1247] Buffer I/O error on dev nbd0, logical block 3, async page read
[  359.503825][ T1247] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  359.507977][ T1247] Buffer I/O error on dev nbd0, logical block 2, async page read
[  359.511628][ T1247] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  359.515224][ T1247] Buffer I/O error on dev nbd0, logical block 1, async page read
[  359.520490][ T1247] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  359.524315][ T1247] Buffer I/O error on dev nbd0, logical block 0, async page read
[  359.527553][T16737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  359.533873][T16737] Buffer I/O error on dev nbd0, logical block 0, async page read
[  359.540470][T16737] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  359.547645][ T5659] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  359.551008][T16737] Buffer I/O error on dev nbd0, logical block 1, async page read
[  359.554360][ T5659] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  359.557883][T16737] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  359.564366][ T5659] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  359.567840][T16737] Buffer I/O error on dev nbd0, logical block 2, async page read
[  359.571920][ T5659] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  359.575419][T16737] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  359.584595][T16737] Buffer I/O error on dev nbd0, logical block 3, async page read
[  359.593259][T16737] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  359.596188][T16737] Buffer I/O error on dev nbd0, logical block 0, async page read
[  359.598804][T16737] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  359.601719][T16737] Buffer I/O error on dev nbd0, logical block 1, async page read
[  359.605294][T16737] ldm_validate_partition_table(): Disk read failed.
[  359.608039][T16737] Dev nbd0: unable to read RDB block 0
[  359.610825][T16737]  nbd0: unable to read partition table
[  359.615900][T16737] ldm_validate_partition_table(): Disk read failed.
[  359.618827][T16737] Dev nbd0: unable to read RDB block 0
[  359.621350][T16737]  nbd0: unable to read partition table
[  359.851411][T17984]  speed is unknown, defaulting to 1000
[  359.858861][T17984] lo speed is unknown, defaulting to 1000
[  359.859502][T17985]  speed is unknown, defaulting to 1000
[  359.979591][T17984] hsr0 speed is unknown, defaulting to 1000
[  359.988450][T17985] lo speed is unknown, defaulting to 1000
[  360.014677][T17994] netlink: 'syz.0.3142': attribute type 1 has an invalid length.
[  360.185371][T17999]  speed is unknown, defaulting to 1000
[  360.313064][T17999] lo speed is unknown, defaulting to 1000
[  360.464182][T17985] hsr0 speed is unknown, defaulting to 1000
[  360.489594][T17999] hsr0 speed is unknown, defaulting to 1000
[  361.172190][T18031] __nla_validate_parse: 15 callbacks suppressed
[  361.173279][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3149'.
[  361.271409][T18017] bridge19: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  361.339831][T18038]  speed is unknown, defaulting to 1000
[  361.349486][T18038] lo speed is unknown, defaulting to 1000
[  361.509652][T18038] hsr0 speed is unknown, defaulting to 1000
[  361.741340][T18059] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3155'.
[  361.983695][T18070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3157'.
[  361.992699][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3157'.
[  362.126189][T18073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3158'.
[  362.186479][T18075] xt_hl: Unknown TTL match mode: 237
[  362.281318][T18079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'.
[  362.386201][T18085] netlink: 'syz.1.3161': attribute type 8 has an invalid length.
[  362.401475][T18085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3161'.
[  362.410919][T18085] veth1_to_team: entered promiscuous mode
[  362.420451][T18085] veth1_to_team: left promiscuous mode
[  362.603838][T18100] bond0: entered promiscuous mode
[  362.606617][T18100] batadv0: entered promiscuous mode
[  362.609648][T18100] debugfs: 'hsr1' already exists in 'hsr'
[  362.611618][T18100] Cannot create hsr debugfs directory
[  362.613483][T18100] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  362.616662][T18100] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  362.624562][T18100] 8021q: adding VLAN 0 to HW filter on device hsr1
[  362.629090][T18100] bond0: left promiscuous mode
[  362.632210][T18100] batadv0: left promiscuous mode
[  362.727313][T18103] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  362.779402][T18105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3169'.
[  362.784439][T18105] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  362.832663][T18107] netlink: 'syz.1.3170': attribute type 10 has an invalid length.
[  362.836079][T18107] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3170'.
[  362.933767][T18111] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3171'.
[  362.949433][T18113] xt_bpf: check failed: parse error
[  363.340229][T18167] netlink: 'syz.1.3183': attribute type 9 has an invalid length.
[  363.677497][T18192] netlink: 'syz.2.3189': attribute type 4 has an invalid length.
[  363.827679][T18212] xt_TCPMSS: Only works on TCP SYN packets
[  364.090408][T18224] netlink: 'syz.1.3197': attribute type 1 has an invalid length.
[  364.221141][T18230] netlink: 'syz.1.3199': attribute type 1 has an invalid length.
[  364.316097][T18242] netlink: 'syz.1.3202': attribute type 1 has an invalid length.
[  364.340442][T18242] 8021q: adding VLAN 0 to HW filter on device bond29
[  364.529353][T18252] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  364.588018][T18255]  speed is unknown, defaulting to 1000
[  364.596276][T18255] lo speed is unknown, defaulting to 1000
[  364.712982][T18255] hsr0 speed is unknown, defaulting to 1000
[  364.896560][T18282] netlink: 'syz.2.3212': attribute type 1 has an invalid length.
[  364.957513][T18282] 8021q: adding VLAN 0 to HW filter on device bond18
[  365.048487][   T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  365.058720][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  365.491026][T18328] xt_HMARK: proto mask must be zero with L3 mode
[  365.498541][   T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  365.682371][T18338] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  365.761340][T18340] netlink: 'syz.1.3228': attribute type 1 has an invalid length.
[  365.870563][T18346] 8021q: adding VLAN 0 to HW filter on device bond30
[  365.942378][T18351] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  365.946689][ T5660]  speed is unknown, defaulting to 1000
[  365.950688][ T5660] sy2: Port: 1 Link ACTIVE
[  365.959120][T18351] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  365.976222][T18355] bridge_slave_0: default FDB implementation only supports local addresses
[  366.122867][ T5659] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  366.127969][ T5659] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  366.149204][T18367] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  366.235815][T18376] __nla_validate_parse: 19 callbacks suppressed
[  366.235826][T18376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3241'.
[  366.262361][T18376] bond31: (slave vxcan5): The slave device specified does not support setting the MAC address
[  366.266279][T18376] bond31: (slave vxcan5): Error -95 calling set_mac_address
[  366.316774][T18381] macvlan1: entered promiscuous mode
[  366.325490][T18381] macvlan1: entered allmulticast mode
[  366.329567][T18381] bond31: (slave macvlan1): Error -98 calling set_mac_address
[  366.423359][T18386]  speed is unknown, defaulting to 1000
[  366.426253][T18386] lo speed is unknown, defaulting to 1000
[  366.548061][T18386] hsr0 speed is unknown, defaulting to 1000
[  366.569140][T18390] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3244'.
[  366.668553][T11130] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  367.002590][T18394] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3245'.
[  367.308185][T18415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3252'.
[  367.312691][T18417] netlink: 'syz.0.3253': attribute type 1 has an invalid length.
[  367.333339][T18415] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  367.351434][T18417] bond33: (slave vxcan1): The slave device specified does not support setting the MAC address
[  367.355373][T18417] bond33: (slave vxcan1): Error -95 calling set_mac_address
[  367.377157][T18425] xfrm2: entered allmulticast mode
[  367.599793][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3260'.
[  367.602573][T18449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3260'.
[  368.368101][T18451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3261'.
[  368.372211][T18451] workqueue: Failed to create a rescuer kthread for wq "bond34": -EINTR
[  369.948577][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  370.417932][T18435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  370.533147][T18471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3268'.
[  370.561897][T18475] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3269'.
[  370.671758][T18485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3272'.
[  370.740391][T18493] netlink: 'syz.0.3271': attribute type 13 has an invalid length.
[  370.744558][T18493] netlink: 'syz.0.3271': attribute type 17 has an invalid length.
[  370.944500][T18501] netlink: 'syz.1.3274': attribute type 1 has an invalid length.
[  371.107261][ T5667]  speed is unknown, defaulting to 1000
[  371.124574][T18493] 8021q: adding VLAN 0 to HW filter on device team0
[  371.155528][T18493] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  371.191372][T18501] bond32: entered promiscuous mode
[  371.193920][T18501] 8021q: adding VLAN 0 to HW filter on device bond32
[  371.206531][T18502] bond32: (slave bridge14): making interface the new active one
[  371.209107][T18502] bridge14: entered promiscuous mode
[  371.211776][T18502] bond32: (slave bridge14): Enslaving as an active interface with an up link
[  371.218104][ T5667]  speed is unknown, defaulting to 1000
[  371.278275][T18511] batadv_slave_1: entered promiscuous mode
[  371.286815][T18513] __nla_validate_parse: 1 callbacks suppressed
[  371.286824][T18513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3277'.
