last executing test programs:

1.160442939s ago: executing program 2 (id=7003):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x264, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x234, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x110, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xdd13}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1af}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x54, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x21}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x400}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xcc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xa44a}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe147}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xec, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4000086}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x75}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x400}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x80}]}}]}, 0x264}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1.159685602s ago: executing program 2 (id=7004):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r1, 0x1)
socket(0x15, 0x800, 0x200)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0)
unshare(0x400)
socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1)
connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pK    \x00'}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, &(0x7f0000000200)="80ce776581ebc30402c28e1c6a7a8bed0c5b640e402e15dcc751dd3dfa444c42cf51dbb0117c1cca0de85e4da585a535598363e58ffbc842a268bcc4b0890e9100290787024b489008833e912d9bcc0cbd4d3a2f7b399368a0b2acec5f51786ff935a01fe8025007ad2775cdd544dd439abfb70e2cacaedd8561a0f9225fc39f710fabdb62a1c464f9ab9ba5fc864ad750c8642968908212aa15d22bf988cac86094cb8cca4055f1433737117c3a931f", &(0x7f00000002c0)=""/127}, 0x20)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000180)=0x1, 0x4)
unshare(0x22020600)
sendmmsg$inet(r0, &(0x7f0000003d00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="1c7e", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x200080fc)

1.080554045s ago: executing program 2 (id=7005):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0xd8, 0x170, 0xffffffff, 0xd8, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3]}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x20008000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000007d7faeb5be7600bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r4}, 0x38)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@multicast1, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0x6}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r7 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
close(r6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800)
sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'batadv0\x00', &(0x7f0000000000)=@ethtool_cmd={0x23, 0xc, 0x0, 0x9, 0x9, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff, [0x0, 0x2]}})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000180), r9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {}, {0x0, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000)

900.241802ms ago: executing program 2 (id=7006):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="800000000001010400000000000000000a00000008000c40000000012400028014000180080001006401010108000200000000000c000280050001000000000008000740000000003800048034000380080003400000003c050001000300e63b5c445d29b85aaa0000050001007a000000050001004e00000008000340000000060800024000000008"], 0x80}}, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, &(0x7f0000000440))
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x3, [0x8, 0x46e9, 0x6]}, &(0x7f00000000c0)=0xa)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140))
r5 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000400))
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

899.581837ms ago: executing program 2 (id=7007):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000085000500850087af5e6b000002000000070000000a00000f01000000020000007f000000070000000400000005000000040000000400001b86f2cff500030000000b0000000100000009000000070000000400000001000000000000000300080005000000b40b000005000000fcffffff040000000200000006000000000000000300000013000000080000000100000042fa000034"], 0x0, 0xa2, 0x0, 0x1, 0x70c8}, 0x28)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="0000990b14000300070000000000000200000000fd8cf900140001000002"], 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0xd0)
sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3800200018dbdf2580201005ff020000002b000006001c004e240000080005000a0100ff0c00168008000400be000000923028abc66c8a08030000004672d5b37ae3e589981dc0fc557e77dacd48a7663a13fe1828a90000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20008816) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000740)={r3, 0x1, 0x6, @local}, 0x10)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000087b8ae8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000008e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xe}, 0x94)
sendmsg$rds(r4, &(0x7f00000020c0)={&(0x7f0000000640)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001e40)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x6e3a}, &(0x7f00000001c0)=0xf, &(0x7f0000000600)=0x9, 0x1, 0x2, 0x6a, 0x1, 0x5, 0x7f}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xf}], 0x70, 0x20008011}, 0x0) (async)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xdd}}], 0x38}, 0x0) (async)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @multicast}, 0x10) (async, rerun: 32)
r7 = socket(0x2a, 0x2, 0x0) (rerun: 32)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r9=>0x0}) (async, rerun: 32)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001e0000000c000180080001009338369d4d36befd1342a63cc6a80c79ccb9cdb2e6002bf7f3776602382a587a34cb6603c7bf8b9d751147a4e6f4c6405c643eb3c841a089732f905383340255206d4c6b0a281307eff77ca092bbdeeb18372040c11aa8092d04facf24c995", @ANYRES32=r9, @ANYBLOB], 0x20}}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r7, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="07e85000", @ANYRES16=r11, @ANYBLOB="08012dbd7000fddbdf250700000020000180140002006d61637365633000000000000000000008000300010000000c000180080003000000000014000180080003000100000008000100", @ANYRES32=r3, @ANYBLOB="14000180080003000200000008000100", @ANYRES32=r3, @ANYBLOB="4c000180080003000000000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="1400020074756e6c3000000000000000000000000800030000000000140002006e6574706369300000000000000000003000018008000100", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="140002006970365f76746930000000000000000008000100", @ANYRES32=r3, @ANYBLOB="0c0001800800030002000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4014}, 0x8001) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)
unshare(0x22020600) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000240)) (async)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10)
r12 = socket(0x7, 0x80000, 0x2) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000000)={0x4000, 0x4, 0x200, 0x3, 0x8, 0x0, 0x10000000, 0x4, <r13=>0x0}, &(0x7f0000000040)=0x20)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f00000000c0)={r13, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10)

