last executing test programs:

2.581920014s ago: executing program 0 (id=3487):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000003600010000000001fddbdf251d01020008000a00", @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x24044091}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000003600010000000001fddbdf251d01020008000a00", @ANYRESDEC=r0, @ANYRES32=r0, @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x24044091}, 0x0) (async)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) (async)

2.530998918s ago: executing program 0 (id=3488):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x20001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.371752882s ago: executing program 0 (id=3489):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000040)={0x0, 0x4, 0xfffff801})
sendto$x25(0xffffffffffffffff, &(0x7f0000000080)="2976d2c3f1fa08cf67174208d50ce04b0d43c3184d7fa47ebd22ab86b279673c021cd85a24da2b8e615d5378c9c14dbc94d37db3e0886b17362bd95652b3c920d6948b8d217ad6c535bb3c252be5ced243ec3fb6c2d6a396cf6008a9fafb37f062fdef572f5ca8d36e90ed84ecbeccd2e854ac10de334189d9e601af8984473129c9a847b12621664b5d380a852a654e616d492d23699d2d3c90e89a99ecb9f354434198aa824abf4fd83e9187b42b8d0ba5c4fd5679687ca84b7bc4d6127b0db9cb9c579532fd0b21ff3a4e0e3d5456ba3e3e2d1a49d71b638ab438fc8ad0fa19811aa23ef601021fb8aa2d848263c343549716d4341deb00", 0xf9, 0x4000, &(0x7f0000000180), 0x12) (async)
r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wg0\x00'})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000200)=0x1000000, 0x4)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x10900, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000280)=0x4)
ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000002c0)={'ip_vti0\x00', 0xc8}) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e21, 0xfff, @empty, 0xc}, 0x1c) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x88}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x4000001) (async)
r6 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000480), 0x800)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r8 = getuid()
sendmsg$nl_netfilter(r6, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x160, 0x8, 0x9, 0x3, 0x70bd2a, 0x25dfdbfc, {0x5, 0x0, 0x3}, [@typed={0x8, 0x72, 0x0, 0x0, @fd=r7}, @generic="7f97ec106afff8da3090ed9decb1b3be3ace1a2faa31e3de67c5c37cd1d9e7ac4aea109e956a1541463f6d2fe1164cac47a5cb5c9c8caaac6f0e163195e172a7cee4db19598add6f5df2d1c22d35c4a7f3cdee4820e9719f0a908aab23", @typed={0x8, 0x142, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x22, 0x0, 0x0, @u32}, @nested={0xcb, 0x8a, 0x0, 0x1, [@typed={0xc, 0xf1, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x2a, 0x0, 0x0, @fd}, @nested={0x4, 0xac}, @generic="3dd1eb", @nested={0x4, 0x15d}, @nested={0x4, 0x4}, @typed={0x8, 0xd0, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x12f, 0x0, 0x0, @u32=0x800}, @generic="483e9cfd33aa7704fd2ca311f82771aed916bc78e670402fbb8a18c20eeb1d6ac4b78a10c86ff9a653d6727ce796ca75099e2491ab5be54d3048bc143ad01cee8833bae393a2805912156ee7f7e9beceacd96da139a5cebf52ac95515ec9efcd3fbab949034ce8763c4de5eb88fa190b8f6488c2a9d84c7bb85b858eecc0dba233555a2e02a1e5cdd713dd5faa9f360c", @nested={0x4, 0xe9}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) (async)
r9 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000700), &(0x7f0000000740)=0x10, 0x80000)
setsockopt$PNPIPE_INITSTATE(r9, 0x113, 0x4, &(0x7f0000000780), 0x4) (async)
sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r5)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r10, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffff592}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x10}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x24000005) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000a40)=<r11=>0x0)
sendmsg$nfc_llcp(r6, &(0x7f0000000e80)={&(0x7f0000000a80)={0x27, r11, 0x1, 0x7, 0x6, 0x5, "c6077a53967d7d75587b98e106435c808bf13cd60e23077a053afb9b15f6d01e0ae0db835a836097f548358c5eb0e1476473d66e056e0327a3a6e43232c0c1", 0x18}, 0x60, &(0x7f0000000e00)=[{&(0x7f0000000b00)="d536657c21805a9f44dbcd7ef2bd289e76aa75633a85f3a1993a8646ef801ee0300066fe950bc16cf9ebbfcf69c91747dc805a3c41b6f4385bde0d03dc107a41a77b9e6f072c4d4b2cf69aed109f7ecfc240c8406ffb9973de223f66398f6256b2568813547914b9c0495fe72d1a0de855da8e0d69b234dda5878909b342f0811524", 0x82}, {&(0x7f0000000bc0)="445396263c1793a2f94a19addb71805a577d58ab257256a92233c5ac0f44d843715e686dc8a5bc20262cdf9082711100360d53f0e996337e805ad951c55c06de2e8dc95fad100c6d92cfc345182dded53979a65d241bc412682b669c8bc2de57d5e9982b041dcc41dd", 0x69}, {&(0x7f0000000c40)="8b1ca12175f37d81134485a721dc7fa436bed818deb55720a865513e025f6e1b2ec0ad0b7ab20058fe4f5146e57ed42b3efe77af75a1db03fd8557777db12bb1803d682629fb74f6391f2585e070be46d300bd3aa010d7b95cd7c4350b0f3e293c0554549dd10487ff8d73c87ecd6b30ebab314688611816916f402b08abf4d4b901d607149992d7570d593f224af7f133535535635359a2a517b20db89c8635fc3252e3240cc16e6a746b96b9600554028b917799e046690fbd1ceb28c1acef15c488e07ea67357a824a46bc8c9d96059ca4ced", 0xd4}, {&(0x7f0000000d40)="5db3b311f0e8b395c7cd93f3922d57a63be78ae6fed661fa36f4ff9bf574f76a81266e16be7bb6d722986006b875d3d62c609e370b254770a67b8c872dc77113f5954db91d4720b4259eb584e093314bd59d1dbecdd6e466b277ae4c9f4850c1245f79548c428094cbfc5d09578af8fc5e64947a9fad0a10db93c7a1dbfc9701e2fa61c2cb6a12a37e08da6b3ca3c32245", 0x91}], 0x4, &(0x7f0000000e40)={0x28, 0x648eab7413bb9f7e, 0x1eda, "df557e7f31f01c4316a54fe5b73929fb539dd75fc04a"}, 0x28, 0x4000}, 0x4880) (async)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f00), r5)
sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000001340)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001300)={&(0x7f0000000f40)={0x39c, r12, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe2e5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x124, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffa471}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa6}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x35fd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbf86}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x66, 0x3, "838e6832c35b0e3625f9a162939ac63b8d2a60f76bd36cc8890ec14b49252e173db4719af1fc29b98ab5a6b95edea2a5276f85b1dedfb32823e3fbc9cb4513f6139aa5f7d1f18bcb694410fb4a873f71da96cd99358ab715e41715fa9d36e302be7c"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff6}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}]}, 0x39c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) (async)
r13 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r13, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x34, 0x464, 0x60a, 0x70bd2b, 0x25dfdbfd, "45cac6bc7231c52056288e87498a0f779e92594ea9751960f15ca9d2bcf59d558d", ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c9}, 0x804)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0), 0x4)

1.033103104s ago: executing program 2 (id=3497):
r0 = socket$packet(0x11, 0x2, 0x300) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0xf}, 0x90) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async)
syz_emit_ethernet(0xe, &(0x7f00000000c0)={@local, @multicast, @void, {@generic={0x892f}}}, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) (async)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
sendmsg$qrtr(r2, &(0x7f0000000840)={&(0x7f0000000200)={0x2a, 0x2, 0x7fff}, 0xc, &(0x7f0000000700)=[{&(0x7f0000000540)="1ba8598fdd21cc5b936dc64012b1d16dc3f3bda54ce75ad04c5ed05ee4231866afbc798e494259f9ba448949934e86ba694750ab2b86e7c490f005a8a9f8e8cc78b5ddd4f1d44b9dbe5733e532c6d29c8ed45ed721acb076f9c91de4047736e205f8b6f23aea49253ae3d09e5b2f721c73d562be2a7383f6d277f8c12abf436964621ac7c683e50baa7e58512d4889a53ca0a9bc43699f8a68793ab56387094b3d3542da1d4edc8b85f139aff192", 0xae}, {&(0x7f0000000600)="9a61a609df83aae9c0466b90a25883fe2ca6ba42953566c64b9fe0d0d130f4a9f54aae4e3472efd59260e52769e6d34efac5e8fed0d36d86c53b04acc8b8f69b2d919a036bbdc6c658921d31dded9e21cba379a8ae4a5a97e33b9284be144bdbda3eed038fe67a89376daa06ff5f9eb157504faf3a30bcfef374e627c4877fe3bce069bbee95056fdddccbe3b5b38d0927a42489a1e563978b4c5926b819b54dd39c85b1c42e4b973fb43366f9038e8b08fc6c17785e6da20c129ecedfbaf5173d284d8267e01a3732e036123bb4977ef0215e1a564362d50277a608c96e2887fe41b941a683f5b8c9866cf22c260f", 0xef}], 0x2, &(0x7f0000000740)=[{0x68, 0x115, 0x2, "be463f70bce39aaa8d7da3bd34be41b65fc063ca780a26cdbc25b23c6f78f2716d496ed3b285ce462a53d0be9aafacba5f1b0514f14773c3bb1ba21d8a290d170dbd7fb2f9bdc80c22463aea9e9a5fd094c9deeacdc2a29b"}, {0x80, 0x10f, 0x9, "5a218aa521170b8dd9e11a79f75acadd3bec6e8c9d6229cdbafa4a3ee902afdbb25f8e6e23545129769cff531bf4b467671ef3bfae6d09cb98a01ec579c43b5db1d8812431257215a2bc4aa7f5b2b5953b81a9660a4bf2d6df1c0503a8f00b46ebe95b545a3c765c81"}], 0xe8, 0x4000}, 0x38) (async)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000d00)={0x2fc, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x40}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x503}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "493a2f14b5d39a353f51ae6c5fa003d8340f91c3"}}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac0f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x504f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa646}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xd0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @mcast2, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e2f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
r4 = epoll_create1(0x0)
poll(&(0x7f0000000040)=[{r4, 0x200}], 0x1, 0xdb3) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) (async)
shutdown(r5, 0x0) (async)
epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x101) (async)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x2000200b}) (async)
close(r3) (async)
socket(0x10, 0x3, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500"], 0x48)
ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x42, 0x42, 0x5, [@ptr={0xc, 0x0, 0x0, 0x2, 0x1}, @datasec={0xb, 0x1, 0x0, 0xf, 0x2, [{0x4, 0x1ff, 0xfffffff7}], "f839"}, @var={0x10, 0x0, 0x0, 0xe, 0x3}, @typedef={0xb}]}, {0x0, [0x30, 0x30, 0x61]}}, &(0x7f00000004c0)=""/23, 0x61, 0x17, 0x1, 0x10000, 0x10000, @value=r1}, 0x28) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2d, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b0001006765"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4008005)
recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0)

1.031013095s ago: executing program 2 (id=3498):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$unix(0x1, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000001c0)={0x3, {{0xa, 0x4e22, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001a00)=ANY=[], 0x610)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680), 0x27e}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000000f40), 0x5}}], 0x2, 0x4000840)
shutdown(r3, 0x1)
setsockopt(r3, 0x84, 0x7f, &(0x7f00000001c0)="020000000980000c", 0x8)
r4 = socket(0x3, 0x80000, 0xfffffffc)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000300)={0x1a, 0x305, 0x1, 0x8, 0x0, 0x20, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108)
r6 = socket$kcm(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00')
unshare(0x6a040000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYRES8=r7, @ANYRES32=r1, @ANYRES16=r0, @ANYRES16=r4], 0x34}}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x5, &(0x7f0000000180), 0x43)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000060006000002001a0d00020100030c8480348e37c279a97b040000000000000030b588"], 0x0, 0x3a, 0x0, 0x1, 0xff}, 0x28)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r7, @ANYBLOB="a463c7047a8538bb318b60b8e6ba0060b4c891822f829ba31e8820ad72c5376d61a63527eb69c7e47fd90855c656796ac7c6790469e05a273e4e2ad54ee787282c24e4a22fff066bb08484795cecbb87a6c3b6d926c22a76f4dd1c8dff815a1f85bab6b9839d7890caee76d3ee202909d33a6acbdad29b21c90bb6ba1381e67b592999cbb23e24a47d5f84178718d5ebbd6cd258914cb780ebfe259c40f54b71d53cf1f3c53abdf9fd45fcc3b2cc4fe965cd05bf239c7614be27d5c423d4d66f37783e2ad0b46627e8", @ANYRESHEX=0x0, @ANYRESHEX=r7, @ANYRESDEC=0x0, @ANYRESHEX=r3], 0xc0}, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0xd0, 0x270, 0xd0, 0x340, 0x340, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x44}, @private1, [], [], 'ipvlan1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@local, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0xffffffff], 'tunl0\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x322}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'wg1\x00', 'team_slave_1\x00', {0xff}, {}, 0x2f, 0x6b, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560)

892.849848ms ago: executing program 1 (id=3499):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7001fe3a00251200000018000180140002006272696467655f736c6176655f3100000800070000000000080008"], 0x3c}, 0x1, 0x0, 0x0, 0x86}, 0x40040)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000020000000000000000035817334fcad8ec6cf093c5cce6bdc476f985d5ea7107c456c95fe6a272935259f03974585aea5b9b7eb7aed9c0038d498ec7fbc0c5b091192f451ba2ee5dbf1c9e22de96a8a76a5bc15b6a6944f8539bf3525a8eab83848c44d5e5ba19d09f204c1f2ffaf30e1ed482624d0e72d87cd3c0c3726e3a51037db2b331357bcb272910c0af8a8b51738f054"], 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x21, 0x3, 0x7fff)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280", @ANYRES16=r4, @ANYRES16=r3], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0xc4010)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000100000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0)

892.159128ms ago: executing program 0 (id=3500):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
socket$inet6(0xa, 0x80002, 0x0) (async)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) (async)
connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @local}, {0x2, 0x4e24, @remote}, {0x2, 0x4e20, @broadcast}, 0xdc, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000000)='dvmrp1\x00', 0x40, 0x2, 0xba04})
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}}}]}]}]}}]}, 0x50}}, 0x20040054) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}}}]}]}]}}]}, 0x50}}, 0x20040054)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f00000007c0)='0', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x20040040) (async)
sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f00000007c0)='0', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x20040040)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYRES8=r5, @ANYRESOCT=r1], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

823.206317ms ago: executing program 1 (id=3501):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000ec0)={'wg1\x00', @ifru_mtu=0x5}) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000040)={@multicast1, @loopback, @empty}, 0xc) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000002c0), &(0x7f0000000340)=0x4)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
close(r7) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r9 = socket(0x2a, 0x3, 0xa0ec) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0xae0, 0x2c, 0x100, 0x430bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0x5}, {0x0, 0x7}, {0x8, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0xab0, 0x2, [@TCA_BASIC_ACT={0xaac, 0x3, [@m_xt={0x244, 0xf, 0x0, 0x0, {{0x7}, {0x13c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x6e, 0x6, {0xc2c1, 'security\x00', 0x9, 0x9, "04857a2e32d722d3f7aeebd3ed0a39601f345ab33036b46a3e7bc692c842236da3ae0d4eff66bfeb88ec3a96d470bb0440559e3b4b51facbf40f091f25129a2f5ec7af4f"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x52, 0x6, {0x5, 'security\x00', 0x4a, 0x8, "25023b6675bac8e493e4e2c3ff96727c8e77aa636b38d936262d32b460fc371722fb0c376ce6c221"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1ff}, @TCA_IPT_TARG={0x35, 0x6, {0x5, 'filter\x00', 0xd4, 0x7fff, "3f093ca61dadd97f01817e"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}]}, {0xe1, 0x6, "825ea4b3fc2db959e869b65a901c9b76288f03b8872841d6da490f098a9e840d183f491a12e6715210bb013fcb918d4653562ff25e0138834cef8cf20849d06cf63967927160a617783b456be14c0b9ffa3e5ec226c3da1e366883f82479c39a405c626212853f006f5a30a820113e91041769d842a4a2c80f266126742cb68a6e40371db870cc0f6a04971db4af3bdb01ee196cdc90e2141bdb6a60e506550cf556622926806d89dadc0be9f31c49f844c0e902d2fe6bb3dc66fa0afdcf6f46fedc03a5bea1396c2a381b3082fc8a5d5a0bb22436e495b306478520eb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0xa4, 0x2, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0xcdc, 0x1, 0x7, 0x5, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x333}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x4, 0x5, 0x401, 0x8001}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0x7e0, 0x4, 0x760b5dd2, 0x6}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3ff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x36}]}, {0x6, 0x6, 'Iv'}, {0xc, 0x7, {0x1, 0x7400a4bc51f16acd}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x120, 0x1c, 0x0, 0x0, {{0xf}, {0x44, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0xaf, 0x6, "27186fd4910425213df995a38d7c37ef0d6c5f912bdf44e73dcaf1a1377eae6f22a6defda3cefe3ec576aa3660ffa726d110fc404031c8ebe3d54d78521d538b58a51dcc2496fd08402bb67638c65d5f04792c8e92fedf935faa8d2fd41491ad0046274575f0bbd9fcadc15308c0ae1a44c99bbd97c9c9e5377e97f9023b47a7e891bcb3707f978a2124df6db17d3cc12bd244870ea4e65cf9e1bc7487a9a54a4e20221bcffe1b870889ef"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x104, 0x1d, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0xf, 0x4}}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}, @TCA_DEF_DATA={0x7, 0x3, '@#\x00'}]}, {0xa6, 0x6, "beaaf8a14bb7ae65ede2a0fa1e474112f15e5711f5c7ec3af23fc59f32b41eb9dcb1cc872a89019b278ce971933f432cc072bf4852d7204ab9503bf923f18f4dedfe537acce3fba1356ce9f2d448531f3c326d6c907cb399368a8067ffa9788267d94d4a7b35b8f9c24fce97418870291986e907df86e30be8b61cf1ccebdd9b5c945bde8c4ae5d66d19c380d1f9fbbde066d15da83417292e1fd37f1c92f4e7d9f6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x13c, 0x18, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x7fff, 0x6, 0x800, 0xfffffff9}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfff8}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xc65a, 0x2, 0x5, 0x0, 0xe}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x30, 0x7, 0x4, 0x4, 0x435d9e4b}}}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x88, 0x6, "584f844ffae51c524712c49d0ffe69a42348296c96ef0e0fb14a577cb27567b4a60942ad3792a95f65fc9af3989f5013249308025aeebe18a49fac0a6bfd65c13a4c8967d3c8ced753fdd7ea3f6b7a8cfab5d835cd659f06088ffe90574f55016effdd55c3c9d2f6642e76a7ee9c792d91a0d6fb4b8876d579d74ed90d3137bfb5cf48ca"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x5c, 0x0, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x176a0000, 0xb1a, 0x7, 0x401, 0x49}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x222}, @TCA_MPLS_TC={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x11c, 0x16, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x101, 0x2, 0x9, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x11, 0x1, 0xffffffffffffffff, 0xffffffff, 0xe000}}, @TCA_DEF_DATA={0x8, 0x3, 'wg1\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9b, 0x656, 0x4, 0x2, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xbe3, 0x0, 0x13cffc8a, 0x4}}]}, {0x87, 0x6, "2f45f2dc6a9e7f4baa8707e855b8dee55d94da8c5e536767f032fd26015795ad862eab933a22adc30bd8b773a845b84e3e5231eb4be897fa8562e4f74af835c995f114d43a2de259ed62418549d460919414c1d18040bb31d59d0ed95802b149ea40ad878999fe57800a199680ebdd609953451fba17d86c5b864ce663684eda4b0a41"}, {0xc}, {0xc}}}, @m_ife={0x148, 0xd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x102, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_gact={0xe4, 0x1b, 0x0, 0x0, {{0x9}, {0x94, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffc, 0xfffffffd, 0x8, 0x7, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1633}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x3c3, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3c6, 0x0, 0x8, 0x13ee, 0x200}}, @TCA_GACT_PARMS={0x18, 0x2, {0xf621, 0xe, 0x8, 0x9, 0x200}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7fff, 0x90000000, 0x6, 0x1, 0xfffff000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0xffffffffffffffff, 0x4}}]}, {0x26, 0x6, "3df98a9f2a50d4f4569e8ac12e15aef68e96f0c39a930567d61f29e9cde1e853a367"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0xbc, 0x13, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x7f, 0x6, "930587a95a6248815c289fcb75c51fc2c2959954b13512eee849e4705365af19e75260f4ba4b4dadc660e5008d4d4f66397014c666d53292fe7054be78d9ad0149d0c707d8355b8c2e0fbeb9c10561a02ab6d77ddb79beb884ec2ae2973a5a78c732f8f21347028b8a2ad3e0d1aa4915e61f257203f14e01d9f351"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xae0}, 0x1, 0x0, 0x0, 0x4000814}, 0x4)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="95", 0x1}], 0x1}, 0x0) (async, rerun: 64)
getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) (rerun: 64)
r13 = socket(0x200000000000011, 0x2, 0x0) (async)
r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async, rerun: 32)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRESOCT=r4, @ANYRESOCT=r14, @ANYRES32, @ANYBLOB="010101007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (rerun: 32)

