last executing test programs:

2.053451766s ago: executing program 0 (id=3905):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r4, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaee}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000)
r5 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f00000002c0)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c)

2.024631677s ago: executing program 0 (id=3909):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r0, 0x0)
shutdown(r0, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206050300000000000000000000000105000100070000000900020073797a300000000014000780080006000000000008001340000000000500050002000000050004000000000011000300686173683a6970"], 0x60}}, 0x8800)
socket$inet6(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000900000073119d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_proto_private(r2, 0x89eb, &(0x7f0000005180)="fa81df10cb1c84af3b")

1.952580701s ago: executing program 0 (id=3912):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000002000000084"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x9, 0x8, 0x6}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071001b00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x26020480)
r4 = gettid()
getgid()
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000f00)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000001000)=0xe8)
r6 = getgid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000880)="0cea3968ca9209860dc8eabb0be9a3fddc7ce5cf3067d439f152c74442733013ec48928a5e3579f796e1f565bfc88740107bf3a526fdb3394f4f973f85ecd69540c8317d4afcd80592200d44a6a6718a1c170b59d3ec9c2fd04cc556723470043a6e62cc02b94e24b2ceee4d1db0a5bcbfa0718a12e950d9f48f0d092f0e6c100df6e58160782aed8312df92107af3d789df1a37a0aceb91d0dd4b8ed7e14d81ced3ce6e641f29ae75f9d321173f55feb072bad531c8e84a31", 0xb9}, {&(0x7f00000009c0)="dca8d89d5c72da24b02d5da727d997df1ac1c6108d1faaff8cc987d67b586a15250de3635fa53adaf94bf0ee6102fff1c3bd9ac9e0dcbca032555063789f8e02e507a1955b4cf2dbb827c795517dcefe3e46170d51d43b52a3", 0x59}, {&(0x7f0000000a40)="092edc41428264210862fffa82ea34812e94f8d862d3df0d117aad01b1ee324d1a1e8a9dacd12aa756c90fde7ca74735bb779da0ac0f4c07f62a3c643dca6f00f186723a2bc3b00695c7a797e16dbd2dc324775dce744996209cf7a5c6b07f71655caa798cb113284db3b21f4c75c7336fff6679f1dc552fae293f999af472ce232502bf61622346f9f5a93939d4629b", 0x90}, {&(0x7f0000000b00)="c409e3a1a2bd6e55b3a5e720160ece1c85ef78edc2af17693a629570189e1d7c0d9a851cc5bdc4d61665f6530aa06ac031ddd1499202c1f99e095000af0bd8904520c818aa", 0x45}, {&(0x7f0000000b80)="88842d9662f984a9e857087aeeb5eaab6bd0bb921ef1570ad16a45d6a9971d4b965f63a8753c6072c4f6fd36f7934b1054b1b3b025bfb0cc83e4fd562f2878d0ceca3aa3ab9482ab033324b225d59cb64c7128dab4db0095f121db2d8eac4c003c52501e32c17ca1d749bec858f22f9206f746517cc9dc427e23cfc18c837a96d8ffb6a6af7f8a68bad1ff8836dfb32651db3fa715535bc16a4213f223a44059d81c", 0xa2}], 0x5, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x18, 0x1, 0x1, [r3, r1]}}], 0x90, 0x8040}, 0x0)
syz_open_procfs$namespace(r4, &(0x7f00000006c0)='ns/time_for_children\x00')
unshare(0x40080)
close(0x4)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0)
r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000740)={r1, 0xffffffffffffffff, 0x0, 0xde, &(0x7f0000000500)="c30c6e5767d0807a2a87c8fe7056f0b9f31ececb621ab8c1f4b39b7a7165713e8d6bd962b189d9fca62cf0d026cbce519d3f240450b029c764ca3c6e876640a88bdb336a8c7c2036a78bec9dadb23f070195f515f6b7e0eb8b1e001d6ea01d6600e8ede581f953c1da92423c130b6efb97c850193bcf04878320145787767b7d0b868214b2b9cdacf5a2a6111e906bddfd8e646e278ffdd42387a8a74612622015b993ebd6814a8181274d096c8a5f3061ea7333bf7f7228ecf4512ce61c09940baa908c8799d19193532a98780214251b618843faadc62340a9dc8b3e94", 0x80, 0xe, 0x8, 0x64bd, 0xf7, 0x0, 0x7fff, 'syz1\x00'})
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f00000000c0), &(0x7f0000000280)=0x8)

1.952337271s ago: executing program 2 (id=3913):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="9500000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r4, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0}}, 0x10)
r5 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r5, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="7000102e7577d401", 0x8}, {0x0}], 0x2}}], 0x1, 0x4c0c0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
pipe(0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000007ef0d27f69b88b32d7108ef183d7030000000000000000000000c311"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r7)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c)
listen(0xffffffffffffffff, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)

1.88179876s ago: executing program 2 (id=3915):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r2 = accept4(r1, 0x0, 0x0, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) (async)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, 0x312}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async)
sendmsg$kcm(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="3fc3", 0x2}, {&(0x7f0000000280)="d6", 0x1}], 0x2, &(0x7f0000000bc0)=ANY=[], 0x568}, 0x4080)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000f00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5d3e1c0}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x10000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0)

1.881251232s ago: executing program 2 (id=3916):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$rds(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r1}, 0xc)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="67358d6609000000000000000000000002200000", @ANYRES32=r3, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000001400210100000000000000000200b000", @ANYRES32=r7, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}}, 0x18}}, 0x0)
listen(r0, 0xc)
r8 = accept4(r0, &(0x7f0000000200)=@alg, &(0x7f0000000280)=0x80, 0x800)
connect$x25(r0, &(0x7f0000000a80), 0x12)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtaction={0x88, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ife={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @dev}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xb92}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x500}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r8, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000000c14020025bd5100fcdbdf2508003d00040000000800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000855)
accept4(r0, 0x0, &(0x7f0000000440), 0x800)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
unshare(0x22020600)
socket$inet_tcp(0x2, 0x1, 0x0)

1.123399966s ago: executing program 0 (id=3930):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000020)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050015000100000005000100040000000500160022"], 0x4c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000001c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x20}, {@in=@local, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}}, 0xf0}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000))
sendfile(r1, r2, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

997.427787ms ago: executing program 2 (id=3933):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f)
r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
clock_gettime(0x0, &(0x7f0000000100)={<r4=>0x0, <r5=>0x0})
ppoll(&(0x7f00000000c0)=[{r0, 0x84b8}, {r1, 0x2c}, {r2, 0x40c9}, {0xffffffffffffffff, 0x4000}, {r3, 0x8040}], 0x5, &(0x7f0000000140)={r4, r5+10000000}, &(0x7f0000000180)={[0xfffffffffffffffe]}, 0x8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x93, &(0x7f0000000340)={@local, @broadcast, @void, {@llc={0x4, {@snap={0xaa, 0xaa, "55fb", "2f8608", 0x9300, "6233c7cca6742c77ac52efb698ec35cc4c6b065cc1134f645f4d8e67ef7558a9fd27cb183291f76c7824bb74e0ff98e4dd0029eca36e979e8b1e1dcaa81eff056e06f17d2f1825ddbc88a60b1382af03756f3db4cd95411f2d3dfc510655169d9ef893fd7f550066b63013bcdbbd696638c1ddcfc64a5bbc49e2a4c2"}}}}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0d000000000000003c0012800b000100697036746e6c00082c00028014000300fe8000000000000000000000000000321400020000000000000000000000ffffac1414bb"], 0x5c}}, 0x4000000)

932.6552ms ago: executing program 2 (id=3935):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x240000d2)
syz_emit_ethernet(0x13, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@llc={0x4, {@llc={0x42, 0xfe, "87", "a90e"}}}}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0xd8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xac, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x2, [{0x1000, 0x4, 0x401, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffc, 0x6}, {0x7fde, 0x40, 0x51, 0x3fc}, {0x7, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x200}, {0x1, 0x1800004, 0xa525, 0x200000}]}}, @TCA_U32_POLICE={0x4, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}]}, @TCA_U32_LINK={0xfffffffffffffe2a, 0x3, 0xd}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0xc040)
recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0)
getsockname$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10)

928.527963ms ago: executing program 0 (id=3936):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fccdb81641170bd7c7cde29c4d40e6f6ddffffff000000000000000063a123000000000095000000000000001b4ba56feb4453ae319bba56be037eee964938499af3c2e9079a6be5188ed21786ea80878865d494fbf07eff3550fbbd6d204772c03f2d2abfe7289a1af3cf812fe7d5b0eb4ecc9f88662dd542a359e9d2619bb163e42e4f9593f2cf0ada9cf5c1d0b25407632f424fd8d48becc8bb384963c13f3335"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001a00010000005900000000000a00000000000013"], 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x54814}, 0x4c085)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r5, @ANYBLOB="100001"], 0x28}}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendto(r0, &(0x7f0000000500)="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", 0x1000, 0x8000, &(0x7f0000001500)=@in6={0xa, 0x4e22, 0x5, @loopback, 0x100}, 0x80)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
close(r7)
r8 = socket(0x10, 0x803, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x2, 0x6, 0x7, 0x8, {0x1, 0x1, 0x0, 0x101, 0x45}, {0xf, 0x2, 0x8, 0x5, 0xff81, 0xfffff3e5}, 0xfffffff7, 0xfffffffa, 0x92}}]}]}}]}, 0x74}}, 0x8080)
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)

793.958329ms ago: executing program 0 (id=3937):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYBLOB="69090ad093059df1cc54621f1624bc63cf45", @ANYRES16=r0, @ANYRES32=0x0], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4071, 0xfe7}], 0x1}, 0x100)

779.001942ms ago: executing program 2 (id=3939):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
bind$llc(r3, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
socket(0x1, 0x6, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x1000000, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r6)
recvmmsg(r6, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000740)=""/147, 0x93}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/227, 0xe3}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}], 0x8}, 0xfffffffd}], 0x1, 0x2000, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a010100000000e4000000010002000900010073797a30000000000900030073797a320a05000000000000000000010000050c00024000"], 0xa8}}, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r7, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

662.326448ms ago: executing program 1 (id=3941):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0xc, 0x15a, 0x105, 0x20, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0xa}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
close(0x3)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x2c, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x2c}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r4) (async)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r4)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x7c, r5, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x14}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e1e}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000001}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004090}, 0x4004) (async)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x7c, r5, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x14}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e1e}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg0\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000001}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004090}, 0x4004)
writev(r4, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xf61}], 0x1)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0xb, 0x0, 0x3, 0x3, 0x0, 0x4070bd2f, 0x25dfdbfc, [@sadb_x_sec_ctx={0x1, 0x18, 0x6, 0x2e}]}, 0x1b}, 0x1, 0x7}, 0x18014)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000002)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e30000000000000000000000008000300"], 0x58}}, 0x20008000) (async)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e30000000000000000000000008000300"], 0x58}}, 0x20008000)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002000800000008001b000000000008002800a60b000008003a"], 0x38}}, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x20000800)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="200001120000000000800b0000002800018000000800030003000003000100000000000000008b80606dc48624cd0e6a6d22037ee421b185540d29a21f023591151dae32007ea19993996d43"], 0x3c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4) (async)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="200001120000000000800b0000002800018000000800030003000003000100000000000000008b80606dc48624cd0e6a6d22037ee421b185540d29a21f023591151dae32007ea19993996d43"], 0x3c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4)

543.672626ms ago: executing program 1 (id=3942):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, 0x1412, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x20000000)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002"], 0xfc}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x112096, 0x4)
write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r6=>0x0})
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
r8 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000)
sendmsg$sock(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1}, 0x8000)
ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x894b, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r9)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r9)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

393.374923ms ago: executing program 1 (id=3943):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x48)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x4, 0x0, 0x8100348}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0xcdc1de3eb94507e6, 0xa, 0xb636)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@gettfilter={0x44, 0x2e, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x7, 0x6}, {0x3, 0x6}, {0xfff2, 0xd}}, [{0x8, 0xb, 0x26ffd6d0}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x24094)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000200)={0x8, 'bridge_slave_1\x00', {'dummy0\x00'}, 0x6})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r4, &(0x7f0000000280), 0x0, 0x20004804, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r10)

173.80219ms ago: executing program 1 (id=3944):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @loopback}], 0x30)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c00000014"], 0x28}}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r2, 0x6, 0x4, 0x0, &(0x7f0000000000)=0x3)

2.935861ms ago: executing program 1 (id=3945):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6"], 0x7c}, 0x1, 0x0, 0x0, 0x20005}, 0x4000894) (async)
sendmsg$NFT_BATCH(r0, 0x0, 0x404c006) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xa4, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYBLOB="010004000000fbdbdf250100000008000100030000001c000c800c000b8008000a005a7600000c"], 0x48}}, 0x3000c000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000000000009500a505000000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) (async, rerun: 32)
socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 32)
socket(0x1, 0x80000, 0x3) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20005}, 0x4000894)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000030000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec11542b6fcd728b981a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4008014) (async)
ioctl$OCFS2_IOC_GROUP_ADD(0xffffffffffffffff, 0x40186f02, &(0x7f0000000580)={0x5, 0x590, 0x6, 0x6})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$unix(0x1, 0x5, 0x0) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) (async)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @empty, 0x7ff}], 0x1c)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=ANY=[@ANYRES16=r6, @ANYBLOB="010004000000fbdbdf250100000008000100030000001c000c800c000b8008000a005a7600000c000b8008000a00b5120020"], 0x48}}, 0x3000c000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x6}, 0x94) (async, rerun: 32)
setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080), 0x4) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 1 (id=3946):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r0, 0xb)
sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="20040000f403010028bd7000fbdbdf250000000001000000090000000100000045e7e44509000000fcffffff00000000f500000003000000a600000000000100ffffff7f01800000a0000000020000000000000024000000080000000e04000000000000c5010000ff07000001000000060000000100000008000000ff0f000000000100050000000900000000000400050000000000000008000000040000000100000002000000897000000e00000006000000e8fdffff09000000ff0700000000000006000000090000002e000000c84c000007000000240a0000ff0f00000100000054a1da5efaffffffae000000e60d0000920a0000068d005b0700000095000000040000000f0000000300000001800000090000000c0000000500000007000000ea00000000040000020000000000000023000000005956d2d1823a3e63e4000000ff0000000200000000020000030000000000000000010000040000000700000003000000010000002808000007000000fffffffff8ffffff00800000ee1c00003a0a000002000000020000000700000001000080a66a0000000000001105000001800000000200000300000049ea000006000000050000000004000006000000ff0f00000a00000000800000f80400000700000003000000780700000300000003000000ffffffff010000007f00000004000000ffff0080060000000600000081d50000670d000005000000010000000100000003000000010000000700000000080000f7ffffff40000000020000008e0000000000000001000100050000001f0c0000090000000000000005000000ffffffff3c0000000000000002000000020000000800000003000000090000000600000004000000080000000300000004000000f100000002000000020000000100000006000000f8ffffff0100000005000000040000008000000008000000030000000400000014f10000ffffffff040000000000000005000000b4050000f9ffffff09000000018000000d00000003000000610000007f00000003000000070000000700000002000000ff"], 0x420}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000a40)=""/4067, &(0x7f00000000c0)=0xfe3)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRESDEC=r3], 0xfdef)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008000711ff20400000000000"], 0x52)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r7, 0x0, 0x32, 0x0, 0x0)
connect$unix(r2, &(0x7f0000000200)=@file={0x1}, 0x6e)
r8 = socket$kcm(0x29, 0xaf9452e416c006fd, 0x0)
recvmsg$kcm(r8, &(0x7f00000005c0)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)=""/229, 0xe5}, {&(0x7f0000000380)=""/145, 0x91}, {&(0x7f0000000440)=""/13, 0xd}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000500)=""/64, 0x40}], 0x5}, 0x40002020)
connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e)
socket$qrtr(0x2a, 0x2, 0x0)
ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000600)={<r9=>0xffffffffffffffff})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001a40)={r9, &(0x7f0000000680)="c0fadc42d6764536c80347b01af6598b52b50cea76c242583cc6d5da788e2d5617feda3663af5ccc34737f1167c5eccf66542c374ffc71091ebd", &(0x7f00000006c0)=""/31}, 0x20)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000021ef90000000000e5000000000000000000"], 0x0, 0x1a}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xcc02a6b5058cb77c}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x1}, 0x10}, 0x94)