759.923234ms ago: executing program 2 (id=7008):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r3, 0x0, r5, 0x0, 0x6, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28)
r7 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000100100000100"], 0x18}, 0x0)
close(r4)
write(r2, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r5, 0x0)
r8 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_INITSTATE(r8, 0x113, 0x4, 0x0, &(0x7f0000000040))
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCAUSEDIAG(r10, 0x89ec, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000010c00078008001240000000090500010006000000050005000200000905000400020000000900020073797a310000000015000300686173683a69702c706f72742c6e657400000000d6f541a8bac8d0280615f350da18b672b6a676d8bfc7bb95bfdc8ad3dd1d8d8b4502c8926fc327c7bd00304437a7bab2e1f67773896b04c306ce95ee9467cd62e2000e43a8ecc90fd41bb782440345df060bb732f36a0885a93c974ea9dbc27b65f19a7e6e8743cd0661e3f4afc52e3d21efde0a9c7ca8c41e258564601504fa662f133a682c953076da5c27b3c6f9c70350cad64bfeee"], 0x5c}, 0x1, 0x0, 0x0, 0x15}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000180), 0x4)

569.515767ms ago: executing program 0 (id=7014):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast=0xffff0011}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={<r3=>r0, 0x2, 0x3dc0000000000, 0xf4b7})
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f00000d8e80)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x10, "b95de7a49e1c5a"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f00000d9e80)={{0x0, 0x4, 0x2, 0x6, 0x8, 0x0, 0x4, 0x2, 0x7, 0x5, 0x4, 0x8, 0x40000000000, 0x7fffffff, 0x4}, 0x10, [0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f00000d9f00)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x4, "fbc3b5c638108b"}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f00000d9f00)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}], 0x4, "fbc3b5c638108b"})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x4f0, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c4, 0x2, [@TCA_BPF_FD={0x8, 0x6, r6}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffe2, 0x8}}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0xfff, 0xc, 0xe9, 0x4}, {0x3ff, 0x1, 0x7, 0xc}, {0x0, 0x4, 0x40}, {0x3ff, 0xb, 0x1}, {0x0, 0xe4, 0x9, 0x1}, {0x5, 0x81, 0x9, 0xf}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x2a24, 0x48, 0x8, 0x4}, {0x0, 0x5, 0x5, 0x28}, {0xfff7, 0xd, 0x0, 0x8}, {0x4, 0xfd, 0x2, 0x1}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xf}}, @TCA_BPF_FD={0x8, 0x6, r3}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x430, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x8, 0xc, 0x400, 0xfffffffc, 0x0, 0x7ff, 0xd1, 0x6, 0x0, 0x1, 0xffffff81, 0xb0000, 0x4, 0xa4, 0x9, 0x2, 0x10, 0x5, 0xe, 0x1, 0x2, 0x9, 0xb8, 0x4, 0x6, 0x3, 0x6, 0x7, 0x581, 0x28c4, 0x1ff, 0xfffffff4, 0x5, 0xf, 0x2, 0x1000, 0x2, 0x482, 0xe, 0x7fff, 0x8000000, 0x5, 0x1, 0x819, 0x702a, 0x3, 0x3, 0x2, 0x5, 0x6, 0x800, 0x2, 0x101, 0x4, 0x9, 0x1, 0x5, 0x8, 0x1, 0x9, 0x9, 0x10001, 0x6, 0x0, 0xb, 0x80, 0x2, 0x5, 0x1, 0x6, 0xab, 0x7, 0x154, 0x72, 0x7, 0x2, 0x94, 0x428, 0x10001, 0x2, 0xffff88a7, 0x9, 0x0, 0x100, 0x1, 0x40, 0x9, 0x0, 0xeea1dc72, 0x7, 0x0, 0x4, 0x2, 0x3ff, 0x0, 0x1ff, 0xffffffff, 0xb8a, 0x9, 0x0, 0x5, 0xfffffff6, 0x1000, 0x5, 0x7, 0x1, 0x1, 0x7fffffff, 0x2, 0x8000, 0x620, 0x1, 0x9, 0x10000000, 0x8b, 0x6, 0x401, 0x9, 0x4, 0x1, 0x180000, 0x5, 0x1, 0xfff, 0x7, 0x7, 0x0, 0x6, 0x51665cef, 0x4, 0x7, 0x2, 0x80, 0x8, 0x6, 0x101, 0xa, 0x5, 0x0, 0x8, 0x5, 0x3, 0x1, 0x80000001, 0x5, 0xfffffff8, 0x7, 0xf026, 0x33ba, 0xc311, 0x2, 0x800, 0x3, 0x9, 0x4, 0x3ff, 0x1cf5d408, 0x7fffffff, 