612.762368ms ago: executing program 0 (id=3502):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x2018, r0}, 0x18)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc9, 0xc9, 0x5, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x5}, @datasec={0x7, 0x5, 0x0, 0xf, 0x1, [{0x1, 0x5d, 0xa47}, {0x5, 0x2, 0x12000000}, {0x5, 0x9, 0x2}, {0x1, 0x8}, {0x2, 0x2, 0xffff6dd6}], '\v'}, @var={0xd, 0x0, 0x0, 0xe, 0x1, 0x1}, @enum={0xb, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x6}]}, @func={0xb, 0x0, 0x0, 0xc, 0x2}, @restrict={0x10, 0x0, 0x0, 0xb, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x7f}}, @var={0xb, 0x0, 0x0, 0xe, 0x5}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x58, 0x0, 0x48, 0x4}]}, {0x0, [0x2e, 0x5f, 0x0]}}, &(0x7f0000000300)=""/124, 0xe9, 0x7c, 0x1, 0x1}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0xa, 0x6, 0x200, 0x21631, r1, 0x4, '\x00', 0x0, r2, 0x2, 0x2, 0x0, 0xe}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0d00000009000000040000000100000000000000", @ANYRES32=r3], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b00)={r4, &(0x7f0000001a40), 0x0}, 0x20)
syz_emit_ethernet(0x3e, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010105, @local, {[@timestamp_addr={0x44, 0x4, 0xcb}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x2000}}}}}}, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000))
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000010000fedbdf25fe8800000000005397dc01000004d60a00ff00fc0000000000000000000000000000010900000004f11c00"/61], 0x40}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010)

539.557358ms ago: executing program 0 (id=3503):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000e7ff"], 0x18}, 0x800)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10)
recvmmsg(r3, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x0, 0x0)
write(r1, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000200000000000000008001e8040000000", 0x24)
r4 = socket$kcm(0xa, 0x2, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000480)="f9478f09724e57bdb47f6f725abefb3abc1e0dc879b4ca016bdc22a893b459c44d606ce63295e7e4f5f1679643afb082d48ee6066a23ec95ffbeb0882c43829f19ee7192b0493c3416e01bc4cda47e972f4c41c37d85961f82787c4172cec5aa1148681db806c8ce3a798c01d3d2cd2ad0ecc9caa5ebd841ba7307f3db610a56ba2e300db9374da8a98a18a68270f5a1f975b48ff3572f31", 0x98}, {&(0x7f0000000540)="0a18734ee9b4101c16a30745fe2736dbe0d81192d5725b6f1471a0b5545826047ec985423c0fad8c0b3ec4cb08ef0e1475433a0a", 0x34}, {&(0x7f0000000600)="acd8b9dd1c1438e30f7db2d20984e544933512111827898f70e55c99d11328826be2c7d8884c26c1bd77b8b600ab86c050e9406b99189f340b5a37e7540c572da778039111af3061abb5e2666110682d38aebf821440d8895a043411155dd05093fd20758abc68727197170c4926f1140d2a", 0x72}, {&(0x7f0000000680)}], 0x4, 0x100, 0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000240)={'ipvlan0\x00', 0x112})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x88, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x40}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
close(r2)
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e26, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)
sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev, 0x3e3e}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
getsockopt$sock_timeval(r9, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'dummy0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl2\x00', r12, 0x6, 0x1, 0x2, 0x1, 0x26, @remote, @mcast2, 0x8, 0x1, 0x1000}})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRESOCT=r10, @ANYRESHEX=r10, @ANYRES64, @ANYRES64=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)

538.940437ms ago: executing program 2 (id=3504):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0011"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r3=>0x0})
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000380)={@mcast1, r3}, 0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x4c, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xafabc05531515610, 0xfff3}, {0x8, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xdc}}, @TCA_RATE={0x6, 0x5, {0xff, 0x7}}, @TCA_RATE={0x6, 0x5, {0x76, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x18cb}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x4c}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f00000005c0)={{0xe19c, 0x8}, 0x100, './file0\x00'})
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4008094)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
close(0x4)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000001c0)={<r7=>r0, &(0x7f0000000040)='!$\\{\x00', 0x200000, &(0x7f00000000c0)={@_ha_fsid={[0x7fffffff, 0x5ce]}, {0x6, 0x40, 0x80000001, 0xfff8000000000000}}, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x2})
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r7, 0x942e, 0x0)
bind$bt_hci(r7, &(0x7f0000000200)={0x1f, 0xfffb, 0x4}, 0x49)
bind$bt_hci(r7, &(0x7f0000000240)={0x1f, 0x1, 0x4}, 0x6)
socket$xdp(0x2c, 0x3, 0x0)

399.497833ms ago: executing program 1 (id=3505):
socket$tipc(0x1e, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000000))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8924, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x6, 0x0, 0x491, 0x0, 0x0, 0x0, 0x7, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x404f444)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0)

184.732748ms ago: executing program 1 (id=3506):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940))
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f00000000c0)='./file0\x00', r1}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000480))
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYRESOCT], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe2)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003a00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x4, 0x9)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$rds(0x15, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socket(0x10, 0x803, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

146.619139ms ago: executing program 1 (id=3507):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280)={0x0, 0x4fa}, 0x8)
r1 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda)
listen(r1, 0x0)
r2 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req={0x107e65, 0x5, 0x9, 0x101}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10, 0x0}, 0x0)
close(0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$key(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2, 0x18, 0xa9, 0xf, 0x1f, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d3, 0x4, 0x1, 0x73, 0x3, 0x60000001}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}, @sadb_x_sec_ctx={0xe, 0x18, 0x1, 0x40, 0x68, "6f3823d78d6e4dc3de6ee19740625bbf04c7a5535a15e5d8052aac1e470e8ed25d9061119901d6fc5054ebf20217e0e985aa24fb29b9202b854e8bc152b0cb6e0a8b9f935024dda781296ba3344ce0f067c73d4f7dd9cf1cf1ae8e34cd5e86604ac68561bd2656a7"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, @in=@private=0xa010101, 0xa, 0x16, 0x10}, @sadb_x_nat_t_type={0x1}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @private=0xa010100}}]}, 0xf8}}, 0x40)
sendmmsg$inet(r0, &(0x7f0000000e40)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="2c00000000000000000000000700000094040000890b40e0000002ac1414bb890c", @ANYRES32=0x0, @ANYBLOB="ac1414bbac14143a00000000db00"], 0x68}}], 0x2, 0x4000800)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wg1\x00'})

115.805355ms ago: executing program 2 (id=3508):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r1, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x80, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x140}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffc}]}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xfffffa09}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x40008d0)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r2, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '@*%\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x44880}, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000340)={<r4=>0x0, 0x10}, &(0x7f0000000380)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000003c0)={r4, 0x1025}, 0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000400)={<r5=>r4, @in={{0x2, 0x4e24, @remote}}, 0x2, 0x2, 0x9, 0xe6c2, 0x9}, &(0x7f00000004c0)=0x98)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000500)={r5, 0x4}, 0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000540)={0x0, 0x1, 0x1b317502, 0x9, r4}, &(0x7f0000000580)=0x10)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f00000005c0)=r4, 0x4)
setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000600)={r4, 0x2}, 0x8)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000780)={'syztnl0\x00', <r8=>0x0, 0x8, 0x7, 0x8, 0x9, {{0xd, 0x4, 0x3, 0x27, 0x34, 0x68, 0x0, 0x6, 0x29, 0x0, @empty, @rand_addr=0x64010100, {[@end, @timestamp_addr={0x44, 0x1c, 0x5d, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0x1}, {@empty, 0x6}]}, @end]}}}}})
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x3, <r10=>0x0}, 0x8)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0x4, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x5d}]}, &(0x7f0000000980)='GPL\x00', 0x40, 0x34, &(0x7f00000009c0)=""/52, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x2, 0x9, 0x10001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000a80)=[0x1, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x4, 0x5, 0xc, 0x7}, {0x4, 0x3, 0xb, 0xb}], 0x10, 0x2}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000bc0)={<r12=>r3, 0x2, 0xe3, 0x3})
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x2, 0x1, &(0x7f0000000640)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000680)='GPL\x00', 0x3000, 0xab, &(0x7f00000006c0)=""/171, 0x41100, 0x6b, '\x00', r8, @fallback=0x2, r9, 0x8, &(0x7f0000000880)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x9, 0x2000, 0x1ff}, 0x10, r10, r11, 0x3, &(0x7f0000000c00)=[r12], &(0x7f0000000c40)=[{0x3, 0x1, 0x9, 0x9}, {0x3, 0x4, 0x1, 0xfbf8176f786a8c69}, {0x1, 0x1, 0x2, 0x3}], 0x10, 0x5}, 0x94)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r9, 0x4040942c, &(0x7f0000000d40)={0x0, 0xe, [0x3, 0x9, 0xbec1, 0x100, 0x1, 0x10]})
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xa, 0x1, &(0x7f0000000d80)=@raw=[@generic={0x7, 0xd, 0x0, 0x1, 0xfffffff9}], &(0x7f0000000dc0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41000, 0xd1ef9fe254dda0d0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000e40)={0x4, 0x4, 0x3ff, 0xf}, 0x10, r10, r13, 0x3, &(0x7f0000000e80)=[r12, r12, r12, r9], &(0x7f0000000ec0)=[{0x2, 0x5, 0x6, 0x8}, {0x3, 0x2, 0x4, 0xb}, {0x1, 0x2, 0x5, 0x9}], 0x10, 0x1ff, @value=r12}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000fc0)={r14, r9, 0x7, 0x0, @void}, 0x10)
ioctl$sock_bt_bnep_BNEPCONNADD(r12, 0x400442c8, &(0x7f0000001000)={r3, 0x400, 0x4, "e7b61496e0e9da568695697a718bd550cbaf50614fe58ae54d1cfd1ba3256edd33272875ea5715751526a5"})
getpeername$llc(r12, &(0x7f0000001040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001080)=0x10)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4010, r14, 0xa95aa000)
ioctl$XFS_IOC_FD_TO_HANDLE(r11, 0xc038586a, &(0x7f00000011c0)={r7, &(0x7f00000010c0)='}\x1f\xbe\x00', 0xc24101, &(0x7f0000001100)={@_ha_fsid={[0x3, 0x2]}, {0x6, 0x3, 0x2, 0x4}}, 0x4, &(0x7f0000001140), &(0x7f0000001180)=0x2})
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001200)='net_prio.prioidx\x00', 0x0, 0x0)
sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x37e34b9277d59b62}, 0x4004080)

1.552648ms ago: executing program 2 (id=3509):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {0xff}, 0x11, 0x3b, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x800000, 0x2, 0x0, 0xf}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008"], 0x38}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

954.157µs ago: executing program 2 (id=3510):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880)
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r7 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r5, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "626abd460020000000000079a700000040000000000000000000000000002000", "d89b864a19e0ff2b5210120d00efd95d4a00", "fcc815bc21b9e7be1497a9edd45189dacc307c357402a8c5a9c5b5b0", {"6cbc71020069f2b2ee1cf210c588b607", "23e0cc4e1fdd8d6d18e2e9ee4939689f"}}}}}}}}, 0xbe)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

0s ago: executing program 1 (id=3511):
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
close(r1)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffc54, &(0x7f0000000580)={&(0x7f0000000800)=@gettfilter={0x34, 0x2e, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x7, 0x9}, {0xffff, 0x4}, {0xfffe, 0x2}}, [{0x8, 0xb, 0x4280}, {0x8, 0xb, 0x6e4a}]}, 0x34}}, 0x44000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xd}, 0xb, 0x20000000, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0xffffffffffffff99}}, 0x20048040)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x6008097, &(0x7f0000000080)={0x11, 0x88a8, r5, 0x1, 0xda, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)
sendto$packet(r2, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x12, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
r9 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
r10 = socket(0x10, 0x803, 0x0)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_FLUSH(r11, 0x0, 0x485, 0x0, 0x0) (async)
setsockopt$IP_VS_SO_SET_FLUSH(r11, 0x0, 0x485, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000e00000000000000", @ANYRES32=0x1, @ANYBLOB="ff0000000000000000007b000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000400"/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x2f, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000b5070000000000000500000018110000", @ANYRES32, @ANYRESDEC=r8, @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a500000013bb0200fcff0700185700000f00000000000000000000001800000000000009010000000500060000000000000000001833000002000000000000000000000085100000feffffff85100000faffffff7451e0ff04000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x10, 0x3, &(0x7f00000005c0)=""/3, 0x41000, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xb, 0x8130, 0x3c6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0x7}, 0x94)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r12 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r12, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b)

kernel console output (not intermixed with test programs):