kernel console output (not intermixed with test programs):

bj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2248" name="/newroot/756/memory.events" dev="tmpfs" ino=3888 res=1 errno=0
[  284.735609][   T33] audit: type=1800 audit(1778607034.141:10): pid=14109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2248" name="memory.events" dev="tmpfs" ino=3888 res=0 errno=0
[  284.751493][   T33] audit: type=1800 audit(1778607034.141:11): pid=14110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2248" name="memory.events" dev="tmpfs" ino=3888 res=0 errno=0
[  284.786849][T14111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2247'.
[  284.841752][T14118] netlink: 'syz.1.2247': attribute type 3 has an invalid length.
[  285.093833][T14131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2253'.
[  285.099100][T14131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2253'.
[  285.114559][T14131] bond28: entered promiscuous mode
[  285.116635][T14131] bond28: entered allmulticast mode
[  286.045006][T14168] veth1_to_hsr: entered allmulticast mode
[  286.133892][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2265'.
[  286.175973][T14175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2266'.
[  286.222257][T14175] bond65: entered promiscuous mode
[  286.224808][T14175] bond65: entered allmulticast mode
[  286.441383][T14192] bond17: entered promiscuous mode
[  286.443686][T14192] bond17: entered allmulticast mode
[  286.535003][T14202] lo speed is unknown, defaulting to 1000
[  286.597575][T14214] IPVS: Unknown mcast interface: pim6reg0
[  287.343833][T14255] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[  287.413342][T14265] netlink: 'syz.1.2290': attribute type 21 has an invalid length.
[  287.479488][T14255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  287.532992][T14270] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  287.540561][T14271] __nla_validate_parse: 9 callbacks suppressed
[  287.540575][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2291'.
[  287.586338][T14275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2292'.
[  287.605246][T14275] netlink: 'syz.2.2292': attribute type 13 has an invalid length.
[  287.612373][T14275] netlink: 'syz.2.2292': attribute type 17 has an invalid length.
[  287.638273][T14275] 8021q: adding VLAN 0 to HW filter on device 
[  287.641744][T14275] 8021q: adding VLAN 0 to HW filter on device team0
[  287.646012][T14275] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.655554][T14275] wireguard: wg2: Could not create IPv6 socket
[  287.660331][T14275] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  287.676730][T14281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2295'.
[  287.738755][   T33] audit: type=1804 audit(1778607037.161:12): pid=14288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2296" name="/newroot/776/memory.events" dev="tmpfs" ino=3990 res=1 errno=0
[  287.746133][   T33] audit: type=1800 audit(1778607037.161:13): pid=14288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2296" name="memory.events" dev="tmpfs" ino=3990 res=0 errno=0
[  287.753027][   T33] audit: type=1804 audit(1778607037.171:14): pid=14288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2296" name="/newroot/776/memory.events" dev="tmpfs" ino=3990 res=1 errno=0
[  287.791815][T14292] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2298'.
[  287.795882][T14292] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2298'.
[  287.846169][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2299'.
[  287.885559][T14300] netlink: 'syz.0.2300': attribute type 2 has an invalid length.
[  288.524020][T14316] x_tables: duplicate underflow at hook 2
[  288.775610][T14332] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2309'.
[  289.026331][T14361] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  289.050506][T14361] bond6: left allmulticast mode
[  289.055812][T14361] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  289.060271][T14361] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  289.067913][T14361] hsr1: left promiscuous mode
[  289.081735][T14361] bond22: left promiscuous mode
[  289.083407][   T33] audit: type=1804 audit(1778607038.511:15): pid=14369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2321" name="/newroot/754/memory.events" dev="tmpfs" ino=3876 res=1 errno=0
[  289.086017][T14361] vti0: left promiscuous mode
[  289.095757][T14361] ip6tnl5: left allmulticast mode
[  289.098063][T14361] bond28: left promiscuous mode
[  289.100997][T14361] bond28: left allmulticast mode
[  289.109536][   T33] audit: type=1800 audit(1778607038.511:16): pid=14369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2321" name="memory.events" dev="tmpfs" ino=3876 res=0 errno=0
[  289.137338][T14374] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2322'.
[  289.147427][T14374] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2322'.
[  289.156215][T14374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2322'.
[  289.282794][   T33] audit: type=1804 audit(1778607038.711:17): pid=14388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2326" name="/newroot/781/cgroup.controllers" dev="tmpfs" ino=4009 res=1 errno=0
[  289.314474][T14384] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  289.621025][T14402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.106849][T14438] lo speed is unknown, defaulting to 1000
[  290.184455][T14446] netlink: 'syz.0.2342': attribute type 4 has an invalid length.
[  290.188248][T14446] netlink: 'syz.0.2342': attribute type 4 has an invalid length.
[  290.229760][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.549575][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.844882][T14508] bond66: entered promiscuous mode
[  290.853526][T14508] bond66: entered allmulticast mode
[  293.729735][T14503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  293.844707][T14535] __nla_validate_parse: 11 callbacks suppressed
[  293.844724][T14535] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2368'.
[  293.986531][T14548] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2373'.
[  294.000688][T14548] netlink: 'syz.0.2373': attribute type 1 has an invalid length.
[  294.047931][T14548] bond29: entered promiscuous mode
[  294.051883][T14548] 8021q: adding VLAN 0 to HW filter on device bond29
[  294.055889][T14538] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  294.059789][T14538] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  294.094007][T14548] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  294.097551][T14548] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  294.118009][T14548] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2373'.
[  294.187235][T14563] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2377'.
[  294.248878][T14564] sctp: [Deprecated]: syz.0.2377 (pid 14564) Use of int in maxseg socket option.
[  294.248878][T14564] Use struct sctp_assoc_value instead
[  294.265709][T14566] netlink: 'syz.2.2378': attribute type 1 has an invalid length.
[  294.290431][T14566] bond18: entered promiscuous mode
[  294.294274][T14566] 8021q: adding VLAN 0 to HW filter on device bond18
[  294.309963][T14566] 8021q: adding VLAN 0 to HW filter on device bond18
[  294.314508][T14566] bond18: (slave wireguard2): The slave device specified does not support setting the MAC address
[  294.318400][T14566] bond18: (slave wireguard2): Setting fail_over_mac to active for active-backup mode
[  294.330872][T14566] bond18: (slave wireguard2): making interface the new active one
[  294.333816][T14566] wireguard2: entered promiscuous mode
[  294.337943][T14566] bond18: (slave wireguard2): Enslaving as an active interface with an up link
[  294.405001][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2380'.
[  294.412571][T14572] erspan0: entered promiscuous mode
[  294.421603][T14572] netlink: 'syz.2.2380': attribute type 1 has an invalid length.
[  294.425022][T14572] netlink: 'syz.2.2380': attribute type 6 has an invalid length.
[  294.428480][T14572] netlink: 'syz.2.2380': attribute type 3 has an invalid length.
[  294.459553][T14572] bond19 (unregistering): Released all slaves
[  294.807328][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2384'.
[  294.905551][T14592] vxcan1: entered allmulticast mode
[  295.054087][T14603] netlink: 'syz.1.2393': attribute type 1 has an invalid length.
[  295.128733][T14603] lo speed is unknown, defaulting to 1000
[  295.186952][T14616] raw_sendmsg: syz.1.2393 forgot to set AF_INET. Fix it!
[  295.270425][T14624] netlink: 'syz.0.2398': attribute type 1 has an invalid length.
[  295.301768][T14624] bond30: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  295.335103][T14624] veth17: entered promiscuous mode
[  295.341942][T14624] bond30: (slave veth17): Enslaving as a backup interface with a down link
[  295.347118][T14624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2398'.
[  295.352725][T14624] 8021q: adding VLAN 0 to HW filter on device bond30
[  295.367537][ T5765] bond30: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  295.579451][ T5676] bond30: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  295.790193][T14643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2401'.
[  295.807936][T14640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2401'.
[  295.930346][T14647] bond19: entered promiscuous mode
[  295.932949][T14647] bond19: entered allmulticast mode
[  296.011067][T14657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2405'.
[  296.026623][T14658] bond67 (unregistering): Released all slaves
[  296.066731][T14657] bond67: entered promiscuous mode
[  296.068804][T14657] 8021q: adding VLAN 0 to HW filter on device bond67
[  296.428340][T14687] bond31: entered allmulticast mode
[  296.431346][T14687] 8021q: adding VLAN 0 to HW filter on device bond31
[  296.436251][T14683] bond20: entered promiscuous mode
[  296.438572][T14683] bond20: entered allmulticast mode
[  296.500880][T14695] bond21: entered promiscuous mode
[  296.507327][T14695] xt_socket: unknown flags 0x8
[  297.117119][T14716] xt_hashlimit: size too large, truncated to 1048576
[  297.484678][T14720] netlink: 'syz.1.2420': attribute type 7 has an invalid length.
[  297.487606][T14720] netlink: 'syz.1.2420': attribute type 7 has an invalid length.
[  298.467297][T14770] bond23: entered promiscuous mode
[  298.469343][T14770] bond23: entered allmulticast mode
[  298.520713][T14774] netlink: 'syz.2.2430': attribute type 1 has an invalid length.
[  298.529673][ T5622] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  298.529913][ T5628] Bluetooth: hci2: command 0x0406 tx timeout
[  298.541838][T14774] bond24: entered promiscuous mode
[  298.544033][T14774] bond24: entered allmulticast mode
[  298.546036][T14774] 8021q: adding VLAN 0 to HW filter on device bond24
[  298.699067][T14783] netlink: 'syz.1.2433': attribute type 6 has an invalid length.
[  298.714943][T14785] openvswitch: netlink: IP tunnel dst address not specified
[  299.054101][T14805] __nla_validate_parse: 10 callbacks suppressed
[  299.054113][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2438'.
[  299.285210][T14815] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  299.288277][T14815] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.310922][T14817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2443'.
[  299.350215][T14817] bond33: entered promiscuous mode
[  299.352253][T14817] bond33: entered allmulticast mode
[  299.717626][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2448'.
[  299.792079][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2448'.
[  299.922634][T14839] veth0_to_team: entered promiscuous mode
[  300.084625][T14851] ipt_rpfilter: unknown options
[  300.331660][T14863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2456'.
[  300.338581][T14863] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2456'.
[  311.152898][T14882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2463'.
[  311.188571][T14884] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2461'.
[  311.203944][T14884] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2461'.
[  311.240191][T14887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.244537][T14887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.247946][T14887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.254552][T14887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.355232][T14900] openvswitch: netlink: IP tunnel dst address not specified
[  311.358878][T14900] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  311.365932][T14900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2470'.
[  311.375541][T14900] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2470'.
[  312.088101][T14917] lo speed is unknown, defaulting to 1000
[  312.260772][T14919] lo speed is unknown, defaulting to 1000
[  312.272200][T14929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2477'.
[  312.575237][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2480'.
[  312.673419][T14944] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  312.684306][T14944] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  312.764683][T14945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  313.153359][T14952] pim6reg: left allmulticast mode
[  313.318516][T14958] netlink: 'syz.1.2486': attribute type 1 has an invalid length.
[  313.332796][T14958] 8021q: adding VLAN 0 to HW filter on device bond68
[  313.350210][T14958] bond68: (slave veth21): Enslaving as an active interface with a down link
[  313.401239][T14958] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2486'.
[  313.404396][T14958] netlink: 'syz.1.2486': attribute type 7 has an invalid length.
[  313.407169][T14958] netlink: 'syz.1.2486': attribute type 8 has an invalid length.
[  313.409997][T14958] netlink: 'syz.1.2486': attribute type 2 has an invalid length.
[  313.418273][T14958] bond68 (unregistering): (slave veth21): Releasing active interface
[  313.424769][T14958] bond68 (unregistering): Released all slaves
[  313.543653][T14962] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  313.608750][T14964] hm3): entered promiscuous mode
[  313.623115][T14966] syzkaller1: entered promiscuous mode
[  313.625158][T14966] syzkaller1: entered allmulticast mode
[  313.889710][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.895226][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.900900][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.904194][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.964930][T14984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2493'.
[  313.991192][T14984] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2493'.
[  314.175069][T14998] syzkaller1: entered promiscuous mode
[  314.188031][T14998] syzkaller1: entered allmulticast mode
[  314.191380][T14998] syzkaller0: entered promiscuous mode
[  314.193651][T14998] syzkaller0: entered allmulticast mode
[  314.440370][T15018] xt_l2tp: invalid flags combination: 8
[  314.488831][T15018] netlink: 'syz.1.2502': attribute type 1 has an invalid length.
[  314.757400][T15039] hsr_slave_1 (unregistering): left promiscuous mode
[  314.883401][T15044] netlink: 'syz.1.2511': attribute type 1 has an invalid length.
[  314.910169][T15044] 8021q: adding VLAN 0 to HW filter on device bond68
[  315.657270][T15053] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.686048][T15053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  315.689838][T15053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  315.695592][T15053] veth1_vlan: left promiscuous mode
[  315.698871][T15053] veth0_vlan: left promiscuous mode
[  315.702315][T15053] veth0_vlan: entered promiscuous mode
[  315.705309][T15053] veth1_vlan: entered promiscuous mode
[  315.709352][T15053] veth1_macvtap: left promiscuous mode
[  315.712061][T15053] veth0_macvtap: left promiscuous mode
[  315.714476][T15053] veth0_macvtap: entered promiscuous mode
[  315.716986][T15053] veth1_macvtap: entered promiscuous mode
[  315.736590][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.738962][ T1246] bridge0: port 1(bridge_slave_0) entered listening state
[  315.749143][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.751511][ T1246] bridge0: port 2(bridge_slave_1) entered listening state
[  315.775513][ T1246] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  315.777912][ T1246] bridge0: port 3(veth0_virt_wifi) entered listening state
[  315.788017][ T5765] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.795276][ T5765] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.798478][ T5765] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.802035][ T5765] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  316.072477][T15079] netlink: 'syz.0.2522': attribute type 1 has an invalid length.
[  316.516187][T15076] bond69: entered promiscuous mode
[  316.517994][T15076] bond69: entered allmulticast mode
[  316.556209][T15085] netlink: 'syz.2.2523': attribute type 2 has an invalid length.
[  316.608237][T15085] __nla_validate_parse: 15 callbacks suppressed
[  316.608248][T15085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2523'.
[  319.686627][T15091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  319.775711][T15119] netlink: 'syz.0.2532': attribute type 32 has an invalid length.
[  319.835063][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2531'.
[  319.949180][T15119] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2532'.
[  320.058597][T15126] netlink: 'syz.1.2533': attribute type 7 has an invalid length.
[  320.224140][T15132] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2534'.
[  320.823680][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2541'.
[  320.846846][T11459] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  320.850236][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2541'.
[  320.859613][T11459] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  320.870114][T11459] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  320.876389][T11459] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  320.975551][T15161] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2542'.
[  321.004290][T15161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2542'.
[  321.175667][T15172] netlink: 'syz.0.2546': attribute type 1 has an invalid length.
[  321.278513][T15182] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2546'.
[  321.296789][T15178] bond34: (slave vxcan5): The slave device specified does not support setting the MAC address