0x5, 0xf, 0x7ff, 0x7e61, 0xa4f, 0x2, 0x7ae, 0x3, 0xe, 0x10000, 0x3, 0x4, 0x6, 0x0, 0x1, 0x7, 0x6, 0x4, 0x0, 0x2, 0x10000, 0xffffff61, 0x5, 0x4, 0x3, 0x3b87c8d5, 0x3442, 0xfb, 0x5, 0xf, 0x65c5d09b, 0x5, 0x6, 0x6, 0x81, 0xa, 0x3, 0x8, 0x1, 0x3, 0x77f, 0x8, 0x6, 0xe, 0x0, 0x2, 0x1, 0x885b, 0x6, 0xffffff71, 0x0, 0x7ff, 0xffff, 0x3, 0x2, 0x7, 0xffffffff, 0x0, 0xa20, 0x101, 0xdf, 0x1, 0x15d, 0x12b5, 0x4, 0x0, 0xcb8, 0x1, 0x80000000, 0x3, 0x5, 0x5f18, 0x400, 0x5, 0x5, 0x203, 0x4, 0x7, 0x9, 0x8, 0x7ff, 0x6, 0x58, 0x0, 0x6, 0x7f, 0x8a4, 0xd, 0x4, 0xff, 0x551a, 0xbed9, 0x8, 0x4, 0x1000, 0x5, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x96}]}]}}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x4f0, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c4, 0x2, [@TCA_BPF_FD={0x8, 0x6, r6}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffe2, 0x8}}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0xfff, 0xc, 0xe9, 0x4}, {0x3ff, 0x1, 0x7, 0xc}, {0x0, 0x4, 0x40}, {0x3ff, 0xb, 0x1}, {0x0, 0xe4, 0x9, 0x1}, {0x5, 0x81, 0x9, 0xf}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x2a24, 0x48, 0x8, 0x4}, {0x0, 0x5, 0x5, 0x28}, {0xfff7, 0xd, 0x0, 0x8}, {0x4, 0xfd, 0x2, 0x1}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xf}}, @TCA_BPF_FD={0x8, 0x6, r3}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x430, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x8, 0xc, 0x400, 0xfffffffc, 0x0, 0x7ff, 0xd1, 0x6, 0x0, 0x1, 0xffffff81, 0xb0000, 0x4, 0xa4, 0x9, 0x2, 0x10, 0x5, 0xe, 0x1, 0x2, 0x9, 0xb8, 0x4, 0x6, 0x3, 0x6, 0x7, 0x581, 0x28c4, 0x1ff, 0xfffffff4, 0x5, 0xf, 0x2, 0x1000, 0x2, 0x482, 0xe, 0x7fff, 0x8000000, 0x5, 0x1, 0x819, 0x702a, 0x3, 0x3, 0x2, 0x5, 0x6, 0x800, 0x2, 0x101, 0x4, 0x9, 0x1, 0x5, 0x8, 0x1, 0x9, 0x9, 0x10001, 0x6, 0x0, 0xb, 0x80, 0x2, 0x5, 0x1, 0x6, 0xab, 0x7, 0x154, 0x72, 0x7, 0x2, 0x94, 0x428, 0x10001, 0x2, 0xffff88a7, 0x9, 0x0, 0x100, 0x1, 0x40, 0x9, 0x0, 0xeea1dc72, 0x7, 0x0, 0x4, 0x2, 0x3ff, 0x0, 0x1ff, 0xffffffff, 0xb8a, 0x9, 0x0, 0x5, 0xfffffff6, 0x1000, 0x5, 0x7, 0x1, 0x1, 0x7fffffff, 0x2, 0x8000, 0x620, 0x1, 0x9, 0x10000000, 0x8b, 0x6, 0x401, 0x9, 0x4, 0x1, 0x180000, 0x5, 0x1, 0xfff, 0x7, 0x7, 0x0, 0x6, 0x51665cef, 0x4, 0x7, 0x2, 0x80, 0x8, 0x6, 0x101, 0xa, 0x5, 0x0, 0x8, 0x5, 0x3, 0x1, 0x80000001, 0x5, 0xfffffff8, 0x7, 0xf026, 0x33ba, 0xc311, 0x2, 0x800, 0x3, 0x9, 0x4, 0x3ff, 0x1cf5d408, 0x7fffffff, 0x5, 0xf, 0x7ff, 0x7e61, 0xa4f, 0x2, 0x7ae, 0x3, 0xe, 0x10000, 0x3, 0x4, 0x6, 0x0, 0x1, 0x7, 0x6, 0x4, 0x0, 0x2, 0x10000, 0xffffff61, 0x5, 0x4, 0x3, 0x3b87c8d5, 0x3442, 0xfb, 0x5, 0xf, 0x65c5d09b, 0x5, 0x6, 0x6, 0x81, 0xa, 0x3, 0x8, 0x1, 0x3, 0x77f, 0x8, 0x6, 0xe, 0x0, 0x2, 0x1, 0x885b, 0x6, 0xffffff71, 0x0, 0x7ff, 0xffff, 0x3, 0x2, 0x7, 0xffffffff, 0x0, 0xa20, 0x101, 0xdf, 0x1, 0x15d, 0x12b5, 0x4, 0x0, 0xcb8, 0x1, 0x80000000, 0x3, 0x5, 0x5f18, 0x400, 0x5, 0x5, 0x203, 0x4, 0x7, 0x9, 0x8, 0x7ff, 0x6, 0x58, 0x0, 0x6, 0x7f, 0x8a4, 0xd, 0x4, 0xff, 0x551a, 0xbed9, 0x8, 0x4, 0x1000, 0x5, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x96}]}]}}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmmsg$unix(r11, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14001d00000000787a000011ec6c8000", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x8010}}], 0x1, 0x4000)
read(r10, &(0x7f0000000000)=""/86, 0x56) (async)
read(r10, &(0x7f0000000000)=""/86, 0x56)
syz_emit_ethernet(0x40, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0xa, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, @local, {[@dstopts={0x2c}], '\a\x00'}}}}}, 0x0)
r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r12, 0x891a, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)