dium
[  213.185243][T12400] netlink: 'syz.0.1773': attribute type 1 has an invalid length.
[  213.191762][T12399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  213.655627][T12437] netlink: 'syz.2.1774': attribute type 1 has an invalid length.
[  213.804431][T12437] bond20: (slave bridge10): making interface the new active one
[  213.820351][T12437] bond20: (slave bridge10): Enslaving as an active interface with an up link
[  213.836032][T12441] bond20: (slave gretap2): Enslaving as an active interface with an up link
[  213.846205][T12447] macvlan5: entered promiscuous mode
[  213.848454][T12447] macvlan5: entered allmulticast mode
[  213.851412][T12447] bond20: entered promiscuous mode
[  213.854426][T12447] bridge10: entered promiscuous mode
[  213.857841][T12447] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  213.861571][T12447] bond20: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  213.867950][T12447] bond20: left promiscuous mode
[  213.869845][T12447] bridge10: left promiscuous mode
[  213.886171][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  213.888795][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  213.892099][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  213.895100][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  214.047971][T12463] netlink: 'syz.0.1777': attribute type 2 has an invalid length.
[  215.014385][T12483] lo speed is unknown, defaulting to 1000
[  215.114298][T12503] netlink: 'syz.2.1786': attribute type 11 has an invalid length.
[  215.114511][T12494] lo speed is unknown, defaulting to 1000
[  215.592562][T12509] lo speed is unknown, defaulting to 1000
[  215.860011][T12521] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  215.878153][T12521] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  216.024979][T12525] __nla_validate_parse: 10 callbacks suppressed
[  216.024999][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'.
[  216.045798][T12525] macsec0: entered promiscuous mode
[  216.054511][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1792'.
[  216.068811][T12525] macsec0 (unregistering): left promiscuous mode
[  216.203480][T12533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.206206][T12534] syzkaller0: entered promiscuous mode
[  216.208453][T12534] syzkaller0: entered allmulticast mode
[  216.219936][T12534] tipc: Resetting bearer <eth:syzkaller0>
[  216.235873][T12534] tipc: Disabling bearer <eth:syzkaller0>
[  216.301874][T12539] netlink: 181256 bytes leftover after parsing attributes in process `syz.0.1794'.
[  216.477307][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'.
[  216.828910][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1799'.
[  217.080401][T12568] hmac(sh: entered promiscuous mode
[  217.120862][T12570] validate_nla: 3 callbacks suppressed
[  217.120906][T12570] netlink: 'syz.0.1804': attribute type 1 has an invalid length.
[  217.248155][T12577] batadv_slave_1: mtu less than device minimum
[  217.368946][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1807'.
[  217.557465][T12602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1812'.
[  217.587486][T12606] netlink: 'syz.2.1813': attribute type 61 has an invalid length.
[  217.590664][T12606] netlink: 'syz.2.1813': attribute type 62 has an invalid length.
[  217.625736][T12612] netlink: 'syz.2.1814': attribute type 4 has an invalid length.
[  217.720621][T12622] openvswitch: netlink: Missing valid actions attribute.
[  217.723716][T12622] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  218.205422][T12650] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1825'.
[  218.468615][T12672] Cannot find add_set index 2 as target
[  218.493904][T12674] netlink: 'syz.1.1830': attribute type 1 has an invalid length.
[  218.496726][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1830'.
[  218.530150][T12678] x_tables: duplicate underflow at hook 4
[  218.552010][T12681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1832'.
[  219.105925][T12727] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  219.199113][T12737] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  219.274779][T12744] netlink: 'syz.0.1845': attribute type 5 has an invalid length.
[  219.636107][T12753] netlink: 'syz.2.1849': attribute type 10 has an invalid length.
[  220.519273][T12782] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  220.763672][T12789] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  220.866487][T12790] syzkaller0: entered promiscuous mode
[  220.872098][T12790] syzkaller0: entered allmulticast mode
[  220.922360][T12790] tc action pedit offset must be on 32 bit boundaries
[  221.005066][T12800] x_tables: unsorted entry at hook 3
[  221.051645][T12804] __nla_validate_parse: 14 callbacks suppressed
[  221.051663][T12804] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1864'.
[  221.147806][T12806] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1865'.
[  221.499302][T12815] sctp: [Deprecated]: syz.1.1868 (pid 12815) Use of struct sctp_assoc_value in delayed_ack socket option.
[  221.499302][T12815] Use struct sctp_sack_info instead
[  221.659595][T12818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1869'.
[  221.735086][T12820] xt_CT: You must specify a L4 protocol and not use inversions on it
[  221.740894][T12820] netlink: 'syz.0.1870': attribute type 21 has an invalid length.
[  221.872729][T12822] raw_sendmsg: syz.0.1871 forgot to set AF_INET. Fix it!
[  222.455945][T12839] lo speed is unknown, defaulting to 1000
[  222.672196][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1880'.
[  223.402145][T12866] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  223.667032][T12864] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  223.903389][T12883] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1887'.
[  224.371101][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1894'.
[  224.487558][T12913] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1895'.
[  224.590005][T12918] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1896'.
[  224.947701][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1901'.
[  225.028169][T12942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1901'.
[  225.200275][T12950] netlink: 'syz.0.1903': attribute type 1 has an invalid length.
[  225.233940][T12950] 8021q: adding VLAN 0 to HW filter on device bond64
[  225.792203][T12960] netlink: zone id is out of range
[  225.796016][T12960] netlink: zone id is out of range
[  225.801064][T12960] netlink: zone id is out of range
[  225.807837][T12960] netlink: zone id is out of range
[  225.812966][T12960] netlink: zone id is out of range
[  225.837280][T12960] netlink: zone id is out of range
[  225.847116][T12960] netlink: zone id is out of range
[  225.855159][T12960] netlink: zone id is out of range
[  226.108473][T12979] __nla_validate_parse: 1 callbacks suppressed
[  226.108493][T12979] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1909'.
[  226.581252][T12998] xt_TPROXY: Can be used only with -p tcp or -p udp
[  226.585769][T12996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1911'.
[  226.802117][T13009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1915'.
[  226.947564][T13021] netlink: 'syz.1.1918': attribute type 2 has an invalid length.
[  227.270057][T13042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1921'.
[  227.348268][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1921'.
[  228.259050][T13083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1925'.
[  228.281128][T13084] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1926'.
[  229.875239][T13076] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  229.897597][T13087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1925'.
[  230.135509][T13105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1933'.
[  230.232998][T13108] bond9: entered allmulticast mode
[  230.278237][T13111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1932'.
[  230.358484][T13108] netlink: 'syz.1.1934': attribute type 1 has an invalid length.
[  233.519720][T13136] __nla_validate_parse: 4 callbacks suppressed
[  233.519770][T13136] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1941'.
[  233.634319][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1944'.
[  233.671690][T13147] 8021q: adding VLAN 0 to HW filter on device bond24
[  233.849252][T13154] netlink: 'syz.1.1944': attribute type 2 has an invalid length.
[  233.851955][T13154] netlink: 'syz.1.1944': attribute type 2 has an invalid length.
[  233.943784][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'.
[  233.949680][T13156] netlink: 'syz.2.1945': attribute type 21 has an invalid length.
[  233.952427][T13156] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1945'.
[  233.959605][T13156] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1945'.
[  234.769447][T13188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1951'.
[  234.780961][   T24] bridge0: entered promiscuous mode
[  234.820717][T13188] bond25: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  234.830013][T13188] bond25 (unregistering): Released all slaves
[  235.758610][T13204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1956'.
[  235.885183][T13207] team0: left promiscuous mode
[  235.887238][T13207] team_slave_1: left promiscuous mode
[  235.912430][T13207] wg1: left promiscuous mode
[  235.916337][T13207] wg1: left allmulticast mode
[  235.961724][T13207] veth1_to_team: left promiscuous mode
[  235.965655][T13207] veth1_to_team: left allmulticast mode
[  236.024974][T13207] tipc: Resetting bearer <eth:hsr0>
[  236.026988][T13207] tipc: Resetting bearer <eth:hsr0>
[  236.031755][T13207] sit1: left allmulticast mode
[  236.035619][T13207] veth3: left allmulticast mode
[  236.038245][T13207] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  236.041116][T13207] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  236.044437][T13207] gre2: left allmulticast mode
[  236.046749][T13207] bond10: left allmulticast mode
[  236.049190][T13207] ip6tnl1: left allmulticast mode
[  236.072747][T13207] bond16: left promiscuous mode
[  236.074652][T13207] bridge8: left promiscuous mode
[  236.078164][T13207] vlan5: left promiscuous mode
[  236.080407][T13207] geneve1: left promiscuous mode
[  236.082290][T13207] vlan5: left allmulticast mode
[  236.084298][T13207] geneve1: left allmulticast mode
[  236.089498][T13207] ipvlan3: left promiscuous mode
[  236.091774][T13207] batadv0: left promiscuous mode
[  236.094483][T13207] batadv0: left allmulticast mode
[  236.098014][T13207] bond17: left allmulticast mode
[  236.103638][T13207] bond19: left allmulticast mode
[  236.109698][ T6511] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.115660][ T6511] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.121446][ T6511] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.126965][ T6511] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.130227][T13219] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  236.141030][T13219] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  236.780953][T13224] vlan4: left allmulticast mode
[  236.784238][T13224] geneve0: left allmulticast mode
[  236.796065][T13224] vlan4: left promiscuous mode
[  236.798161][T13224] geneve0: left promiscuous mode
[  236.812180][T13224] bridge0: port 1(vlan4) entered disabled state
[  236.820418][T13224] bridge_slave_1: left allmulticast mode
[  236.822693][T13224] bridge_slave_1: left promiscuous mode
[  236.824731][T13224] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.995728][T13227] net_ratelimit: 26 callbacks suppressed
[  236.995740][T13227] openvswitch: netlink: IP tunnel dst address not specified
[  237.320855][T13241] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1965'.
[  237.328218][T13241] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1965'.
[  237.400776][T13243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1965'.
[  237.634590][   T31] lo speed is unknown, defaulting to 1000
[  237.637224][   T31] sqz0: Port: 1 Link DOWN
[  237.655544][T13241] vlan2: left promiscuous mode
[  237.664021][T13241] bond5: left promiscuous mode
[  237.668760][T13241] erspan1: left promiscuous mode
[  237.673575][T13241] bond5: left allmulticast mode
[  237.682812][T13241] erspan1: left allmulticast mode
[  237.685366][T13241] bond7: left promiscuous mode
[  237.687411][T13241] bond7: left allmulticast mode
[  237.692134][T13241] bond9: left promiscuous mode
[  237.696351][T13241] bond12: left promiscuous mode
[  237.703231][T13241] macvlan2: left promiscuous mode
[  237.704972][T13241] macvlan2: left allmulticast mode
[  237.708593][T13241] macvlan3: left promiscuous mode
[  237.713330][T13241] macvlan3: left allmulticast mode
[  237.718194][T13241] ip6tnl1: left allmulticast mode
[  237.724896][T13241] bond15: left promiscuous mode
[  237.732529][T13241] veth9: left promiscuous mode
[  237.737131][T13241] bond20: left allmulticast mode
[  237.739797][T13241] macvlan4: left promiscuous mode
[  237.742026][T13241] macvlan4: left allmulticast mode
[  237.748449][T13241] vlan0: left allmulticast mode
[  237.751244][T13241] bond22: left allmulticast mode
[  237.763833][ T8945] syz1: Port: 1 Link DOWN
[  237.765634][ T8528] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  237.776046][ T8528] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  237.779861][ T5668] lo speed is unknown, defaulting to 1000
[  237.782407][ T8528] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  237.788789][ T8528] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  237.906114][T13255] netlink: 'syz.1.1971': attribute type 11 has an invalid length.
[  238.184849][T13263] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  238.191434][T13263] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  238.469180][T13270] netlink: 'syz.1.1975': attribute type 1 has an invalid length.
[  238.492239][T13270] 8021q: adding VLAN 0 to HW filter on device bond25
[  238.502124][T13270] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.631232][T13275] __nla_validate_parse: 2 callbacks suppressed
[  238.631248][T13275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1977'.
[  238.904910][T13292] pimreg0: tun_chr_ioctl cmd 1074025681
[  239.208301][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'.
[  239.224381][T13299] openvswitch: : Dropping previously announced user features
[  239.255899][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'.
[  239.263895][T13298] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  239.270993][T13299] openvswitch: : Dropping previously announced user features
[  239.605486][T13322] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  239.612902][T13320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1989'.
[  239.633793][T13324] netlink: 'syz.0.1991': attribute type 21 has an invalid length.
[  239.684877][T13328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'.
[  239.729540][T13330] lo speed is unknown, defaulting to 1000
[  239.968946][T13346] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  239.993860][T13346] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  240.443782][T13359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  240.815948][T13366] netlink: 'syz.2.2003': attribute type 1 has an invalid length.
[  240.989081][T13370] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  241.127464][T13377] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2006'.
[  241.156275][T13381] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  241.183370][T13379] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.280147][T13383] tipc: Disabling bearer <eth:vlan0>
[  241.315905][T13385] netlink: 'syz.1.2011': attribute type 1 has an invalid length.
[  241.323113][T13385] netlink: 'syz.1.2011': attribute type 2 has an invalid length.
[  241.497956][T13396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2014'.
[  241.511639][T13396] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2014'.
[  241.649708][T13399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2015'.
[  241.780160][T13409] bond4: left allmulticast mode
[  241.788523][T13409] ip6gre1: left allmulticast mode
[  241.792794][T13409] xfrm1: left allmulticast mode
[  241.795350][T13409] bridge3: left promiscuous mode
[  241.797233][T13409] bridge3: left allmulticast mode
[  241.799482][T13409] bridge4: left promiscuous mode
[  241.801601][T13409] bridge4: left allmulticast mode
[  241.810629][T13409] macvlan3: left allmulticast mode
[  241.812504][T13409] macvlan4: left allmulticast mode
[  241.820795][T13409] macvlan5: left allmulticast mode
[  241.826542][T13409] macvlan6: left allmulticast mode
[  241.830952][T13409] macvlan7: left allmulticast mode
[  241.835723][T13409] macvlan8: left allmulticast mode
[  241.846530][T13409] macvlan9: left allmulticast mode
[  241.858361][T13409] macvlan10: left allmulticast mode
[  241.884119][T13409] macvlan11: left allmulticast mode
[  241.891763][T13409] macvlan12: left allmulticast mode
[  241.908037][T13409] macvlan13: left allmulticast mode
[  241.915492][T13409] macvlan14: left allmulticast mode
[  241.921047][T13409] macvlan15: left allmulticast mode
[  241.927192][T13409] macvlan16: left allmulticast mode
[  241.932768][T13409] macvlan17: left allmulticast mode
[  241.941479][T13409] macvlan18: left allmulticast mode
[  241.945398][T13409] macvlan19: left allmulticast mode
[  241.950726][T13409] macvlan20: left allmulticast mode
[  241.960903][T13409] macvlan21: left allmulticast mode
[  241.975105][T13409] macvlan22: left allmulticast mode
[  241.980334][T13409] macvlan23: left allmulticast mode
[  241.984462][T13409] macvlan24: left allmulticast mode
[  241.989441][T13409] macvlan25: left allmulticast mode
[  241.992296][T13409] macvlan26: left allmulticast mode
[  242.005661][T13409] macvlan27: left allmulticast mode
[  242.011373][T13409] macvlan28: left allmulticast mode
[  242.032314][T13409] macvlan29: left allmulticast mode
[  242.036776][T13409] macvlan30: left allmulticast mode
[  242.040539][T13409] macvlan31: left allmulticast mode
[  242.043424][T13409] macvlan32: left allmulticast mode
[  242.046142][T13409] macvlan33: left allmulticast mode
[  242.049444][T13409] macvlan34: left allmulticast mode
[  242.052136][T13409] macvlan35: left allmulticast mode
[  242.057211][T13409] ip6tnl1: left allmulticast mode
[  242.059213][T13409] bond56: left promiscuous mode
[  242.061007][T13409] bond56: left allmulticast mode
[  242.062866][T13409] bond57: left allmulticast mode
[  242.065243][T13409] bond59: left promiscuous mode
[  242.067404][T13409] bridge6: left promiscuous mode
[  242.069675][T13409] bond59: left allmulticast mode
[  242.071885][T13409] bridge6: left allmulticast mode
[  242.075185][T13409] vlan0: left promiscuous mode
[  242.076847][T13409] bridge0: left promiscuous mode
[  242.078741][T13409] bond62: left promiscuous mode
[  242.080438][T13409] erspan2: left promiscuous mode
[  242.082212][T13409] bond62: left allmulticast mode
[  242.084753][T13409] erspan2: left allmulticast mode
[  242.494890][T13435] netlink: 'syz.0.2024': attribute type 1 has an invalid length.
[  242.497624][T13435] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2024'.
[  242.501740][T13435] netlink: 'syz.0.2024': attribute type 9 has an invalid length.
[  243.017741][T13463] netlink: 'syz.0.2033': attribute type 3 has an invalid length.
[  245.463808][T13484] __nla_validate_parse: 6 callbacks suppressed
[  245.463820][T13484] netlink: 640 bytes leftover after parsing attributes in process `syz.2.2039'.
[  245.526383][T13484] macvtap1: entered promiscuous mode
[  245.528768][T13484] team0: entered promiscuous mode
[  245.530847][T13484] team_slave_1: entered promiscuous mode
[  245.534198][T13484] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  245.537266][T13484] team0: Device macvtap1 is already an upper device of the team interface
[  245.542995][T13484] team0: left promiscuous mode
[  245.545378][T13484] team_slave_1: left promiscuous mode
[  245.738769][T13491] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2041'.
[  245.744023][T13491] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2041'.
[  245.750348][T13491] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2041'.
[  245.816199][T13494] netlink: 'syz.0.2042': attribute type 1 has an invalid length.
[  245.820525][T13494] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2042'.
[  245.829437][T13494] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  245.838227][T13494] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  245.844313][T13494] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  245.852587][T13494] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  245.893540][T13501] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2043'.
[  246.030893][T13504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2046'.
[  246.036457][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'.
[  246.039934][T13504] netlink: 'syz.1.2046': attribute type 10 has an invalid length.
[  246.042419][T13504] ipvlan0: entered allmulticast mode
[  246.044802][T13504] veth0_vlan: entered allmulticast mode
[  246.265847][T13513] netlink: 'syz.2.2048': attribute type 12 has an invalid length.
[  246.287801][T13518] ipvlan0: left allmulticast mode
[  246.290351][T13518] veth0_vlan: left allmulticast mode
[  246.565654][  T147] smbdirect: ib_dev[syz2] removed
[  246.647727][T13521] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.736396][T13523] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  246.741862][T13523] syzkaller0: entered promiscuous mode