[  321.301237][T15178] bond34: (slave vxcan5): Error -95 calling set_mac_address
[  321.358603][T15182] bond34: (slave bridge16): Enslaving as an active interface with a down link
[  321.370828][T15185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2550'.
[  321.618686][T15206] __nla_validate_parse: 1 callbacks suppressed
[  321.618704][T15206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2556'.
[  321.840280][T15222] net_ratelimit: 4 callbacks suppressed
[  321.840292][T15222] openvswitch: netlink: Message has 4 unknown bytes.
[  321.847207][T15222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.923181][T15227] openvswitch: netlink: Tunnel attr 215 out of range max 16
[  321.930585][T15227] netlink: 'syz.0.2564': attribute type 1 has an invalid length.
[  321.955625][T15229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2565'.
[  321.963670][T15229] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2565'.
[  322.032849][T15235] netlink: 'syz.2.2568': attribute type 1 has an invalid length.
[  322.035480][T15235] netlink: 'syz.2.2568': attribute type 4 has an invalid length.
[  322.056374][T15237] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2566'.
[  322.215098][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2570'.
[  322.225176][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2570'.
[  322.249500][T15250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2570'.
[  322.252586][T15252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2570'.
[  322.260945][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2570'.
[  322.262542][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2570'.
[  322.712170][T15283] xt_nfacct: accounting object `syz0' does not exist
[  322.742018][T15284] syzkaller0: entered promiscuous mode
[  322.744114][T15284] syzkaller0: entered allmulticast mode
[  324.373172][T15332] netlink: 'syz.0.2594': attribute type 1 has an invalid length.
[  324.375751][T15332] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.566201][T15343] 8021q: adding VLAN 0 to HW filter on device bond1
[  324.578337][T15343] 8021q: adding VLAN 0 to HW filter on device bond2
[  324.594506][T15343] 8021q: adding VLAN 0 to HW filter on device bond3
[  324.615230][T15343] 8021q: adding VLAN 0 to HW filter on device bond4
[  324.643410][T15343] 8021q: adding VLAN 0 to HW filter on device bond5
[  324.655928][T15343] 8021q: adding VLAN 0 to HW filter on device bond6
[  324.672514][T15343] 8021q: adding VLAN 0 to HW filter on device bond7
[  324.685923][T15343] 8021q: adding VLAN 0 to HW filter on device eth0
[  324.691453][T15343] 8021q: adding VLAN 0 to HW filter on device eth1
[  324.695687][T15343] 8021q: adding VLAN 0 to HW filter on device eth2
[  324.702099][T15343] 8021q: adding VLAN 0 to HW filter on device eth3
[  324.716973][T15343] 8021q: adding VLAN 0 to HW filter on device bond8
[  324.724033][T15343] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  324.726569][T15343] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  324.734809][ T5765] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  324.757566][ T5765] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  324.766227][ T5765] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  324.774305][ T5765] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  324.811525][ T5765] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  324.822667][ T5765] bond6: (slave veth7): link status definitely up, 10000 Mbps full duplex
[  324.833711][ T5765] bond6: (slave veth5): making interface the new active one
[  324.847405][ T5765] bond6: active interface up!
[  324.900646][T15364] x_tables: duplicate entry at hook 2
[  325.693934][T15394] netlink: 'syz.1.2612': attribute type 4 has an invalid length.
[  325.708226][T15394] netlink: 'syz.1.2612': attribute type 4 has an invalid length.
[  325.713952][T15394] netlink: 'syz.1.2612': attribute type 4 has an invalid length.
[  325.717716][T15394] netlink: 'syz.1.2612': attribute type 4 has an invalid length.
[  325.723480][T15394] netlink: 'syz.1.2612': attribute type 4 has an invalid length.
[  325.731584][T15394] netlink: 'syz.1.2612': attribute type 4 has an invalid length.
[  325.735471][T15394] netlink: 'syz.1.2612': attribute type 4 has an invalid length.
[  325.739057][T15394] netlink: 'syz.1.2612': attribute type 4 has an invalid length.
[  325.743331][T15394] netlink: 'syz.1.2612': attribute type 4 has an invalid length.
[  325.746851][T15394] netlink: 'syz.1.2612': attribute type 4 has an invalid length.
[  325.842611][T15399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.887350][T15399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.975267][T15405] vlan0: entered promiscuous mode
[  325.979151][T15405] veth0: entered promiscuous mode
[  326.246778][T15420] openvswitch: : Dropping previously announced user features
[  326.256296][T15420] openvswitch: : Dropping previously announced user features
[  326.585741][T15432] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20003
[  326.588197][T15432] IPVS: length: 169 != 8
[  326.802347][T15440] __nla_validate_parse: 86 callbacks suppressed
[  326.802365][T15440] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2626'.
[  326.847725][T15440] bond0 (unregistering): Released all slaves
[  326.994574][T15453] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2630'.
[  326.998975][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2630'.
[  327.032386][T15453] pim6reg1: entered promiscuous mode
[  327.034207][T15453] pim6reg1: entered allmulticast mode
[  327.050019][T15453] bond0: (slave vcan0): refused to change device type
[  327.216502][T15464] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2634'.
[  327.247713][T15468] openvswitch: netlink: IP tunnel TTL not specified.
[  327.513798][T15480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2638'.
[  330.010359][T15499] xt_CT: You must specify a L4 protocol and not use inversions on it
[  330.017385][T15499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2641'.
[  330.744359][T15502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2644'.
[  330.764155][T15502] validate_nla: 63 callbacks suppressed
[  330.764165][T15502] netlink: 'syz.0.2644': attribute type 1 has an invalid length.
[  330.893127][T15509] netlink: 'syz.0.2648': attribute type 1 has an invalid length.
[  330.907306][T15509] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.971731][T15509] vlan0: entered promiscuous mode
[  330.975091][T15509] geneve1: entered promiscuous mode
[  330.978572][T15509] vlan0: entered allmulticast mode
[  330.983527][T15509] geneve1: entered allmulticast mode
[  331.046638][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2650'.
[  331.274705][T15537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2652'.
[  331.280369][T15523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2651'.
[  331.283283][T15537] netlink: 'syz.1.2652': attribute type 1 has an invalid length.
[  331.289146][T15523] netlink: 'syz.2.2651': attribute type 6 has an invalid length.
[  331.295602][T15523] netlink: 'syz.2.2651': attribute type 5 has an invalid length.
[  331.301529][T15523] netlink: 'syz.2.2651': attribute type 6 has an invalid length.
[  331.305990][T15523] netlink: 'syz.2.2651': attribute type 5 has an invalid length.
[  331.400734][T15547] syzkaller1: entered promiscuous mode
[  331.402529][T15547] syzkaller1: entered allmulticast mode
[  332.032004][T15529] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  332.036416][T15529] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  332.053437][T15529] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  332.056529][T15529] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  332.065265][T15529] tipc: Resetting bearer <eth:syzkaller0>
[  332.255578][T15566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  332.257854][T15566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  332.260075][T15566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  332.262257][T15566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  332.264356][T15566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  332.266560][T15566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  332.268954][T15566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  332.271380][T15566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  332.273912][T15566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  332.276081][T15566] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  332.304832][T15567] __nla_validate_parse: 4 callbacks suppressed
[  332.304848][T15567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2660'.
[  332.397756][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2660'.
[  332.425745][T15568] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2660'.
[  332.434420][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2660'.
[  332.442861][T15568] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2660'.
[  332.446025][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2660'.
[  332.934976][T15580] netlink: 840 bytes leftover after parsing attributes in process `syz.2.2661'.
[  332.966021][T15582] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  332.968502][T15582] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.970909][T15582] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.185947][T15587] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2663'.
[  333.258746][T15590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2665'.
[  333.272947][T15593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2666'.
[  333.618691][T15611] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  333.622768][T15611] netlink: 'syz.0.2671': attribute type 3 has an invalid length.
[  333.643565][T15611] block nbd0: NBD_DISCONNECT
[  333.654241][T15611] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  333.656534][T15611] bridge0: port 3(veth0_virt_wifi) entered listening state
[  333.658894][T15611] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.661137][T15611] bridge0: port 2(bridge_slave_1) entered listening state
[  333.666730][T15611] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.710750][T15611] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.713032][T15611] bridge0: port 1(bridge_slave_0) entered listening state
[  334.096647][T15635] netlink: 'syz.0.2677': attribute type 3 has an invalid length.
[  334.512215][T15648] netlink: 'syz.0.2681': attribute type 29 has an invalid length.
[  336.350290][T15679] validate_nla: 3 callbacks suppressed
[  336.350305][T15679] netlink: 'syz.2.2687': attribute type 1 has an invalid length.
[  336.354837][T15679] netlink: 'syz.2.2687': attribute type 1 has an invalid length.
[  336.358318][T15679] netlink: 'syz.2.2687': attribute type 8 has an invalid length.
[  336.361995][T15679] netlink: 'syz.2.2687': attribute type 4 has an invalid length.
[  336.370748][T15679] syzkaller1: entered promiscuous mode
[  336.372747][T15679] syzkaller1: entered allmulticast mode
[  336.528865][T15681] xt_nfacct: accounting object `syz0' does not exist
[  336.827179][T15694] netlink: 'syz.0.2692': attribute type 1 has an invalid length.
[  336.894334][T15694] batadv_slave_1: entered promiscuous mode
[  336.990380][T15693] batadv_slave_1: left promiscuous mode
[  337.001074][T15696] xt_TCPMSS: Only works on TCP SYN packets
[  337.326749][T15708] __nla_validate_parse: 10 callbacks suppressed
[  337.326763][T15708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2696'.
[  337.354497][T15708] bond72: entered promiscuous mode
[  337.356501][T15708] bond72: entered allmulticast mode
[  337.417810][T15716] netlink: 'syz.2.2698': attribute type 2 has an invalid length.
[  337.423896][T15712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2699'.
[  337.427173][T15712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2699'.
[  337.431021][T15712] netlink: 58 bytes leftover after parsing attributes in process `syz.1.2699'.
[  337.736766][T15740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2705'.
[  337.871750][T15744] bond73: entered promiscuous mode
[  337.875570][T15744] bond73: entered allmulticast mode
[  337.922653][T15746] netlink: 'syz.2.2706': attribute type 1 has an invalid length.
[  337.944782][T15746] bond28: entered promiscuous mode
[  337.951415][T15746] bond28: entered allmulticast mode
[  337.958892][T15746] 8021q: adding VLAN 0 to HW filter on device bond28
[  338.015804][T15749] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  338.031790][T15749] net_ratelimit: 3321 callbacks suppressed
[  338.031800][T15749] syzkaller0: mtu less than device minimum
[  338.063071][T15750] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2706'.
[  338.081883][T15752] netlink: 'syz.1.2708': attribute type 1 has an invalid length.
[  338.257348][T15761] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  338.263106][T15761] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  339.131103][T15773] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  339.151191][T15773] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  339.244280][T15778] bond12: entered allmulticast mode
[  339.285481][T15778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2714'.
[  339.477684][T15783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  339.489717][T15783] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  339.507847][T15783] netlink: 758 bytes leftover after parsing attributes in process `syz.0.2716'.
[  339.823286][T15785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2717'.
[  340.015705][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2720'.
[  340.303383][T15810] netlink: 'syz.1.2723': attribute type 1 has an invalid length.
[  341.134549][T15862] bond74: entered promiscuous mode
[  341.140197][T15862] bond74: entered allmulticast mode
[  341.337854][T15874] : entered promiscuous mode
[  341.591561][T15881] netlink: 'syz.1.2744': attribute type 1 has an invalid length.
[  341.655537][T15885] openvswitch: netlink: ufid size 106 bytes exceeds the range (1, 16)
[  341.659612][T15885] openvswitch: netlink: Message has 8 unknown bytes.
[  341.785983][T15889] netlink: 'syz.2.2747': attribute type 1 has an invalid length.
[  341.827815][T15889] bond29: (slave vxcan7): The slave device specified does not support setting the MAC address
[  341.832859][T15889] bond29: (slave vxcan7): Error -95 calling set_mac_address
[  342.051105][T15906] bond30: entered promiscuous mode
[  342.053604][T15906] bond30: entered allmulticast mode
[  342.271328][T15915] netlink: 'syz.0.2753': attribute type 21 has an invalid length.
[  342.274635][T15915] netlink: 'syz.0.2753': attribute type 4 has an invalid length.
[  342.277613][T15915] netlink: 'syz.0.2753': attribute type 3 has an invalid length.
[  342.393397][T15917] bond5: (slave lo): Releasing backup interface
[  342.397442][T15917] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  342.403070][T15917] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  342.765617][T15931] __nla_validate_parse: 13 callbacks suppressed
[  342.765678][T15931] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2758'.
[  343.025011][T15940] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2761'.
[  343.036469][T15940] netlink: 'syz.1.2761': attribute type 2 has an invalid length.
[  343.210265][T15946] netlink: 'syz.0.2763': attribute type 8 has an invalid length.
[  343.214848][T15946] netlink: 'syz.0.2763': attribute type 4 has an invalid length.
[  343.290946][T15952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2764'.
[  343.534381][T15967] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2767'.
[  343.541755][T15967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  343.606431][T15970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2768'.
[  343.678008][T15973] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  343.704619][T15979] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2770'.
[  343.898011][T15986] lo speed is unknown, defaulting to 1000
[  344.390709][T16003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2776'.
[  344.398970][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2776'.
[  344.414166][T16003] netlink: 'syz.1.2776': attribute type 11 has an invalid length.
[  344.875687][T16024] netlink: 'syz.1.2781': attribute type 11 has an invalid length.
[  345.405887][ T8359] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.408707][ T8359] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.418675][ T8359] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.432280][ T8359] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.435780][T16041] netlink: 'syz.2.2786': attribute type 13 has an invalid length.
[  345.442924][T16043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2785'.
[  345.455005][T16041] erspan0: left promiscuous mode
[  345.472454][T16041] 8021q: adding VLAN 0 to HW filter on device 
[  345.476115][T16041] 8021q: adding VLAN 0 to HW filter on device team0
[  345.481303][T16041] 8021q: adding VLAN 0 to HW filter on device batadv0
[  345.484911][T16041] vxcan1: left allmulticast mode
[  345.498226][T16041] wireguard: wg2: Could not create IPv6 socket
[  345.502562][T16041] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  345.508659][ T1928] lo speed is unknown, defaulting to 1000
[  345.523059][T16043] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2785'.
[  345.643672][T16046] ip6tnl3: entered allmulticast mode
[  345.647037][   T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  345.660793][   T13] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  345.679759][ T7886] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  345.815685][T16057] tipc: Started in network mode
[  345.818787][T16057] tipc: Node identity 080211, cluster identity 4711
[  345.825184][T16057] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  345.840205][T16057] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  345.847868][T16059] lo speed is unknown, defaulting to 1000
[  345.850892][T16057] tipc: Resetting bearer <eth:syzkaller0>
[  345.861099][ T7886] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  345.907121][T16060] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  346.246931][ T7886] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  346.695373][T16081] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  346.708407][T16081] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  346.830064][T11620] tipc: Node number set to 134353152
[  346.937658][T16090] validate_nla: 3 callbacks suppressed