[  371.294011][T18513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3277'.
[  371.294222][T18511] sit2: entered promiscuous mode
[  371.297573][T18513] netlink: 'syz.1.3277': attribute type 11 has an invalid length.
[  371.304884][T18511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3276'.
[  371.344852][T18515] netlink: 4180 bytes leftover after parsing attributes in process `syz.1.3278'.
[  371.350486][T18510] batadv_slave_1: left promiscuous mode
[  371.394208][T18517]  speed is unknown, defaulting to 1000
[  371.396898][T18517] lo speed is unknown, defaulting to 1000
[  371.493558][T18517] hsr0 speed is unknown, defaulting to 1000
[  371.512701][T18527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3281'.
[  371.665231][T18536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3283'.
[  371.670116][T18536] netlink: 'syz.2.3283': attribute type 13 has an invalid length.
[  371.673792][T18536] netlink: 'syz.2.3283': attribute type 17 has an invalid length.
[  371.734444][T18536] bridge0: port 4(team0) entered blocking state
[  371.737252][T18536] bridge0: port 4(team0) entered forwarding state
[  371.741569][T18536] 8021q: adding VLAN 0 to HW filter on device team0
[  371.745711][T18539] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3283'.
[  371.769840][T18536] ipvlan0: left allmulticast mode
[  371.771710][T18536] veth0_vlan: left allmulticast mode
[  371.776053][T18536] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  371.785087][T11130] lo speed is unknown, defaulting to 1000
[  371.785283][T18539] bridge_slave_1: entered allmulticast mode
[  371.786967][T11130] sqz0: Port: 1 Link ACTIVE
[  371.829821][T11129] lo speed is unknown, defaulting to 1000
[  372.048061][T18549]  speed is unknown, defaulting to 1000
[  372.051492][T18549] lo speed is unknown, defaulting to 1000
[  372.140231][T18549] hsr0 speed is unknown, defaulting to 1000
[  372.284752][T18555] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3286'.
[  372.337486][T18555] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3286'.
[  372.490524][T18562] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3288'.
[  372.830678][T18582]  speed is unknown, defaulting to 1000
[  372.833857][T18582] lo speed is unknown, defaulting to 1000
[  372.923883][T18582] hsr0 speed is unknown, defaulting to 1000
[  373.265977][T18588] netlink: 'syz.1.3295': attribute type 2 has an invalid length.
[  373.692884][T18611] netlink: 'syz.2.3300': attribute type 39 has an invalid length.
[  373.775541][T18611] hsr_slave_0 (unregistering): left promiscuous mode
[  373.891700][T18617] nbd: must specify at least one socket
[  374.005151][T18628] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  374.007619][T18628] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  374.010292][T18628] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  374.083594][T18637] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  374.262170][T18651] bridge_slave_1: entered promiscuous mode
[  374.266143][T18651] macvtap1: entered promiscuous mode
[  374.269982][T18651] macvtap1: entered allmulticast mode
[  374.273962][T18651] bridge_slave_1: entered allmulticast mode
[  374.463389][T18664] syzkaller0: entered promiscuous mode
[  374.465765][T18664] syzkaller0: entered allmulticast mode
[  374.479684][T18667] netlink: 'syz.1.3314': attribute type 11 has an invalid length.
[  374.531155][   T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  374.628683][T18672] netlink: 'syz.1.3317': attribute type 5 has an invalid length.
[  374.635294][T18672] geneve5: entered promiscuous mode
[  374.637109][T18672] geneve5: entered allmulticast mode
[  374.639650][ T5443] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  374.642151][ T5443] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  374.645159][ T5443] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  374.650391][ T5443] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  374.689731][T18675] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  374.692255][T18675] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  374.705823][T18675] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  374.715116][ T5675] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20000 - 0
[  374.719426][ T5675] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20000 - 0
[  374.723155][ T5675] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20000 - 0
[  374.727286][ T5675] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20000 - 0
[  374.739614][   T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  374.793810][T18683] syzkaller1: entered promiscuous mode
[  374.796252][T18683] syzkaller1: entered allmulticast mode
[  374.863388][T18676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  375.225302][T18700] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  375.232807][T18696] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  375.357707][T18712] xt_bpf: check failed: parse error
[  375.371022][T18712] sctp: [Deprecated]: syz.0.3329 (pid 18712) Use of int in maxseg socket option.
[  375.371022][T18712] Use struct sctp_assoc_value instead
[  375.486899][T18714] bond34: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  375.497778][T18714] bond34 (unregistering): Released all slaves
[  375.578275][T18727] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  375.797764][T18749] validate_nla: 5 callbacks suppressed
[  375.797775][T18749] netlink: 'syz.0.3340': attribute type 1 has an invalid length.
[  375.868625][T18753] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  378.028489][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  378.976392][T18772] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  379.394886][ T5675] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  379.399299][ T5675] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  379.402595][ T5675] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 20000 - 0
[  379.406483][ T5675] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  379.412338][ T5675] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  379.415571][ T5675] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 20000 - 0
[  379.419614][ T5675] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  379.426030][ T5675] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  379.435010][ T5675] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 20000 - 0
[  379.439482][T18790] __nla_validate_parse: 22 callbacks suppressed
[  379.439492][T18790] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3349'.
[  379.445235][ T5675] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  379.451181][ T5675] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  379.455890][ T5675] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 20000 - 0
[  379.552326][T18803] netlink: 'syz.2.3353': attribute type 2 has an invalid length.
[  379.673957][T18812] workqueue: Failed to create a rescuer kthread for wq "bond34": -EINTR
[  379.874343][T18840] TCP: TCP_TX_DELAY enabled
[  380.131549][T18851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3365'.
[  380.210181][T18855] netlink: 'syz.0.3366': attribute type 3 has an invalid length.
[  380.770971][T18869] netlink: 'syz.0.3370': attribute type 4 has an invalid length.
[  380.774248][T18869] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3370'.
[  380.835824][T18874] IPVS: fo: FWM 3 0x00000003 - no destination available
[  380.993985][T18878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3373'.
[  381.467517][T18905] tc action pedit 'at' offset 6 out of bounds
[  381.500254][T18902]  speed is unknown, defaulting to 1000
[  381.504341][T18902] lo speed is unknown, defaulting to 1000
[  381.633225][T18908] netlink: 'syz.2.3380': attribute type 4 has an invalid length.
[  381.652159][T14830] lo speed is unknown, defaulting to 1000
[  381.654046][T14830] sqz0: Port: 1 Link DOWN
[  381.657823][T14830] lo speed is unknown, defaulting to 1000
[  381.660347][T18908] netlink: 'syz.2.3380': attribute type 4 has an invalid length.
[  381.666484][T14830] lo speed is unknown, defaulting to 1000
[  381.677293][T14830] sqz0: Port: 1 Link ACTIVE
[  381.690298][T18908] netlink: 1960 bytes leftover after parsing attributes in process `syz.2.3380'.
[  381.703256][T18902] hsr0 speed is unknown, defaulting to 1000
[  381.865244][T18918] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  381.878534][T18912] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  381.883362][T18918] netlink: 'syz.1.3384': attribute type 1 has an invalid length.
[  381.959189][T18918] 8021q: adding VLAN 0 to HW filter on device bond33
[  382.006206][T18923] bond33: (slave veth23): Enslaving as an active interface with a down link
[  382.045988][T18918] bond33: (slave dummy0): making interface the new active one
[  382.050300][T18918] dummy0: entered promiscuous mode
[  382.052993][T18918] bond33: (slave dummy0): Enslaving as an active interface with an up link
[  382.059092][T18918] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3384'.
[  382.096605][T18918] bond33: (slave dummy0): Releasing active interface
[  382.104990][T18918] dummy0 (unregistering): left promiscuous mode
[  382.252773][T18931]  speed is unknown, defaulting to 1000
[  382.255720][T18931] lo speed is unknown, defaulting to 1000
[  382.442266][T18931] hsr0 speed is unknown, defaulting to 1000
[  382.812617][T18958] xt_l2tp: unknown flags: 51
[  385.312504][T18952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  385.376716][T18972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3394'.
[  385.443909][T18972] 8021q: adding VLAN 0 to HW filter on device bond35
[  385.449209][T18978] can: request_module (can-proto-3) failed.
[  385.460736][T18972] bond35 (unregistering): Released all slaves
[  385.523574][T18974] 8021q: adding VLAN 0 to HW filter on device bond35
[  385.544415][T18974] bond35 (unregistering): Released all slaves
[  385.558181][T18989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3398'.
[  385.561816][T18989] netlink: 'syz.0.3398': attribute type 20 has an invalid length.
[  385.571297][ T5675] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  385.575979][ T5675] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  385.584363][ T5675] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  385.591576][ T5675] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  385.703452][T18999] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3401'.