[  246.744227][T13523] syzkaller0: entered allmulticast mode
[  247.074974][T13527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  247.220327][T13531] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2054'.
[  247.501224][T13545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2058'.
[  247.521415][T13545] 8021q: adding VLAN 0 to HW filter on device bond26
[  247.782799][T13555] sctp: [Deprecated]: syz.1.2059 (pid 13555) Use of struct sctp_assoc_value in delayed_ack socket option.
[  247.782799][T13555] Use struct sctp_sack_info instead
[  258.521516][T13589] netlink: 'syz.1.2073': attribute type 1 has an invalid length.
[  258.556549][T13589] 8021q: adding VLAN 0 to HW filter on device bond27
[  258.613156][T13589] bond27: (slave veth15): Enslaving as an active interface with a down link
[  258.620032][T13589] __nla_validate_parse: 3 callbacks suppressed
[  258.620043][T13589] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2073'.
[  259.169228][T13609] netlink: 'syz.0.2078': attribute type 21 has an invalid length.
[  259.218739][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2081'.
[  259.222467][T13612] netlink: 212312 bytes leftover after parsing attributes in process `syz.1.2081'.
[  259.226695][T13612] openvswitch: netlink: Message has 4 unknown bytes.
[  259.373735][T13615] bridge9: entered promiscuous mode
[  259.376666][T13615] bridge9: entered allmulticast mode
[  259.557792][T13633] bridge9: entered promiscuous mode
[  259.566712][T13633] bridge9: entered allmulticast mode
[  259.652751][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2083'.
[  259.656655][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2083'.
[  259.924289][T13648] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2086'.
[  260.250762][T13660] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  261.069107][T13707] syzkaller1: entered promiscuous mode
[  261.071114][T13707] syzkaller1: entered allmulticast mode
[  261.108584][T13709] netlink: 'syz.2.2098': attribute type 1 has an invalid length.
[  261.177113][T13710] sit2: entered allmulticast mode
[  261.212564][T13713] sctp: [Deprecated]: syz.2.2099 (pid 13713) Use of struct sctp_assoc_value in delayed_ack socket option.
[  261.212564][T13713] Use struct sctp_sack_info instead
[  261.685801][T13724] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2104'.
[  262.079055][T13735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2109'.
[  262.084438][T13735] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2109'.
[  262.088252][T13735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2109'.
[  264.404638][T13805] __nla_validate_parse: 5 callbacks suppressed
[  264.404658][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2125'.
[  264.412149][T13805] netlink: 'syz.2.2125': attribute type 13 has an invalid length.
[  264.415901][T13805] netlink: 'syz.2.2125': attribute type 17 has an invalid length.
[  264.445255][T13805] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.450053][T13805] 8021q: adding VLAN 0 to HW filter on device team0
[  264.509120][T13805] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  264.512461][T13805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  264.516393][T13805] tipc: Resetting bearer <eth:hsr0>
[  264.518543][T13805] tipc: Resetting bearer <eth:hsr0>
[  264.520412][T13805] tipc: Resetting bearer <eth:hsr0>
[  264.522232][T13805] hsr0: left promiscuous mode
[  264.525767][T13805] veth1_macvtap: left promiscuous mode
[  264.532954][T13805] veth0_macvtap: left promiscuous mode
[  264.593663][T13805] veth0_macvtap: entered promiscuous mode
[  264.607716][T13805] veth1_macvtap: entered promiscuous mode
[  264.624883][T13805] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  264.659181][ T6511] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.663964][ T6511] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.667427][ T6511] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.671264][ T6511] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.188248][T13817] batadv_slave_1: entered promiscuous mode
[  265.275590][T13817] batadv_slave_1: left promiscuous mode
[  265.438490][T13829] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2132'.
[  265.442064][T13829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2132'.
[  265.446280][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2132'.
[  265.497577][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2133'.
[  265.501081][T13832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2133'.
[  265.717250][T13855] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  265.720893][T13855] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  265.867956][T13863] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  265.925586][T13865] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2142'.
[  266.030042][T13866] netlink: 'syz.2.2142': attribute type 13 has an invalid length.
[  266.261936][T13870] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.2143'.
[  266.459174][T13882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'.
[  266.747812][T13889] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  266.799262][T13897] xt_hl: Unknown TTL match mode: 237
[  266.909068][T13906] xt_hashlimit: size too large, truncated to 1048576
[  266.969662][T13909] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  266.988255][T13909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2152'.
[  267.258917][T13924] netlink: 'syz.1.2159': attribute type 15 has an invalid length.
[  267.271204][T13920] netlink: 'syz.0.2156': attribute type 1 has an invalid length.
[  267.285227][T13924] netlink: 'syz.1.2159': attribute type 15 has an invalid length.
[  267.305836][T13924] netlink: 'syz.1.2159': attribute type 15 has an invalid length.
[  267.395153][T13933] netlink: 'syz.1.2160': attribute type 1 has an invalid length.
[  267.529977][T13942] netlink: 'syz.1.2161': attribute type 11 has an invalid length.
[  267.534368][T13942] tipc: Enabling of bearer <ib:team0> rejected, failed to enable media
[  267.846302][T13953] geneve5: entered promiscuous mode
[  267.876784][T13958] bond21 (unregistering): Released all slaves
[  267.897415][ T8528] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 51868 - 0
[  267.900888][ T8528] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 51868 - 0
[  267.904399][ T8528] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 51868 - 0
[  267.907513][ T8528] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 51868 - 0
[  268.016635][T13967] sctp: [Deprecated]: syz.2.2170 (pid 13967) Use of int in maxseg socket option.
[  268.016635][T13967] Use struct sctp_assoc_value instead
[  268.246604][T13979] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  269.015127][T14012] pim6reg99999991: entered allmulticast mode
[  269.057333][T14014] netlink: 'syz.1.2184': attribute type 11 has an invalid length.
[  269.301870][T14026] erspan0: entered promiscuous mode
[  269.634998][T14041] lo speed is unknown, defaulting to 1000
[  269.716473][T14045] __nla_validate_parse: 9 callbacks suppressed
[  269.716495][T14045] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2192'.
[  269.807088][T14049] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2195'.
[  269.818931][T14049] netlink: 392 bytes leftover after parsing attributes in process `syz.2.2195'.
[  270.174094][T14052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2196'.
[  270.249464][T14052] veth0_virt_wifi: left allmulticast mode
[  270.251688][T14052] veth0_virt_wifi: left promiscuous mode
[  270.259872][T14052] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  270.694121][T14061] netlink: 'syz.0.2198': attribute type 1 has an invalid length.
[  270.745487][T14061] 8021q: adding VLAN 0 to HW filter on device bond65
[  270.769790][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2200'.
[  270.781537][T14065] bond65: (slave veth17): Enslaving as an active interface with a down link
[  270.865986][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2201'.
[  270.912193][T14067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2201'.
[  270.916814][T14067] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2201'.
[  270.920655][T14067] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2201'.
[  271.188060][T14080] syzkaller0: entered promiscuous mode
[  271.198786][T14080] syzkaller0: entered allmulticast mode
[  271.237191][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2204'.
[  271.372477][T14093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  271.399918][T14093] tipc: Resetting bearer <eth:hsr0>
[  271.418967][T14093] tipc: Resetting bearer <eth:hsr0>
[  271.427072][T14093] tipc: Resetting bearer <eth:syzkaller0>
[  271.454453][T14093] hma(kX: entered promiscuous mode
[  271.868039][T14113] veth0_macvtap: Caught tx_queue_len zero misconfig
[  271.903732][T14113] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  272.375935][T14126] netlink: zone id is out of range
[  272.377844][T14126] netlink: zone id is out of range
[  272.379781][T14126] netlink: zone id is out of range
[  272.381741][T14126] netlink: zone id is out of range
[  272.384506][T14126] netlink: zone id is out of range
[  272.386645][T14126] netlink: zone id is out of range
[  272.388538][T14126] netlink: zone id is out of range
[  272.390441][T14126] netlink: zone id is out of range
[  272.732162][T14145] netlink: 'syz.0.2220': attribute type 1 has an invalid length.
[  273.096543][T14161] syzkaller0: entered promiscuous mode
[  273.105610][T14161] syzkaller0: entered allmulticast mode
[  273.977497][T14226] netlink: 'syz.0.2241': attribute type 21 has an invalid length.
[  273.985305][T14226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  273.987972][T14226] IPv6: NLM_F_CREATE should be set when creating new route
[  273.990348][T14226] IPv6: NLM_F_CREATE should be set when creating new route
[  273.992624][T14226] IPv6: NLM_F_CREATE should be set when creating new route
[  274.048285][T14232] netlink: 'syz.1.2242': attribute type 1 has an invalid length.
[  274.338409][T14241] tipc: Resetting bearer <eth:hsr0>
[  274.340620][T14241] tipc: Resetting bearer <eth:hsr0>
[  274.366866][T14241] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  274.374539][T14241] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  274.381869][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.395211][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.401932][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.411365][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  274.678689][T14259] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  274.682973][T14259] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  275.256278][T14274] netlink: 'syz.0.2254': attribute type 1 has an invalid length.
[  275.703171][T14292] __nla_validate_parse: 9 callbacks suppressed
[  275.703188][T14292] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2260'.
[  275.736458][T14287] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2259'.
[  275.891818][T14296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2261'.
[  275.967094][T14308] lo speed is unknown, defaulting to 1000
[  276.238325][T14317] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2265'.
[  276.271868][T14308] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2264'.
[  276.607681][T14327] syzkaller1: entered promiscuous mode
[  276.612750][T14327] syzkaller1: entered allmulticast mode
[  277.534678][T14351] team_slave_1: Caught tx_queue_len zero misconfig
[  278.456667][T14370] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2274'.
[  278.472752][T14370] netlink: 'syz.1.2274': attribute type 4 has an invalid length.
[  278.558627][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2275'.
[  279.332637][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2278'.
[  279.512794][T14396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2280'.
[  279.518155][T14396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2280'.
[  279.824491][T14418] netlink: 'syz.2.2286': attribute type 10 has an invalid length.
[  279.832596][T14418] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  279.938136][T14429] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  279.944494][T14429] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  279.950159][T14429] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  280.734634][T14479] __nla_validate_parse: 1 callbacks suppressed
[  280.734653][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2299'.
[  280.756153][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2299'.
[  280.763880][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2299'.
[  280.769664][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2299'.
[  280.775675][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2299'.
[  280.781292][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2299'.
[  280.786930][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2299'.
[  280.794765][T14472] block nbd1: not configured, cannot reconfigure
[  280.851263][T14486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2300'.
[  280.862970][T14485] xt_hashlimit: size too large, truncated to 1048576
[  280.991880][T14496] lo: Caught tx_queue_len zero misconfig
[  281.402599][T14521] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  281.406344][T14522] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  281.426153][T14518] netlink: 'syz.2.2307': attribute type 4 has an invalid length.
[  281.431565][T14518] netlink: 'syz.2.2307': attribute type 4 has an invalid length.
[  281.487358][T14524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2309'.
[  281.602649][T14535] netlink: 'syz.1.2313': attribute type 1 has an invalid length.
[  281.703783][T14550] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  281.711444][T14540] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2314'.
[  281.979039][T14575] net_ratelimit: 19 callbacks suppressed
[  281.979059][T14575] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  281.990989][T14575] netlink: 'syz.2.2322': attribute type 1 has an invalid length.
[  282.021837][T14578] vlan2: entered allmulticast mode
[  282.027467][T14578] veth0_to_bond: entered allmulticast mode
[  282.174378][T14594] netlink: 'syz.2.2328': attribute type 1 has an invalid length.
[  282.191669][T14594] 8021q: adding VLAN 0 to HW filter on device bond21
[  282.270977][T14600] bond29: entered promiscuous mode
[  282.274381][T14600] 8021q: adding VLAN 0 to HW filter on device bond29
[  282.410278][T14616] netlink: 'syz.2.2333': attribute type 1 has an invalid length.
[  282.530865][T14622] 5n: entered promiscuous mode
[  282.972412][T14659] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  282.979442][T14661] netlink: 'syz.2.2344': attribute type 4 has an invalid length.
[  283.299108][T14671] openvswitch: netlink: Multiple metadata blocks provided
[  283.459822][T14682] netlink: 'syz.2.2351': attribute type 8 has an invalid length.
[  283.490793][T14685] block nbd2: not configured, cannot reconfigure
[  283.534364][T14687] netlink: 'syz.2.2353': attribute type 1 has an invalid length.
[  283.551358][T14687] 8021q: adding VLAN 0 to HW filter on device bond22
[  284.598572][T14711] netlink: del zone limit has 8 unknown bytes
[  284.827602][T14726] bridge13: the hash_elasticity option has been deprecated and is always 16
[  284.830577][T14726] bridge13: entered allmulticast mode
[  284.962860][T14731] bond23: invalid ARP target 0.0.0.0 specified for addition
[  284.966433][T14731] bond23: option arp_ip_target: invalid value (0)
[  284.970179][T14731] bond23 (unregistering): Released all slaves
[  285.378054][T14751] netlink: 'syz.2.2374': attribute type 61 has an invalid length.
[  285.709928][T14774] sctp: [Deprecated]: syz.2.2379 (pid 14774) Use of int in max_burst socket option.
[  285.709928][T14774] Use struct sctp_assoc_value instead
[  285.725578][T14774] ip6tnl0: Caught tx_queue_len zero misconfig
[  285.755173][T14776] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  285.788987][T14778] __nla_validate_parse: 36 callbacks suppressed
[  285.789000][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2381'.
[  285.829395][T14784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2382'.
[  285.868352][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2378'.
[  286.454786][T14814] veth0: entered promiscuous mode
[  286.467565][T14814] veth0: left promiscuous mode
[  286.760545][T14823] 8021q: VLANs not supported on ip_vti0
[  286.859712][T14829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2395'.
[  286.867963][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2395'.
[  286.877651][T14829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2395'.
[  286.888916][T14834] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2392'.
[  286.902077][T14834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2392'.
[  286.915564][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2392'.
[  286.996951][T14841] bond0: (slave vlan3): Opening slave failed
[  287.261803][T14858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2400'.
[  287.273292][T14858] netlink: 'syz.1.2400': attribute type 7 has an invalid length.
[  287.278528][T14858] netlink: 'syz.1.2400': attribute type 8 has an invalid length.
[  288.012005][T14891] netlink: 'syz.2.2407': attribute type 5 has an invalid length.
[  288.030806][T14890] 8021q: adding VLAN 0 to HW filter on device bond66
[  288.766541][T14936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  288.777017][T14931] sqz0: rxe_newlink: already configured on lo
[  288.953331][T14944] netlink: 'syz.0.2427': attribute type 1 has an invalid length.
[  288.960116][T14944] netlink: 'syz.0.2427': attribute type 2 has an invalid length.
[  289.099011][T14955] hma(kX: entered promiscuous mode
[  289.256834][T14966] netlink: 'syz.1.2431': attribute type 1 has an invalid length.
[  289.367150][T14966] bond31: (slave vxcan3): The slave device specified does not support setting the MAC address
[  289.372846][T14966] bond31: (slave vxcan3): Error -95 calling set_mac_address
[  289.442132][T14973] bond31: (slave bridge9): Enslaving as an active interface with a down link
[  289.450816][T14973] ip6gretap3: entered promiscuous mode
[  289.452845][T14973] ip6gretap3: entered allmulticast mode
[  289.467638][T14973] bond31: (slave ip6gretap3): making interface the new active one
[  289.480557][T14973] bond31: (slave ip6gretap3): Enslaving as an active interface with an up link
[  289.527681][T14977] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  289.533682][T14978] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  289.540479][T14977] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  289.558832][T14978] bond0: Caught tx_queue_len zero misconfig
[  289.605883][T14981] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  289.626796][T14986] netlink: 'syz.0.2433': attribute type 1 has an invalid length.
[  289.728046][T14986] bond67: (slave vxcan1): The slave device specified does not support setting the MAC address
[  289.733885][T14986] bond67: (slave vxcan1): Error -95 calling set_mac_address
[  289.851108][T14995] macvlan37: entered promiscuous mode
[  289.859354][T14995] macvlan37: entered allmulticast mode
[  289.868645][T14995] bond67: entered promiscuous mode
[  289.875953][T14995] 8021q: adding VLAN 0 to HW filter on device macvlan37
[  289.887233][T14995] bond67: left promiscuous mode
[  289.910792][T14997] netlink: 'syz.2.2437': attribute type 2 has an invalid length.
[  290.071241][T15003] veth1_to_team: mtu greater than device maximum
[  290.078804][T15003] netlink: 'syz.0.2440': attribute type 12 has an invalid length.
[  290.155254][T15005] syzkaller0: entered promiscuous mode
[  290.157705][T15005] syzkaller0: entered allmulticast mode
[  290.163989][T15007] nbd: must specify at least one socket
[  290.166853][T15006] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  290.180527][T15006] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  290.190701][T15005] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.199048][T15005] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.230595][T15005] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  290.243570][T15005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  290.255785][T15005] veth1_vlan: left promiscuous mode
[  290.259905][T15005] veth0_vlan: left promiscuous mode
[  290.268433][T15005] veth0_vlan: entered promiscuous mode
[  290.271577][T15005] veth1_vlan: entered promiscuous mode
[  290.280508][T15005] veth1_macvtap: left promiscuous mode
[  290.288462][T15005] veth0_macvtap: left promiscuous mode
[  290.295454][T15005] veth0_macvtap: entered promiscuous mode
[  290.304483][T15005] veth1_macvtap: entered promiscuous mode
[  290.316017][T15005] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  290.399788][ T6511] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  290.412191][ T6511] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  290.420741][ T6511] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  290.431200][ T6511] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  293.324013][T15016] __nla_validate_parse: 19 callbacks suppressed
[  293.324053][T15016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2443'.
[  293.344363][T15012] erspan0: left promiscuous mode
[  293.356741][T15012] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.360111][T15012] 8021q: adding VLAN 0 to HW filter on device team0