[  346.937669][T16090] netlink: 'syz.0.2801': attribute type 21 has an invalid length.
[  347.128590][T16107] pim6reg: entered allmulticast mode
[  347.383042][T16115] vlan6: entered promiscuous mode
[  347.386518][T16115] bridge0: entered promiscuous mode
[  347.996845][T16130] netlink: 'syz.1.2812': attribute type 1 has an invalid length.
[  348.098510][T16132] __nla_validate_parse: 4 callbacks suppressed
[  348.098574][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2813'.
[  348.245947][T16140] xt_TCPMSS: Only works on TCP SYN packets
[  348.248975][T16140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2816'.
[  348.434129][T16147] syzkaller0: entered promiscuous mode
[  348.436192][T16147] syzkaller0: entered allmulticast mode
[  348.836992][T16159] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2822'.
[  348.842769][T16159] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2822'.
[  348.848205][T16158] netlink: 'syz.2.2821': attribute type 1 has an invalid length.
[  348.877916][T16158] 8021q: adding VLAN 0 to HW filter on device bond31
[  348.903809][T16158] bond31: (slave veth11): Enslaving as an active interface with a down link
[  348.918583][T16158] 8021q: adding VLAN 0 to HW filter on device batadv2
[  348.921308][T16158] bond31: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  349.452974][T16179] xt_bpf: check failed: parse error
[  349.705183][T16193] lo speed is unknown, defaulting to 1000
[  349.902001][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  349.981625][T16199] bond76: invalid ARP target 0.0.0.0 specified for addition
[  349.984170][T16199] bond76: option arp_ip_target: invalid value (0)
[  349.998279][T16199] bond76 (unregistering): Released all slaves
[  350.535046][T16210] netlink: 'syz.2.2834': attribute type 1 has an invalid length.
[  350.611659][T16210] 8021q: adding VLAN 0 to HW filter on device bond32
[  350.631908][T16220] vlan0: entered promiscuous mode
[  350.633906][T16220] bond32: entered promiscuous mode
[  350.636172][T16220] vlan0: entered allmulticast mode
[  350.638200][T16220] bond32: entered allmulticast mode
[  350.651302][T16219] IPv6: sit1: Disabled Multicast RS
[  350.656704][T16210] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2834'.
[  350.667226][T16210] 8021q: adding VLAN 0 to HW filter on device batadv2
[  350.676001][T16210] bond32: (slave batadv2): making interface the new active one
[  350.678803][T16210] batadv2: entered promiscuous mode
[  350.681860][T16210] batadv2: entered allmulticast mode
[  350.684796][T16210] bond32: (slave batadv2): Enslaving as an active interface with an up link
[  350.732049][T16224] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2837'.
[  350.733697][T16227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  350.737669][T16227] IPv6: NLM_F_CREATE should be set when creating new route
[  350.740313][T16227] IPv6: NLM_F_CREATE should be set when creating new route
[  350.742782][T16227] IPv6: NLM_F_CREATE should be set when creating new route
[  350.783284][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2837'.
[  350.842876][T16219] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.023536][T16240] sctp: [Deprecated]: syz.0.2841 (pid 16240) Use of int in max_burst socket option.
[  351.023536][T16240] Use struct sctp_assoc_value instead
[  351.202526][T16247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2845'.
[  351.251845][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2846'.
[  351.311325][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2847'.
[  352.113476][T16290] netlink: 'syz.1.2856': attribute type 4 has an invalid length.
[  353.495518][T16318] bond76: (slave 26): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  353.504933][T16318] bond76: (slave 26): Enslaving as an active interface with an up link
[  353.510133][T16318] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  353.526906][T16319] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  353.554512][T16317] mac80211_hwsim hwsim2 ;: renamed from wlan0
[  353.862555][T16330] netlink: 'syz.1.2868': attribute type 8 has an invalid length.
[  353.981697][T16332] lo speed is unknown, defaulting to 1000
[  354.005435][T16335] __nla_validate_parse: 8 callbacks suppressed
[  354.005447][T16335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2869'.
[  354.014526][T16335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2869'.
[  354.018060][T16335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2869'.
[  354.022327][T16335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2869'.
[  354.027071][T16335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2869'.
[  354.036456][T16335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2869'.
[  354.051661][T16335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2869'.
[  354.058335][T16335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2869'.
[  354.067162][T16335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2869'.
[  354.073409][T16335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2869'.
[  354.526958][T16342] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  355.649951][   T55] block nbd0: Receive control failed (result -32)
[  355.704540][T16372] netem: unknown loss type 0
[  355.722248][T16372] netem: change failed
[  355.744933][T16373] netem: unknown loss type 0
[  355.755338][T16373] netem: change failed
[  355.867320][T16380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  355.891480][T16380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.836785][T16415] syzkaller1: entered promiscuous mode
[  356.839086][T16415] syzkaller1: entered allmulticast mode
[  357.008004][T16419] bridge0: port 2(veth0_virt_wifi) entered blocking state
[  357.019150][T16419] bridge0: port 2(veth0_virt_wifi) entered disabled state
[  357.031082][T16419] veth0_virt_wifi: entered allmulticast mode
[  357.036054][T16419] veth0_virt_wifi: entered promiscuous mode
[  357.174929][T16428] bond33: entered promiscuous mode
[  357.178363][T16428] bond33: entered allmulticast mode
[  357.524557][T16436] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  358.049641][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  359.115077][T16479] bond34: entered promiscuous mode
[  359.117806][T16479] bond34: entered allmulticast mode
[  359.145036][T16481] __nla_validate_parse: 178 callbacks suppressed
[  359.145047][T16481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2907'.
[  359.165910][T16481] bond77: entered promiscuous mode
[  359.167811][T16481] bond77: entered allmulticast mode
[  359.292382][T16486] nbd1: detected capacity change from 0 to 127
[  359.355010][   T55] block nbd1: Receive control failed (result -104)
[  359.503854][T16501] SET target dimension over the limit!
[  359.523724][T16501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2913'.
[  359.531815][T16503] openvswitch: netlink: Duplicate or invalid key (type 0).
[  359.536613][T16503] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  359.543118][T16503] netlink: 'syz.0.2914': attribute type 32 has an invalid length.
[  359.547751][T16503] bond0: Unable to set up delay as MII monitoring is disabled
[  360.316826][T16513] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2915'.
[  360.598538][T16517] smc: net device team0 applied user defined pnetid SYZ2
[  360.608042][T16517] smc: net device team0 erased user defined pnetid SYZ2
[  360.754730][T16520] netlink: 'syz.0.2918': attribute type 13 has an invalid length.
[  360.758911][T16520] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2918'.
[  362.118525][T16555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2922'.
[  362.136423][T16555] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2922'.
[  362.181840][T16561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2924'.
[  362.227137][T16561] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2924'.
[  362.237629][T16563] vlan0: entered promiscuous mode
[  362.390398][T16570] netlink: 211788 bytes leftover after parsing attributes in process `syz.1.2927'.
[  362.397438][T16574] netlink: 211788 bytes leftover after parsing attributes in process `syz.1.2927'.
[  362.612344][   T52] block nbd1: Connection timed out, retrying (0/1 alive)
[  362.617723][   T52] block nbd1: Connection timed out, retrying (0/1 alive)
[  362.620830][   T52] block nbd1: Connection timed out, retrying (0/1 alive)
[  362.624125][   T52] block nbd1: Connection timed out, retrying (0/1 alive)
[  362.627776][   T52] block nbd1: Dead connection, failed to find a fallback
[  362.634199][   T52] block nbd1: shutting down sockets
[  362.642567][   T52] blk_print_req_error: 138 callbacks suppressed
[  362.642589][   T52] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.655422][   T52] buffer_io_error: 138 callbacks suppressed
[  362.655438][   T52] Buffer I/O error on dev nbd1, logical block 3, async page read
[  362.661508][   T52] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.665565][   T52] Buffer I/O error on dev nbd1, logical block 2, async page read
[  362.669156][   T52] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.673023][   T52] Buffer I/O error on dev nbd1, logical block 1, async page read
[  362.676460][   T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.680500][   T52] Buffer I/O error on dev nbd1, logical block 0, async page read
[  362.689178][T15959] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.695784][T15959] Buffer I/O error on dev nbd1, logical block 0, async page read
[  362.701505][T15959] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.708125][T15959] Buffer I/O error on dev nbd1, logical block 1, async page read
[  362.714304][T15959] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.728000][T15959] Buffer I/O error on dev nbd1, logical block 2, async page read
[  362.748161][T15959] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.781519][T15959] Buffer I/O error on dev nbd1, logical block 3, async page read
[  362.805900][T15959] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.825347][T15959] Buffer I/O error on dev nbd1, logical block 0, async page read
[  362.855769][T15959] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  362.882462][T15959] Buffer I/O error on dev nbd1, logical block 1, async page read
[  362.903137][T16578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.919138][T15959] ldm_validate_partition_table(): Disk read failed.
[  362.942079][T15959] Dev nbd1: unable to read RDB block 0
[  362.974417][T15959]  nbd1: unable to read partition table
[  363.046131][T15959] ldm_validate_partition_table(): Disk read failed.
[  363.057923][T15959] Dev nbd1: unable to read RDB block 0
[  363.074462][T15959]  nbd1: unable to read partition table
[  363.456656][T16587] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  363.802931][T16618] netlink: 'syz.0.2940': attribute type 7 has an invalid length.
[  363.806003][T16618] netlink: 'syz.0.2940': attribute type 8 has an invalid length.
[  363.812437][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  363.815509][    C0] bridge0: port 3(veth0_virt_wifi) entered learning state
[  363.907564][T16621] netlink: 'syz.2.2941': attribute type 1 has an invalid length.
[  363.922711][T16621] bond35: entered promiscuous mode
[  363.924904][T16621] 8021q: adding VLAN 0 to HW filter on device bond35
[  363.962539][T16621] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  364.115722][T16630] openvswitch: netlink: Key type 31 is not supported
[  364.155581][T16634] __nla_validate_parse: 13 callbacks suppressed
[  364.155643][T16634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2943'.
[  364.255011][T16638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'.
[  364.318024][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2946'.
[  364.323952][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2946'.
[  364.329834][T16640] netlink: 'syz.2.2946': attribute type 1 has an invalid length.
[  364.335212][T16640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2946'.
[  364.625505][T16657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2950'.
[  364.652739][T16657] bond78: (slave vxcan3): The slave device specified does not support setting the MAC address
[  364.657174][T16657] bond78: (slave vxcan3): Error -95 calling set_mac_address
[  364.678064][T16658] bond78: (slave vxcan3): The slave device specified does not support setting the MAC address
[  364.683042][T16658] bond78: (slave vxcan3): Error -95 calling set_mac_address
[  364.829013][T16670] ip6t_srh: unknown srh invflags 4000
[  364.866945][T16672] sch_tbf: burst 0 is lower than device sit0 mtu (1280) !
[  364.902400][T16674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2955'.
[  364.985055][T16680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2956'.
[  365.003867][T16680] bond80: entered promiscuous mode
[  365.005872][T16680] bond80: entered allmulticast mode
[  365.089065][T16683] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2957'.
[  365.104467][T16683] ip6gre2: entered promiscuous mode
[  365.106313][T16683] ip6gre2: entered allmulticast mode
[  365.465901][T16702] bond76: (slave 26): Releasing backup interface
[  365.474785][T16702] bond76: (slave 26): last VLAN challenged slave left bond - VLAN blocking is removed
[  365.482179][T16702] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  365.549044][T16706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.564984][T16706] xt_hashlimit: size too large, truncated to 1048576
[  365.872510][T16726] syzkaller1: entered promiscuous mode
[  365.875489][T16726] syzkaller1: entered allmulticast mode
[  366.114302][T16735] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  366.117774][T16735] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  366.275316][T16741] netlink: 'syz.1.2974': attribute type 6 has an invalid length.
[  366.278446][T16741] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2974'.
[  366.314205][T16743] macvlan2: entered allmulticast mode
[  366.316253][T16743] veth1_vlan: entered allmulticast mode
[  366.352795][T16745] syzkaller1: entered promiscuous mode
[  366.354655][T16745] syzkaller1: entered allmulticast mode
[  366.660942][T16756] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  366.666441][T16756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  366.671450][T16756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  367.232735][T16760] netlink: 'syz.0.2980': attribute type 10 has an invalid length.
[  367.330946][T16762] netlink: 'syz.0.2980': attribute type 10 has an invalid length.
[  367.534940][T16768] bridge21: entered promiscuous mode
[  367.536859][T16768] bridge21: entered allmulticast mode
[  367.546994][T16768] team0: Port device bridge21 added
[  367.602468][T16760] nbd2: detected capacity change from 0 to 63
[  367.638720][   T55] block nbd2: Receive control failed (result -104)
[  367.641428][ T8031] block nbd2: Receive control failed (result -32)
[  367.951924][T16786] bond81: entered promiscuous mode
[  367.958995][T16786] bond81: entered allmulticast mode
[  368.627368][T16830] bond36: entered promiscuous mode
[  368.629755][T16830] bond36: entered allmulticast mode
[  369.152985][T16855] geneve7: entered promiscuous mode
[  369.155267][T16855] geneve7: entered allmulticast mode
[  369.168250][ T5765] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.173112][ T5765] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.178258][ T5765] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.185729][ T5765] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.327352][T16857] __nla_validate_parse: 11 callbacks suppressed
[  369.327372][T16857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3005'.
[  369.438384][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3006'.
[  369.685954][T16876] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3012'.
[  369.692367][T16876] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3012'.
[  369.751604][T16881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3013'.
[  369.783257][T16881] bond38: entered promiscuous mode
[  369.786903][T16881] bond38: entered allmulticast mode
[  369.813599][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3014'.
[  370.044166][T16894] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  370.306130][T16912] bridge17: entered promiscuous mode
[  370.307954][T16912] bridge17: entered allmulticast mode
[  370.314845][T16912] team0: Port device bridge17 added
[  370.318017][T16912] bridge0: port 4(team0) entered blocking state
[  370.320530][T16912] bridge0: port 4(team0) entered disabled state
[  370.322803][T16912] team0: entered allmulticast mode
[  370.324662][T16912] team_slave_0: entered allmulticast mode
[  370.326889][T16912] team_slave_1: entered allmulticast mode
[  370.336520][T16912] team0: entered promiscuous mode
[  370.338268][T16912] team_slave_0: entered promiscuous mode
[  370.340779][T16912] team_slave_1: entered promiscuous mode
[  370.343346][T16912] bridge0: port 4(team0) entered blocking state
[  370.345855][T16912] bridge0: port 4(team0) entered listening state
[  370.709816][T16927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3025'.
[  370.837968][T16934] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3026'.
[  370.904136][T16937] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3029'.
[  371.421740][T16963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3037'.
[  371.431056][T16963] block nbd3: Unsupported socket: should be TCP or UNIX.
[  372.446528][T16992] netlink: 'syz.0.3045': attribute type 1 has an invalid length.
[  372.461392][T16992] workqueue: Failed to create a rescuer kthread for wq "bond39": -EINTR
[  373.239712][T17006] lo speed is unknown, defaulting to 1000
[  373.272479][T17009] netlink: 'syz.2.3048': attribute type 21 has an invalid length.
[  373.506911][T17017] netlink: 'syz.1.3049': attribute type 1 has an invalid length.
[  373.697422][T17017] bond82: entered promiscuous mode
[  373.703128][T17017] 8021q: adding VLAN 0 to HW filter on device bond82
[  373.826350][T17029] wireguard: wg2: Could not create IPv6 socket
[  373.828411][T17029] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  373.967382][T17034] netlink: 'syz.1.3055': attribute type 4 has an invalid length.
[  374.059452][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  374.127448][T17036] netlink: 'syz.2.3056': attribute type 4 has an invalid length.
[  374.345779][T17054] xt_hashlimit: size too large, truncated to 1048576