490.142066ms ago: executing program 1 (id=7017):
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async)
r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a8008"], 0x44}}, 0x2000800)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="0000000065b5af59b64545356753d38908b4", 0xfffffdc5)
r5 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}, 0x0)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r5, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/82, 0x52}, {&(0x7f0000000780)=""/51, 0x33}], 0x2}, 0x3}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000001f00000091117800000000009500000000000000914bbbd58ca521"], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000200)={0x5, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}]}) (async)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000200)={0x5, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}]})

389.296752ms ago: executing program 0 (id=7018):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000130001002dbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="200000000002000087752ee33b390357aa7d08002e0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x24040040}, 0x900) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000500)) (async)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x29, 0x5, 0x0) (async)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYBLOB="0400"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) (async)
write$nci(r2, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x1b) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000400000711247000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000340)={<r7=>0x0, 0x7}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={r7, @in6={{0xa, 0x4e20, 0x4, @private0, 0x1000}}, 0x1d, 0x1ff, 0x200, 0x4, 0x5, 0x47, 0x4}, &(0x7f0000000640)=0x9c)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, 0x0, 0x0) (async)
socket$unix(0x1, 0x5, 0x0) (async)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r9, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x5, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async)
close(0x4) (async)
sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=ANY=[@ANYBLOB="6800000010001fff00000000ffdbdf2500000000", @ANYBLOB="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", @ANYBLOB="0000000088520300400012800b00010069709aa26e6c00003014000300fe8000000100000000000000000000aa08000100", @ANYRES16=0x0, @ANYBLOB="08000106961004ec00", @ANYRES32=0x0, @ANYBLOB="050009002900000008001f0004000000"], 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) (async)
recvfrom(r5, &(0x7f00000003c0)=""/109, 0x6d, 0x40000000, &(0x7f0000000440)=@in6={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x80)

385.952332ms ago: executing program 1 (id=7019):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='team0\x00'})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000800)
r2 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x204b, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000206050000000000000000000000fffd0e0003006269746d61703a697000000005000400000000000900020073797a310000000020000780050003001f0000000c00018008000140ffffffff0800060000006d2305000500020000000500010006"], 0x68}}, 0x0)
syz_emit_ethernet(0xd2, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f84ec0", 0x9c, 0x2f, 0x0, @ipv4, @local, {[@srh={0x3a, 0xa, 0x4, 0x5, 0x0, 0x0, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0x27}, @remote, @private2, @remote]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x4}, {}, {}, {0x8, 0x88be, 0x4}}}}}}}, 0x0) (async)
syz_emit_ethernet(0xd2, &(0x7f00000002c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f84ec0", 0x9c, 0x2f, 0x0, @ipv4, @local, {[@srh={0x3a, 0xa, 0x4, 0x5, 0x0, 0x0, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0x27}, @remote, @private2, @remote]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x4}, {}, {}, {0x8, 0x88be, 0x4}}}}}}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r5=>0x0})
ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@gettfilter={0x4c, 0x2e, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3}, {0x1, 0x4}, {0x3, 0x10}}, [{0x8, 0xb, 0xa4db}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000044}, 0x40)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='y', 0x1}], 0x1) (async)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)='y', 0x1}], 0x1)

299.953904ms ago: executing program 0 (id=7020):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x50}, 0x28)
sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r1, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c1}, 0x44080)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x0)