[  293.401803][T15012] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  293.406539][T15012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  293.410643][T15012] tipc: Resetting bearer <eth:hsr0>
[  293.412552][T15012] tipc: Resetting bearer <eth:hsr0>
[  293.415597][T15012] tipc: Resetting bearer <eth:hsr0>
[  293.418771][T15012] veth1_macvtap: left promiscuous mode
[  293.421906][T15012] veth0_macvtap: left promiscuous mode
[  293.425794][T15012] veth0_macvtap: entered promiscuous mode
[  293.429204][T15012] veth1_macvtap: entered promiscuous mode
[  293.468110][T15012] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  293.472384][T15012] 8021q: adding VLAN 0 to HW filter on device bond1
[  293.477330][T15012] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  293.540738][ T6511] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.543695][ T6511] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.546516][ T6511] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.563699][ T6511] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.611398][T15025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2446'.
[  293.645327][T15025] 8021q: adding VLAN 0 to HW filter on device bond32
[  293.649642][T15022] netlink: 'syz.2.2445': attribute type 3 has an invalid length.
[  293.654689][T15022] netlink: 'syz.2.2445': attribute type 3 has an invalid length.
[  293.672446][T15025] vlan3: entered promiscuous mode
[  293.676589][T15025] bond32: entered promiscuous mode
[  293.678410][T15025] vlan3: entered allmulticast mode
[  293.680056][T15025] bond32: entered allmulticast mode
[  293.685944][T15025] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2446'.
[  293.702081][T15025] 8021q: adding VLAN 0 to HW filter on device batadv1
[  293.708880][T15025] batadv1: entered promiscuous mode
[  293.711822][T15025] batadv1: entered allmulticast mode
[  293.718866][T15025] bond32: (slave batadv1): Enslaving as an active interface with an up link
[  294.365297][   T33] audit: type=1804 audit(1778605501.836:13): pid=15057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2453" name="/newroot/762/cgroup.controllers" dev="tmpfs" ino=3909 res=1 errno=0
[  294.390684][   T33] audit: type=1800 audit(1778605501.846:14): pid=15057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2453" name="cgroup.controllers" dev="tmpfs" ino=3909 res=0 errno=0
[  294.423354][T15060] netlink: 'syz.0.2454': attribute type 1 has an invalid length.
[  294.437539][T15060] bond68: entered promiscuous mode
[  294.439730][T15060] 8021q: adding VLAN 0 to HW filter on device bond68
[  294.508167][T15060] bond68: (slave veth19): making interface the new active one
[  294.519895][T15060] veth19: entered promiscuous mode
[  294.524635][T15060] bond68: (slave veth19): Enslaving as an active interface with an up link
[  294.631632][T15064] bridge14: entered promiscuous mode
[  294.656982][T15069] openvswitch: netlink: Unexpected mask (mask=20840, allowed=10048)
[  294.657291][T15064] bridge14: entered allmulticast mode
[  294.747930][T15071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2457'.
[  294.885829][T15075] bridge11: entered promiscuous mode
[  294.888075][T15075] bridge11: entered allmulticast mode
[  294.970346][T15078] netlink: 774 bytes leftover after parsing attributes in process `syz.1.2458'.
[  295.230081][T15093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2462'.
[  295.368459][T15097] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  295.847172][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2467'.
[  296.002334][T15128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2470'.
[  296.030414][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2471'.
[  296.036731][T15132] tunl0: Caught tx_queue_len zero misconfig
[  296.042666][T15132] netlink: 65011 bytes leftover after parsing attributes in process `syz.2.2471'.
[  296.202732][T15144] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.205383][T15144] syzkaller0: entered promiscuous mode
[  296.207457][T15144] syzkaller0: entered allmulticast mode
[  297.181396][T15143] tipc: Resetting bearer <eth:syzkaller0>
[  297.227783][T15143] tipc: Disabling bearer <eth:syzkaller0>
[  297.787776][T15185] IPVS: sh: FWM 3 0x00000003 - no destination available
[  298.341802][T15230] __nla_validate_parse: 5 callbacks suppressed
[  298.341811][T15230] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2492'.
[  298.573638][T15241] bond33: option miimon: invalid value (18446744073709551607)
[  298.576689][T15241] bond33: option miimon: allowed values 0 - 2147483647
[  298.583707][T15241] bond33 (unregistering): Released all slaves
[  298.677810][T15244] ip6erspan0: entered allmulticast mode
[  299.184443][T15270] x_tables: unsorted underflow at hook 4
[  299.317149][T15281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2505'.
[  299.431859][T15285] syzkaller0: entered promiscuous mode
[  299.434768][T15285] syzkaller0: entered allmulticast mode
[  299.438453][T15285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2507'.
[  299.511927][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2506'.
[  299.569082][T15292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2510'.
[  299.581750][T15290] ipt_rpfilter: unknown options
[  299.942312][T15308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2514'.
[  299.950563][T15308] IPVS: sh: FWM 3 0x00000003 - no destination available
[  300.065771][T15313] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2515'.
[  300.394627][T15322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  300.676983][T15329] netlink: 'syz.1.2519': attribute type 1 has an invalid length.
[  300.721184][T15329] 8021q: adding VLAN 0 to HW filter on device bond33
[  300.748633][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2519'.
[  300.756510][T15329] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.805164][T15336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2521'.
[  300.860238][T15338] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  301.173585][T15346] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  301.221265][T15348] netlink: 'syz.1.2525': attribute type 3 has an invalid length.
[  301.229227][T15351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2526'.
[  301.256161][T15348] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  301.335381][T15353] netlink: 'syz.2.2527': attribute type 32 has an invalid length.
[  301.365025][T15353] bond23: Setting coupled_control to off (0)
[  301.688831][T15380] IPVS: sh: FWM 3 0x00000003 - no destination available
[  301.708402][T15378] Cannot find set identified by id 0 to match
[  301.768990][T15384] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  301.876923][T15390] netlink: 'syz.1.2537': attribute type 1 has an invalid length.
[  301.916137][T15390] 8021q: adding VLAN 0 to HW filter on device bond34
[  301.975977][T15390] sctp: [Deprecated]: syz.1.2537 (pid 15390) Use of int in maxseg socket option.
[  301.975977][T15390] Use struct sctp_assoc_value instead
[  302.017682][T15395] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  302.049712][T15395] veth21: entered promiscuous mode
[  302.141120][T15404] netlink: 'syz.0.2541': attribute type 1 has an invalid length.
[  302.335211][T15414] netlink: 'syz.1.2544': attribute type 1 has an invalid length.
[  302.348972][T15414] bond35: entered promiscuous mode
[  302.351076][T15414] 8021q: adding VLAN 0 to HW filter on device bond35
[  302.364734][T15414] 8021q: adding VLAN 0 to HW filter on device bond35
[  302.369412][T15414] bond35: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  302.375125][T15414] bond35: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  302.389293][T15414] bond35: (slave ip6gre1): making interface the new active one
[  302.393758][T15414] ip6gre1: entered promiscuous mode
[  302.426392][T15414] bond35: (slave ip6gre1): Enslaving as an active interface with an up link
[  302.531813][T15422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  302.608735][T15430] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.617128][T15437] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  302.634893][T15430] syzkaller0: entered promiscuous mode
[  302.640127][T15430] syzkaller0: entered allmulticast mode
[  302.698479][T15430] netlink: 'syz.0.2550': attribute type 1 has an invalid length.
[  302.699266][T15422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  302.731606][T15437] tipc: Resetting bearer <eth:syzkaller0>
[  302.744845][T15428] tipc: Resetting bearer <eth:syzkaller0>
[  302.767003][T15428] tipc: Disabling bearer <eth:syzkaller0>
[  302.850998][T15447] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  302.881333][T15450] syzkaller1: entered promiscuous mode
[  302.883965][T15450] syzkaller1: entered allmulticast mode
[  302.929969][T15449] tipc: Can't bind to reserved service type 2
[  303.369778][T15461] netlink: 'syz.2.2559': attribute type 1 has an invalid length.
[  303.427760][T15461] bond24: entered promiscuous mode
[  303.430431][T15461] 8021q: adding VLAN 0 to HW filter on device bond24
[  303.448017][T15463] 8021q: adding VLAN 0 to HW filter on device bond24
[  303.454334][T15463] bond24: (slave vti1): The slave device specified does not support setting the MAC address
[  303.457613][T15463] bond24: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  303.467213][T15463] bond24: (slave vti1): making interface the new active one
[  303.469695][T15463] vti1: entered promiscuous mode
[  303.472494][T15463] bond24: (slave vti1): Enslaving as an active interface with an up link
[  303.492483][T15461] bond25 (unregistering): Released all slaves
[  303.579881][   T33] audit: type=1804 audit(1778605511.056:15): pid=15468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2561" name="/newroot/913/cgroup.controllers" dev="tmpfs" ino=4669 res=1 errno=0
[  303.594530][   T33] audit: type=1800 audit(1778605511.076:16): pid=15468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2561" name="cgroup.controllers" dev="tmpfs" ino=4669 res=0 errno=0
[  303.629305][T15470] __nla_validate_parse: 15 callbacks suppressed
[  303.629315][T15470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2562'.
[  303.641198][T15470] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  303.649001][T15470] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  304.173699][T15497] netlink: 'syz.1.2566': attribute type 4 has an invalid length.
[  304.595781][T15504] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2568'.
[  304.674965][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2572'.
[  304.866043][T15506] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2569'.
[  304.985948][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2578'.
[  305.065072][T15541] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2578'.
[  305.122830][T15556] veth0: entered promiscuous mode
[  305.367447][T15555] veth0: left promiscuous mode
[  305.388571][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2587'.
[  305.473219][T15587] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2589'.
[  305.479151][T15587] bond0 (unregistering): Released all slaves
[  305.743921][T15608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2595'.
[  305.823491][T15612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2596'.
[  305.957566][T15630] netlink: 'syz.1.2599': attribute type 4 has an invalid length.
[  305.970809][T15623] netlink: 'syz.1.2599': attribute type 4 has an invalid length.
[  306.098689][T15638] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c)
[  307.350997][T15658] xt_CT: You must specify a L4 protocol and not use inversions on it
[  307.366201][T15658] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  307.371448][T15658] syzkaller0: entered promiscuous mode
[  307.376735][T15658] syzkaller0: entered allmulticast mode
[  307.503132][T15663] netlink: 'syz.2.2613': attribute type 13 has an invalid length.
[  307.510474][T15667] tap0: tun_chr_ioctl cmd 1074025676
[  307.511455][T15664] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[  307.512995][T15667] tap0: owner set to 0
[  307.852034][T15678] xt_hashlimit: max too large, truncated to 1048576
[  308.750907][T15690] __nla_validate_parse: 8 callbacks suppressed
[  308.750918][T15690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2620'.
[  308.765921][T15693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2620'.
[  308.792465][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2619'.
[  308.905125][T15699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  308.993792][T15700] bridge0: port 1(vlan1) entered blocking state
[  309.003261][T15700] bridge0: port 1(vlan1) entered disabled state
[  309.006773][T15700] vlan1: entered allmulticast mode
[  309.013507][T15700] geneve0: entered allmulticast mode
[  309.058943][T15699] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2622'.
[  309.108592][T15699] bond0: Removing last ns target with arp_interval on
[  309.126313][T15699] syzkaller0: entered promiscuous mode
[  309.133124][T15699] syzkaller0: entered allmulticast mode
[  309.207259][T15699] tipc: Resetting bearer <eth:syzkaller0>
[  309.250040][T15697] tipc: Resetting bearer <eth:syzkaller0>
[  309.281175][T15697] tipc: Disabling bearer <eth:syzkaller0>
[  309.557146][T15727] vlan0: entered promiscuous mode
[  309.558978][T15727] bridge0: entered promiscuous mode
[  309.616573][T15732] netlink: 'syz.2.2630': attribute type 4 has an invalid length.
[  309.667311][T15735] netlink: 'syz.1.2631': attribute type 1 has an invalid length.
[  309.682526][T15735] 8021q: adding VLAN 0 to HW filter on device bond36
[  309.691472][T15735] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  309.695709][T15735] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2631'.
[  309.699981][T15735] netlink: 'syz.1.2631': attribute type 2 has an invalid length.
[  309.703328][T15735] netlink: 'syz.1.2631': attribute type 1 has an invalid length.
[  309.706413][T15735] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2631'.
[  309.866147][T15747] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  310.201831][T15759] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  311.681484][T15802] xt_TCPMSS: Only works on TCP SYN packets
[  311.709645][T15802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2651'.
[  311.722913][T15800] netlink: 'syz.0.2649': attribute type 8 has an invalid length.
[  311.926772][T15803] bond37: (slave bridge10): Enslaving as an active interface with an up link
[  312.034237][T15811] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.207852][T15812] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  312.224177][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2652'.
[  312.288098][T15818] siw: device registration error -23
[  312.293510][T15814] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2654'.
[  312.303304][T15814] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2654'.
[  312.340589][T15825] ip6gre1: entered promiscuous mode
[  312.346945][T15825] ip6gre1: entered allmulticast mode
[  312.357494][T15825] netlink: 'syz.2.2656': attribute type 6 has an invalid length.
[  312.369076][T15825] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  312.377387][T15825] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  312.760078][T15841] bridge11: entered promiscuous mode
[  312.761963][T15841] bridge11: entered allmulticast mode
[  312.941355][T15852] bridge11: entered promiscuous mode
[  312.947837][T15852] bridge11: entered allmulticast mode
[  313.159169][T15856] IPVS: sh: FWM 3 0x00000003 - no destination available
[  313.966429][T15889] lo speed is unknown, defaulting to 1000
[  314.606081][T15897] syzkaller0: entered promiscuous mode
[  314.608022][T15897] syzkaller0: entered allmulticast mode
[  314.854651][T15901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.502173][T15926] __nla_validate_parse: 10 callbacks suppressed
[  315.502284][T15926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2679'.
[  315.551520][T15926] IPVS: sh: FWM 3 0x00000003 - no destination available
[  315.790007][T15937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2682'.
[  315.795222][T15932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2682'.
[  315.850338][T15944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2683'.
[  315.871559][T15944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2683'.
[  316.116581][T15959] netlink: 'syz.0.2688': attribute type 10 has an invalid length.
[  316.634220][T15977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2692'.
[  317.103417][T15989] netlink: 'syz.1.2697': attribute type 16 has an invalid length.
[  317.108707][T15989] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2697'.
[  317.125362][T15990] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2698'.
[  317.133202][T15990] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2698'.
[  317.155012][T15990] syzkaller1: entered promiscuous mode
[  317.162882][T15990] syzkaller1: entered allmulticast mode
[  317.632282][T16013] netlink: 'syz.1.2703': attribute type 7 has an invalid length.
[  317.732022][T16018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2704'.
[  317.771937][T16021] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  317.788096][T16014] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 51868 - 0
[  317.794364][T16014] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  317.938964][T16014] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 51868 - 0
[  317.953269][T16014] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  318.021394][T16014] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 51868 - 0
[  318.037002][T16014] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  318.084574][T16014] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 51868 - 0
[  318.092008][T16014] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  318.227344][ T5667] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.236003][ T5667] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 51868 - 0
[  318.244969][ T5667] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.255425][ T5667] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 51868 - 0
[  318.275390][ T5667] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.280301][ T5667] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 51868 - 0
[  318.295515][ T5667] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.298837][ T5667] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 51868 - 0
[  318.362483][T16053] netlink: 'syz.2.2712': attribute type 1 has an invalid length.
[  318.434628][   T33] audit: type=1804 audit(1778605525.916:17): pid=16055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2711" name="/newroot/896/memory.events" dev="tmpfs" ino=4605 res=1 errno=0
[  318.444281][   T33] audit: type=1800 audit(1778605525.916:18): pid=16055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2711" name="memory.events" dev="tmpfs" ino=4605 res=0 errno=0
[  318.466480][T16056] bond38: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  318.471137][T16056] bond38 (unregistering): Released all slaves
[  318.679778][T16066] xt_recent: Unsupported userspace flags (000000b1)
[  318.985802][T16083] SET target dimension over the limit!
[  319.136585][T16091] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  319.188526][T16096] netlink: 'syz.1.2725': attribute type 1 has an invalid length.
[  319.342109][T16096] 8021q: adding VLAN 0 to HW filter on device bond38
[  319.695409][T16106] bond38: (slave veth23): Enslaving as an active interface with a down link
[  319.706864][T16105] dvmrp1: tun_chr_ioctl cmd 1074025677
[  319.710867][T16105] dvmrp1: linktype set to 0
[  319.846112][T16124] kthread_run failed with err -4
[  320.269784][T16144] netlink: 'syz.1.2736': attribute type 1 has an invalid length.
[  320.287604][T16144] 8021q: adding VLAN 0 to HW filter on device bond39
[  320.297422][T16144] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.303947][T16149] netlink: 'syz.0.2737': attribute type 3 has an invalid length.
[  320.435184][T16153] sctp: [Deprecated]: syz.0.2740 (pid 16153) Use of int in max_burst socket option deprecated.
[  320.435184][T16153] Use struct sctp_assoc_value instead
[  320.568109][T16169] netlink: 'syz.0.2744': attribute type 1 has an invalid length.
[  320.588558][T16169] 8021q: adding VLAN 0 to HW filter on device bond69
[  320.661104][T16165] netlink: 'syz.2.2741': attribute type 1 has an invalid length.
[  320.680597][T16173] bond69: (slave veth23): Enslaving as an active interface with a down link
[  320.743764][T16173] bond69: (slave dummy0): Enslaving as an active interface with a down link
[  320.745049][T16169] __nla_validate_parse: 14 callbacks suppressed
[  320.745160][T16169] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2744'.
[  320.820225][T16169] bond69: (slave dummy0): Releasing active interface
[  320.862706][T16177] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  320.896554][   T54] block nbd0: Receive control failed (result -32)
[  321.110675][T16183] tipc: Resetting bearer <eth:hsr0>
[  321.116593][T16183] tipc: Resetting bearer <eth:hsr0>
[  321.200190][ T6511] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  321.204183][ T6511] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  321.230461][ T6511] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  321.232797][T16192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2751'.
[  321.234851][ T6511] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  321.237083][T16192] nbd: illegal input index -1113835520
[  321.302086][T16196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2753'.