[  375.121684][T17078] netlink: 'syz.1.3065': attribute type 8 has an invalid length.
[  375.128278][T17078] netlink: 'syz.1.3065': attribute type 8 has an invalid length.
[  375.132086][T17078] netlink: 'syz.1.3065': attribute type 8 has an invalid length.
[  375.135071][T17078] netlink: 'syz.1.3065': attribute type 8 has an invalid length.
[  375.138147][T17078] netlink: 'syz.1.3065': attribute type 8 has an invalid length.
[  375.325569][T17089] ip6gre4: entered promiscuous mode
[  375.327281][T17089] ip6gre4: entered allmulticast mode
[  375.332074][ T5676] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  375.336929][T17093] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  375.337225][T17090] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  375.344911][ T5676] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  375.370148][T11620] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  375.434721][T17098] __nla_validate_parse: 9 callbacks suppressed
[  375.434733][T17098] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3069'.
[  375.453198][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3069'.
[  375.697981][T17105] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3071'.
[  375.702216][T17105] openvswitch: netlink: Message has 3 unknown bytes.
[  375.707765][T17105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3071'.
[  375.801544][T17107] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3072'.
[  375.864181][T17109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3073'.
[  376.052183][T11620] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  376.112342][T17120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3078'.
[  376.209971][T11620] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  376.288457][T17131] lo speed is unknown, defaulting to 1000
[  376.974614][T17151] lo speed is unknown, defaulting to 1000
[  377.180995][T17161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3088'.
[  377.517360][T17170] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  377.602287][T17172] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  377.636199][T17175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3092'.
[  377.649660][T17175] validate_nla: 46 callbacks suppressed
[  377.649670][T17175] netlink: 'syz.2.3092': attribute type 21 has an invalid length.
[  377.654133][T17175] netlink: 'syz.2.3092': attribute type 22 has an invalid length.
[  377.657074][T17175] netlink: 'syz.2.3092': attribute type 23 has an invalid length.
[  377.661921][T17175] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3092'.
[  377.730169][T17179] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  377.733502][T17179] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  377.763233][T17181] netlink: 'syz.0.3093': attribute type 1 has an invalid length.
[  377.778472][T17181] 8021q: adding VLAN 0 to HW filter on device bond39
[  377.801501][T17181] bond39: (slave veth21): Enslaving as an active interface with a down link
[  377.927750][T17186] bond83: entered promiscuous mode
[  377.930256][T17186] bond83: entered allmulticast mode
[  379.015412][T17239] netlink: 'syz.0.3109': attribute type 1 has an invalid length.
[  379.329517][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  379.443191][T17255] bond40: entered promiscuous mode
[  379.445577][T17255] bond40: entered allmulticast mode
[  380.176114][T17312] bridge8: entered promiscuous mode
[  380.184622][T17312] bridge8: entered allmulticast mode
[  380.197500][T17312] team0: Port device bridge8 added
[  380.266630][T17318] bond38: entered promiscuous mode
[  380.268403][T17318] bond38: entered allmulticast mode
[  380.295511][T17321] netlink: 'syz.2.3129': attribute type 1 has an invalid length.
[  380.299860][T17321] workqueue: Failed to create a rescuer kthread for wq "bond39": -EINTR
[  380.483812][T17334] netlink: 'syz.0.3127': attribute type 3 has an invalid length.
[  380.516247][T17334] netlink: 'syz.0.3127': attribute type 3 has an invalid length.
[  380.540843][T17336] __nla_validate_parse: 11 callbacks suppressed
[  380.540859][T17336] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3131'.
[  381.417880][T17357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.426986][T17357] syzkaller0: entered promiscuous mode
[  381.433412][T17357] syzkaller0: entered allmulticast mode
[  381.480542][T17357] tipc: Resetting bearer <eth:syzkaller0>
[  381.498240][T17356] tipc: Resetting bearer <eth:syzkaller0>
[  381.527354][T17356] tipc: Disabling bearer <eth:syzkaller0>
[  381.544865][T17362] netlink: 'syz.1.3135': attribute type 21 has an invalid length.
[  381.548387][T17362] netlink: 'syz.1.3135': attribute type 6 has an invalid length.
[  381.552643][T17362] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3135'.
[  381.645519][T17365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'.
[  381.865122][T17382] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3142'.
[  382.039036][T17390] tipc: MTU too low for tipc bearer
[  382.175263][T17400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  382.208220][T17402] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3145'.
[  382.295528][T17402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3145'.
[  382.747636][T17440] sqz0: rxe_newlink: already configured on lo
[  382.883871][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3159'.
[  382.933260][T17459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3161'.
[  382.953565][T17459] bond39: entered promiscuous mode
[  382.955371][T17459] bond39: entered allmulticast mode
[  383.007325][T17465] wireguard: wg2: Could not create IPv6 socket
[  383.011381][T17465] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  383.033111][T17468] openvswitch: netlink: Key type 277 is out of range max 32
[  383.066938][T17468] xt_CT: You must specify a L4 protocol and not use inversions on it
[  383.132610][T17461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3160'.
[  383.160458][T17467] validate_nla: 1 callbacks suppressed
[  383.160468][T17467] netlink: 'syz.1.3163': attribute type 1 has an invalid length.
[  383.291511][T17483] netlink: 'syz.1.3167': attribute type 1 has an invalid length.
[  383.306473][T17479] netlink: 'syz.0.3165': attribute type 1 has an invalid length.
[  383.310343][T17483] 8021q: adding VLAN 0 to HW filter on device bond84
[  383.322569][T17483] sctp: [Deprecated]: syz.1.3167 (pid 17483) Use of int in maxseg socket option.
[  383.322569][T17483] Use struct sctp_assoc_value instead
[  383.468192][T17492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3168'.
[  383.480754][T17492] vlan0: entered promiscuous mode
[  383.543324][T17500] netlink: 'syz.2.3171': attribute type 1 has an invalid length.
[  383.559099][T17500] 8021q: adding VLAN 0 to HW filter on device bond40
[  384.161499][T17515] nbd3: detected capacity change from 0 to 127
[  384.453906][T17526] netlink: 'syz.0.3178': attribute type 11 has an invalid length.
[  384.578387][T17530] bond41: entered promiscuous mode
[  384.580784][T17530] bond41: entered allmulticast mode
[  384.712066][ T8031] block nbd3: Receive control failed (result -104)
[  385.384097][T17569] sctp: [Deprecated]: syz.0.3192 (pid 17569) Use of int in maxseg socket option.
[  385.384097][T17569] Use struct sctp_assoc_value instead
[  385.556276][T17589] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  385.655287][T17596] xt_limit: Overflow, try lower: 28676/2147483648
[  386.034357][T17617] __nla_validate_parse: 7 callbacks suppressed
[  386.034369][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3202'.
[  387.509487][  T584] block nbd3: Connection timed out, retrying (0/1 alive)
[  387.512374][  T584] block nbd3: Connection timed out, retrying (0/1 alive)
[  387.515062][  T584] block nbd3: Connection timed out, retrying (0/1 alive)
[  387.517527][  T584] block nbd3: Connection timed out, retrying (0/1 alive)
[  387.525946][  T584] block nbd3: Dead connection, failed to find a fallback
[  387.528627][  T584] block nbd3: shutting down sockets
[  387.532699][  T584] blk_print_req_error: 138 callbacks suppressed
[  387.532757][  T584] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.538513][  T584] buffer_io_error: 138 callbacks suppressed
[  387.538558][  T584] Buffer I/O error on dev nbd3, logical block 3, async page read
[  387.546321][  T584] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.552149][  T584] Buffer I/O error on dev nbd3, logical block 2, async page read
[  387.555395][  T584] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.558676][  T584] Buffer I/O error on dev nbd3, logical block 1, async page read
[  387.564146][  T584] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.567552][  T584] Buffer I/O error on dev nbd3, logical block 0, async page read
[  387.576174][T16241] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.604921][T16241] Buffer I/O error on dev nbd3, logical block 0, async page read
[  387.615467][T16241] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.622311][T16241] Buffer I/O error on dev nbd3, logical block 1, async page read
[  387.625768][T16241] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.631107][T16241] Buffer I/O error on dev nbd3, logical block 2, async page read
[  387.634459][T16241] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.638098][T16241] Buffer I/O error on dev nbd3, logical block 3, async page read
[  387.641793][T16241] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.645579][T16241] Buffer I/O error on dev nbd3, logical block 0, async page read
[  387.649043][T16241] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  387.653621][T16241] Buffer I/O error on dev nbd3, logical block 1, async page read
[  387.658856][T16241] ldm_validate_partition_table(): Disk read failed.
[  387.665362][T16241] Dev nbd3: unable to read RDB block 0
[  387.669223][T16241]  nbd3: unable to read partition table
[  387.679255][T16241] ldm_validate_partition_table(): Disk read failed.
[  387.684578][T16241] Dev nbd3: unable to read RDB block 0
[  387.688553][T16241]  nbd3: unable to read partition table
[  388.129518][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  389.073366][T17636] tipc: Failed to remove unknown binding: 66,1,1/134353152:3969667371/3969667373
[  389.080183][T17636] tipc: Failed to remove unknown binding: 66,1,1/134353152:3969667371/3969667373
[  389.083530][T17636] tipc: Failed to remove unknown binding: 66,1,1/134353152:3969667371/3969667373
[  389.255820][T17648] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  389.376206][T16538] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.379238][T16538] bridge0: port 2(bridge_slave_1) entered listening state
[  389.435897][T17653] netlink: 'syz.2.3213': attribute type 2 has an invalid length.
[  389.528554][T17663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3214'.
[  389.786352][T11459] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.793101][T11459] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.800493][T11459] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.807482][T11459] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.892444][T17695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3222'.
[  389.902582][T17688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3221'.
[  389.903292][T17695] xt_ecn: cannot match TCP bits for non-tcp packets
[  390.167984][T17711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3227'.
[  390.172535][T17710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3227'.
[  390.186234][T17709] pim6reg1: entered promiscuous mode
[  390.193902][T17709] pim6reg1: entered allmulticast mode
[  390.255202][T17714] pimreg: entered allmulticast mode
[  390.257604][T17715] dvmrp8: left allmulticast mode
[  390.347304][T17715] pimreg: left allmulticast mode
[  390.393724][T17720] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  390.444564][T17722] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3231'.
[  391.522837][T17767] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  391.583935][T17772] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3244'.
[  391.593229][T17772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3244'.
[  391.656124][T17777] ipt_rpfilter: unknown options
[  391.665397][T17777] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  391.711467][T17779] netlink: 'syz.1.3247': attribute type 1 has an invalid length.
[  391.738880][T17779] 8021q: adding VLAN 0 to HW filter on device bond85
[  391.757259][T17779] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  391.898459][T17784] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3248'.
[  391.911073][T17784] ip6gre5: entered promiscuous mode
[  391.912851][T17784] ip6gre5: entered allmulticast mode
[  391.919677][T17784] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3248'.
[  392.016053][T17788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3251'.
[  392.020277][T17788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3251'.
[  392.103243][T17792] openvswitch: netlink: Invalid VLAN frame
[  392.106502][T17792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3253'.
[  392.132350][   T33] audit: type=1804 audit(1778607141.551:18): pid=17790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3252" name="/newroot/1089/cgroup.controllers" dev="tmpfs" ino=5583 res=1 errno=0
[  392.143755][   T33] audit: type=1800 audit(1778607141.551:19): pid=17790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3252" name="cgroup.controllers" dev="tmpfs" ino=5583 res=0 errno=0
[  392.375821][T17803] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  392.378771][T17803] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  392.416155][T17807] netlink: 'syz.2.3256': attribute type 21 has an invalid length.
[  392.422216][T17807] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3256'.
[  392.427504][T17807] netlink: 'syz.2.3256': attribute type 1 has an invalid length.
[  392.442224][T17807] xt_hashlimit: size too large, truncated to 1048576
[  392.547468][T17814] netlink: 'syz.2.3256': attribute type 1 has an invalid length.
[  392.563433][T17816] xt_TCPMSS: Only works on TCP SYN packets
[  392.573248][T17816] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3259'.
[  392.580725][T17816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3259'.
[  393.114558][T17840] xt_bpf: check failed: parse error
[  393.254962][T17848] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  393.890582][    C0] bridge0: port 3(veth0_virt_wifi) entered forwarding state
[  393.894110][    C0] bridge0: topology change detected, propagating
[  393.896685][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  393.899044][    C0] bridge0: topology change detected, propagating
[  394.222586][T17856] netlink: 'syz.0.3267': attribute type 1 has an invalid length.
[  394.234686][T17859] netlink: 'syz.2.3269': attribute type 14 has an invalid length.
[  394.246803][T17856] workqueue: Failed to create a rescuer kthread for wq "bond42": -EINTR
[  397.241143][T17878] bridge0: entered allmulticast mode
[  397.243742][T17877] pim6reg: left allmulticast mode
[  397.245995][T17877] bridge0: left allmulticast mode
[  397.288356][T17875] lo speed is unknown, defaulting to 1000
[  397.683574][T17896] __nla_validate_parse: 5 callbacks suppressed
[  397.683596][T17896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3279'.
[  397.745299][   T52] block nbd2: Connection timed out, retrying (0/2 alive)
[  397.747929][   T52] block nbd2: Connection timed out, retrying (0/2 alive)
[  397.750959][   T52] block nbd2: Connection timed out, retrying (0/2 alive)
[  397.753255][   T52] block nbd2: Connection timed out, retrying (0/2 alive)
[  397.755692][   T52] block nbd2: Dead connection, failed to find a fallback
[  397.758104][   T52] block nbd2: shutting down sockets
[  397.763231][   T52] blk_print_req_error: 138 callbacks suppressed
[  397.763242][   T52] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.768263][   T52] buffer_io_error: 138 callbacks suppressed
[  397.768270][   T52] Buffer I/O error on dev nbd2, logical block 3, async page read
[  397.773562][   T52] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.776745][   T52] Buffer I/O error on dev nbd2, logical block 2, async page read
[  397.779235][   T52] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.782584][   T52] Buffer I/O error on dev nbd2, logical block 1, async page read
[  397.785445][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.790073][   T52] Buffer I/O error on dev nbd2, logical block 0, async page read
[  397.792806][T15959] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.810509][T15959] Buffer I/O error on dev nbd2, logical block 0, async page read
[  397.813577][T15959] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.818138][T15959] Buffer I/O error on dev nbd2, logical block 1, async page read
[  397.822096][T15959] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.825102][T15959] Buffer I/O error on dev nbd2, logical block 2, async page read
[  397.827592][T15959] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.835513][T15959] Buffer I/O error on dev nbd2, logical block 3, async page read
[  397.849476][T15959] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.853642][T15959] Buffer I/O error on dev nbd2, logical block 0, async page read
[  397.856574][T15959] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  397.866349][T15959] Buffer I/O error on dev nbd2, logical block 1, async page read
[  397.870332][T15959] ldm_validate_partition_table(): Disk read failed.
[  397.880230][T15959] Dev nbd2: unable to read RDB block 0
[  397.883099][T15959]  nbd2: unable to read partition table
[  397.918993][T15959] ldm_validate_partition_table(): Disk read failed.
[  397.937054][T15959] Dev nbd2: unable to read RDB block 0
[  397.955967][T15959]  nbd2: unable to read partition table
[  397.997149][T17900] netlink: 'syz.2.3281': attribute type 3 has an invalid length.
[  398.244258][T17917] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3286'.
[  398.372210][T17926] bridge20: entered promiscuous mode
[  398.374974][T17926] bridge20: entered allmulticast mode
[  398.424691][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'.
[  398.476075][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3289'.
[  398.483132][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3289'.
[  398.552936][T17935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3291'.
[  398.561989][T17935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3291'.