[  385.719562][T18999] syzkaller1: entered promiscuous mode
[  385.722933][T18999] syzkaller1: entered allmulticast mode
[  385.764183][T19000] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  385.768159][T19000] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  385.856147][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3402'.
[  385.879366][   T31] hsr0 speed is unknown, defaulting to 1000
[  385.897058][T19006] pimreg: entered allmulticast mode
[  385.908857][   T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  385.929828][T19005] pimreg: left allmulticast mode
[  386.015170][T19011] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3405'.
[  386.104404][T19017]  speed is unknown, defaulting to 1000
[  386.107107][T19017] lo speed is unknown, defaulting to 1000
[  386.208460][T19017] hsr0 speed is unknown, defaulting to 1000
[  386.427806][T19043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3408'.
[  386.722140][T19055] veth0_to_team: entered promiscuous mode
[  386.727138][T19055] macvtap2: entered promiscuous mode
[  386.735946][T19055] macvtap2: entered allmulticast mode
[  386.742125][T19055] veth0_to_team: entered allmulticast mode
[  386.838616][   T31] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  386.871343][T19059] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.383655][T19066] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3415'.
[  387.420271][T19068] netlink: 'syz.1.3416': attribute type 9 has an invalid length.
[  387.423349][T19068] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.3416'.
[  387.784995][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3423'.
[  387.893477][T19100] netlink: 'syz.2.3424': attribute type 1 has an invalid length.
[  387.907413][T19100] 8021q: adding VLAN 0 to HW filter on device bond20
[  387.918579][T19100] macvlan5: entered promiscuous mode
[  387.921348][T19100] macvlan5: entered allmulticast mode
[  387.923495][T19100] bond20: entered allmulticast mode
[  387.925388][T19100] bond20: entered promiscuous mode
[  387.927468][T19100] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  387.932245][T19100] team0: Port device macvlan5 added
[  387.940523][T19100] sctp: [Deprecated]: syz.2.3424 (pid 19100) Use of int in maxseg socket option.
[  387.940523][T19100] Use struct sctp_assoc_value instead
[  388.103296][T19112] : renamed from veth0_to_bond (while UP)
[  388.111449][T19112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3428'.
[  388.326120][T19124] bond34: entered allmulticast mode
[  388.578801][T19145] netlink: 'syz.0.3439': attribute type 1 has an invalid length.
[  388.648195][T19145] bond35: entered promiscuous mode
[  388.651524][T19145] 8021q: adding VLAN 0 to HW filter on device bond35
[  388.687627][T19152] 8021q: adding VLAN 0 to HW filter on device bond35
[  388.692065][T19152] bond35: (slave wireguard1): The slave device specified does not support setting the MAC address
[  388.696386][T19152] bond35: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  388.706804][T19152] bond35: (slave wireguard1): making interface the new active one
[  388.711982][T19152] wireguard1: entered promiscuous mode
[  388.715579][T19152] bond35: (slave wireguard1): Enslaving as an active interface with an up link
[  388.732549][T19145] bond35: (slave wireguard2): The slave device specified does not support setting the MAC address
[  388.771960][T19145] bond35: (slave wireguard2): Enslaving as a backup interface with an up link
[  388.847530][T19170] batadv1: entered promiscuous mode
[  388.853933][T19170] batadv1: entered allmulticast mode
[  388.857964][T19170] 8021q: adding VLAN 0 to HW filter on device batadv1
[  389.234455][T19205] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  389.256609][T19207] netlink: 'syz.1.3455': attribute type 1 has an invalid length.
[  389.338546][T19214] netlink: 'syz.1.3457': attribute type 14 has an invalid length.
[  389.346697][T19214] 8021q: adding VLAN 0 to HW filter on device bond0
[  389.384272][T19224] ipt_rpfilter: unknown options
[  389.412808][T19229] tunl0: entered promiscuous mode
[  389.414959][T19229] netlink: 'syz.1.3462': attribute type 4 has an invalid length.
[  389.642145][T19248] bond0: Error: Cannot enslave bond to itself.
[  390.395124][T19270] bridge0: port 2(vlan2) entered blocking state
[  390.397222][T19270] bridge0: port 2(vlan2) entered disabled state
[  390.401554][T19270] vlan2: entered allmulticast mode
[  390.403224][T19270] geneve0: entered allmulticast mode
[  390.405666][T19270] vlan2: entered promiscuous mode
[  390.407323][T19270] geneve0: entered promiscuous mode
[  390.435784][T19272] __nla_validate_parse: 23 callbacks suppressed
[  390.435794][T19272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3475'.
[  390.442449][T19272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3475'.
[  390.445438][T19272] openvswitch: netlink: Message has 2 unknown bytes.
[  390.625217][T19287] Cannot find del_set index 4 as target
[  390.642758][T19289] netlink: 'syz.2.3481': attribute type 21 has an invalid length.
[  390.645750][T19289] IPv6: NLM_F_CREATE should be specified when creating new route
[  390.648710][T19289] netlink: 'syz.2.3481': attribute type 1 has an invalid length.
[  390.683679][T19291] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  390.714176][T19293] netlink: 'syz.2.3483': attribute type 5 has an invalid length.
[  390.819179][T19297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3484'.
[  390.823406][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3484'.
[  390.864148][T19299] netlink: 'syz.2.3485': attribute type 1 has an invalid length.
[  390.878257][T19299] 8021q: adding VLAN 0 to HW filter on device bond21
[  390.974280][T19309] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3487'.
[  391.014831][T19312] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3488'.
[  391.265004][T19324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3491'.
[  391.313196][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3492'.
[  391.440219][T19332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3494'.
[  391.444725][T19332] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3494'.
[  391.670696][T19352] bond22: entered promiscuous mode
[  391.674876][T19352] 8021q: adding VLAN 0 to HW filter on device bond22
[  391.693282][T19352] ipvlan3: entered allmulticast mode
[  391.695411][T19352] bond22: entered allmulticast mode
[  391.716321][T19352] ipvlan4: entered allmulticast mode
[  391.788694][T19357] openvswitch: netlink: Invalid VLAN frame
[  391.789902][T18787] lo speed is unknown, defaulting to 1000
[  391.792430][T19357] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  391.795590][T18787] sqz0: Port: 1 Link DOWN
[  391.798029][T19357] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  391.801429][T18787] lo speed is unknown, defaulting to 1000
[  391.805398][T19357] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  391.821352][T19357] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  391.847412][T19362] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  391.854715][T19362] sctp: [Deprecated]: syz.0.3501 (pid 19362) Use of int in max_burst socket option.
[  391.854715][T19362] Use struct sctp_assoc_value instead
[  391.908101][T19364] bond23: (slave bridge19): making interface the new active one
[  391.912787][T19364] bond23: (slave bridge19): Enslaving as an active interface with an up link
[  391.927100][T19364] macvlan6: entered promiscuous mode
[  391.931223][T19364] macvlan6: entered allmulticast mode
[  391.934134][T19364] bond23: entered promiscuous mode
[  391.936300][T19364] bridge19: entered promiscuous mode
[  391.939957][T19364] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  391.943467][T19364] bond23: (slave macvlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  391.950466][T19364] bond23: left promiscuous mode
[  391.952646][T19364] bridge19: left promiscuous mode
[  392.341199][T19387] rdma_rxe: rxe_newlink: failed to add lo
[  392.377834][T19377] bridge_slave_1: left allmulticast mode
[  392.398091][T19377] veth0_to_team: left allmulticast mode
[  392.417321][T18787]  speed is unknown, defaulting to 1000
[  392.436935][T19374] 8021q: adding VLAN 0 to HW filter on device team0
[  392.454773][T19374] bridge_slave_1: left promiscuous mode
[  392.461975][T19374] veth0_to_team: left promiscuous mode
[  392.473968][T19374] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  392.495454][ T5443] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.502705][ T5443] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.521641][T11131]  speed is unknown, defaulting to 1000
[  392.527211][ T5443] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.546985][ T5443] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.555099][ T5443] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  392.569835][ T5443] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  392.578282][ T5443] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  392.589450][ T5443] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  392.757413][T19424] validate_nla: 6 callbacks suppressed
[  392.757424][T19424] netlink: 'syz.0.3519': attribute type 1 has an invalid length.