[  321.340940][T16198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  321.408635][T16201] netlink: 'syz.0.2755': attribute type 1 has an invalid length.
[  321.600982][T16222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2762'.
[  321.890192][T16244] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  321.895848][T16244] netlink: 'syz.2.2767': attribute type 11 has an invalid length.
[  321.899226][T16244] netlink: 'syz.2.2767': attribute type 23 has an invalid length.
[  321.902332][T16244] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2767'.
[  321.977034][T16246] xt_TPROXY: Can be used only with -p tcp or -p udp
[  322.027538][T16250] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2769'.
[  322.128832][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2772'.
[  322.137438][T16259] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2772'.
[  322.146790][T16259] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2772'.
[  322.752662][T16280] validate_nla: 1 callbacks suppressed
[  322.752674][T16280] netlink: 'syz.1.2778': attribute type 3 has an invalid length.
[  322.761375][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2774'.
[  322.767426][T16280] netlink: 'syz.1.2778': attribute type 1 has an invalid length.
[  322.962568][T16281] x_tables: duplicate underflow at hook 3
[  323.782253][T16295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  324.920395][T16320] netlink: 'syz.0.2790': attribute type 4 has an invalid length.
[  324.930914][T16320] netlink: 'syz.0.2790': attribute type 4 has an invalid length.
[  324.952463][T11849] lo speed is unknown, defaulting to 1000
[  324.958968][T11849] sqz0: Port: 1 Link ACTIVE
[  324.965366][T11849] lo speed is unknown, defaulting to 1000
[  325.138043][T16322] nftables ruleset with unbound set
[  325.316314][T16341] xt_l2tp: unknown flags: 51
[  325.331207][T16333] lo speed is unknown, defaulting to 1000
[  325.778827][T16351] __nla_validate_parse: 13 callbacks suppressed
[  325.778845][T16351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2799'.
[  325.950021][T16359] netlink: 'syz.0.2801': attribute type 1 has an invalid length.
[  326.061927][T16359] bond70: entered promiscuous mode
[  326.097646][T16359] bond70: entered allmulticast mode
[  326.135130][T16359] 8021q: adding VLAN 0 to HW filter on device bond70
[  326.370521][T16368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2804'.
[  326.407546][T16371] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  326.437687][T16373] netlink: 'syz.2.2805': attribute type 1 has an invalid length.
[  326.440613][T16373] netlink: 'syz.2.2805': attribute type 1 has an invalid length.
[  326.550448][T16368] lo speed is unknown, defaulting to 1000
[  326.567193][T16374] IPVS: sh: FWM 3 0x00000003 - no destination available
[  326.589095][T16374] bond40: (slave vcan0): refused to change device type
[  326.619297][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2808'.
[  326.636511][T16382] veth0_to_bond: entered allmulticast mode
[  326.699443][T16385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2808'.
[  326.769877][T16386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2809'.
[  327.014254][T16391] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.024844][T16389] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2810'.
[  327.367476][T16400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2812'.
[  327.391734][T16400] IPVS: sh: FWM 3 0x00000003 - no destination available
[  327.898035][T16430] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2823'.
[  328.097769][T16437] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  328.126140][T16439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2826'.
[  328.182067][T16441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2825'.
[  328.190469][T16441] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  328.913405][T16452] syzkaller0: entered promiscuous mode
[  328.915287][T16452] syzkaller0: entered allmulticast mode
[  329.111244][T16459] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  329.467693][T16480] netlink: 'syz.0.2835': attribute type 1 has an invalid length.
[  329.490976][T16480] 8021q: adding VLAN 0 to HW filter on device bond71
[  329.542513][T16483] syzkaller0: entered promiscuous mode
[  329.551556][T16483] syzkaller0: entered allmulticast mode
[  329.610940][T16483] netem: change failed
[  330.058229][T16509] ip6gretap0: mtu less than device minimum
[  330.489456][T16529] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  330.796734][T16542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  330.810906][ T5690] lo speed is unknown, defaulting to 1000
[  330.819422][ T5690] sqz0: Port: 1 Link DOWN
[  330.830994][ T5666] lo speed is unknown, defaulting to 1000
[  330.894347][T16544] __nla_validate_parse: 11 callbacks suppressed
[  330.894361][T16544] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2857'.
[  331.281752][T16564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2863'.
[  331.401825][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2864'.
[  331.411814][T16571] openvswitch: netlink: Flow actions attr not present in new flow.
[  331.573569][T16578] syzkaller0: entered promiscuous mode
[  331.578693][T16578] syzkaller0: entered allmulticast mode
[  331.696349][T16582] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2866'.
[  331.828844][T16586] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2869'.
[  331.944192][T16590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2870'.
[  332.098434][T16592] lo speed is unknown, defaulting to 1000
[  332.318689][T16600] netlink: 'syz.0.2873': attribute type 11 has an invalid length.
[  332.329293][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'.
[  332.543744][T16603] syzkaller0: entered promiscuous mode
[  332.545673][T16603] syzkaller0: entered allmulticast mode
[  332.715328][T16607] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  332.719830][T16607] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  333.024430][T16618] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2877'.
[  333.075103][T16617] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2877'.
[  333.367724][T16625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2878'.
[  333.810173][ T5667] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  333.816311][ T5667] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  333.821771][ T5667] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  333.827961][ T5667] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  333.900345][T16656] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20004
[  333.902785][T16657] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20004
[  334.071076][T16670] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  334.135924][T16678] netlink: 'syz.2.2893': attribute type 11 has an invalid length.
[  334.143362][T16678] netlink: 'syz.2.2893': attribute type 13 has an invalid length.
[  334.232688][T16688] netlink: 'syz.2.2896': attribute type 29 has an invalid length.
[  334.241529][T16688] hsr0: entered promiscuous mode
[  334.254740][T16686] hsr0: left promiscuous mode
[  334.566222][T16712] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  334.600172][T16704] tipc: Disabling bearer <eth:syzkaller0>
[  334.968170][T16728] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  334.971089][T16728] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  334.996858][T16731] lo speed is unknown, defaulting to 1000
[  335.652450][T16749] netlink: 'syz.1.2913': attribute type 28 has an invalid length.
[  335.663157][T16748] netlink: 'syz.1.2913': attribute type 28 has an invalid length.
[  335.763841][T16749] netlink: 'syz.1.2913': attribute type 4 has an invalid length.
[  335.867395][T16758] syzkaller0: entered promiscuous mode
[  335.869841][T16758] syzkaller0: entered allmulticast mode
[  336.005999][T16762] __nla_validate_parse: 9 callbacks suppressed
[  336.006020][T16762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2916'.
[  336.125642][T16766] lo speed is unknown, defaulting to 1000
[  336.183422][T16768] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2918'.
[  336.197466][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2918'.
[  336.563268][T16781] openvswitch: : Dropping previously announced user features
[  336.766084][T16786] netlink: 'syz.2.2922': attribute type 1 has an invalid length.
[  336.790070][T16787] netlink: 'syz.2.2922': attribute type 10 has an invalid length.
[  337.213766][T16800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2925'.
[  337.467992][T16811] netlink: 'syz.0.2926': attribute type 1 has an invalid length.
[  337.531002][   T33] audit: type=1804 audit(1778605545.006:19): pid=16812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2928" name="/newroot/963/cgroup.controllers" dev="tmpfs" ino=4951 res=1 errno=0
[  337.562877][   T33] audit: type=1800 audit(1778605545.006:20): pid=16812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2928" name="cgroup.controllers" dev="tmpfs" ino=4951 res=0 errno=0
[  337.617737][T16814] bond72: (slave bridge13): making interface the new active one
[  337.621689][T16814] bond72: (slave bridge13): Enslaving as an active interface with an up link
[  337.665654][T16818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2929'.
[  337.767204][T16825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2932'.
[  337.774108][T16825] ipvlan0: entered allmulticast mode
[  337.776208][T16825] gretap0: entered allmulticast mode
[  337.831279][T16830] nbd: must specify a size in bytes for the device
[  337.888811][T16833] nbd: must specify an index to disconnect
[  338.326730][T16841] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2935'.
[  338.336884][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2935'.
[  338.372121][T16841] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.378613][T16841] 8021q: adding VLAN 0 to HW filter on device team0
[  338.452246][T16841] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  338.599021][T16842] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  338.609563][T16851] netlink: 'syz.1.2937': attribute type 21 has an invalid length.
[  338.612177][T16851] IPv6: NLM_F_CREATE should be specified when creating new route
[  338.615319][T16851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  338.617649][T16851] IPv6: NLM_F_CREATE should be set when creating new route
[  338.620232][T16851] IPv6: NLM_F_CREATE should be set when creating new route
[  338.623664][T16851] IPv6: NLM_F_CREATE should be set when creating new route
[  338.704362][T16856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2938'.
[  338.788960][T16862] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  338.798672][T16862] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  338.911295][T16873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2943'.
[  338.918290][T16873] netlink: 'syz.2.2943': attribute type 21 has an invalid length.
[  338.921105][T16873] netlink: 'syz.2.2943': attribute type 1 has an invalid length.
[  338.929616][T16873] xt_hashlimit: size too large, truncated to 1048576
[  339.134696][T16881] netlink: 'syz.1.2944': attribute type 1 has an invalid length.
[  339.183001][T16886] vlan1: entered promiscuous mode
[  339.185214][T16886] bridge0: entered promiscuous mode
[  339.664775][T16905] veth1_macvtap: left promiscuous mode
[  339.679936][T16905] veth0_macvtap: left promiscuous mode
[  339.685155][T16905] veth0_macvtap: entered promiscuous mode
[  339.695201][T16905] veth1_macvtap: entered promiscuous mode
[  339.723965][T16905] 8021q: adding VLAN 0 to HW filter on device bond1
[  339.749459][T16905] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  339.777550][ T6511] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.781854][ T6511] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.791095][ T6511] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.800814][ T6511] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.031839][T16927] 8021q: adding VLAN 0 to HW filter on device bond42
[  340.042374][T16928] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.048354][T16927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.318597][T16938] syzkaller0: entered promiscuous mode
[  340.320482][T16938] syzkaller0: entered allmulticast mode
[  340.586673][T16948] batadv_slave_1: entered promiscuous mode
[  340.606116][T16948] batadv_slave_1 (unregistering): left promiscuous mode
[  340.856924][T16956] netlink: 'syz.0.2962': attribute type 11 has an invalid length.
[  341.010908][T16963] openvswitch: netlink: Flow key attr not present in new flow.
[  341.596261][T16983] validate_nla: 5 callbacks suppressed
[  341.596279][T16983] netlink: 'syz.1.2969': attribute type 10 has an invalid length.
[  341.661614][T16984] netlink: 'syz.1.2969': attribute type 10 has an invalid length.
[  341.907921][T16983] nbd1: detected capacity change from 0 to 63
[  341.950101][T16985] block nbd1: Receive control failed (result -104)
[  341.953480][   T55] block nbd1: Receive control failed (result -32)
[  342.018640][T16990] __nla_validate_parse: 9 callbacks suppressed
[  342.018651][T16990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2971'.
[  342.026304][T16990] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.2971'.
[  342.151236][T16994] netlink: 'syz.1.2973': attribute type 1 has an invalid length.
[  342.187012][T16994] 8021q: adding VLAN 0 to HW filter on device bond43
[  342.213624][T16994] bond43: (slave veth25): Enslaving as an active interface with a down link
[  342.289720][T17002] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2975'.
[  342.364155][T16994] bond43 (unregistering): (slave veth25): Releasing active interface
[  342.378829][T16994] bond43 (unregistering): Released all slaves
[  342.401693][T17009] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2978'.
[  342.601841][T17018] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2981'.
[  342.638467][T17026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2983'.
[  342.644724][T17027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2983'.
[  342.818949][T17038] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2985'.
[  342.822081][T17038] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2985'.
[  343.073878][T17057] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  343.163966][T17060] veth0_to_team: entered promiscuous mode
[  343.351148][T17063] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  344.070188][T17089] netlink: 'syz.0.2998': attribute type 1 has an invalid length.
[  344.081006][T17089] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2998'.
[  344.568687][T17091] vti0: entered promiscuous mode
[  344.870514][T17109] netlink: 'syz.0.3003': attribute type 3 has an invalid length.
[  344.888404][T17112] bond_slave_0: mtu greater than device maximum
[  345.069708][T17126] trusted_key: syz.2.3008 sent an empty control message without MSG_MORE.
[  346.069816][T17147] veth27: entered allmulticast mode
[  346.199202][T17154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.200927][T17153] geneve4: entered promiscuous mode
[  346.225525][ T5446] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  346.236424][ T5446] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  346.245797][ T5446] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  346.255073][ T5446] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  346.296722][T17153] netlink: 'syz.0.3015': attribute type 1 has an invalid length.
[  346.461509][T17159] SET target dimension over the limit!
[  346.518977][T17162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.647841][T17169] netlink: 'syz.0.3021': attribute type 21 has an invalid length.
[  346.651345][T17169] netlink: 'syz.0.3021': attribute type 1 has an invalid length.
[  346.663297][T17169] xt_hashlimit: size too large, truncated to 1048576
[  347.369181][T17204] __nla_validate_parse: 14 callbacks suppressed
[  347.369195][T17204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3029'.
[  347.377591][T17204] netlink: 'syz.2.3029': attribute type 21 has an invalid length.
[  347.380410][T17204] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3029'.
[  347.383698][T17204] netlink: 'syz.2.3029': attribute type 1 has an invalid length.
[  347.391585][T17204] xt_hashlimit: size too large, truncated to 1048576
[  347.551468][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3030'.
[  347.785475][T17217] lo speed is unknown, defaulting to 1000
[  348.589953][T17239] lo speed is unknown, defaulting to 1000
[  348.998194][T17249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3040'.
[  349.004271][T17249] netlink: 'syz.1.3040': attribute type 21 has an invalid length.
[  349.008579][T17249] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3040'.
[  349.021135][T17249] netlink: 'syz.1.3040': attribute type 1 has an invalid length.
[  349.695181][T17254] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  350.080208][T17281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3046'.
[  350.559335][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3051'.
[  350.722944][T17304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3052'.
[  350.866022][T17303] bond73 (unregistering): Released all slaves
[  350.870748][T17309] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3054'.
[  351.106304][T17313] lo speed is unknown, defaulting to 1000
[  351.545139][T17324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'.
[  351.727071][T17339] netlink: 'syz.1.3062': attribute type 1 has an invalid length.
[  351.732168][T17338] netlink: 'syz.1.3062': attribute type 1 has an invalid length.
[  351.749924][T17339] 8021q: adding VLAN 0 to HW filter on device bond43
[  351.754811][T17339] netlink: 'syz.1.3062': attribute type 30 has an invalid length.
[  351.757835][T17338] netlink: 'syz.1.3062': attribute type 30 has an invalid length.
[  351.888675][T17351] lo speed is unknown, defaulting to 1000
[  351.895841][T17351] lo speed is unknown, defaulting to 1000
[  351.896086][T17352] siw: device registration error -23
[  351.939673][T17351] lo speed is unknown, defaulting to 1000
[  351.948707][T17351] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  351.953798][T17351] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  351.959989][T17351] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  351.975300][T17351] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  351.994786][T17351] lo speed is unknown, defaulting to 1000
[  351.997513][T17351] lo speed is unknown, defaulting to 1000
[  352.000204][T17351] lo speed is unknown, defaulting to 1000
[  352.190190][T17363] openvswitch: netlink: Message has 3 unknown bytes.
[  352.320082][T17368] syzkaller0: entered promiscuous mode
[  352.322013][T17368] syzkaller0: entered allmulticast mode
[  352.341905][T17368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  352.350882][T17368] tipc: Resetting bearer <eth:syzkaller0>
[  352.355888][T17368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.359760][T17368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.378234][T17367] tipc: Resetting bearer <eth:syzkaller0>
[  352.395447][T17367] tipc: Disabling bearer <eth:syzkaller0>
[  352.482991][T17373] __nla_validate_parse: 5 callbacks suppressed
[  352.490281][T17373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3070'.
[  352.576821][ T5667] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  352.579598][ T5667] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  352.587100][ T5667] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  352.599284][ T5667] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  352.665859][T17380] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3072'.
[  352.685590][T17380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3072'.
[  352.707732][T17380] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  352.721690][T17380] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  352.833899][T17383] lo speed is unknown, defaulting to 1000
[  353.001718][T17393] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  353.005707][T17393] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  353.242917][T17383] lo speed is unknown, defaulting to 1000
[  353.541030][T17407] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3078'.
[  353.554525][T17407] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3078'.
[  353.608076][T17407] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3078'.
[  353.878770][T17420] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3082'.
[  353.984206][T17436] syzkaller0: entered promiscuous mode
[  353.986956][T17436] syzkaller0: entered allmulticast mode
[  354.052084][T17436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3085'.
[  354.059127][T17435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3085'.
[  354.117127][T17443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3087'.
[  354.313616][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  354.384990][T17455] ip6gre2: entered promiscuous mode
[  354.386921][T17455] ip6gre2: entered allmulticast mode
[  354.543539][T17466] lo speed is unknown, defaulting to 1000
[  354.724902][T17466] lo speed is unknown, defaulting to 1000
[  355.354087][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  356.403713][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  356.614420][T17547] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  356.617576][T17547] pim6reg1: entered promiscuous mode
[  356.619409][T17547] pim6reg1: entered allmulticast mode