[  398.579147][T17935] xfrm2: entered promiscuous mode
[  398.589426][T17935] xfrm2: entered allmulticast mode
[  398.591596][T17935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3291'.
[  398.684970][T17944] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3293'.
[  398.918046][T17949] ip6t_rpfilter: unknown options
[  399.133926][T17957] netlink: 'syz.2.3298': attribute type 5 has an invalid length.
[  399.167564][T17957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3298'.
[  399.247382][T17959] netlink: 'syz.2.3299': attribute type 4 has an invalid length.
[  399.255476][T17959] netlink: 'syz.2.3299': attribute type 1 has an invalid length.
[  399.350286][T17961] bond41: (slave vxcan7): The slave device specified does not support setting the MAC address
[  399.354642][T17961] bond41: (slave vxcan7): Setting fail_over_mac to active for active-backup mode
[  399.368216][T17961] bond41: (slave vxcan7): making interface the new active one
[  399.373820][T17961] bond41: (slave vxcan7): Enslaving as an active interface with an up link
[  399.713388][T17977] netlink: 'syz.0.3302': attribute type 3 has an invalid length.
[  400.050595][T17986] pimreg: entered allmulticast mode
[  400.056825][T17986] pimreg: left allmulticast mode
[  400.346513][T18002] 8021q: VLANs not supported on wg2
[  400.479875][T18007] bond42: entered promiscuous mode
[  400.481608][T18007] bond42: entered allmulticast mode
[  400.595321][T18016] bond86: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  400.606543][T18016] bond86 (unregistering): Released all slaves
[  400.929513][    C0] bridge0: port 4(team0) entered learning state
[  400.970802][T18036] netlink: 'syz.1.3319': attribute type 10 has an invalid length.
[  401.028280][T18039] netlink: 'syz.1.3319': attribute type 10 has an invalid length.
[  401.057144][T18041] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  401.064330][T18041] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  401.197828][T18044] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  401.232951][T18036] nbd4: detected capacity change from 0 to 63
[  401.245527][   T55] block nbd4: Receive control failed (result -32)
[  401.254970][ T8031] block nbd4: Receive control failed (result -32)
[  401.266245][T18046] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  401.275532][T18050] block nbd4: Dead connection, failed to find a fallback
[  401.283518][T18050] block nbd4: shutting down sockets
[  401.302456][T18050] ldm_validate_partition_table(): Disk read failed.
[  401.309070][T18050] Dev nbd4: unable to read RDB block 0
[  401.316207][T18050]  nbd4: unable to read partition table
[  401.337478][T18050] ldm_validate_partition_table(): Disk read failed.
[  401.384203][T18050] Dev nbd4: unable to read RDB block 0
[  401.387584][T18050]  nbd4: unable to read partition table
[  401.818202][T18083] netlink: 'syz.1.3332': attribute type 14 has an invalid length.
[  401.827309][T18083] bond0: option xmit_hash_policy: invalid value (191)
[  401.883562][T18085] bond43: entered promiscuous mode
[  401.889098][T18085] bond43: entered allmulticast mode
[  402.016145][T18094] bond44: entered promiscuous mode
[  402.017936][T18094] bond44: entered allmulticast mode
[  402.297859][T18118] netlink: 'syz.1.3341': attribute type 9 has an invalid length.
[  402.349141][T18120] bond86: entered promiscuous mode
[  402.354864][T18120] bond86: entered allmulticast mode
[  402.547585][T18130] bond45: entered promiscuous mode
[  402.552429][T18130] bond45: entered allmulticast mode
[  403.684597][T18163] __nla_validate_parse: 21 callbacks suppressed
[  403.684613][T18163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3355'.
[  403.865439][T18172] bridge0: entered allmulticast mode
[  403.963991][T18178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3361'.
[  404.077864][T18181] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3362'.
[  404.144488][T18183] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  404.201042][T18185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3364'.
[  404.753481][T18206] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  404.929026][T18208] lo speed is unknown, defaulting to 1000
[  405.251484][T18225] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3374'.
[  405.264088][   T33] audit: type=1107 audit(1778607154.691:20): pid=18224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  405.378780][T18230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.409431][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  405.412519][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  405.541819][T18237] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  405.578383][T18234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3376'.
[  405.735971][T18246] bond46: entered promiscuous mode
[  405.738597][T18246] bond46: entered allmulticast mode
[  405.865732][T18251] netlink: 'syz.1.3379': attribute type 10 has an invalid length.
[  405.912856][T18248] bond87: option tlb_dynamic_lb: invalid value (144)
[  405.937425][T18248] bond87 (unregistering): Released all slaves
[  405.947456][T18255] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  406.094645][T18261] netlink: 'syz.1.3384': attribute type 1 has an invalid length.
[  406.208620][T18261] gretap6: entered allmulticast mode
[  406.236634][T18261] bond87: (slave gretap6): making interface the new active one
[  406.241630][T18261] bond87: (slave gretap6): Enslaving as an active interface with an up link
[  406.346125][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3387'.
[  406.496029][T18283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3391'.
[  406.780047][T18300] lo speed is unknown, defaulting to 1000
[  407.553895][T18321] netlink: 'syz.0.3400': attribute type 10 has an invalid length.
[  407.564025][T18318] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3399'.
[  407.566054][T18321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3400'.
[  407.593854][T18321] team0: Failed to send port change of device geneve1 via netlink (err -105)
[  407.598369][T18321] team0: Failed to send options change via netlink (err -105)
[  407.601722][T18321] team0: Port device geneve1 added
[  408.163972][T18344] x_tables: duplicate underflow at hook 1
[  408.514916][T18354] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  408.568421][T18354] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  408.807604][T18375] lo speed is unknown, defaulting to 1000
[  409.220397][T18395] netlink: 'syz.2.3418': attribute type 8 has an invalid length.
[  409.265129][T18395] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  409.648610][T18404] netlink: 'syz.2.3420': attribute type 1 has an invalid length.
[  409.745881][T18409] __nla_validate_parse: 2 callbacks suppressed
[  409.745903][T18409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3421'.
[  409.834489][T18409] bond43: entered promiscuous mode
[  409.836896][T18409] bond43: entered allmulticast mode
[  410.206083][T18422] netlink: 'syz.0.3422': attribute type 13 has an invalid length.
[  410.214346][T18422] netlink: 'syz.0.3422': attribute type 17 has an invalid length.
[  410.223477][T18420] bridge0: port 4(team0) entered disabled state
[  410.225799][T18420] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  410.228325][T18420] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.230837][T18420] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.258584][T18428] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3426'.
[  410.635195][T18420] veth1_vlan: left allmulticast mode
[  410.714535][T18422] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.725280][T18422] bridge0: port 4(team0) entered blocking state
[  410.727890][T18422] bridge0: port 4(team0) entered listening state
[  410.768270][T18422] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.771134][T18422] bridge0: port 1(bridge_slave_0) entered listening state
[  410.776711][T18422] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.780077][T18422] bridge0: port 2(bridge_slave_1) entered listening state
[  410.821331][T18422] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  410.823752][T18422] bridge0: port 3(veth0_virt_wifi) entered listening state
[  410.826811][T18422] veth1_vlan: left promiscuous mode
[  410.830088][T18422] veth0_vlan: left promiscuous mode
[  410.833116][T18422] veth0_vlan: entered promiscuous mode
[  410.836492][T18422] veth1_vlan: entered promiscuous mode
[  410.858936][T18453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3429'.
[  410.907091][T18454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3430'.
[  413.733100][T18422] veth1_macvtap: left promiscuous mode
[  413.736634][T18422] veth0_macvtap: left promiscuous mode
[  413.741549][T18422] veth0_macvtap: entered promiscuous mode
[  413.759928][T18422] veth1_macvtap: entered promiscuous mode
[  413.767380][T18422] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  413.777359][T18422] syz.0.3422 (18422) used greatest stack depth: 19712 bytes left
[  413.800368][T18414] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.803715][ T5676] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  413.814171][ T5676] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  413.844309][T18450] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3429'.
[  413.860622][ T5676] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  413.864204][ T5676] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  413.962769][T18457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3432'.
[  414.067355][T18469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'.
[  414.133877][T18472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  414.329619][T18484] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  414.375944][T18491] x_tables: duplicate underflow at hook 1
[  414.383512][T18491] sctp: [Deprecated]: syz.1.3442 (pid 18491) Use of int in max_burst socket option.
[  414.383512][T18491] Use struct sctp_assoc_value instead
[  414.697145][T18497] SET target dimension over the limit!
[  415.294887][T18517] netlink: 504 bytes leftover after parsing attributes in process `syz.0.3449'.
[  415.359006][T18519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3450'.
[  415.451380][T18528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3453'.
[  415.508821][T18534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3456'.
[  415.519111][T18534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3456'.
[  415.568733][T18539] netlink: 'syz.0.3458': attribute type 2 has an invalid length.
[  415.638364][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3460'.
[  415.671279][T18554] bond44: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  415.676104][T18554] bond44 (unregistering): Released all slaves
[  415.938961][T18567] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3466'.
[  415.945325][T18567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3466'.
[  416.004398][T18564] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3465'.
[  416.030117][T18573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3468'.
[  416.158285][   T33] audit: type=1804 audit(1778607165.581:21): pid=18584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3471" name="/newroot/1122/cgroup.controllers" dev="tmpfs" ino=5746 res=1 errno=0
[  416.171215][   T33] audit: type=1800 audit(1778607165.581:22): pid=18584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3471" name="cgroup.controllers" dev="tmpfs" ino=5746 res=0 errno=0
[  416.182724][   T33] audit: type=1804 audit(1778607165.611:23): pid=18584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3471" name="/newroot/1122/cgroup.controllers" dev="tmpfs" ino=5746 res=1 errno=0
[  416.268011][T18590] bond47: entered promiscuous mode
[  416.270808][T18590] bond47: entered allmulticast mode
[  416.428137][T18604] netlink: 'syz.1.3477': attribute type 16 has an invalid length.
[  416.462895][T18605] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  416.495011][T18593] lo speed is unknown, defaulting to 1000
[  416.909201][T18624] netlink: 'syz.1.3481': attribute type 1 has an invalid length.
[  416.928220][T18624] 8021q: adding VLAN 0 to HW filter on device bond88
[  416.950253][T18624] bond88: (slave veth33): Enslaving as an active interface with a down link
[  417.223640][T18634] TCP: TCP_TX_DELAY enabled
[  417.251312][T18633] netlink: 'syz.0.3483': attribute type 4 has an invalid length.
[  417.272374][T18633] netlink: 'syz.0.3483': attribute type 4 has an invalid length.
[  417.284458][T18633] netlink: 'syz.0.3483': attribute type 4 has an invalid length.
[  417.314647][T18639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  417.544228][T18651] bond48: entered promiscuous mode
[  417.547963][T18651] bond48: entered allmulticast mode
[  417.596053][T18657] netlink: 'syz.2.3491': attribute type 1 has an invalid length.
[  417.604695][T18661] xt_time: invalid argument - start or stop time greater than 23:59:59
[  417.616841][T18657] 8021q: adding VLAN 0 to HW filter on device bond44
[  417.627127][T18659] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  417.702308][T18670] netlink: 'syz.2.3495': attribute type 21 has an invalid length.
[  417.705367][T18670] netlink: 'syz.2.3495': attribute type 1 has an invalid length.
[  417.873403][T18689] netlink: 'syz.1.3499': attribute type 10 has an invalid length.
[  418.098097][T18705] bond45: entered promiscuous mode
[  418.147886][T18717] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  418.153413][T18717] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  418.417047][T18741] bond49: option coupled_control: invalid value (12)
[  418.424688][T18741] bond49 (unregistering): Released all slaves
[  418.492871][T18745] bond46: entered promiscuous mode
[  418.495065][T18745] bond46: entered allmulticast mode
[  418.576045][T18753] syzkaller1: entered promiscuous mode
[  418.578418][T18753] syzkaller1: entered allmulticast mode
[  418.647534][T18762] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.657521][T18762] syzkaller0: entered promiscuous mode
[  418.660046][T18762] syzkaller0: entered allmulticast mode
[  418.755090][T18761] tipc: Resetting bearer <eth:syzkaller0>
[  418.789718][T18761] tipc: Disabling bearer <eth:syzkaller0>
[  418.906015][T18779] bond49: entered promiscuous mode
[  418.908220][T18779] bond49: entered allmulticast mode
[  418.945214][T18772] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  418.945542][T18787] lo speed is unknown, defaulting to 1000
[  419.086030][T18798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  419.512839][T18817] bond47: entered promiscuous mode
[  419.515145][T18817] bond47: entered allmulticast mode
[  419.841510][T18840] wireguard: wg2: Could not create IPv6 socket
[  419.844476][T18840] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  419.976996][T18854] bond50: entered promiscuous mode
[  419.978804][T18854] bond50: entered allmulticast mode
[  420.052433][T18860] bond89: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  420.062807][T18860] bond89 (unregistering): Released all slaves
[  420.090488][T18863] bridge0: Device is already in use.
[  420.302095][T18882] bond51: entered promiscuous mode
[  420.309367][T18882] bond51: entered allmulticast mode
[  420.396514][T18887] bond52: entered promiscuous mode
[  420.398468][T18887] 8021q: adding VLAN 0 to HW filter on device bond52
[  420.413060][T18887] 8021q: adding VLAN 0 to HW filter on device bond52
[  420.415809][T18887] bond52: (slave vcan0): The slave device specified does not support setting the MAC address
[  420.419817][T18887] bond52: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  420.425720][T18887] bond52: (slave vcan0): making interface the new active one
[  420.429194][T18887] vcan0: entered promiscuous mode
[  420.433918][T18887] bond52: (slave vcan0): Enslaving as an active interface with an up link
[  420.454521][T18889] macsec1: entered promiscuous mode
[  420.662859][T18901] __nla_validate_parse: 85 callbacks suppressed
[  420.662884][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3557'.
[  420.669097][T18901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3557'.
[  420.838931][T18909] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3559'.
[  420.873476][T18911] validate_nla: 7 callbacks suppressed
[  420.873495][T18911] netlink: 'syz.1.3560': attribute type 1 has an invalid length.
[  420.881190][T18911] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3560'.
[  420.896520][T18911] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3560'.
[  420.900990][T18913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3561'.
[  421.081916][T18929] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3566'.
[  421.146540][T18929] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3566'.
[  421.254651][T18934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3567'.
[  421.269067][T18934] bond48: entered promiscuous mode
[  421.271537][T18934] bond48: entered allmulticast mode
[  421.311924][T18939] netlink: 'syz.2.3569': attribute type 1 has an invalid length.
[  421.335946][T18939] bond49: entered promiscuous mode
[  421.338861][T18939] 8021q: adding VLAN 0 to HW filter on device bond49
[  421.361647][T18939] bond49: (slave bridge9): making interface the new active one
[  421.368900][T18939] bridge9: entered promiscuous mode
[  421.373226][T18939] bond49: (slave bridge9): Enslaving as an active interface with an up link
[  421.381351][T18939] netlink: 'syz.2.3569': attribute type 1 has an invalid length.
[  421.930859][T18953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3572'.
[  422.032881][T18958] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  422.040432][T12043] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.043479][T12043] bridge0: port 2(bridge_slave_1) entered listening state
[  422.061691][T18958] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  422.156173][T18961] lo speed is unknown, defaulting to 1000
[  422.326398][T18960] lo speed is unknown, defaulting to 1000
[  422.400784][T18969] netlink: 'syz.2.3576': attribute type 6 has an invalid length.
[  426.574609][T19010] netlink: 'syz.1.3587': attribute type 7 has an invalid length.
[  426.581603][T19010] netlink: 'syz.1.3587': attribute type 39 has an invalid length.
[  426.624216][T19010] hsr_slave_0 (unregistering): left promiscuous mode
[  426.646452][T19014] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  426.649731][T19014] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  426.661974][T19016] __nla_validate_parse: 3 callbacks suppressed