[  392.786198][T19424] bond36: (slave geneve5): making interface the new active one
[  392.808574][T19424] bond36: (slave geneve5): Enslaving as an active interface with an up link
[  392.813217][ T5443] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  392.828592][ T5443] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  392.838841][T19424] 8021q: adding VLAN 0 to HW filter on device bond36
[  392.843969][ T5443] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  392.851736][ T5443] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  393.087334][T19459]  speed is unknown, defaulting to 1000
[  393.092743][T19459] lo speed is unknown, defaulting to 1000
[  393.123435][T19471] tc_dump_action: action bad kind
[  393.223046][T19459] hsr0 speed is unknown, defaulting to 1000
[  393.343063][T19484] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode
[  393.382070][T19481]  speed is unknown, defaulting to 1000
[  393.401323][T19481] lo speed is unknown, defaulting to 1000
[  393.404961][   T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  393.426805][T19495] ip6gre0: entered allmulticast mode
[  393.568670][T19499] bridge0: port 4(team0) entered disabled state
[  393.954088][T19499] bond20: left allmulticast mode
[  393.958262][T19499] bond20: left promiscuous mode
[  393.992977][T19481] hsr0 speed is unknown, defaulting to 1000
[  393.993888][T11129] hsr0 speed is unknown, defaulting to 1000
[  393.995634][T10595] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  393.997649][T11129] syz2: Port: 1 Link DOWN
[  394.011172][T10595] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.023767][T10595] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  394.027463][T10595] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.042516][T10595] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  394.046246][T10595] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  394.056689][T10595] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  394.061732][T10595] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  396.256650][T19479] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  396.306156][T19512] __nla_validate_parse: 24 callbacks suppressed
[  396.306166][T19512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3542'.
[  396.312170][T19512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3542'.
[  396.379604][T19522] netlink: 'syz.0.3543': attribute type 22 has an invalid length.
[  396.406159][T19527] netlink: 'syz.2.3544': attribute type 14 has an invalid length.
[  396.434923][T19530] tc_dump_action: action bad kind
[  396.437023][T19530] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  396.481841][T19534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3546'.
[  396.786331][T19580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3556'.
[  396.921322][T19600] syzkaller0: entered promiscuous mode
[  396.923223][T19600] syzkaller0: entered allmulticast mode
[  398.549713][T19607] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6
[  398.633528][T19614] netlink: 'syz.0.3564': attribute type 1 has an invalid length.
[  398.652212][T19614] 8021q: adding VLAN 0 to HW filter on device bond37
[  398.673138][T19618] pim6reg0: tun_chr_ioctl cmd 1074025675
[  398.678445][T19618] pim6reg0: persist disabled
[  398.683172][T19618] pim6reg0: tun_chr_ioctl cmd 1074025675
[  398.685071][T19618] pim6reg0: persist disabled
[  398.852251][T19633] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3569'.
[  398.865951][T19633] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3569'.
[  398.880776][T19635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3571'.
[  398.885612][T19636] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3570'.
[  398.902328][T19640] netlink: 'syz.1.3572': attribute type 1 has an invalid length.
[  398.925145][T19640] 8021q: adding VLAN 0 to HW filter on device bond35
[  398.943657][T19640] bond35: (slave veth25): Enslaving as an active interface with a down link
[  398.967623][T19640] bond35: (slave veth27): Enslaving as an active interface with a down link
[  398.972153][T19640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3572'.
[  398.988979][T19644] syzkaller0: entered promiscuous mode
[  398.997585][T19644] syzkaller0: entered allmulticast mode
[  399.025445][T19644] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3573'.
[  399.031528][T19646] bond35: entered allmulticast mode
[  399.805579][T19666] xt_CT: No such helper "snmp_trap"
[  399.859195][T19644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  400.063004][T19688] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  400.100148][T19697] netlink: 'syz.2.3585': attribute type 1 has an invalid length.
[  400.115791][T19697] bond24: entered promiscuous mode
[  400.117624][T19697] bond24: entered allmulticast mode
[  400.124542][T19697] 8021q: adding VLAN 0 to HW filter on device bond24
[  400.135780][T19697] erspan3: entered allmulticast mode
[  400.141962][T19697] bond24: (slave erspan3): making interface the new active one
[  400.145052][T19697] erspan3: entered promiscuous mode
[  400.147808][T19697] bond24: (slave erspan3): Enslaving as an active interface with an up link
[  400.301795][T19715] xt_hashlimit: max too large, truncated to 1048576
[  400.371529][T19727]  speed is unknown, defaulting to 1000
[  400.374278][T19727] lo speed is unknown, defaulting to 1000
[  400.476949][T19727] hsr0 speed is unknown, defaulting to 1000
[  400.536006][T19737] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  400.613039][T19737] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  400.678818][T19737] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  400.755529][T19737] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  400.877476][T10595] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  400.898855][T10595] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  400.961760][ T5443] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  400.966855][ T5443] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  401.143234][T19763] syzkaller0: entered promiscuous mode
[  401.145094][T19763] syzkaller0: entered allmulticast mode
[  402.793140][T19778] ip6tnl5: entered promiscuous mode
[  402.809588][T19784] tipc: Enabling of bearer <dth:s> rejected, media not registered
[  402.833461][T19786] __nla_validate_parse: 1 callbacks suppressed
[  402.833474][T19786] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3601'.
[  402.840094][T19786] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3601'.
[  402.957227][T19797] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3605'.
[  402.959901][T19802] netlink: 'syz.0.3606': attribute type 1 has an invalid length.
[  402.974304][T19802] bond38: entered promiscuous mode
[  402.976722][T19802] bond38: entered allmulticast mode
[  402.980357][T19802] 8021q: adding VLAN 0 to HW filter on device bond38
[  402.996124][T19802] bridge20: entered promiscuous mode
[  402.998089][T19802] bridge20: entered allmulticast mode
[  403.000613][T19802] bond38: (slave bridge20): Enslaving as a backup interface with an up link
[  403.003440][T19805] netlink: 'syz.2.3607': attribute type 29 has an invalid length.
[  403.007467][T19805] netlink: 'syz.2.3607': attribute type 29 has an invalid length.
[  403.013321][T19805] netlink: 508 bytes leftover after parsing attributes in process `syz.2.3607'.
[  403.022138][T19805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3607'.
[  403.026780][T19805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3607'.
[  403.072595][T19811] siw: device registration error -23
[  403.078458][T10595] bond38: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  403.140752][T19817] trusted_key: syz.0.3610 sent an empty control message without MSG_MORE.
[  403.153345][T19817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3610'.
[  403.218645][   T12] bond38: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  403.283080][T19826] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3614'.
[  403.386233][T19826] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3614'.
[  403.753386][T19845] netlink: 1052 bytes leftover after parsing attributes in process `syz.1.3617'.
[  406.422861][T19833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  407.086187][T19888] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  407.138162][T19888] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  407.203453][T19888] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  407.250151][T19888] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  407.332785][T19899] tunl0: left promiscuous mode
[  407.419652][T19899] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  407.426075][T19899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  407.437967][T19899] veth1_macvtap: left promiscuous mode
[  407.441869][T19899] veth0_macvtap: left promiscuous mode
[  407.455784][T19899] veth0_macvtap: entered promiscuous mode
[  407.470785][T19899] veth1_macvtap: entered promiscuous mode
[  407.488206][T19899] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  407.502536][ T5675] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  407.513391][ T5675] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.526086][ T5675] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  407.553765][T11854] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  407.556683][T11854] bridge0: port 1(veth0_virt_wifi) entered forwarding state
[  407.590065][ T5675] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.594551][ T5675] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  407.608094][ T5675] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.612677][ T5675] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  407.615466][ T5675] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.618142][ T5675] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  407.634353][ T5675] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  407.638573][ T5675] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  407.643323][ T5675] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  407.935611][T19926] __nla_validate_parse: 10 callbacks suppressed
[  407.935653][T19926] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.3640'.
[  407.996045][T19928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3641'.
[  408.000061][T19928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3641'.
[  408.084685][T19934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3642'.
[  408.265470][T19945] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3643'.
[  408.427285][T19947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3644'.
[  408.431468][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3644'.
[  408.435289][T19947] netlink: 'syz.2.3644': attribute type 6 has an invalid length.
[  408.439853][T19947] netlink: 'syz.2.3644': attribute type 5 has an invalid length.
[  408.443718][T19947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3644'.
[  408.447465][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3644'.
[  408.452541][T19947] netlink: 'syz.2.3644': attribute type 6 has an invalid length.
[  408.455242][T19947] netlink: 'syz.2.3644': attribute type 5 has an invalid length.
[  408.563106][T19951] xt_TPROXY: Can be used only with -p tcp or -p udp
[  411.135530][T19939] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  411.211048][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3649'.
[  411.222002][T19965] syzkaller0: entered promiscuous mode
[  411.224263][T19965] syzkaller0: entered allmulticast mode
[  411.270173][T19968] netlink: 'syz.2.3652': attribute type 1 has an invalid length.
[  411.273508][T19968] netlink: 'syz.2.3652': attribute type 4 has an invalid length.
[  411.417535][T19977]  speed is unknown, defaulting to 1000
[  411.432046][T19977] lo speed is unknown, defaulting to 1000
[  411.477669][T19988] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  411.510061][T19988] ip6gre3: entered allmulticast mode
[  411.513207][T19988] team0: Device ip6gre3 is of different type
[  411.587346][T19977] hsr0 speed is unknown, defaulting to 1000
[  411.701068][T20006] netlink: 'syz.2.3659': attribute type 1 has an invalid length.