[  356.622138][T17547] netlink: 'syz.0.3110': attribute type 3 has an invalid length.
[  356.844974][T17551] lo speed is unknown, defaulting to 1000
[  356.885135][T17552] netlink: 'syz.1.3111': attribute type 4 has an invalid length.
[  356.974340][T17551] lo speed is unknown, defaulting to 1000
[  357.435463][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  357.538741][T17569] __nla_validate_parse: 7 callbacks suppressed
[  357.538756][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3115'.
[  358.174401][T17589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3120'.
[  358.228632][T17593] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  358.231737][T17593] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  358.379138][T17589] syzkaller0: entered promiscuous mode
[  358.381605][T17589] syzkaller0: entered allmulticast mode
[  358.483363][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  359.523194][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  359.850206][T17604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3123'.
[  360.563523][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  360.710648][T17621] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  360.721540][T17621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3126'.
[  360.759232][T17621] lo speed is unknown, defaulting to 1000
[  360.857049][T17621] lo speed is unknown, defaulting to 1000
[  361.320247][T17639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.370920][T17642] siw: device registration error -23
[  361.452024][T17647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3134'.
[  361.603190][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  361.614328][T17652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3137'.
[  361.617467][T17652] nbd: illegal input index -1113835520
[  361.759129][T17666] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3140'.
[  361.957478][T17670] lo speed is unknown, defaulting to 1000
[  362.123532][T17670] lo speed is unknown, defaulting to 1000
[  362.422658][T17685] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  362.643308][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  363.097953][T17711] lo speed is unknown, defaulting to 1000
[  363.217971][T17711] lo speed is unknown, defaulting to 1000
[  363.386767][T17711] erspan0: entered promiscuous mode
[  363.388793][T17711] vlan4: entered promiscuous mode
[  363.525903][T17723] lo speed is unknown, defaulting to 1000
[  363.571031][T17725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3151'.
[  363.652068][T17725] bond26: entered promiscuous mode
[  363.654817][T17725] 8021q: adding VLAN 0 to HW filter on device bond26
[  363.680888][T17727] 8021q: adding VLAN 0 to HW filter on device bond26
[  363.683297][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  363.687908][T17727] bond26: (slave vti2): The slave device specified does not support setting the MAC address
[  363.692041][T17727] bond26: (slave vti2): Error -95 calling set_mac_address
[  363.705957][T17723] lo speed is unknown, defaulting to 1000
[  363.860517][T17735] x_tables: duplicate underflow at hook 3
[  363.865418][T17735] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3153'.
[  363.868525][T17735] netlink: 'syz.2.3153': attribute type 1 has an invalid length.
[  363.905745][T17737] xt_hashlimit: size too large, truncated to 1048576
[  364.251527][T17746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3158'.
[  364.256853][T17746] netlink: 'syz.2.3158': attribute type 1 has an invalid length.
[  364.288432][T17746] workqueue: Failed to create a rescuer kthread for wq "bond27": -EINTR
[  364.439295][T17757] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.525594][T17759] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  364.565282][T17757] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.620929][T17757] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.707411][T17757] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.723220][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  364.827356][ T6511] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.837108][ T6511] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.845841][ T6511] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.856525][ T6511] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.001454][T17774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3165'.
[  365.041652][T17779] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3166'.
[  365.050970][T17779] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3166'.
[  365.127303][T17783] netlink: 'syz.1.3167': attribute type 4 has an invalid length.
[  365.138411][T17783] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3167'.
[  365.673744][T17805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'.
[  365.763996][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  366.017054][T17828] netlink: 'syz.1.3177': attribute type 29 has an invalid length.
[  366.052607][T17830] lo speed is unknown, defaulting to 1000
[  366.160459][T17832] IPVS: length: 73 != 8
[  366.172252][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3178'.
[  366.185826][T17831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3178'.
[  366.242913][T17830] lo speed is unknown, defaulting to 1000
[  366.774939][T17864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  366.804009][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  366.825995][T17870] netlink: 'syz.0.3188': attribute type 1 has an invalid length.
[  366.852914][T17872] lo speed is unknown, defaulting to 1000
[  367.009968][T17872] lo speed is unknown, defaulting to 1000
[  367.209770][T17888] tipc: Enabled bearer <eth:vlan0>, priority 0
[  367.322166][T17892] syzkaller0: entered promiscuous mode
[  367.344100][T17892] syzkaller0: entered allmulticast mode
[  367.834048][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  368.873348][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  369.923266][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  370.377939][T17901] syzkaller0: entered promiscuous mode
[  370.393524][T17901] syzkaller0: entered allmulticast mode
[  370.572465][T17916] netlink: 'syz.2.3202': attribute type 32 has an invalid length.
[  370.575427][T17916] __nla_validate_parse: 7 callbacks suppressed
[  370.575434][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'.
[  370.595970][T17916] bond27: option coupled_control: invalid value (12)
[  370.605563][T17916] bond27 (unregistering): Released all slaves
[  370.616898][T17915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3201'.
[  370.620828][T17919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3201'.
[  370.629846][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3201'.
[  370.737837][T17925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3204'.
[  370.963637][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  371.385674][T17964] netlink: 'syz.1.3212': attribute type 1 has an invalid length.
[  371.427152][T17964] bond46: (slave vxcan3): The slave device specified does not support setting the MAC address
[  371.431528][T17964] bond46: (slave vxcan3): Error -95 calling set_mac_address
[  371.521804][T17975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3214'.
[  371.552566][T17971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3207'.
[  371.871247][T17984] xt_hashlimit: size too large, truncated to 1048576
[  371.902907][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3218'.
[  372.007050][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  372.108664][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3219'.
[  372.158957][   T97] block nbd1: Connection timed out, retrying (0/2 alive)
[  372.166893][   T97] block nbd1: Connection timed out, retrying (0/2 alive)
[  372.169792][   T97] block nbd1: Connection timed out, retrying (0/2 alive)
[  372.172488][   T97] block nbd1: Connection timed out, retrying (0/2 alive)
[  372.179828][   T97] block nbd1: Dead connection, failed to find a fallback
[  372.186178][   T97] block nbd1: shutting down sockets
[  372.188637][   T97] blk_print_req_error: 138 callbacks suppressed
[  372.188652][   T97] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  372.195176][   T97] buffer_io_error: 138 callbacks suppressed
[  372.195189][   T97] Buffer I/O error on dev nbd1, logical block 3, async page read
[  372.202466][   T97] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  372.206255][   T97] Buffer I/O error on dev nbd1, logical block 2, async page read
[  372.209780][   T97] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  372.213535][   T97] Buffer I/O error on dev nbd1, logical block 1, async page read
[  372.216712][   T97] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  372.220361][   T97] Buffer I/O error on dev nbd1, logical block 0, async page read
[  372.225424][T13682] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  372.231457][T13682] Buffer I/O error on dev nbd1, logical block 0, async page read
[  372.235460][T13682] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  372.239281][T13682] Buffer I/O error on dev nbd1, logical block 1, async page read
[  372.242621][T13682] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  372.246823][T13682] Buffer I/O error on dev nbd1, logical block 2, async page read
[  372.250248][T13682] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  372.254417][T13682] Buffer I/O error on dev nbd1, logical block 3, async page read
[  372.257809][T13682] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  372.261469][T13682] Buffer I/O error on dev nbd1, logical block 0, async page read
[  372.265210][T13682] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  372.268808][T13682] Buffer I/O error on dev nbd1, logical block 1, async page read
[  372.274767][T13682] ldm_validate_partition_table(): Disk read failed.
[  372.278829][T13682] Dev nbd1: unable to read RDB block 0
[  372.282648][T13682]  nbd1: unable to read partition table
[  372.293314][T13682] ldm_validate_partition_table(): Disk read failed.
[  372.297554][T13682] Dev nbd1: unable to read RDB block 0
[  372.301175][T13682]  nbd1: unable to read partition table
[  373.033309][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  373.061870][T18012] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  373.063903][T18025] netlink: 'syz.1.3225': attribute type 1 has an invalid length.
[  373.066156][T18027] xt_limit: Overflow, try lower: 28676/2147483648
[  373.069755][T18028] x_tables: duplicate underflow at hook 2
[  373.148930][T18025] bond47: entered promiscuous mode
[  373.158816][T18025] 8021q: adding VLAN 0 to HW filter on device bond47
[  373.171325][T18033] 8021q: adding VLAN 0 to HW filter on device bond47
[  373.177417][T18033] bond47: (slave wireguard0): The slave device specified does not support setting the MAC address
[  373.181025][T18033] bond47: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  373.209205][T18033] bond47: (slave wireguard0): making interface the new active one
[  373.211953][T18033] wireguard0: entered promiscuous mode
[  373.217162][T18033] bond47: (slave wireguard0): Enslaving as an active interface with an up link
[  373.484754][T18057] tc_dump_action: action bad kind
[  373.487614][T18057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3232'.
[  373.727685][T18078] xt_hashlimit: size too large, truncated to 1048576
[  374.074079][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  374.210081][T18100] IPv6: sit3: Disabled Multicast RS
[  374.241890][T18090] bridge14: entered promiscuous mode
[  374.244908][T18090] bridge14: entered allmulticast mode
[  374.246339][T18095] netlink: 'syz.2.3240': attribute type 3 has an invalid length.
[  374.301724][T18095] netlink: 'syz.2.3240': attribute type 3 has an invalid length.
[  374.314196][T18100] netlink: 'syz.1.3242': attribute type 11 has an invalid length.
[  374.365742][T18090] bridge14: entered promiscuous mode
[  374.367614][T18090] bridge14: entered allmulticast mode
[  374.477923][T18095] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  375.062960][T18139] syzkaller1: entered promiscuous mode
[  375.071374][T18139] syzkaller1: entered allmulticast mode
[  375.124234][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  375.289056][T18150] netlink: 'syz.1.3256': attribute type 10 has an invalid length.
[  375.387334][T18160] xt_hashlimit: size too large, truncated to 1048576
[  375.609494][T18170] tc_dump_action: action bad kind
[  376.000278][T18178] xt_hashlimit: max too large, truncated to 1048576
[  376.041934][T18185] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  376.153752][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  376.312093][T18204] netlink: 'syz.0.3268': attribute type 1 has an invalid length.
[  376.317483][T18204] __nla_validate_parse: 16 callbacks suppressed
[  376.317493][T18204] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3268'.
[  376.398520][T18213] xt_hashlimit: size too large, truncated to 1048576
[  376.418664][T18209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3269'.
[  376.573952][T18219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3273'.
[  376.616786][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3274'.
[  376.679903][T18224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3274'.
[  376.947995][T18228] xt_hashlimit: size too large, truncated to 1048576
[  377.135197][T18235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3277'.
[  377.193321][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  377.286790][T18242] lo speed is unknown, defaulting to 1000
[  377.412515][T18242] lo speed is unknown, defaulting to 1000
[  378.126762][T18261] xt_TCPMSS: Only works on TCP SYN packets
[  378.182355][T18263] netlink: 'syz.2.3285': attribute type 1 has an invalid length.
[  378.224817][T18263] 8021q: adding VLAN 0 to HW filter on device bond28
[  378.229756][T18263] bond27: (slave bond28): making interface the new active one
[  378.233487][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  378.235948][T18263] bond27: (slave bond28): Enslaving as an active interface with an up link
[  378.245300][T18263] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3285'.
[  378.280695][T18267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3286'.
[  378.320194][T18267] veth23: entered allmulticast mode
[  378.330602][T18267] bond29: (slave veth23): Enslaving as an active interface with an up link
[  378.339320][T18267] bond29 (unregistering): (slave veth23): Releasing backup interface
[  378.347351][T18267] bond29 (unregistering): Released all slaves
[  378.431640][T18270] rdma_rxe: rxe_newlink: failed to add lo
[  378.435289][T18270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3287'.
[  378.468059][T18272] netlink: 'syz.2.3288': attribute type 12 has an invalid length.
[  378.485818][T18272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3288'.
[  378.489184][T18272] macsec0: entered promiscuous mode
[  378.493897][T18271] macsec0: left promiscuous mode
[  378.652653][T18282] bond73: (slave bridge14): Enslaving as an active interface with an up link
[  378.738141][T18280] lo speed is unknown, defaulting to 1000
[  378.842194][T18280] lo speed is unknown, defaulting to 1000
[  379.083304][T18288] netlink: 'syz.0.3294': attribute type 1 has an invalid length.
[  379.104514][T18300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  379.126350][T18296] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  379.157447][T18296] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  379.283931][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  379.396608][T18288] 8021q: adding VLAN 0 to HW filter on device bond74
[  379.514238][T18310] bond0: entered promiscuous mode
[  379.518467][T18310] bond0: left promiscuous mode
[  379.537469][T18312] netlink: 'syz.0.3298': attribute type 10 has an invalid length.
[  379.819816][T18326] openvswitch: netlink: Missing key (keys=40, expected=80)
[  379.912868][T18331] syzkaller1: entered promiscuous mode
[  379.917920][T18331] syzkaller1: entered allmulticast mode
[  380.181511][T18350] netlink: 'syz.1.3309': attribute type 12 has an invalid length.
[  380.287999][T18358] netlink: 'syz.0.3313': attribute type 8 has an invalid length.
[  380.295762][T18358] veth1_to_team: entered promiscuous mode
[  380.303173][T18358] gretap0: entered promiscuous mode
[  380.308459][T18358] debugfs: 'hsr1' already exists in 'hsr'
[  380.312986][T18358] Cannot create hsr debugfs directory
[  380.318577][T18358] hsr1: entered promiscuous mode
[  380.323691][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  380.348894][T18362] netlink: 'syz.1.3314': attribute type 10 has an invalid length.
[  380.410801][T18367] veth0: entered promiscuous mode
[  380.422982][T18367] bond0: entered promiscuous mode
[  380.437394][T18369] IPVS: sh: FWM 3 0x00000003 - no destination available
[  380.538460][T18361] bond0: left promiscuous mode
[  380.540678][T18361] veth0: left promiscuous mode
[  380.544188][T18363] lo speed is unknown, defaulting to 1000
[  380.684306][T18363] lo speed is unknown, defaulting to 1000
[  380.964671][T18391] netlink: 'syz.0.3319': attribute type 1 has an invalid length.
[  380.982900][T18391] 8021q: adding VLAN 0 to HW filter on device bond75
[  381.078181][T18401] netlink: 'syz.2.3323': attribute type 1 has an invalid length.
[  381.108643][T18393] syzkaller0: entered promiscuous mode
[  381.114705][T18393] syzkaller0: entered allmulticast mode
[  381.353510][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  381.611117][T18423] __nla_validate_parse: 13 callbacks suppressed
[  381.611179][T18423] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3327'.
[  381.618830][T18420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3328'.
[  381.796152][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3330'.
[  381.805756][T18435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3330'.
[  381.850016][T18435] xt_hashlimit: size too large, truncated to 1048576
[  381.906592][T18438] netlink: 'syz.1.3331': attribute type 3 has an invalid length.
[  381.913622][T18441] netlink: 'syz.0.3332': attribute type 15 has an invalid length.
[  381.928979][T18438] nbd: nbd1 already in use
[  381.934268][T18438] block nbd1: NBD_DISCONNECT
[  381.938475][T18438] block nbd1: Send disconnect failed -32
[  381.945632][T18438] block nbd1: Send disconnect failed -32
[  382.020581][T18446] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  382.139088][T18450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3336'.
[  382.162916][T18450] netlink: 34 bytes leftover after parsing attributes in process `syz.0.3336'.
[  382.179605][T18452] xt_HMARK: spi-set and port-set can't be combined
[  382.196286][T18452] netlink: 'syz.2.3337': attribute type 10 has an invalid length.
[  382.393676][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  382.427863][T18467] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3342'.
[  382.432240][T18469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3343'.
[  382.436075][T18469] openvswitch: netlink: Invalid VLAN frame
[  382.458385][   T33] audit: type=1804 audit(1778605589.936:21): pid=18466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3341" name="/newroot/1045/memory.events" dev="tmpfs" ino=5361 res=1 errno=0
[  382.466482][T18466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3341'.
[  382.474008][   T33] audit: type=1800 audit(1778605589.936:22): pid=18466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3341" name="memory.events" dev="tmpfs" ino=5361 res=0 errno=0
[  382.562991][T18471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3344'.
[  382.588503][T18471] bond29: entered promiscuous mode
[  382.829950][T18475] bond76: entered allmulticast mode
[  382.840887][T18475] 8021q: adding VLAN 0 to HW filter on device bond76
[  383.013909][T18508] syzkaller1: entered promiscuous mode
[  383.015964][T18508] syzkaller1: entered allmulticast mode
[  383.439485][T18525] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  383.444113][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  384.121811][T18537] netlink: 'syz.1.3365': attribute type 12 has an invalid length.
[  384.263723][T18539] macsec0: entered promiscuous mode
[  384.402468][T18536] macsec0: left promiscuous mode
[  384.484066][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  384.719372][T18555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.433966][T18591] netlink: 'syz.1.3381': attribute type 13 has an invalid length.
[  385.437192][T18591] netlink: 'syz.1.3381': attribute type 17 has an invalid length.
[  385.442890][T18591] netlink: 'syz.1.3381': attribute type 27 has an invalid length.
[  385.513448][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  385.590735][T18608] netlink: 'syz.2.3387': attribute type 61 has an invalid length.
[  386.553263][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  386.760749][T18638] bond78: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  386.781306][T18638] bond78 (unregistering): Released all slaves
[  386.944754][T18642] xt_hashlimit: size too large, truncated to 1048576
[  387.354591][T18665] openvswitch: : Dropping previously announced user features
[  387.409195][T18666] __nla_validate_parse: 16 callbacks suppressed
[  387.409205][T18666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3398'.
[  387.409908][T18667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3398'.
[  387.441780][T18667] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3398'.
[  387.455104][T18667] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3398'.