[  426.661991][T19016] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3588'.
[  427.006314][T19036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3596'.
[  427.097537][T19037] bond53 (unregistering): Released all slaves
[  427.391493][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3601'.
[  427.394768][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3601'.
[  427.480887][T19055] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96
[  427.500149][T19056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3602'.
[  427.504437][T19056] block nbd5: Unsupported socket: should be TCP or UNIX.
[  427.558850][T19060] syzkaller1: entered promiscuous mode
[  427.562454][T19060] syzkaller1: entered allmulticast mode
[  427.567850][T19059] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3604'.
[  428.203512][T19089] IPVS: length: 24 != 49400512536
[  428.230459][T19089] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3609'.
[  428.296591][T19098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3611'.
[  428.368930][T19101] netlink: 'syz.2.3613': attribute type 1 has an invalid length.
[  428.391230][T19101] 8021q: adding VLAN 0 to HW filter on device bond50
[  428.487390][T19114] pimreg: entered allmulticast mode
[  428.565069][T19124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3620'.
[  428.582974][T19124] bond89: entered promiscuous mode
[  428.584932][T19124] bond89: entered allmulticast mode
[  428.642713][T19128] netlink: 'syz.1.3621': attribute type 1 has an invalid length.
[  428.646043][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3621'.
[  428.674496][T19132] x_tables: duplicate entry at hook 2
[  429.978867][T19172] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  430.146435][T19180] netlink: 'syz.1.3633': attribute type 1 has an invalid length.
[  430.224885][T19186] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.263297][T19193] bridge27: entered promiscuous mode
[  430.269338][T19193] bridge27: entered allmulticast mode
[  430.276190][T19193] team0: Port device bridge27 added
[  430.279174][T19193] bridge0: port 3(team0) entered blocking state
[  430.283390][T19193] bridge0: port 3(team0) entered disabled state
[  430.302193][T19186] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.375899][T19186] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.434010][T19186] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.538203][ T8359] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.549216][ T8359] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.559349][ T8359] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.572788][ T8359] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.902699][T19229] veth13: entered allmulticast mode
[  430.910790][T19229] bond51: (slave veth13): Enslaving as an active interface with an up link
[  430.918386][T19229] bond51 (unregistering): (slave veth13): Releasing backup interface
[  430.925405][T19229] bond51 (unregistering): Released all slaves
[  431.015223][T19240] netlink: 'syz.0.3648': attribute type 13 has an invalid length.
[  431.018815][T19240] netlink: 'syz.0.3648': attribute type 17 has an invalid length.
[  431.084799][T19240] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  431.140924][T19250] bond51: entered promiscuous mode
[  431.142996][T19250] bond51: entered allmulticast mode
[  431.180032][T19257] xt_hashlimit: size too large, truncated to 1048576
[  431.250867][T19266] netlink: 'syz.0.3656': attribute type 1 has an invalid length.
[  431.290047][T19266] bond53: (slave veth27): Enslaving as an active interface with a down link
[  431.295404][T19266] netlink: 'syz.0.3656': attribute type 10 has an invalid length.
[  431.407938][T19278] syzkaller0: entered promiscuous mode
[  431.409972][T19278] syzkaller0: entered allmulticast mode
[  433.612421][T19282] bond54: entered promiscuous mode
[  433.614685][T19282] bond54: entered allmulticast mode
[  433.618385][T19284] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  433.633132][T19285] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  433.755875][T19303] __nla_validate_parse: 11 callbacks suppressed
[  433.755892][T19303] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3666'.
[  433.765099][T19303] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3666'.
[  433.841912][T19308] 8021q: adding VLAN 0 to HW filter on device batadv0
[  433.883442][T19308] veth1_macvtap: left promiscuous mode
[  433.887403][T19308] veth0_macvtap: left promiscuous mode
[  433.899868][T19308] veth0_macvtap: entered promiscuous mode
[  433.916255][T19308] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  433.935659][T19307] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  433.942894][T19305] sch_fq: defrate 4294967293 ignored.
[  433.965558][T12044] bridge0: port 2(veth0_virt_wifi) entered blocking state
[  433.968661][T12044] bridge0: port 2(veth0_virt_wifi) entered forwarding state
[  434.002534][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  434.017978][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  434.030527][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  434.043908][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  434.116073][T19326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3671'.
[  434.184101][T19326] bond52: entered promiscuous mode
[  434.186517][T19326] bond52: entered allmulticast mode
[  434.200949][T19333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3672'.
[  434.210492][T19333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3672'.
[  434.238285][T19333] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3672'.
[  434.266522][T19340] xt_bpf: check failed: parse error
[  434.301400][T19346] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3675'.
[  434.367413][T19354] netlink: 'syz.2.3678': attribute type 4 has an invalid length.
[  434.386345][T19354] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3678'.
[  434.477166][T19354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3678'.
[  434.487123][T19353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3678'.
[  434.672493][T19377] bond53: option ad_actor_sys_prio: invalid value (0)
[  434.675315][T19377] bond53: option ad_actor_sys_prio: allowed values 1 - 65535
[  434.682504][T19377] bond53 (unregistering): Released all slaves
[  435.052858][T19393] netlink: 'syz.2.3688': attribute type 2 has an invalid length.
[  435.055925][T19393] netlink: 'syz.2.3688': attribute type 2 has an invalid length.
[  435.178761][T19409] netlink: 'syz.0.3691': attribute type 1 has an invalid length.
[  435.218618][T19409] bond55: entered promiscuous mode
[  435.221363][T19409] 8021q: adding VLAN 0 to HW filter on device bond55
[  435.293813][T19415] workqueue: Failed to create a rescuer kthread for wq "bond56": -EINTR
[  435.504955][T19426] hmac(sha2: entered promiscuous mode
[  436.565061][T19469] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  436.614351][T19467] tipc: Disabling bearer <eth:syzkaller0>
[  437.085636][T19499] bond53: entered promiscuous mode
[  437.087960][T19499] bond53: entered allmulticast mode
[  437.271863][T19504] netlink: 'syz.2.3713': attribute type 1 has an invalid length.
[  437.308633][T19506] netlink: 'syz.2.3714': attribute type 13 has an invalid length.
[  437.380202][ T7981] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  437.383749][ T7981] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  437.599213][T19515]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  437.609255][T19515] bond_slave_0: left allmulticast mode
[  437.614059][T19515]  (unregistering): Released all slaves
[  437.689766][ T7981] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  437.789819][T19537] bond90: entered promiscuous mode
[  437.792175][T19537] bond90: entered allmulticast mode
[  437.835445][T19542] netlink: 'syz.1.3725': attribute type 13 has an invalid length.
[  437.838821][T19542] netlink: 'syz.1.3725': attribute type 17 has an invalid length.
[  437.882921][T19542] veth0_macvtap: left allmulticast mode
[  437.903716][T19542] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  437.965396][T19548] netlink: 'syz.1.3726': attribute type 1 has an invalid length.
[  437.982854][T19548] bond91: entered promiscuous mode
[  437.985588][T19548] 8021q: adding VLAN 0 to HW filter on device bond91
[  438.000035][T11620] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  438.018307][T19548] 8021q: adding VLAN 0 to HW filter on device bond91
[  438.022502][T19548] bond91: (slave wireguard1): The slave device specified does not support setting the MAC address
[  438.025934][T19548] bond91: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  438.034514][T19548] bond91: (slave wireguard1): making interface the new active one
[  438.037200][T19548] wireguard1: entered promiscuous mode
[  438.040284][T19548] bond91: (slave wireguard1): Enslaving as an active interface with an up link
[  438.176534][T19564] netlink: 'syz.1.3730': attribute type 30 has an invalid length.
[  438.200098][T19565] bond54: entered promiscuous mode
[  438.203526][T19565] bond54: entered allmulticast mode
[  438.284135][T19573] syzkaller0: entered promiscuous mode
[  438.285976][T19573] syzkaller0: entered allmulticast mode
[  438.311794][T19579] Cannot find add_set index 2 as target
[  438.822645][T19612] __nla_validate_parse: 25 callbacks suppressed
[  438.822661][T19612] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3742'.
[  439.271640][T19625] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3746'.
[  439.360153][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3747'.
[  439.407351][T19639] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3750'.
[  439.515921][T19654] netlink: 'syz.0.3755': attribute type 1 has an invalid length.
[  439.519591][T19654] netlink: 'syz.0.3755': attribute type 6 has an invalid length.
[  439.529774][T19654] netlink: 'syz.0.3755': attribute type 3 has an invalid length.
[  439.589920][T19661] netlink: 'syz.2.3756': attribute type 4 has an invalid length.
[  439.592669][T19661] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3756'.
[  439.612705][    C1] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 72
[  439.712618][T19673] netlink: 188892 bytes leftover after parsing attributes in process `syz.1.3761'.
[  439.887602][T19685] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3764'.
[  439.893357][T19692] IPv6: sit3: Disabled Multicast RS
[  439.969591][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  440.115011][T19708] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3771'.
[  440.252514][T19718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3772'.
[  440.293049][T19718] bond92: entered promiscuous mode
[  440.294791][T19718] bond92: entered allmulticast mode
[  440.543454][T19731] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.597604][T19731] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.647025][T19731] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.725218][T19731] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  440.773956][T19748] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  440.778569][T19748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  440.795542][T19746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3780'.
[  440.823127][T19746] bond56: entered promiscuous mode
[  440.825444][T19746] bond56: entered allmulticast mode
[  440.888007][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  440.924224][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  440.948080][ T8359] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  440.978110][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  441.003317][T19766] netlink: 'syz.0.3787': attribute type 1 has an invalid length.
[  441.028983][T19766] 8021q: adding VLAN 0 to HW filter on device bond57
[  441.073896][T19774] netlink: 'syz.0.3790': attribute type 25 has an invalid length.
[  441.076622][T19774] netlink: 'syz.0.3790': attribute type 3 has an invalid length.
[  441.080424][T19771] bond93: entered promiscuous mode
[  441.082155][T19771] bond93: entered allmulticast mode
[  441.167966][T19779] bond58 (unregistering): Released all slaves
[  441.249823][    C0] bridge0: port 3(veth0_virt_wifi) entered learning state
[  441.252867][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  441.255870][    C0] bridge0: port 4(team0) entered learning state
[  441.285309][T19791] bond94: invalid ARP target 0.0.0.0 specified for addition
[  441.287645][T19791] bond94: option arp_ip_target: invalid value (0)
[  441.291826][T19791] bond94 (unregistering): Released all slaves
[  441.350171][T19808] netlink: 'syz.0.3799': attribute type 1 has an invalid length.
[  441.386180][T19810] netlink: 'syz.0.3800': attribute type 11 has an invalid length.
[  441.390785][T19810] netlink: 'syz.0.3800': attribute type 11 has an invalid length.
[  441.554165][T19825] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  441.831628][T19846] xt_TCPMSS: Only works on TCP SYN packets
[  441.876258][T19848] openvswitch: netlink: nsh attr 1647 is out of range max 3
[  441.914420][T19851] xt_CONNSECMARK: invalid mode: 0
[  441.958631][T19853] sctp: [Deprecated]: syz.1.3813 (pid 19853) Use of struct sctp_assoc_value in delayed_ack socket option.
[  441.958631][T19853] Use struct sctp_sack_info instead
[  441.998508][T19855] tunl0: entered promiscuous mode
[  442.017615][T19849] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  442.020995][T19849] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  442.209221][T19868] tipc: Resetting bearer <eth:syzkaller0>
[  442.357978][T19880] tipc: MTU too low for tipc bearer
[  442.402104][T19882] 8021q: adding VLAN 0 to HW filter on device bond94
[  442.457872][T19884] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  442.464936][T19884] vlan1: entered promiscuous mode
[  442.466676][T19884] bond94: entered promiscuous mode
[  442.468443][T19884] vlan1: entered allmulticast mode
[  442.470860][T19884] bond94: entered allmulticast mode
[  442.531582][T19889] 8021q: adding VLAN 0 to HW filter on device batadv2
[  442.535276][T19889] batadv2: entered promiscuous mode
[  442.537509][T19889] batadv2: entered allmulticast mode
[  442.540214][T19889] bond94: (slave batadv2): Enslaving as an active interface with an up link
[  442.553166][T19886] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  442.618876][T19893] Bluetooth: MGMT ver 1.23
[  442.743491][   T33] audit: type=1800 audit(1778607192.171:24): pid=19894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3824" name="memory.events" dev="tmpfs" ino=6368 res=0 errno=0
[  442.860466][T19903] bond0: entered promiscuous mode
[  442.863012][T19903] batadv_slave_0: entered promiscuous mode
[  442.865195][T19903] batadv_slave_0: left promiscuous mode
[  442.867463][T19903] bond0: left promiscuous mode
[  442.939979][   T33] audit: type=1804 audit(1778607192.371:25): pid=19906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3828" name="/newroot/1246/cgroup.controllers" dev="tmpfs" ino=6384 res=1 errno=0
[  442.949498][   T33] audit: type=1800 audit(1778607192.371:26): pid=19906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3828" name="cgroup.controllers" dev="tmpfs" ino=6384 res=0 errno=0
[  443.083414][T19916] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  443.214777][T19931] bridge10: entered promiscuous mode
[  443.216995][T19931] bridge10: entered allmulticast mode
[  443.228529][T19931] team0: Port device bridge10 added
[  443.244947][T19931] bridge0: port 1(team0) entered blocking state
[  443.247298][T19931] bridge0: port 1(team0) entered disabled state
[  443.250338][T19931] team0: entered allmulticast mode
[  443.252215][T19931] team_slave_0: entered allmulticast mode
[  443.254110][T19931] team_slave_1: entered allmulticast mode
[  443.260912][T19931] team0: entered promiscuous mode
[  443.262731][T19931] team_slave_0: entered promiscuous mode
[  443.264700][T19931] team_slave_1: entered promiscuous mode
[  443.439822][T19938] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  443.643740][T19962] erspan0: entered promiscuous mode
[  443.791466][T19966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  443.797940][T19966] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  444.003280][T19968] __nla_validate_parse: 25 callbacks suppressed
[  444.003292][T19968] netlink: 772 bytes leftover after parsing attributes in process `syz.0.3844'.
[  444.008499][T19968] netlink: 772 bytes leftover after parsing attributes in process `syz.0.3844'.
[  444.461280][T19976] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3847'.
[  445.033323][T19987] validate_nla: 3 callbacks suppressed
[  445.033333][T19987] netlink: 'syz.0.3851': attribute type 13 has an invalid length.
[  445.037605][T19987] netlink: 'syz.0.3851': attribute type 17 has an invalid length.
[  445.052704][T19987] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  445.075326][T19990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3852'.
[  445.083002][T19991] veth14: entered allmulticast mode
[  445.106809][T19998] netlink: 'syz.0.3853': attribute type 1 has an invalid length.
[  445.109221][T19998] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3853'.
[  445.123047][T19998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3853'.
[  445.236431][T20020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3859'.
[  445.244194][T20021] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3859'.
[  445.258401][T20020] 8021q: adding VLAN 0 to HW filter on device bond58
[  445.265239][T20021] 8021q: adding VLAN 0 to HW filter on device batadv0
[  445.268545][T20021] bond58: (slave batadv0): Enslaving as an active interface with an up link
[  445.384665][T20028] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  445.592425][T20036] netlink: 548 bytes leftover after parsing attributes in process `syz.1.3863'.
[  445.744889][T20052] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3869'.
[  445.747885][T20052] netlink: 'syz.0.3869': attribute type 5 has an invalid length.
[  445.845899][T20055] ip6t_srh: unknown srh invflags BA61
[  445.876655][T20057] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  445.880499][T20057] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  446.018946][T20062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  446.398481][ T5676] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  446.401878][ T5676] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  446.405103][ T5676] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  446.407905][ T5676] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  446.572748][T20072] netlink: 'syz.2.3876': attribute type 12 has an invalid length.