[  411.857889][T20011] netlink: 'syz.1.3664': attribute type 2 has an invalid length.
[  411.861644][T20011] netlink: 'syz.1.3664': attribute type 8 has an invalid length.
[  411.937727][T20016] x_tables: unsorted underflow at hook 2
[  412.086252][T20029] bond27: entered allmulticast mode
[  412.092698][T20028] bond27: left allmulticast mode
[  412.245935][T20047] netlink: 'syz.1.3676': attribute type 11 has an invalid length.
[  412.285323][T20050] SET target dimension over the limit!
[  412.716681][T20077] sctp: [Deprecated]: syz.2.3684 (pid 20077) Use of int in maxseg socket option.
[  412.716681][T20077] Use struct sctp_assoc_value instead
[  413.003442][T20085] xt_nat: multiple ranges no longer supported
[  413.030292][T20085] __nla_validate_parse: 13 callbacks suppressed
[  413.030301][T20085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3689'.
[  413.086641][T20088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3690'.
[  413.119426][T20088] netlink: 760 bytes leftover after parsing attributes in process `syz.2.3690'.
[  413.124066][T20088] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3690'.
[  413.203026][T20096] openvswitch: netlink: IP tunnel dst address not specified
[  413.206706][T20096] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3692'.
[  413.210091][T20096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3692'.
[  413.436455][T20103] dvmrp0: entered allmulticast mode
[  413.439998][T20111] validate_nla: 3 callbacks suppressed
[  413.440006][T20111] netlink: 'syz.2.3696': attribute type 2 has an invalid length.
[  413.445329][T20111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3696'.
[  413.474196][T20114] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  413.507907][T20116] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3698'.
[  413.514996][T20116] netlink: 'syz.2.3698': attribute type 16 has an invalid length.
[  413.519732][T20116] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.3698'.
[  413.521462][T20118] pim6reg1: entered allmulticast mode
[  413.566220][T20122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3701'.
[  413.806107][T20145] netlink: 'syz.1.3708': attribute type 1 has an invalid length.
[  413.849536][T20145] 8021q: adding VLAN 0 to HW filter on device bond37
[  413.859238][T20145] bond36: (slave bond37): making interface the new active one
[  413.862942][T20145] bond36: (slave bond37): Enslaving as an active interface with an up link
[  414.615649][T20164] netlink: 'syz.1.3713': attribute type 10 has an invalid length.
[  414.733180][T20173] netlink: zone id is out of range
[  414.738611][T20173] netlink: get zone limit has 4 unknown bytes
[  414.862126][T20187] syzkaller0: entered promiscuous mode
[  414.864723][T20187] syzkaller0: entered allmulticast mode
[  414.901723][T20189] syzkaller0: entered promiscuous mode
[  414.903621][T20189] syzkaller0: entered allmulticast mode
[  414.975746][ T5675] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20004 - 0
[  414.981955][ T5675] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20004 - 0
[  414.987863][ T5675] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20004 - 0
[  414.991684][ T5675] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20004 - 0
[  415.076403][T20202] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  415.085949][T20204] Cannot find add_set index 1 as target
[  415.093192][T20199] tipc: Failed to remove unknown binding: 66,1,1/1069172185:4020006883/4020006885
[  415.098226][T20199] tipc: Failed to remove unknown binding: 66,1,1/1069172185:4020006883/4020006885
[  418.024238][T20221] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  418.079878][T20224] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  418.098036][T20224] CPU: 1 UID: 0 PID: 20224 Comm: syz.1.3730 Not tainted syzkaller #0 PREEMPT(full) 
[  418.098050][T20224] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  418.098055][T20224] Call Trace:
[  418.098059][T20224]  <TASK>
[  418.098063][T20224]  dump_stack_lvl+0xe8/0x150
[  418.098077][T20224]  sysfs_warn_dup+0x8e/0xa0
[  418.098088][T20224]  sysfs_do_create_link_sd+0xc0/0x110
[  418.098099][T20224]  device_add_class_symlinks+0x1cf/0x240
[  418.098112][T20224]  device_add+0x475/0xbb0
[  418.098123][T20224]  wiphy_register+0x1fb1/0x2fe0
[  418.098138][T20224]  ? __pfx_wiphy_register+0x10/0x10
[  418.098145][T20224]  ? __pfx_netdev_run_todo+0x10/0x10
[  418.098153][T20224]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  418.098166][T20224]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  418.098180][T20224]  ieee80211_register_hw+0x3c53/0x4910
[  418.098193][T20224]  ? ieee80211_register_hw+0x1901/0x4910
[  418.098212][T20224]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  418.098222][T20224]  ? __asan_memset+0x22/0x50
[  418.098231][T20224]  ? __hrtimer_setup+0x1b7/0x260
[  418.098241][T20224]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  418.098253][T20224]  mac80211_hwsim_new_radio+0x3327/0x57e0
[  418.098274][T20224]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  418.098283][T20224]  ? kstrndup+0xbf/0x160
[  418.098313][T20224]  hwsim_new_radio_nl+0xe20/0x26e0
[  418.098322][T20224]  ? unwind_next_frame+0xa6/0x2550
[  418.098339][T20224]  ? is_bpf_text_address+0x26/0x2b0
[  418.098352][T20224]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  418.098361][T20224]  ? __kernel_text_address+0xd/0x30
[  418.098372][T20224]  ? unwind_get_return_address+0x4d/0x90
[  418.098380][T20224]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  418.098391][T20224]  ? arch_stack_walk+0xfb/0x150
[  418.098406][T20224]  ? stack_trace_save+0xa9/0x100
[  418.098416][T20224]  ? __pfx_stack_trace_save+0x10/0x10
[  418.098428][T20224]  ? stack_depot_save_flags+0x33/0x810
[  418.098449][T20224]  ? __nla_validate_parse+0x2480/0x2dc0
[  418.098461][T20224]  ? ____sys_sendmsg+0x972/0x9f0
[  418.098471][T20224]  ? ___sys_sendmsg+0x2a5/0x360
[  418.098490][T20224]  ? __pfx___nla_validate_parse+0x10/0x10
[  418.098536][T20224]  ? rcu_is_watching+0x15/0xb0
[  418.098553][T20224]  ? trace_kmalloc+0x2a/0xf0
[  418.098570][T20224]  ? __nla_parse+0x40/0x60
[  418.098582][T20224]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  418.098591][T20224]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  418.098603][T20224]  genl_family_rcv_msg_doit+0x22a/0x330
[  418.098615][T20224]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  418.098628][T20224]  ? bpf_lsm_capable+0x9/0x20
[  418.098636][T20224]  ? security_capable+0x7e/0x2c0
[  418.098649][T20224]  genl_rcv_msg+0x61c/0x7a0
[  418.098659][T20224]  ? __pfx_genl_rcv_msg+0x10/0x10
[  418.098667][T20224]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  418.098683][T20224]  netlink_rcv_skb+0x232/0x4b0
[  418.098695][T20224]  ? __pfx_genl_rcv_msg+0x10/0x10
[  418.098704][T20224]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  418.098721][T20224]  ? down_read+0x270/0x2e0
[  418.098728][T20224]  ? genl_rcv+0xd/0x40
[  418.098737][T20224]  genl_rcv+0x28/0x40
[  418.098744][T20224]  netlink_unicast+0x75c/0x8e0
[  418.098758][T20224]  netlink_sendmsg+0x813/0xb40
[  418.098773][T20224]  ? __pfx_netlink_sendmsg+0x10/0x10
[  418.098785][T20224]  ? aa_sock_msg_perm+0xf1/0x1b0
[  418.098795][T20224]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  418.098807][T20224]  ____sys_sendmsg+0x972/0x9f0
[  418.098818][T20224]  ? __might_fault+0xaf/0x130
[  418.098830][T20224]  ? __pfx_____sys_sendmsg+0x10/0x10
[  418.098845][T20224]  ? import_iovec+0x73/0xa0
[  418.098859][T20224]  ___sys_sendmsg+0x2a5/0x360
[  418.098869][T20224]  ? __lock_acquire+0x6b5/0x2cf0
[  418.098879][T20224]  ? __pfx____sys_sendmsg+0x10/0x10
[  418.098893][T20224]  ? futex_wait+0x2a2/0x390
[  418.098914][T20224]  ? __fget_files+0x2a/0x420
[  418.098922][T20224]  ? __fget_files+0x3a0/0x420
[  418.098935][T20224]  __x64_sys_sendmsg+0x1bd/0x2a0
[  418.098947][T20224]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  418.098961][T20224]  ? rcu_is_watching+0x15/0xb0
[  418.098974][T20224]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.098982][T20224]  do_syscall_64+0x15f/0xf80
[  418.098989][T20224]  ? trace_irq_disable+0x3b/0x140
[  418.099002][T20224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.099009][T20224] RIP: 0033:0x7fe99299cdd9
[  418.099017][T20224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  418.099024][T20224] RSP: 002b:00007fe99386e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  418.099033][T20224] RAX: ffffffffffffffda RBX: 00007fe992c15fa0 RCX: 00007fe99299cdd9
[  418.099039][T20224] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  418.099044][T20224] RBP: 00007fe992a32d69 R08: 0000000000000000 R09: 0000000000000000
[  418.099048][T20224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  418.099052][T20224] R13: 00007fe992c16038 R14: 00007fe992c15fa0 R15: 00007fff8ae54968
[  418.099065][T20224]  </TASK>
[  418.275047][T20231] netlink: 'syz.1.3730': attribute type 28 has an invalid length.