160.221915ms ago: executing program 0 (id=7021):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000))
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x2, 0x31ba, 0xffff, 0x7ff, 0x318, 0x2000000000}, {0xfff, 0x800, 0x100000001, 0x3247e4f6, 0x2, 0x9}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
sendfile(r0, r1, &(0x7f0000000280)=0x7, 0x19)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000003c0)={<r2=>r1, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x0, &(0x7f0000000300)={@_ha_fsid={[0x401, 0x8be7]}, {0x1, 0x2, 0x9, 0xfffffffffffffff8}}, 0x80000000, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x10000})
getpeername$l2tp6(r2, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000440)=0x20) (async)
bind$x25(r2, &(0x7f0000000480), 0x12) (async, rerun: 32)
recvmsg(r0, &(0x7f0000000640)={&(0x7f00000004c0)=@nfc, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/142, 0x8e}, 0x0) (rerun: 32)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r2)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000700)={'ip_vti0\x00', <r4=>0x0, 0x40, 0x20, 0x80000001, 0x5, {{0x2c, 0x4, 0x2, 0x5, 0xb0, 0x65, 0x0, 0x3, 0x2f, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1b}, {[@timestamp_prespec={0x44, 0x34, 0xf2, 0x3, 0x3, [{@empty, 0x7}, {@empty, 0x81000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}, {@private=0xa010102, 0x9}, {@remote, 0x1}, {@multicast1, 0x10001}]}, @timestamp_prespec={0x44, 0x34, 0xb7, 0x3, 0x8, [{@local, 0x7a}, {@empty, 0x9}, {@remote, 0x1000}, {@multicast2, 0x1}, {@multicast1, 0x185}, {@remote, 0x7f}]}, @ssrr={0x89, 0x1b, 0x6b, [@local, @local, @empty, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x34}]}, @timestamp_prespec={0x44, 0x14, 0xf5, 0x3, 0x1, [{@private=0xa010100, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @generic={0x7, 0x2}]}}}}})
getpeername$packet(r2, &(0x7f0000000840)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r2, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0], 0x0, 0xee, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000cc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xc0, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xbedf}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x979a}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xa45}, @ETHTOOL_A_RINGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7f}]}, 0xc0}, 0x1, 0x0, 0x0, 0x400c0c7}, 0x4573ed412ae9fcbf) (async, rerun: 64)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000fc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d40)={0x218, r3, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x9c, 0x4, "dfecf5793b0f74f201d36801f1c92d8147df9709d65c7be13eb4fb6e0ddb93cb771aff5823086324989aae18ef657258bf92f17612b85607ec5856aa74fd4f29420afe0224632266fd083a9ce1101b16b924371321a2427c2f87bdc14c7e17d928873f834272a2edf2da2513b9605da1e302a0e1538707893f9299f70eebb6c137cd705cf4a2beaeb5c1f6c4ea62b8e5c66d0679793fe4b5"}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/vhost-vsock\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xc9, 0x5, "667d9ea1b68d2d832811aa346e6423800c4b528e36fc2e1ef9c2f3684fecfbc9580358faf3a57b2cc4a253c4786e46ddca6c5c387a674d939748ee6100bf652b145b771cc3eecbe8e0fdc4756f34df540a8eaaefca2257c7464418ed60478cd0a9966034df0ea861fd039cfccfcd67b3fb9a900f254e41d5579ce846bc5d4853277661347ae7851fd9f71e77e919624ef85f369049b3eddd7b4c0a4296352be0f348b7c7a471f8365d0303e0f02e87708fcfeec2fd23352497e14ce9311e75738729f16798"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x20000010}, 0x200040c4)
socket$tipc(0x1e, 0x7, 0x0) (async)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0x84, r8, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x34}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x405}, 0x42816) (async)
syz_emit_ethernet(0xf4, &(0x7f00000011c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @multicast, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@x25={0x805, {0x1, 0x9, 0xf3, "29b78a2a56e4b61ddfba158c4ce4d79fe70d7da0ef4d94f9d2843026311840e78115517e7c414393e2d409c1553e7a6df5e6fbc948776eaa73f925ef1b7a7b6bf77783a191ed7a331cc8f6a753667a45df99fefd35f7965b1f3deb362a186a35f89f4be9e46332e732dbd4164676cb1784a3a7aeba6a6be036669cbebe297924a758619c6d29eafb421002f1173663e773fae0da10f45ed9d430e239a3269b1f200ff27d28def8b9f7ebeddeb71918361cda5094273c5c52b6c8257a9eb7327a901e3cdd6f43053a9ed0a2ccf4ca7df110d8e4c7886bb73139574421ba84da"}}}}, &(0x7f00000012c0)={0x0, 0x4, [0xd9c, 0xf64, 0x9f9, 0x67b]}) (async)
getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000001300), &(0x7f0000001380)=0x68)
ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000001680)={&(0x7f0000001640)=[{&(0x7f00000013c0)="08f5014600afbebb81092affbce36520d0c9b5d29fc17155c5c3c96b9af0cf18d61401f834df26234a6b7682dfc04f740154acd135520524808495ac2822eff72cbf0c498948fc936a84ddb804f866b98e5a71be6dd2bf5a7a1119ec98dfa44bcdcde87641fb56b7ceb2e5b23284385411e5f939f8a547f773a79e2c902b06f0152d2f7047b22c0f6cf72372468161ba136e68dbcf2234bdfb6b76f3210dd35259324f658decb60f2b833f59df4793b2b87a09fdea64c9ff2e43c7fdfb10ac725ca215a166eead8ed57ad52ea56a385b18d8c6559c0b27bb916c9b0731d3bb6cbf", 0xe1}, {&(0x7f00000014c0)="deeedb9416d1869c708216aa52d69dc90db41c361340b64920b5fdf9263640663021250ef94e07f53b495efc0c63f8cf03a0cc2c299f1f125b380bc0dc6a5bd5358170ef11cf7be12f271aa2682ef32bb0be0a7d080188553cf44c9b", 0x5c}, {&(0x7f0000001540)="93deb2f2f572157e68315849210f6da68d5edac779d5ad18c08c0dbabbf709c766a5699c07d2e8bb8ce6bdcec0c54838dfedc49ce8a549e5017a292b8bbb8b2bd9d2f7a27cee0a03be6a7c6230098062280f939c11729fde554d1a98a730df86ec7e77d1ee27674cac5abecc927cd257f7beef892438167e8269e139abe91b617df8ca3ed9f38d1d9b2edd4a4f99f8c235b0596cd56dce34cd1a9248ef74300ee22fed9f4ef8edbf51d0574d5a23f278147b1bcc4bd71c0b256c134e0a74cfc8ada1f17ba5a1cb72f0a064d6b77e015e9ec95c4bf12fd23bbe577091b86e2b216705e0d9eaf159daff9fa0947e76172fa3651e73", 0xf4}], 0x3, 0xf8, 0x0, 0x7, 0x0, 0x7, 0x3, 0xfff})
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001740), r2)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x4c, r9, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x72}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc081}, 0x4000) (async, rerun: 64)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000001880)={0x43, 0x0, 0x1}, 0x10) (async, rerun: 64)
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001900), r2)
sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x1c, r10, 0x4, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20006844}, 0x400) (async, rerun: 64)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x48, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7c4d}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd}]}, 0x48}}, 0x4000041) (rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=@bloom_filter={0x1e, 0x80, 0xff, 0x1, 0x8e0e, r2, 0x0, '\x00', 0x0, r2, 0x1, 0x1, 0x0, 0x2, @value=r2}, 0x50) (async, rerun: 32)
ioctl$PPPIOCGIDLE64(r2, 0x8010743f, &(0x7f0000001bc0)) (rerun: 32)