[  446.772576][T20090] block nbd5: server does not support multiple connections per device.
[  446.782725][T20090] block nbd5: shutting down sockets
[  446.872170][T20100] netlink: 'syz.0.3882': attribute type 11 has an invalid length.
[  446.875293][T20100] netlink: 'syz.0.3882': attribute type 23 has an invalid length.
[  447.383492][T20126] netlink: 'syz.1.3889': attribute type 1 has an invalid length.
[  447.390510][T20126] netlink: 'syz.1.3889': attribute type 2 has an invalid length.
[  447.399722][T20126] netlink: 'syz.1.3889': attribute type 3 has an invalid length.
[  447.516382][T20130] bond95: entered promiscuous mode
[  447.522020][T20130] bond95: entered allmulticast mode
[  447.632234][T20137] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  447.634813][T20137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  447.660753][T20143] xt_cgroup: xt_cgroup: no path or classid specified
[  447.767748][   T33] audit: type=1804 audit(1778607197.191:27): pid=20154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3897" name="/newroot/1326/cgroup.controllers" dev="tmpfs" ino=6798 res=1 errno=0
[  447.782708][   T33] audit: type=1800 audit(1778607197.201:28): pid=20154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3897" name="cgroup.controllers" dev="tmpfs" ino=6798 res=0 errno=0
[  447.887251][T20157] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  447.890921][T20157] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  447.986684][T20163] tunl0: left promiscuous mode
[  448.011618][T20163] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  448.090418][T20170] lo speed is unknown, defaulting to 1000
[  448.533725][T20176] nbd: must specify at least one socket
[  448.547701][T20177] bond55: entered promiscuous mode
[  448.550527][T20177] bond55: entered allmulticast mode
[  448.628337][T20184] lo: Caught tx_queue_len zero misconfig
[  449.247419][T20249] IPv6: NLM_F_CREATE should be specified when creating new route
[  449.282963][T20251] netlink: 'syz.1.3924': attribute type 1 has an invalid length.
[  449.295674][T20251] 8021q: adding VLAN 0 to HW filter on device bond96
[  449.315663][T20251] bond96: (slave veth35): Enslaving as an active interface with a down link
[  449.331408][T20251] bond96: (slave veth37): Enslaving as an active interface with a down link
[  449.456867][T20257] __nla_validate_parse: 28 callbacks suppressed
[  449.456883][T20257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3926'.
[  449.540286][T20265] 8021q: adding VLAN 0 to HW filter on device bond97
[  449.565455][T20265] bond97: (slave veth39): Enslaving as an active interface with a down link
[  449.576873][T20265] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3928'.
[  449.614959][T20268] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3929'.
[  449.693363][T20274] bond59: option ad_select: invalid value (34)
[  449.697545][T20274] bond59 (unregistering): Released all slaves
[  449.723446][T20278] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.772665][T20278] tipc: Resetting bearer <eth:syzkaller0>
[  449.847937][T20282] bond98: option miimon: invalid value (18446744073709551607)
[  449.850635][T20282] bond98: option miimon: allowed values 0 - 2147483647
[  449.854063][T20282] bond98 (unregistering): Released all slaves
[  449.891524][T20287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3935'.
[  449.983388][T20294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3938'.
[  450.338974][T20308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3943'.
[  450.383021][T20308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3943'.
[  450.730670][T20316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3945'.
[  450.812988][T20291] 
[  450.814041][T20291] ======================================================
[  450.816807][T20291] WARNING: possible circular locking dependency detected
[  450.819547][T20291] syzkaller #0 Not tainted
[  450.821446][T20291] ------------------------------------------------------
[  450.824126][T20291] syz.2.3939/20291 is trying to acquire lock:
[  450.826436][T20291] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  450.830448][T20291] 
[  450.830448][T20291] but task is already holding lock:
[  450.833350][T20291] ffff88802dd76e60 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_check_listen_stop+0x1a6/0x2b0
[  450.837392][T20291] 
[  450.837392][T20291] which lock already depends on the new lock.
[  450.837392][T20291] 
[  450.840652][T20291] 
[  450.840652][T20291] the existing dependency chain (in reverse order) is:
[  450.843425][T20291] 
[  450.843425][T20291] -> #7 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}:
[  450.846039][T20291]        lock_sock_nested+0x41/0x100
[  450.847824][T20291]        mptcp_subflow_create_socket+0x142/0x800
[  450.849877][T20291]        __mptcp_nmpc_sk+0x155/0x790
[  450.851583][T20291]        mptcp_setsockopt+0xe4d/0x3520
[  450.853392][T20291]        do_sock_setsockopt+0x17c/0x1b0
[  450.855190][T20291]        __x64_sys_setsockopt+0x13d/0x1b0
[  450.857183][T20291]        do_syscall_64+0x15f/0xf80
[  450.858930][T20291]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.861050][T20291] 
[  450.861050][T20291] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  450.863735][T20291]        lock_sock_nested+0x41/0x100
[  450.865896][T20291]        inet_shutdown+0x6a/0x390
[  450.867512][T20291]        nbd_mark_nsock_dead+0x2e9/0x560
[  450.869322][T20291]        sock_shutdown+0x15e/0x260
[  450.870981][T20291]        nbd_clear_sock+0x24/0x170
[  450.872639][T20291]        nbd_config_put+0x2dd/0x580
[  450.874365][T20291]        nbd_genl_connect+0x19d5/0x1cf0
[  450.876167][T20291]        genl_family_rcv_msg_doit+0x22a/0x330
[  450.878341][T20291]        genl_rcv_msg+0x61c/0x7a0
[  450.880356][T20291]        netlink_rcv_skb+0x232/0x4b0
[  450.882508][T20291]        genl_rcv+0x28/0x40
[  450.884383][T20291]        netlink_unicast+0x75c/0x8e0
[  450.886577][T20291]        netlink_sendmsg+0x813/0xb40
[  450.888692][T20291]        ____sys_sendmsg+0x972/0x9f0
[  450.890874][T20291]        ___sys_sendmsg+0x2a5/0x360
[  450.892923][T20291]        __x64_sys_sendmsg+0x1bd/0x2a0
[  450.895183][T20291]        do_syscall_64+0x15f/0xf80
[  450.897327][T20291]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.899855][T20291] 
[  450.899855][T20291] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  450.902958][T20291]        __mutex_lock+0x1a3/0x1550
[  450.905056][T20291]        nbd_queue_rq+0x37b/0x1100
[  450.907137][T20291]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  450.909632][T20291]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  450.912454][T20291]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  450.915004][T20291]        blk_mq_run_hw_queue+0x348/0x4f0
[  450.917143][T20291]        blk_mq_dispatch_list+0xd16/0xe10
[  450.919542][T20291]        blk_mq_flush_plug_list+0x48d/0x570
[  450.921991][T20291]        __blk_flush_plug+0x3ed/0x4d0
[  450.924209][T20291]        __submit_bio+0x28d/0x580
[  450.926335][T20291]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  450.928889][T20291]        block_read_full_folio+0x599/0x830
[  450.931307][T20291]        filemap_read_folio+0x137/0x3b0
[  450.933581][T20291]        do_read_cache_folio+0x358/0x590
[  450.935929][T20291]        read_part_sector+0xb6/0x2b0
[  450.938111][T20291]        adfspart_check_ICS+0xb1/0x960
[  450.940353][T20291]        bdev_disk_changed+0x817/0x1770
[  450.942541][T20291]        blkdev_get_whole+0x380/0x510
[  450.944736][T20291]        bdev_open+0x31e/0xd30
[  450.946720][T20291]        blkdev_open+0x470/0x610
[  450.948757][T20291]        do_dentry_open+0x785/0x14e0
[  450.950940][T20291]        vfs_open+0x3b/0x340
[  450.952784][T20291]        path_openat+0x2e08/0x3860
[  450.954761][T20291]        do_file_open+0x23e/0x4a0
[  450.956864][T20291]        do_sys_openat2+0x113/0x200
[  450.959017][T20291]        __x64_sys_openat+0x138/0x170
[  450.961235][T20291]        do_syscall_64+0x15f/0xf80
[  450.963359][T20291]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  450.965981][T20291] 
[  450.965981][T20291] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  450.968984][T20291]        __mutex_lock+0x1a3/0x1550
[  450.971118][T20291]        nbd_queue_rq+0xc6/0x1100
[  450.973193][T20291]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  450.975693][T20291]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  450.978519][T20291]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  450.981178][T20291]        blk_mq_run_hw_queue+0x348/0x4f0
[  450.983518][T20291]        blk_mq_dispatch_list+0xd16/0xe10
[  450.985738][T20291]        blk_mq_flush_plug_list+0x48d/0x570
[  450.988173][T20291]        __blk_flush_plug+0x3ed/0x4d0
[  450.990328][T20291]        __submit_bio+0x28d/0x580
[  450.992413][T20291]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  450.994948][T20291]        block_read_full_folio+0x599/0x830
[  450.997253][T20291]        filemap_read_folio+0x137/0x3b0
[  450.999501][T20291]        do_read_cache_folio+0x358/0x590
[  451.001715][T20291]        read_part_sector+0xb6/0x2b0
[  451.003901][T20291]        adfspart_check_ICS+0xb1/0x960
[  451.005823][T20291]        bdev_disk_changed+0x817/0x1770
[  451.007549][T20291]        blkdev_get_whole+0x380/0x510
[  451.009203][T20291]        bdev_open+0x31e/0xd30
[  451.010741][T20291]        blkdev_open+0x470/0x610
[  451.012289][T20291]        do_dentry_open+0x785/0x14e0
[  451.014011][T20291]        vfs_open+0x3b/0x340
[  451.015428][T20291]        path_openat+0x2e08/0x3860
[  451.016972][T20291]        do_file_open+0x23e/0x4a0
[  451.018656][T20291]        do_sys_openat2+0x113/0x200
[  451.020233][T20291]        __x64_sys_openat+0x138/0x170
[  451.021873][T20291]        do_syscall_64+0x15f/0xf80
[  451.023615][T20291]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.025617][T20291] 
[  451.025617][T20291] -> #3 (set->srcu){.+.+}-{0:0}:
[  451.027786][T20291]        __synchronize_srcu+0xca/0x300
[  451.029457][T20291]        elevator_switch+0x1e8/0x7a0
[  451.031095][T20291]        elevator_change+0x2cc/0x450
[  451.032777][T20291]        elevator_set_default+0x36c/0x430
[  451.035032][T20291]        blk_register_queue+0x3e9/0x4e0
[  451.037122][T20291]        __add_disk+0x677/0xd50
[  451.039122][T20291]        add_disk_fwnode+0xfb/0x480
[  451.041228][T20291]        nbd_dev_add+0x72c/0xb50
[  451.043118][T20291]        nbd_init+0x168/0x1f0
[  451.044939][T20291]        do_one_initcall+0x250/0x870
[  451.047326][T20291]        do_initcall_level+0x104/0x190
[  451.049526][T20291]        do_initcalls+0x59/0xa0
[  451.051539][T20291]        kernel_init_freeable+0x2a6/0x3e0
[  451.053797][T20291]        kernel_init+0x1d/0x1d0
[  451.055808][T20291]        ret_from_fork+0x514/0xb70
[  451.057893][T20291]        ret_from_fork_asm+0x1a/0x30
[  451.060049][T20291] 
[  451.060049][T20291] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  451.063178][T20291]        __mutex_lock+0x1a3/0x1550
[  451.065110][T20291]        elevator_change+0x1b3/0x450
[  451.067116][T20291]        elevator_set_none+0xb5/0x140
[  451.069220][T20291]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  451.071785][T20291]        nbd_start_device+0x17f/0xb10
[  451.073900][T20291]        nbd_genl_connect+0x165b/0x1cf0
[  451.075897][T20291]        genl_family_rcv_msg_doit+0x22a/0x330
[  451.078149][T20291]        genl_rcv_msg+0x61c/0x7a0
[  451.080185][T20291]        netlink_rcv_skb+0x232/0x4b0
[  451.082347][T20291]        genl_rcv+0x28/0x40
[  451.084067][T20291]        netlink_unicast+0x75c/0x8e0
[  451.086154][T20291]        netlink_sendmsg+0x813/0xb40
[  451.088248][T20291]        ____sys_sendmsg+0x972/0x9f0
[  451.090446][T20291]        ___sys_sendmsg+0x2a5/0x360
[  451.092573][T20291]        __x64_sys_sendmsg+0x1bd/0x2a0
[  451.094770][T20291]        do_syscall_64+0x15f/0xf80
[  451.096758][T20291]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.099298][T20291] 
[  451.099298][T20291] -> #1 (&q->q_usage_counter(io)#51){++++}-{0:0}:
[  451.102691][T20291]        blk_alloc_queue+0x546/0x680
[  451.104879][T20291]        __blk_mq_alloc_disk+0x197/0x390
[  451.107106][T20291]        nbd_dev_add+0x499/0xb50
[  451.109105][T20291]        nbd_init+0x168/0x1f0
[  451.111004][T20291]        do_one_initcall+0x250/0x870
[  451.113093][T20291]        do_initcall_level+0x104/0x190
[  451.115305][T20291]        do_initcalls+0x59/0xa0
[  451.117242][T20291]        kernel_init_freeable+0x2a6/0x3e0
[  451.119547][T20291]        kernel_init+0x1d/0x1d0
[  451.121507][T20291]        ret_from_fork+0x514/0xb70
[  451.123572][T20291]        ret_from_fork_asm+0x1a/0x30
[  451.125660][T20291] 
[  451.125660][T20291] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  451.128573][T20291]        __lock_acquire+0x15a5/0x2cf0
[  451.130696][T20291]        lock_acquire+0x106/0x350
[  451.132740][T20291]        fs_reclaim_acquire+0x71/0x100
[  451.134935][T20291]        __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  451.137667][T20291]        __alloc_skb+0x2c1/0x7d0
[  451.139691][T20291]        mptcp_event_pm_listener+0x134/0x550
[  451.141986][T20291]        mptcp_check_listen_stop+0x1d3/0x2b0
[  451.144374][T20291]        __mptcp_close+0xf5/0xd10
[  451.146405][T20291]        mptcp_close+0x28/0x1a0
[  451.148347][T20291]        inet_release+0x143/0x190
[  451.150378][T20291]        sock_close+0xc3/0x240
[  451.152304][T20291]        __fput+0x44f/0xa60
[  451.154004][T20291]        task_work_run+0x1d9/0x270
[  451.155972][T20291]        exit_to_user_mode_loop+0xed/0x480
[  451.158215][T20291]        do_syscall_64+0x33e/0xf80
[  451.160306][T20291]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.162801][T20291] 
[  451.162801][T20291] other info that might help us debug this:
[  451.162801][T20291] 
[  451.166679][T20291] Chain exists of:
[  451.166679][T20291]   fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6/1
[  451.166679][T20291] 
[  451.171637][T20291]  Possible unsafe locking scenario:
[  451.171637][T20291] 
[  451.174584][T20291]        CPU0                    CPU1
[  451.176778][T20291]        ----                    ----
[  451.178851][T20291]   lock(k-sk_lock-AF_INET6/1);
[  451.180801][T20291]                                lock(sk_lock-AF_INET6);
[  451.183537][T20291]                                lock(k-sk_lock-AF_INET6/1);
[  451.186428][T20291]   lock(fs_reclaim);
[  451.188066][T20291] 
[  451.188066][T20291]  *** DEADLOCK ***
[  451.188066][T20291] 
[  451.191303][T20291] 3 locks held by syz.2.3939/20291:
[  451.193297][T20291]  #0: ffff88801c9b6e40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  451.197220][T20291]  #1: ffff8881aa730f60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: mptcp_close+0x1d/0x1a0
[  451.200925][T20291]  #2: ffff88802dd76e60 (k-sk_lock-AF_INET6/1){+.+.}-{0:0}, at: mptcp_check_listen_stop+0x1a6/0x2b0
[  451.205101][T20291] 
[  451.205101][T20291] stack backtrace:
[  451.207414][T20291] CPU: 0 UID: 0 PID: 20291 Comm: syz.2.3939 Not tainted syzkaller #0 PREEMPT(full) 
[  451.207435][T20291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  451.207443][T20291] Call Trace:
[  451.207451][T20291]  <TASK>
[  451.207457][T20291]  dump_stack_lvl+0xe8/0x150
[  451.207475][T20291]  print_circular_bug+0x2e1/0x300
[  451.207493][T20291]  check_noncircular+0x12e/0x150
[  451.207509][T20291]  __lock_acquire+0x15a5/0x2cf0
[  451.207523][T20291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.207540][T20291]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  451.207557][T20291]  lock_acquire+0x106/0x350
[  451.207569][T20291]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  451.207589][T20291]  fs_reclaim_acquire+0x71/0x100
[  451.207605][T20291]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  451.207620][T20291]  __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  451.207637][T20291]  ? mptcp_event_pm_listener+0x134/0x550
[  451.207651][T20291]  ? __alloc_skb+0x186/0x7d0
[  451.207668][T20291]  __alloc_skb+0x2c1/0x7d0
[  451.207685][T20291]  mptcp_event_pm_listener+0x134/0x550
[  451.207698][T20291]  ? __local_bh_enable_ip+0xd0/0x130
[  451.207711][T20291]  ? inet_csk_listen_stop+0xa1f/0xbd0
[  451.207724][T20291]  ? __local_bh_enable_ip+0xd0/0x130
[  451.207735][T20291]  ? __pfx_mptcp_event_pm_listener+0x10/0x10
[  451.207748][T20291]  ? mptcp_subflow_queue_clean+0xa9/0x3d0
[  451.207760][T20291]  ? __local_bh_enable_ip+0xd0/0x130
[  451.207771][T20291]  ? mptcp_subflow_queue_clean+0x39c/0x3d0
[  451.207784][T20291]  ? __local_bh_enable_ip+0xd0/0x130
[  451.207797][T20291]  mptcp_check_listen_stop+0x1d3/0x2b0
[  451.207812][T20291]  __mptcp_close+0xf5/0xd10
[  451.207828][T20291]  ? __local_bh_enable_ip+0xd0/0x130
[  451.207840][T20291]  mptcp_close+0x28/0x1a0
[  451.207857][T20291]  inet_release+0x143/0x190
[  451.207870][T20291]  sock_close+0xc3/0x240
[  451.207883][T20291]  ? __pfx_sock_close+0x10/0x10
[  451.207894][T20291]  __fput+0x44f/0xa60
[  451.207911][T20291]  task_work_run+0x1d9/0x270
[  451.207928][T20291]  ? __pfx_task_work_run+0x10/0x10
[  451.207945][T20291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.207957][T20291]  exit_to_user_mode_loop+0xed/0x480
[  451.207969][T20291]  ? rcu_is_watching+0x15/0xb0
[  451.207984][T20291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.207995][T20291]  do_syscall_64+0x33e/0xf80
[  451.208008][T20291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.208020][T20291] RIP: 0033:0x7fa88f99cdd9
[  451.208032][T20291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  451.208043][T20291] RSP: 002b:00007ffefde4f348 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  451.208057][T20291] RAX: 0000000000000000 RBX: 00007fa88fc17da0 RCX: 00007fa88f99cdd9
[  451.208065][T20291] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  451.208072][T20291] RBP: 00007fa88fc17da0 R08: 0000000000000006 R09: 0000000000000000
[  451.208079][T20291] R10: 00007fa88fc17cb0 R11: 0000000000000246 R12: 000000000006e083
[  451.208087][T20291] R13: 00007fa88fc1609c R14: 000000000006ddba R15: 00007ffefde4f450
[  451.208100][T20291]  </TASK>
[  452.129577][    C1] bridge0: port 2(bridge_slave_1) entered learning state