[  418.283596][T20236] __nla_validate_parse: 9 callbacks suppressed
[  418.283610][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3732'.
[  418.320964][T20239] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3734'.
[  418.337129][T20239] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3734'.
[  418.412238][T20243] syzkaller0: entered promiscuous mode
[  418.413952][T20243] syzkaller0: entered allmulticast mode
[  418.489609][T20253] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3738'.
[  418.525428][T20254] syzkaller0: entered promiscuous mode
[  418.530607][T20254] syzkaller0: entered allmulticast mode
[  418.537408][T20254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3737'.
[  418.618103][T20268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3741'.
[  418.644699][T20271] netlink: 'syz.0.3742': attribute type 7 has an invalid length.
[  418.656038][T20271] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  418.727857][T20271] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  418.785192][T20271] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  418.820523][T20271] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  418.893599][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  418.905219][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  418.918164][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  418.929476][ T5675] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  418.971474][T20286] netlink: 'syz.0.3746': attribute type 1 has an invalid length.
[  419.006713][T20286] 8021q: adding VLAN 0 to HW filter on device bond39
[  419.034342][T20286] netlink: 'syz.0.3746': attribute type 1 has an invalid length.
[  419.065835][T20293] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3747'.
[  419.186856][T20293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3747'.
[  419.287391][T20303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3749'.
[  419.344866][T20305] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3750'.
[  419.447892][T20307] bond40: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  419.453703][T20307] bond40 (unregistering): Released all slaves
[  421.112134][T20365] netlink: 'syz.0.3767': attribute type 12 has an invalid length.
[  421.321339][T20368] block nbd4: server does not support multiple connections per device.
[  421.345760][T20368] block nbd4: shutting down sockets
[  421.523116][T20389] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  421.927148][T20392] netlink: 'syz.0.3774': attribute type 1 has an invalid length.
[  422.073659][T20399] xt_CT: You must specify a L4 protocol and not use inversions on it
[  422.088077][T20400] xt_CT: You must specify a L4 protocol and not use inversions on it
[  422.264435][T20421] syzkaller1: entered promiscuous mode
[  422.271094][T20421] syzkaller1: entered allmulticast mode
[  422.390798][T20428] netlink: 'syz.2.3782': attribute type 3 has an invalid length.
[  432.767060][T20459] syzkaller1: entered promiscuous mode
[  432.769729][T20459] syzkaller1: entered allmulticast mode
[  432.975512][T20473] __nla_validate_parse: 23 callbacks suppressed
[  432.975531][T20473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3793'.
[  432.982655][T20473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3793'.
[  432.986028][T20473] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3793'.
[  432.994112][T20473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3793'.
[  433.005140][T20473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3793'.
[  433.012569][T20473] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3793'.
[  433.032986][T20473] geneve7: entered promiscuous mode
[  433.039248][T10595] netdevsim netdevsim1 eth0: set [1, 3] type 2 family 0 port 53915 - 0
[  433.045217][T10595] netdevsim netdevsim1 eth1: set [1, 3] type 2 family 0 port 53915 - 0
[  433.053098][T10595] netdevsim netdevsim1 eth2: set [1, 3] type 2 family 0 port 53915 - 0
[  433.058790][T10595] netdevsim netdevsim1 eth3: set [1, 3] type 2 family 0 port 53915 - 0
[  433.311210][T20491] netlink: 'syz.2.3798': attribute type 1 has an invalid length.
[  433.325265][T20491] bond26: entered promiscuous mode
[  433.327280][T20491] 8021q: adding VLAN 0 to HW filter on device bond26
[  433.809183][T20505] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3804'.
[  434.167650][T20527] netlink: 'syz.0.3810': attribute type 1 has an invalid length.
[  434.271197][T20533] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3811'.
[  434.343396][T20534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3811'.
[  434.354807][T20536] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3812'.
[  435.262839][T20554] syzkaller0: entered promiscuous mode
[  435.264853][T20554] syzkaller0: entered allmulticast mode
[  435.486471][T20574] netlink: 'syz.1.3822': attribute type 8 has an invalid length.
[  435.491624][T20574] netlink: 'syz.1.3822': attribute type 1 has an invalid length.
[  435.494175][T20574] netlink: 'syz.1.3822': attribute type 11 has an invalid length.
[  438.026912][T20583] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  438.325317][T20608] __nla_validate_parse: 4 callbacks suppressed
[  438.325330][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3833'.
[  438.332014][T20608] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3833'.
[  438.355961][T20608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3833'.
[  438.378155][T20616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3835'.
[  438.447074][T20617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3835'.
[  438.468581][T20617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3835'.
[  439.182324][T20643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3840'.
[  439.221920][T20648] syzkaller0: entered promiscuous mode
[  439.234651][T20648] syzkaller0: entered allmulticast mode
[  439.258115][T20648] sock: sock_set_timeout: `syz.2.3842' (pid 20648) tries to set negative timeout
[  439.482690][T20668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3847'.
[  442.443519][T20680] netlink: 'syz.0.3850': attribute type 1 has an invalid length.
[  442.446332][T20680] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3850'.
[  442.451499][T20680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3850'.
[  442.584840][T20687] netlink: 'syz.0.3852': attribute type 5 has an invalid length.
[  442.717388][T20704] netlink: 'syz.1.3856': attribute type 5 has an invalid length.
[  442.794214][T20711] vlan3: entered promiscuous mode
[  442.796008][T20711] bridge0: entered promiscuous mode
[  443.854349][T20744] __nla_validate_parse: 6 callbacks suppressed
[  443.854360][T20744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3868'.
[  443.937889][T20748] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  443.954189][T20748] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  443.979967][T20752] netlink: 'syz.0.3869': attribute type 11 has an invalid length.
[  443.983388][T20752] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.3869'.
[  444.105274][T20759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3871'.
[  444.294657][T20778] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3876'.
[  444.580912][T20802] netlink: 'syz.2.3881': attribute type 1 has an invalid length.
[  444.584130][T20802] netlink: 1008 bytes leftover after parsing attributes in process `syz.2.3881'.
[  444.834279][T20809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3884'.
[  445.226740][T20829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3888'.
[  445.255888][T20829] veth0_virt_wifi (unregistering): left allmulticast mode
[  445.263244][T20829] veth0_virt_wifi (unregistering): left promiscuous mode
[  445.269301][T20829] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  445.294318][T20801] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  445.487599][T20844] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  445.605094][T20865] netlink: 'syz.2.3900': attribute type 1 has an invalid length.
[  445.629459][T20865] bond27: entered promiscuous mode
[  445.633167][T20865] bond27: entered allmulticast mode
[  445.636496][T20865] 8021q: adding VLAN 0 to HW filter on device bond27
[  445.647578][T20865] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3900'.
[  445.700344][T20867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3899'.
[  445.706906][T20872] netlink: 'syz.1.3901': attribute type 1 has an invalid length.
[  445.715806][T20867] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  445.720550][T20867] syzkaller0: MTU too low for tipc bearer
[  445.722637][T20867] tipc: Disabling bearer <eth:syzkaller0>
[  445.744043][T20872] bond38: entered promiscuous mode
[  445.746565][T20872] bond38: entered allmulticast mode
[  445.749108][T20872] 8021q: adding VLAN 0 to HW filter on device bond38
[  445.808032][T20884] netlink: 'syz.2.3905': attribute type 10 has an invalid length.
[  445.850599][T20890] No such timeout policy "syz1"
[  445.872774][T20886] veth0: entered promiscuous mode
[  445.882288][T20894] netlink: 'syz.1.3907': attribute type 10 has an invalid length.
[  445.885007][T20894] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3907'.