159.706292ms ago: executing program 1 (id=7022):
r0 = getpid()
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0], 0x9)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r4, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x154}}, 0x404c004)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x2}, 0x6)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)
recvmsg$unix(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/11, 0xb}], 0x1, &(0x7f0000000640)=[@rights={{0x10}}], 0x10}, 0x120)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r12, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x32, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e09db1ac8225b997fc21693c0942f0686928c388bc6f631"}})
r13 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r13, &(0x7f0000000080)={0x0, 0x55, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010027bd7000fbdbdf25250000000e00010064657673696d0000000f0002006e657464657673696930000008008b00", @ANYRES32=r0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)

63.867758ms ago: executing program 0 (id=7023):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x3, {0x2, 0x0, 0x6}, 0x2}, 0x18)
sendto(r0, 0x0, 0x0, 0x4, &(0x7f0000000440)=@isdn={0x22, 0x81, 0x1, 0x1, 0x8}, 0x80)
r2 = socket(0x1, 0x803, 0x0)
r3 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r3, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0xc8, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000015}, 0x80)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$OCFS2_IOC_GROUP_EXTEND(r3, 0x40046f01, &(0x7f0000000240)=0x7)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0x280, 0x280, 0xfeffffff, 0x280, 0x98, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@ah={{0x30}, {[0x4, 0x6]}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450)
sendmmsg$inet6(r2, &(0x7f0000002340)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x3be5, @mcast2, 0x39925867}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)="6613a01aa09d75c531b1c084fc26d60014ee2fbeb695e6d2aa13d0de8a7192ce", 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)="10f0af2559d8440085616d6c96c375546dabd6cfa9b0d7f5e2452d585a687d88d48173e8cb052de94ea5df6bc0a41773469b7192abf57de1ce793f45d5a6578eaa7e2cf65752dedf3d5fb03e4c39e5bbbea5cfb52a0f7ec21e6195a19e54f3cb1033c168168ab28b7886c3a7f4ea5a370e0a0464", 0x66}, {&(0x7f0000000180)="b9e0d94e36f8e7cf89cb5ef77d4d3e0e9c9d8a4afb59356209060f6e819f4f213fc04ef5d28faede4fa2890f82efafe447a648509582cae49718c68cfe841a45f5685784811b52f7e151ea1127213260a87148ab4d", 0x55}, {&(0x7f0000000240)}, {&(0x7f0000000280)="4f751e49d1db4bf7f59ae9f03c9ece7054a2a0aea8c25f847932d62f45796ac7", 0x20}, {&(0x7f00000002c0)="69571e5d61a4fb0dee88299c69a652aaf62108386b8fdfd0f98282ea95b95ef96948b7a5c555e8e79b66e88ee2376518a497ef358235a590c5c10a8ae8749b3a372d6ba88e0e177d62a64b02c38602b43c1326367619d2f66b43cf1394cff6c01b6302ff361891670d4f7a54f603b7f09a017d2784312522499f53394fac78a58d23fffe987acd597163a0f1465d", 0x8e}, {&(0x7f0000000380)="516e0bc95ed447c2b92837286fd5260d23bb01afee26bdac1655cc814955ff192fef99e418ee350330e7508ccfc653f3b09ac5d24c459a3c79de409c7014c8785d7f8fca64cc77063e913cdca4f4b953e565f5a6068545fbf17cdee8a1ee72a12c0ae86e9cdae642609b80732739172740c3041b280318a4c563d50a462b83ce813250854ab53c8d4bb00605", 0x8c}, {&(0x7f0000000440)="129d2601f0f54b43ed9d696cc097355cc5ee24eb96f198286968baa829e30c931604b856482350452e3b873c3ca9f998600d2e7f97bdcccd134978f61593658d26cfe1c9d618b00173e053c0c3ba", 0x4e}, {&(0x7f0000000940)="1ce9646ca2", 0x5}], 0x8, &(0x7f0000000a00)=[@dstopts={{0xf0, 0x29, 0x37, {0x3b, 0x1a, '\x00', [@enc_lim={0x4, 0x1, 0xee}, @generic={0x7, 0x78, "7dd37772a5dd043b7271e4aa3b63d8080cda6d1fe74b0e347b9e5064a7631fc72805ed601bb1ee3a60a267d5fa9b3673657ddb4e502f86b64228cf411a12f4e650057f282189794030f47387e9440163dc1d313d58dd015db347900af0345af233c8f083ef3fa25fbaa705f78c4d6a403e93e0ec59de412b"}, @pad1, @calipso={0x7, 