[  387.464618][T18667] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3398'.
[  387.477217][T18667] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3398'.
[  387.480629][T18667] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3398'.
[  387.488621][T18667] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3398'.
[  387.495550][T18667] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3398'.
[  387.506358][T18667] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3398'.
[  387.593781][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  387.771564][T18667] tipc: Resetting bearer <eth:hsr0>
[  387.778832][T18667] tipc: Resetting bearer <eth:hsr0>
[  388.120839][ T8528] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.131460][ T8528] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.144236][ T8528] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.152495][ T8528] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  388.492690][T18704] nft_compat: unsupported protocol 0
[  388.644299][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  389.673425][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  389.936517][T18747] lo speed is unknown, defaulting to 1000
[  390.065622][T18751] netlink: 'syz.2.3416': attribute type 3 has an invalid length.
[  390.127625][T18747] lo speed is unknown, defaulting to 1000
[  390.637566][T18780] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  390.713326][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  390.827047][T18785] bond48: option ad_actor_sys_prio: invalid value (0)
[  390.829819][T18785] bond48: option ad_actor_sys_prio: allowed values 1 - 65535
[  390.844297][T18785] bond48 (unregistering): Released all slaves
[  391.208916][T18797] netlink: 'syz.2.3429': attribute type 10 has an invalid length.
[  391.319028][T18802] netlink: 'syz.2.3430': attribute type 13 has an invalid length.
[  391.322120][T18802] netlink: 'syz.2.3430': attribute type 17 has an invalid length.
[  391.399537][T18802] 8021q: adding VLAN 0 to HW filter on device bond0
[  391.404131][T18802] 8021q: adding VLAN 0 to HW filter on device team0
[  391.444572][T18802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  391.449026][T18802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  391.454662][T18802] tipc: Resetting bearer <eth:hsr0>
[  391.456721][T18802] tipc: Resetting bearer <eth:hsr0>
[  391.458889][T18802] tipc: Resetting bearer <eth:hsr0>
[  391.464148][T18802] veth1_macvtap: left promiscuous mode
[  391.467193][T18802] veth0_macvtap: left promiscuous mode
[  391.471131][T18802] veth0_macvtap: entered promiscuous mode
[  391.489737][T18802] veth1_macvtap: entered promiscuous mode
[  391.530676][T18802] ip6erspan0: left allmulticast mode
[  391.536386][T18802] 8021q: adding VLAN 0 to HW filter on device bond1
[  391.542452][T18802] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  391.585673][ T8528] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  391.599753][ T8528] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  391.609631][ T8528] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  391.621546][ T8528] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  391.753319][T18822] xt_hashlimit: size too large, truncated to 1048576
[  391.753710][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  391.779889][T18827] netlink: 'syz.0.3436': attribute type 1 has an invalid length.
[  392.396622][T18859] xt_hashlimit: size too large, truncated to 1048576
[  392.692471][T18869] __nla_validate_parse: 367 callbacks suppressed
[  392.692483][T18869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3448'.
[  392.732225][T18872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3447'.
[  392.795169][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  392.845161][   T55] block nbd1: Receive control failed (result -1)
[  393.128131][T18881] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  393.132454][T18881] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  393.144282][T18883] sctp: [Deprecated]: syz.1.3449 (pid 18883) Use of int in maxseg socket option.
[  393.144282][T18883] Use struct sctp_assoc_value instead
[  393.833726][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  393.854431][T18910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3458'.
[  393.992132][T18913] xt_hashlimit: size too large, truncated to 1048576
[  394.157761][T18917] netlink: 'syz.2.3460': attribute type 1 has an invalid length.
[  394.179669][T18917] 8021q: adding VLAN 0 to HW filter on device bond30
[  394.191669][T18917] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  394.453231][T18931] netlink: 'syz.0.3465': attribute type 5 has an invalid length.
[  394.465239][T18931] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3465'.
[  394.469712][T18928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3464'.
[  394.476053][T18928] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3464'.
[  394.836503][T18948] netlink: 'syz.0.3470': attribute type 1 has an invalid length.
[  394.883839][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  394.955213][T18954] xt_hashlimit: size too large, truncated to 1048576
[  395.162225][T18959] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3473'.
[  395.210263][T18961] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3474'.
[  395.528437][T18972] bond0: (slave wlan0): Error: Device is in use and cannot be enslaved
[  395.575675][T18975] xt_hashlimit: size too large, truncated to 1048576
[  395.913772][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  396.144792][T19000] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  396.302709][T19006] syzkaller0: entered promiscuous mode
[  396.304901][T19006] syzkaller0: entered allmulticast mode
[  396.740250][T19018] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3491'.
[  396.954180][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  397.941915][T19043] lo speed is unknown, defaulting to 1000
[  397.993518][    C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  398.129146][T19043] lo speed is unknown, defaulting to 1000
[  398.310175][T19066] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  398.399356][T19070] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3504'.
[  398.609673][T19073] netlink: 'syz.0.3503': attribute type 13 has an invalid length.
[  398.623300][T19073] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3503'.
[  398.805141][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3503'.
[  398.817428][T19087] xt_l2tp: v2 sid > 0xffff: 8388608
[  398.912563][T19092] 
[  398.913442][T19092] ======================================================
[  398.915657][T19092] WARNING: possible circular locking dependency detected
[  398.917995][T19092] syzkaller #0 Not tainted
[  398.919624][T19092] ------------------------------------------------------
[  398.921911][T19092] syz.2.3510/19092 is trying to acquire lock:
[  398.923811][T19092] ffff8881a6900530 (&idev->mc_lock){+.+.}-{4:4}, at: ip6_mc_msfilter+0x236/0xf50
[  398.926579][T19092] 
[  398.926579][T19092] but task is already holding lock:
[  398.928834][T19092] ffff888176d0c5e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: do_ipv6_setsockopt+0x851/0x3150
[  398.931691][T19092] 
[  398.931691][T19092] which lock already depends on the new lock.
[  398.931691][T19092] 
[  398.934779][T19092] 
[  398.934779][T19092] the existing dependency chain (in reverse order) is:
[  398.937592][T19092] 
[  398.937592][T19092] -> #8 (k-sk_lock-AF_INET6){+.+.}-{0:0}:
[  398.940041][T19092]        lock_sock_nested+0x41/0x100
[  398.941695][T19092]        do_tcp_setsockopt+0x8fb/0x2060
[  398.943447][T19092]        mptcp_setsockopt+0x1136/0x3520
[  398.945227][T19092]        do_sock_setsockopt+0x17c/0x1b0
[  398.946988][T19092]        __x64_sys_setsockopt+0x13d/0x1b0
[  398.948897][T19092]        do_syscall_64+0x15f/0xf80
[  398.950563][T19092]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.952608][T19092] 
[  398.952608][T19092] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  398.954972][T19092]        lock_sock_nested+0x41/0x100
[  398.956638][T19092]        inet_shutdown+0x6a/0x390
[  398.958253][T19092]        nbd_mark_nsock_dead+0x2e9/0x560
[  398.960172][T19092]        recv_work+0x1c2e/0x1d40
[  398.962004][T19092]        process_scheduled_works+0xb5d/0x1860
[  398.963928][T19092]        worker_thread+0xa53/0xfc0
[  398.965575][T19092]        kthread+0x388/0x470
[  398.966958][T19092]        ret_from_fork+0x514/0xb70
[  398.968473][T19092]        ret_from_fork_asm+0x1a/0x30
[  398.970089][T19092] 
[  398.970089][T19092] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  398.972531][T19092]        __mutex_lock+0x1a3/0x1550
[  398.974186][T19092]        nbd_queue_rq+0x37b/0x1100
[  398.975784][T19092]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  398.977984][T19092]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  398.980065][T19092]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  398.982092][T19092]        blk_mq_run_hw_queue+0x348/0x4f0
[  398.983965][T19092]        blk_mq_dispatch_list+0xd16/0xe10
[  398.985768][T19092]        blk_mq_flush_plug_list+0x48d/0x570
[  398.987655][T19092]        __blk_flush_plug+0x3ed/0x4d0
[  398.989331][T19092]        __submit_bio+0x28d/0x580
[  398.990836][T19092]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  398.992823][T19092]        block_read_full_folio+0x599/0x830
[  398.994896][T19092]        filemap_read_folio+0x137/0x3b0
[  398.996903][T19092]        do_read_cache_folio+0x358/0x590
[  398.998933][T19092]        read_part_sector+0xb6/0x2b0
[  399.000969][T19092]        adfspart_check_ICS+0xb1/0x960
[  399.002776][T19092]        bdev_disk_changed+0x817/0x1770
[  399.004616][T19092]        blkdev_get_whole+0x380/0x510
[  399.006426][T19092]        bdev_open+0x31e/0xd30
[  399.008331][T19092]        blkdev_open+0x470/0x610
[  399.010561][T19092]        do_dentry_open+0x785/0x14e0
[  399.012942][T19092]        vfs_open+0x3b/0x340
[  399.015080][T19092]        path_openat+0x2e08/0x3860
[  399.017214][T19092]        do_file_open+0x23e/0x4a0
[  399.019232][T19092]        do_sys_openat2+0x113/0x200
[  399.021349][T19092]        __x64_sys_openat+0x138/0x170
[  399.023489][T19092]        do_syscall_64+0x15f/0xf80
[  399.025668][T19092]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.028708][T19092] 
[  399.028708][T19092] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  399.032045][T19092]        __mutex_lock+0x1a3/0x1550
[  399.034037][T19092]        nbd_queue_rq+0xc6/0x1100
[  399.035620][T19092]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  399.037503][T19092]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  399.039607][T19092]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  399.041684][T19092]        blk_mq_run_hw_queue+0x348/0x4f0
[  399.043664][T19092]        blk_mq_dispatch_list+0xd16/0xe10
[  399.045648][T19092]        blk_mq_flush_plug_list+0x48d/0x570
[  399.047791][T19092]        __blk_flush_plug+0x3ed/0x4d0
[  399.049468][T19092]        __submit_bio+0x28d/0x580
[  399.051019][T19092]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  399.053033][T19092]        block_read_full_folio+0x599/0x830
[  399.054820][T19092]        filemap_read_folio+0x137/0x3b0
[  399.056605][T19092]        do_read_cache_folio+0x358/0x590
[  399.058493][T19092]        read_part_sector+0xb6/0x2b0
[  399.060343][T19092]        adfspart_check_ICS+0xb1/0x960
[  399.062730][T19092]        bdev_disk_changed+0x817/0x1770
[  399.065357][T19092]        blkdev_get_whole+0x380/0x510
[  399.067655][T19092]        bdev_open+0x31e/0xd30
[  399.069609][T19092]        blkdev_open+0x470/0x610
[  399.071561][T19092]        do_dentry_open+0x785/0x14e0
[  399.073664][T19092]        vfs_open+0x3b/0x340
[  399.075508][T19092]        path_openat+0x2e08/0x3860
[  399.077552][T19092]        do_file_open+0x23e/0x4a0
[  399.079720][T19092]        do_sys_openat2+0x113/0x200
[  399.082386][T19092]        __x64_sys_openat+0x138/0x170
[  399.085184][T19092]        do_syscall_64+0x15f/0xf80
[  399.087384][T19092]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.089736][T19092] 
[  399.089736][T19092] -> #4 (set->srcu){.+.+}-{0:0}:
[  399.092492][T19092]        __synchronize_srcu+0xca/0x300
[  399.094728][T19092]        elevator_switch+0x1e8/0x7a0
[  399.096902][T19092]        elevator_change+0x2cc/0x450
[  399.099238][T19092]        elevator_set_default+0x36c/0x430
[  399.101813][T19092]        blk_register_queue+0x3e9/0x4e0
[  399.104537][T19092]        __add_disk+0x677/0xd50
[  399.106608][T19092]        add_disk_fwnode+0xfb/0x480
[  399.108750][T19092]        nbd_dev_add+0x72c/0xb50
[  399.110703][T19092]        nbd_init+0x168/0x1f0
[  399.112546][T19092]        do_one_initcall+0x250/0x870
[  399.114730][T19092]        do_initcall_level+0x104/0x190
[  399.117256][T19092]        do_initcalls+0x59/0xa0
[  399.119608][T19092]        kernel_init_freeable+0x2a6/0x3e0
[  399.122029][T19092]        kernel_init+0x1d/0x1d0
[  399.123546][T19092]        ret_from_fork+0x514/0xb70
[  399.125066][T19092]        ret_from_fork_asm+0x1a/0x30
[  399.126680][T19092] 
[  399.126680][T19092] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  399.129162][T19092]        __mutex_lock+0x1a3/0x1550
[  399.130952][T19092]        elevator_change+0x1b3/0x450
[  399.132801][T19092]        elevator_set_none+0xb5/0x140
[  399.134534][T19092]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  399.136452][T19092]        nbd_start_device+0x17f/0xb10
[  399.138093][T19092]        nbd_genl_connect+0x165b/0x1cf0
[  399.139771][T19092]        genl_family_rcv_msg_doit+0x22a/0x330
[  399.142067][T19092]        genl_rcv_msg+0x61c/0x7a0
[  399.143815][T19092]        netlink_rcv_skb+0x232/0x4b0
[  399.145590][T19092]        genl_rcv+0x28/0x40
[  399.147012][T19092]        netlink_unicast+0x75c/0x8e0
[  399.148695][T19092]        netlink_sendmsg+0x813/0xb40
[  399.150394][T19092]        ____sys_sendmsg+0x972/0x9f0
[  399.152139][T19092]        ___sys_sendmsg+0x2a5/0x360
[  399.153812][T19092]        __x64_sys_sendmsg+0x1bd/0x2a0
[  399.155602][T19092]        do_syscall_64+0x15f/0xf80
[  399.157356][T19092]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.159508][T19092] 
[  399.159508][T19092] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  399.162618][T19092]        blk_alloc_queue+0x546/0x680
[  399.164521][T19092]        __blk_mq_alloc_disk+0x197/0x390
[  399.166455][T19092]        nbd_dev_add+0x499/0xb50
[  399.168097][T19092]        nbd_init+0x168/0x1f0
[  399.169627][T19092]        do_one_initcall+0x250/0x870
[  399.171259][T19092]        do_initcall_level+0x104/0x190
[  399.172935][T19092]        do_initcalls+0x59/0xa0
[  399.174474][T19092]        kernel_init_freeable+0x2a6/0x3e0
[  399.176357][T19092]        kernel_init+0x1d/0x1d0
[  399.178012][T19092]        ret_from_fork+0x514/0xb70
[  399.179686][T19092]        ret_from_fork_asm+0x1a/0x30
[  399.181377][T19092] 
[  399.181377][T19092] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  399.183642][T19092]        fs_reclaim_acquire+0x71/0x100
[  399.185454][T19092]        __kmalloc_cache_noprof+0x40/0x660
[  399.187497][T19092]        __ipv6_dev_mc_inc+0x44f/0xa50
[  399.189398][T19092]        ipv6_add_dev+0xe34/0x13a0
[  399.191079][T19092]        addrconf_notify+0x771/0x1050
[  399.192784][T19092]        call_netdevice_register_net_notifiers+0x12a/0x560
[  399.195014][T19092]        register_netdevice_notifier+0x10b/0x440
[  399.197058][T19092]        addrconf_init+0xad/0x170
[  399.198777][T19092]        inet6_init+0x228/0x3f0
[  399.200513][T19092]        do_one_initcall+0x250/0x870
[  399.202331][T19092]        do_initcall_level+0x104/0x190
[  399.204099][T19092]        do_initcalls+0x59/0xa0
[  399.205605][T19092]        kernel_init_freeable+0x2a6/0x3e0
[  399.207455][T19092]        kernel_init+0x1d/0x1d0
[  399.209027][T19092]        ret_from_fork+0x514/0xb70
[  399.210637][T19092]        ret_from_fork_asm+0x1a/0x30
[  399.212435][T19092] 
[  399.212435][T19092] -> #0 (&idev->mc_lock){+.+.}-{4:4}:
[  399.215253][T19092]        __lock_acquire+0x15a5/0x2cf0
[  399.217125][T19092]        lock_acquire+0x106/0x350
[  399.218680][T19092]        __mutex_lock+0x1a3/0x1550
[  399.220336][T19092]        ip6_mc_msfilter+0x236/0xf50
[  399.222034][T19092]        ipv6_set_mcast_msfilter+0x25e/0x310
[  399.224044][T19092]        do_ipv6_setsockopt+0x12ee/0x3150
[  399.225953][T19092]        ipv6_setsockopt+0x59/0x170
[  399.227745][T19092]        smc_setsockopt+0x249/0xac0
[  399.229593][T19092]        do_sock_setsockopt+0x17c/0x1b0
[  399.231913][T19092]        __x64_sys_setsockopt+0x13d/0x1b0
[  399.234126][T19092]        do_syscall_64+0x15f/0xf80
[  399.235919][T19092]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.238126][T19092] 
[  399.238126][T19092] other info that might help us debug this:
[  399.238126][T19092] 
[  399.242174][T19092] Chain exists of:
[  399.242174][T19092]   &idev->mc_lock --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6
[  399.242174][T19092] 
[  399.247647][T19092]  Possible unsafe locking scenario:
[  399.247647][T19092] 
[  399.250762][T19092]        CPU0                    CPU1
[  399.253054][T19092]        ----                    ----
[  399.255364][T19092]   lock(k-sk_lock-AF_INET6);
[  399.256999][T19092]                                lock(sk_lock-AF_INET6);
[  399.259193][T19092]                                lock(k-sk_lock-AF_INET6);
[  399.261661][T19092]   lock(&idev->mc_lock);
[  399.263426][T19092] 
[  399.263426][T19092]  *** DEADLOCK ***
[  399.263426][T19092] 
[  399.266548][T19092] 2 locks held by syz.2.3510/19092:
[  399.268370][T19092]  #0: ffff88816f7456a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x18e/0xac0
[  399.272024][T19092]  #1: ffff888176d0c5e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: do_ipv6_setsockopt+0x851/0x3150
[  399.275327][T19092] 
[  399.275327][T19092] stack backtrace:
[  399.277253][T19092] CPU: 1 UID: 0 PID: 19092 Comm: syz.2.3510 Not tainted syzkaller #0 PREEMPT(full) 
[  399.277264][T19092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  399.277269][T19092] Call Trace:
[  399.277275][T19092]  <TASK>
[  399.277280][T19092]  dump_stack_lvl+0xe8/0x150
[  399.277293][T19092]  print_circular_bug+0x2e1/0x300
[  399.277305][T19092]  check_noncircular+0x12e/0x150
[  399.277316][T19092]  __lock_acquire+0x15a5/0x2cf0
[  399.277326][T19092]  ? handle_mm_fault+0x275c/0x3170
[  399.277339][T19092]  ? ip6_mc_msfilter+0x236/0xf50
[  399.277349][T19092]  lock_acquire+0x106/0x350
[  399.277357][T19092]  ? ip6_mc_msfilter+0x236/0xf50
[  399.277369][T19092]  __mutex_lock+0x1a3/0x1550
[  399.277377][T19092]  ? ip6_mc_msfilter+0x236/0xf50
[  399.277386][T19092]  ? ref_tracker_alloc+0x35c/0x4c0
[  399.277398][T19092]  ? ref_tracker_free+0x693/0x840
[  399.277408][T19092]  ? ip6_mc_msfilter+0x236/0xf50
[  399.277416][T19092]  ? __pfx_ref_tracker_free+0x10/0x10
[  399.277426][T19092]  ? __pfx___mutex_lock+0x10/0x10
[  399.277435][T19092]  ? in6_dev_get+0x1a/0x290
[  399.277443][T19092]  ? in6_dev_get+0x1a/0x290
[  399.277452][T19092]  ip6_mc_msfilter+0x236/0xf50
[  399.277462][T19092]  ? rep_movs_alternative+0x75/0x90
[  399.277472][T19092]  ipv6_set_mcast_msfilter+0x25e/0x310
[  399.277481][T19092]  do_ipv6_setsockopt+0x12ee/0x3150
[  399.277494][T19092]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  399.277506][T19092]  ? __mutex_trylock_common+0x158/0x260
[  399.277517][T19092]  ? __pfx___mutex_trylock_common+0x10/0x10
[  399.277533][T19092]  ? rcu_is_watching+0x15/0xb0
[  399.277545][T19092]  ? trace_contention_end+0x3d/0x140
[  399.277561][T19092]  ? __mutex_lock+0x319/0x1550
[  399.277571][T19092]  ? futex_wake+0x4ac/0x580
[  399.277586][T19092]  ? __lock_acquire+0x6b5/0x2cf0
[  399.277594][T19092]  ? smc_setsockopt+0x18e/0xac0
[  399.277605][T19092]  ? __pfx___mutex_lock+0x10/0x10
[  399.277614][T19092]  ipv6_setsockopt+0x59/0x170
[  399.277620][T19092]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  399.277630][T19092]  smc_setsockopt+0x249/0xac0
[  399.277642][T19092]  ? __pfx_smc_setsockopt+0x10/0x10
[  399.277652][T19092]  ? aa_sock_opt_perm+0xff/0x1a0
[  399.277662][T19092]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  399.277672][T19092]  ? __pfx_smc_setsockopt+0x10/0x10
[  399.277683][T19092]  do_sock_setsockopt+0x17c/0x1b0
[  399.277694][T19092]  __x64_sys_setsockopt+0x13d/0x1b0
[  399.277705][T19092]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.277712][T19092]  do_syscall_64+0x15f/0xf80
[  399.277719][T19092]  ? trace_irq_disable+0x3b/0x140
[  399.277731][T19092]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.277739][T19092] RIP: 0033:0x7f31a019cdd9
[  399.277748][T19092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  399.277755][T19092] RSP: 002b:00007f31a1119028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  399.277764][T19092] RAX: ffffffffffffffda RBX: 00007f31a0416090 RCX: 00007f31a019cdd9
[  399.277769][T19092] RDX: 0000000000000030 RSI: 0000000000000029 RDI: 0000000000000007
[  399.277774][T19092] RBP: 00007f31a0232d69 R08: 0000000000020000 R09: 0000000000000000
[  399.277789][T19092] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[  399.277795][T19092] R13: 00007f31a0416128 R14: 00007f31a0416090 R15: 00007ffdfc795508
[  399.277804][T19092]  </TASK>
[  399.442438][T19089] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  399.456360][T19093] syzkaller0: entered promiscuous mode
[  399.459006][T19093] syzkaller0: entered allmulticast mode