[  445.892022][T20886] bond0: entered promiscuous mode
[  445.900251][T20886] batadv2: entered promiscuous mode
[  445.990646][T20883] bond0: left promiscuous mode
[  445.992524][T20883] batadv2: left promiscuous mode
[  445.994448][T20883] veth0: left promiscuous mode
[  446.037072][T20910] syzkaller1: entered promiscuous mode
[  446.040626][T20910] syzkaller1: entered allmulticast mode
[  446.043910][T20910] 
[  446.044752][T20910] ======================================================
[  446.047086][T20910] WARNING: possible circular locking dependency detected
[  446.049383][T20910] syzkaller #0 Not tainted
[  446.050992][T20910] ------------------------------------------------------
[  446.053177][T20910] syz.2.3911/20910 is trying to acquire lock:
[  446.055064][T20910] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0x9d/0x760
[  446.057813][T20910] 
[  446.057813][T20910] but task is already holding lock:
[  446.060470][T20910] ffff8881161b2460 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_addr_add+0x3be/0xb20
[  446.063451][T20910] 
[  446.063451][T20910] which lock already depends on the new lock.
[  446.063451][T20910] 
[  446.066655][T20910] 
[  446.066655][T20910] the existing dependency chain (in reverse order) is:
[  446.069415][T20910] 
[  446.069415][T20910] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  446.071874][T20910]        lock_sock_nested+0x41/0x100
[  446.073514][T20910]        mptcp_listen+0x230/0x610
[  446.075130][T20910]        __x64_sys_listen+0x1c7/0x240
[  446.077041][T20910]        do_syscall_64+0x15f/0xf80
[  446.078870][T20910]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.080985][T20910] 
[  446.080985][T20910] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  446.083580][T20910]        lock_sock_nested+0x41/0x100
[  446.085656][T20910]        inet_shutdown+0x6a/0x390
[  446.087506][T20910]        nbd_mark_nsock_dead+0x2e9/0x560
[  446.089276][T20910]        sock_shutdown+0x15e/0x260
[  446.090885][T20910]        nbd_clear_sock+0x24/0x170
[  446.092518][T20910]        nbd_config_put+0x2dd/0x580
[  446.094155][T20910]        nbd_genl_connect+0x19d5/0x1cf0
[  446.095925][T20910]        genl_family_rcv_msg_doit+0x22a/0x330
[  446.097818][T20910]        genl_rcv_msg+0x61c/0x7a0
[  446.099515][T20910]        netlink_rcv_skb+0x232/0x4b0
[  446.101535][T20910]        genl_rcv+0x28/0x40
[  446.103155][T20910]        netlink_unicast+0x75c/0x8e0
[  446.105003][T20910]        netlink_sendmsg+0x813/0xb40
[  446.106895][T20910]        ____sys_sendmsg+0x972/0x9f0
[  446.109037][T20910]        ___sys_sendmsg+0x2a5/0x360
[  446.111138][T20910]        __x64_sys_sendmsg+0x1bd/0x2a0
[  446.113341][T20910]        do_syscall_64+0x15f/0xf80
[  446.115458][T20910]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.117974][T20910] 
[  446.117974][T20910] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  446.120897][T20910]        __mutex_lock+0x1a3/0x1550
[  446.122823][T20910]        nbd_queue_rq+0x37b/0x1100
[  446.124711][T20910]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  446.126885][T20910]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  446.129712][T20910]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  446.132385][T20910]        blk_mq_run_hw_queue+0x348/0x4f0
[  446.134684][T20910]        blk_mq_dispatch_list+0xd16/0xe10
[  446.136928][T20910]        blk_mq_flush_plug_list+0x48d/0x570
[  446.139358][T20910]        __blk_flush_plug+0x3ed/0x4d0
[  446.141564][T20910]        __submit_bio+0x28d/0x580
[  446.143636][T20910]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  446.146036][T20910]        block_read_full_folio+0x599/0x830
[  446.148481][T20910]        filemap_read_folio+0x137/0x3b0
[  446.150738][T20910]        do_read_cache_folio+0x358/0x590
[  446.153019][T20910]        read_part_sector+0xb6/0x2b0
[  446.155251][T20910]        adfspart_check_ICS+0xb1/0x960
[  446.157483][T20910]        bdev_disk_changed+0x817/0x1770
[  446.159716][T20910]        blkdev_get_whole+0x380/0x510
[  446.161893][T20910]        bdev_open+0x31e/0xd30
[  446.163831][T20910]        blkdev_open+0x470/0x610
[  446.165775][T20910]        do_dentry_open+0x785/0x14e0
[  446.167870][T20910]        vfs_open+0x3b/0x340
[  446.169780][T20910]        path_openat+0x2e08/0x3860
[  446.171896][T20910]        do_file_open+0x23e/0x4a0
[  446.173990][T20910]        do_sys_openat2+0x113/0x200
[  446.176161][T20910]        __x64_sys_openat+0x138/0x170
[  446.178391][T20910]        do_syscall_64+0x15f/0xf80
[  446.180469][T20910]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.183084][T20910] 
[  446.183084][T20910] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  446.185996][T20910]        __mutex_lock+0x1a3/0x1550
[  446.187687][T20910]        nbd_queue_rq+0xc6/0x1100
[  446.189330][T20910]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  446.191281][T20910]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  446.193461][T20910]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  446.195471][T20910]        blk_mq_run_hw_queue+0x348/0x4f0
[  446.197265][T20910]        blk_mq_dispatch_list+0xd16/0xe10
[  446.199046][T20910]        blk_mq_flush_plug_list+0x48d/0x570
[  446.200931][T20910]        __blk_flush_plug+0x3ed/0x4d0
[  446.202645][T20910]        __submit_bio+0x28d/0x580
[  446.204243][T20910]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  446.206186][T20910]        block_read_full_folio+0x599/0x830
[  446.208082][T20910]        filemap_read_folio+0x137/0x3b0
[  446.209822][T20910]        do_read_cache_folio+0x358/0x590
[  446.211659][T20910]        read_part_sector+0xb6/0x2b0
[  446.213341][T20910]        adfspart_check_ICS+0xb1/0x960
[  446.215037][T20910]        bdev_disk_changed+0x817/0x1770
[  446.216753][T20910]        blkdev_get_whole+0x380/0x510
[  446.218485][T20910]        bdev_open+0x31e/0xd30
[  446.220069][T20910]        blkdev_open+0x470/0x610
[  446.221676][T20910]        do_dentry_open+0x785/0x14e0
[  446.223290][T20910]        vfs_open+0x3b/0x340
[  446.224761][T20910]        path_openat+0x2e08/0x3860
[  446.226628][T20910]        do_file_open+0x23e/0x4a0
[  446.228281][T20910]        do_sys_openat2+0x113/0x200
[  446.229947][T20910]        __x64_sys_openat+0x138/0x170
[  446.231692][T20910]        do_syscall_64+0x15f/0xf80
[  446.233354][T20910]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.235421][T20910] 
[  446.235421][T20910] -> #3 (set->srcu){.+.+}-{0:0}:
[  446.237561][T20910]        __synchronize_srcu+0xca/0x300
[  446.239293][T20910]        elevator_switch+0x1e8/0x7a0
[  446.240961][T20910]        elevator_change+0x2cc/0x450
[  446.242667][T20910]        elevator_set_default+0x36c/0x430
[  446.244512][T20910]        blk_register_queue+0x3e9/0x4e0
[  446.246253][T20910]        __add_disk+0x677/0xd50
[  446.247793][T20910]        add_disk_fwnode+0xfb/0x480
[  446.249413][T20910]        nbd_dev_add+0x72c/0xb50
[  446.250935][T20910]        nbd_init+0x168/0x1f0
[  446.252440][T20910]        do_one_initcall+0x250/0x870
[  446.254086][T20910]        do_initcall_level+0x104/0x190
[  446.255810][T20910]        do_initcalls+0x59/0xa0
[  446.257399][T20910]        kernel_init_freeable+0x2a6/0x3e0
[  446.259257][T20910]        kernel_init+0x1d/0x1d0
[  446.260920][T20910]        ret_from_fork+0x514/0xb70
[  446.262612][T20910]        ret_from_fork_asm+0x1a/0x30
[  446.264336][T20910] 
[  446.264336][T20910] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  446.266784][T20910]        __mutex_lock+0x1a3/0x1550
[  446.268440][T20910]        elevator_change+0x1b3/0x450
[  446.270118][T20910]        elevator_set_none+0xb5/0x140
[  446.271886][T20910]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  446.273877][T20910]        nbd_start_device+0x17f/0xb10