0x20, {0x0, 0x6, 0x9, 0x1, [0x9, 0x8, 0x7]}}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x28, {0x0, 0x8, 0x92, 0x0, [0x400, 0x2de, 0x3, 0xb]}}, @ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x4}]}}}, @dstopts={{0xe8, 0x29, 0x37, {0x3b, 0x19, '\x00', [@generic={0xff, 0xcb, "bb553ce5e19c683e5bae2f084d59b5e9aa84f6cbe97922b39317bdc1afb9558a4abac5f19e5d91de5100b7c466f8f96d514faa5c5d494872afab3f2000b3f5829e18bde66dc2668d451f00a496001d05a0bf6e64f97759e0e38c08ec9633425548af1dbbcbfe53270d66fb02d28255a8ffe27c0891c78a9a7374057dc19b57d3b2949465ce465b5def2d8c3d06b7b2481f6d6fc7325f0a81005683f132dd655f0bd1fcd178d5a269596d837ad171cc762fbaace28ff556490a999735b9579a4ae747db7c799b76d143a347"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @dstopts={{0x30, 0x29, 0x37, {0xff, 0x2, '\x00', [@hao={0xc9, 0x10, @private0}, @ra={0x5, 0x2, 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1000}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @dstopts_2292={{0x170, 0x29, 0x4, {0xc, 0x2a, '\x00', [@generic={0xff, 0xff, "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"}, @enc_lim={0x4, 0x1, 0x7c}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0x0, [0x381f, 0x5, 0x44, 0x2, 0x0]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x3d8}}, {{&(0x7f0000000e00)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8}, 0x1c, &(0x7f0000002100)=[{&(0x7f0000000e40)="7250653f82a2e21d4e2330985ca36f4cfca849673340a2c02426aec32d50f69c0ba07871fbbba761b0b6501d6032f42eb49bfe3beeb4ad0be75d504774e2017eab922e3494873800e374a51a8bec55d5cc8e85320abf8fda4dd2e5756176202f71f5c0d7566ee2378e56ff0028f11c078d8e7f1e4f1b5407835316054b5ed4c09d0b1cd8ee817bb2e658e3fe6bc335c48316ea55319632343fe055b7e1be27ea58b1988fc456bfb26803346013ff89907b1b6fea74ba774f9b62cd7af8e86b569cb45789a238e41d849a4676ab", 0xcd}, {&(0x7f0000000f40)="1cdf67fe0f3d78bcbcba0fbb6d841a48d7a2c9698ed8e4a4650f44a198c3e48496f3a0c8b11e60ab385bb019210fb9c2e2bb59bd468af1221743bc1ae4411e15b8315e1c907b77121691c7286ea491d1d87e57c8e1b57c4b17c4782db7e0c564b68d099d665074b46d3a0090b9ed09dbc6bbdfdf", 0x74}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)="4525d7e0e1c2cec189218003b96dd8fd7656143c4a3251d42be2e0d461d8e14d5a9f10e47ff26ca34b22be23d6bde2021e52c609e68e84e35d0bc09a1ee713952bf30b82048fc600daa28b10d5", 0x4d}, {&(0x7f0000002040)="c66b3cad89ef1de41e0600b287d9f55797f73de7879608182efc5458d15d09351043803cfd23216b0538b94c2af613e03fbfe0d32653188c1ad26c71ed2e76219713ed46ca071cec6d036783a81ec2af2163a763e779ba4f96d25adce537f261468198a9afdb988d55c7a561f3c521d98ecaa92bda90c28500000000", 0x7c}], 0x5, &(0x7f0000002180)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x2f, 0x7, '\x00', [@ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x6}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @remote}, @enc_lim, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x40}, @ra={0x5, 0x2, 0x6085}, @ra={0x5, 0x2, 0x6}]}}}, @hopopts={{0x38, 0x29, 0x36, {0x1, 0x3, '\x00', [@pad1, @pad1, @enc_lim={0x4, 0x1, 0xa8}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0xcae}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8001}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @hopopts_2292={{0xe0, 0x29, 0x36, {0x87, 0x18, '\x00', [@jumbo={0xc2, 0x4, 0x100}, @generic={0x0, 0x65, "a004594c1f06b9326ce08651d88eaee52ce346a104628170d02c2db0f5fc030cffa0889f9904524e2249742b3bdff33e750151b1eb515b896d6ec527b5c036f129997773608daeab072124f9b7e887d65b2cc0a7e8e32ca0ddcd53bdfb21a52c9fe7139cab"}, @enc_lim, @pad1, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x28, {0x1, 0x8, 0x81, 0xfff9, [0x5, 0x4, 0x22, 0x8]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}], 0x1b8}}], 0x3, 0x4090)