[  446.275575][T20910]        nbd_genl_connect+0x165b/0x1cf0
[  446.277310][T20910]        genl_family_rcv_msg_doit+0x22a/0x330
[  446.279255][T20910]        genl_rcv_msg+0x61c/0x7a0
[  446.280859][T20910]        netlink_rcv_skb+0x232/0x4b0
[  446.282515][T20910]        genl_rcv+0x28/0x40
[  446.283907][T20910]        netlink_unicast+0x75c/0x8e0
[  446.285523][T20910]        netlink_sendmsg+0x813/0xb40
[  446.287171][T20910]        ____sys_sendmsg+0x972/0x9f0
[  446.288861][T20910]        ___sys_sendmsg+0x2a5/0x360
[  446.290823][T20910]        __x64_sys_sendmsg+0x1bd/0x2a0
[  446.292648][T20910]        do_syscall_64+0x15f/0xf80
[  446.294321][T20910]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.296425][T20910] 
[  446.296425][T20910] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  446.299067][T20910]        blk_alloc_queue+0x546/0x680
[  446.300807][T20910]        __blk_mq_alloc_disk+0x197/0x390
[  446.302564][T20910]        nbd_dev_add+0x499/0xb50
[  446.304115][T20910]        nbd_init+0x168/0x1f0
[  446.305621][T20910]        do_one_initcall+0x250/0x870
[  446.307302][T20910]        do_initcall_level+0x104/0x190
[  446.309029][T20910]        do_initcalls+0x59/0xa0
[  446.310635][T20910]        kernel_init_freeable+0x2a6/0x3e0
[  446.312446][T20910]        kernel_init+0x1d/0x1d0
[  446.314024][T20910]        ret_from_fork+0x514/0xb70
[  446.315750][T20910]        ret_from_fork_asm+0x1a/0x30
[  446.317422][T20910] 
[  446.317422][T20910] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  446.319742][T20910]        __lock_acquire+0x15a5/0x2cf0
[  446.321480][T20910]        lock_acquire+0x106/0x350
[  446.323107][T20910]        fs_reclaim_acquire+0x71/0x100
[  446.324855][T20910]        __kmalloc_noprof+0x9d/0x760
[  446.326583][T20910]        sock_kmalloc+0xd6/0x160
[  446.328173][T20910]        __ipv6_sock_mc_join+0x408/0x750
[  446.329998][T20910]        inet6_addr_add+0x3cf/0xb20
[  446.331637][T20910]        inet6_rtm_newaddr+0xa17/0xe30
[  446.333352][T20910]        rtnetlink_rcv_msg+0x7d5/0xbe0
[  446.335051][T20910]        netlink_rcv_skb+0x232/0x4b0
[  446.336756][T20910]        netlink_unicast+0x75c/0x8e0
[  446.338451][T20910]        netlink_sendmsg+0x813/0xb40
[  446.340143][T20910]        ____sys_sendmsg+0x972/0x9f0
[  446.341872][T20910]        ___sys_sendmsg+0x2a5/0x360
[  446.343621][T20910]        __x64_sys_sendmsg+0x1bd/0x2a0
[  446.345387][T20910]        do_syscall_64+0x15f/0xf80
[  446.347040][T20910]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.349141][T20910] 
[  446.349141][T20910] other info that might help us debug this:
[  446.349141][T20910] 
[  446.352375][T20910] Chain exists of:
[  446.352375][T20910]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6
[  446.352375][T20910] 
[  446.356362][T20910]  Possible unsafe locking scenario:
[  446.356362][T20910] 
[  446.358568][T20910]        CPU0                    CPU1
[  446.360205][T20910]        ----                    ----
[  446.361815][T20910]   lock(k-sk_lock-AF_INET6);
[  446.363315][T20910]                                lock(sk_lock-AF_INET6);
[  446.365405][T20910]                                lock(k-sk_lock-AF_INET6);
[  446.367690][T20910]   lock(fs_reclaim);
[  446.368991][T20910] 
[  446.368991][T20910]  *** DEADLOCK ***
[  446.368991][T20910] 
[  446.371436][T20910] 2 locks held by syz.2.3911/20910:
[  446.372968][T20910]  #0: ffffffff8fdd0300 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65f/0xe30
[  446.375817][T20910]  #1: ffff8881161b2460 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_addr_add+0x3be/0xb20
[  446.378882][T20910] 
[  446.378882][T20910] stack backtrace:
[  446.380861][T20910] CPU: 0 UID: 0 PID: 20910 Comm: syz.2.3911 Not tainted syzkaller #0 PREEMPT(full) 
[  446.380872][T20910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  446.380877][T20910] Call Trace:
[  446.380882][T20910]  <TASK>
[  446.380887][T20910]  dump_stack_lvl+0xe8/0x150
[  446.380899][T20910]  print_circular_bug+0x2e1/0x300
[  446.380911][T20910]  check_noncircular+0x12e/0x150
[  446.380922][T20910]  __lock_acquire+0x15a5/0x2cf0
[  446.380932][T20910]  ? do_syscall_64+0x15f/0xf80
[  446.380941][T20910]  ? look_up_lock_class+0x57/0x110
[  446.380948][T20910]  ? register_lock_class+0x31/0x2e0
[  446.380957][T20910]  ? __kmalloc_noprof+0x9d/0x760
[  446.380967][T20910]  lock_acquire+0x106/0x350
[  446.380975][T20910]  ? __kmalloc_noprof+0x9d/0x760
[  446.380986][T20910]  ? __pfx___mutex_trylock_common+0x10/0x10
[  446.380998][T20910]  fs_reclaim_acquire+0x71/0x100
[  446.381008][T20910]  ? __kmalloc_noprof+0x9d/0x760
[  446.381017][T20910]  __kmalloc_noprof+0x9d/0x760
[  446.381026][T20910]  ? sock_kmalloc+0xd6/0x160
[  446.381035][T20910]  sock_kmalloc+0xd6/0x160
[  446.381042][T20910]  __ipv6_sock_mc_join+0x408/0x750
[  446.381052][T20910]  ? __local_bh_enable_ip+0xd0/0x130
[  446.381061][T20910]  inet6_addr_add+0x3cf/0xb20
[  446.381070][T20910]  inet6_rtm_newaddr+0xa17/0xe30
[  446.381079][T20910]  ? __pfx_inet6_rtm_newaddr+0x10/0x10
[  446.381087][T20910]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  446.381100][T20910]  ? __pfx_inet6_rtm_newaddr+0x10/0x10
[  446.381107][T20910]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  446.381116][T20910]  ? kmem_cache_alloc_node_noprof+0x384/0x690
[  446.381127][T20910]  ? netlink_sendmsg+0x5d4/0xb40
[  446.381147][T20910]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  446.381158][T20910]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  446.381168][T20910]  ? __lock_acquire+0x6b5/0x2cf0
[  446.381179][T20910]  netlink_rcv_skb+0x232/0x4b0
[  446.381211][T20910]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  446.381221][T20910]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  446.381234][T20910]  ? netlink_deliver_tap+0x2e/0x1b0
[  446.381244][T20910]  ? netlink_deliver_tap+0x2e/0x1b0
[  446.381254][T20910]  netlink_unicast+0x75c/0x8e0
[  446.381267][T20910]  netlink_sendmsg+0x813/0xb40
[  446.381280][T20910]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.381291][T20910]  ? aa_sock_msg_perm+0xf1/0x1b0
[  446.381302][T20910]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  446.381313][T20910]  ____sys_sendmsg+0x972/0x9f0
[  446.381323][T20910]  ? __might_fault+0xaf/0x130
[  446.381333][T20910]  ? __pfx_____sys_sendmsg+0x10/0x10
[  446.381345][T20910]  ? import_iovec+0x73/0xa0
[  446.381355][T20910]  ___sys_sendmsg+0x2a5/0x360
[  446.381365][T20910]  ? __lock_acquire+0x6b5/0x2cf0
[  446.381373][T20910]  ? __pfx____sys_sendmsg+0x10/0x10
[  446.381384][T20910]  ? futex_wake+0x4ac/0x580
[  446.381400][T20910]  ? __fget_files+0x2a/0x420
[  446.381409][T20910]  ? __fget_files+0x3a0/0x420
[  446.381418][T20910]  __x64_sys_sendmsg+0x1bd/0x2a0
[  446.381429][T20910]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  446.381441][T20910]  ? rcu_is_watching+0x15/0xb0
[  446.381451][T20910]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.381458][T20910]  do_syscall_64+0x15f/0xf80
[  446.381465][T20910]  ? trace_irq_disable+0x3b/0x140
[  446.381476][T20910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.381483][T20910] RIP: 0033:0x7f300719cdd9
[  446.381492][T20910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  446.381499][T20910] RSP: 002b:00007f3008116028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  446.381507][T20910] RAX: ffffffffffffffda RBX: 00007f3007415fa0 RCX: 00007f300719cdd9
[  446.381513][T20910] RDX: 0000000000010080 RSI: 00002000000001c0 RDI: 0000000000000007
[  446.381519][T20910] RBP: 00007f3007232d69 R08: 0000000000000000 R09: 0000000000000000
[  446.381524][T20910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  446.381529][T20910] R13: 00007f3007416038 R14: 00007f3007415fa0 R15: 00007fffde003c98
[  446.381537][T20910]  </TASK>