63.430717ms ago: executing program 1 (id=7024):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="30000000400007012bbd700000000000047c0000100042800c00070006002000004000000c0001800600060080"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10, 0x61}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}]]}, 0x3c}}, 0x0)
sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1978, 0x9}}}}, [""]}, 0x20}}, 0x20000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r4)
sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)={0x14, r5, 0x70d, 0x70bd26, 0x2ddfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8000)

62.659163ms ago: executing program 1 (id=7025):
r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x4, 0x0, 0x2, 0xe, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x5fffff7e}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e26, 0x101, @remote, 0x1ff}}]}, 0x70}, 0x1, 0x7}, 0x0) (async)
r2 = socket$key(0xf, 0x3, 0x2) (async)
r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0xe, 0x180000)
setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000540)=0xc, 0x4) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="16000000000000000100000006"], 0x48)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r4, 0x0, 0x20000000}, 0x20) (async)
sendmsg$key(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x70}, 0x19}, 0x20040814) (async)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000111401000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
socket$unix(0x1, 0x2, 0x0) (async)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
r8 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r8, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x9, 0x3, 0x4b, 0x95, 0x6}, 0x14) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@newtaction={0x8e0, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8cc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r9}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x87c, 0x2, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x6, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x61, 0x8, 0x100, 0x9, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7fffffff, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x7, 0x2, 0x4, 0x3, 0x3, 0x6, 0x800e6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x90000000, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

812.712µs ago: executing program 0 (id=7026):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c)
connect$inet6(r2, &(0x7f0000000540)={0xa, 0x4e23, 0x3, @private1, 0x69fc}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast2}], 0x10)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

0s ago: executing program 1 (id=7027):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x13}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r5, r4, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20)
close(r6)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r7, &(0x7f0000000600)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6e0200be0046000000000000000000aaff020000000000000000000000000001042088be0000000300060c00080031"], 0x7c)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x34, r9, 0x1, 0x70bd28, 0xffffffff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xabe4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x34}}, 0x80)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r12, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0)

kernel console output (not intermixed with test programs):

ink: 8 bytes leftover after parsing attributes in process `syz.0.5220'.
[  519.032995][T24694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5220'.
[  519.037140][T24697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5219'.
[  519.111321][T24705] netlink: 'syz.2.5222': attribute type 1 has an invalid length.
[  519.116254][T24705] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  519.189875][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5223'.
[  519.208954][T24707] bond53 (unregistering): Released all slaves
[  519.319203][T24720] netlink: 'syz.1.5227': attribute type 13 has an invalid length.
[  519.322718][T24720] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5227'.
[  519.723600][T24752] netlink: 'syz.0.5233': attribute type 1 has an invalid length.
[  520.386730][T24757] netlink: 'syz.2.5234': attribute type 1 has an invalid length.
[  520.442278][T24757] 8021q: adding VLAN 0 to HW filter on device bond53
[  520.878337][T24778] bond65: option miimon: invalid value (18446744073709551607)
[  520.881519][T24778] bond65: option miimon: allowed values 0 - 2147483647
[  520.885507][T24778] bond65 (unregistering): Released all slaves
[  520.896998][T24780] openvswitch: netlink: Flow actions attr not present in new flow.
[  521.373687][T24809] netlink: 'syz.2.5246': attribute type 2 has an invalid length.
[  521.377532][T24809] netlink: 'syz.2.5246': attribute type 1 has an invalid length.
[  521.405708][T24809] macsec0: entered promiscuous mode
[  521.409352][T24809] bridge0: entered promiscuous mode
[  521.554985][T24821] netlink: 'syz.2.5248': attribute type 1 has an invalid length.
[  521.583472][T24821] bond54: entered promiscuous mode
[  521.585674][T24821] 8021q: adding VLAN 0 to HW filter on device bond54
[  522.150836][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.428964][T24853] netlink: 'syz.2.5255': attribute type 13 has an invalid length.
[  522.790235][ T1198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  525.229935][T24868] __nla_validate_parse: 17 callbacks suppressed
[  525.229956][T24868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5259'.
[  525.700888][T24882] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5264'.
[  526.071736][T24891] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5266'.
[  526.142936][T24896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5266'.
[  526.146080][T24896] netlink: 'syz.0.5266': attribute type 1 has an invalid length.
[  526.235369][T24903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5269'.
[  526.240638][T24897] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5267'.
[  526.307340][T24908] netlink: 'syz.1.5271': attribute type 1 has an invalid length.
[  526.346930][T24908] 8021q: adding VLAN 0 to HW filter on device bond41
[  526.378342][T24908] bond41: (slave veth29): Enslaving as an active interface with a down link
[  526.402605][T24908] bond41: (slave veth31): Enslaving as an active interface with a down link
[  526.410725][T24908] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5271'.
[  526.411360][T24909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5271'.
[  526.422045][T24908] bond41: (slave bridge30): Enslaving as an active interface with a down link
[  526.435922][T24909] bond41: (slave bridge31): Enslaving as an active interface with a down link
[  526.472509][T24913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5272'.
[  526.475179][T24912] vlan7: entered promiscuous mode
[  526.486203][T24913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5272'.
[  526.533189][T24915] netlink: 'syz.1.5273': attribute type 1 has an invalid length.
[  526.536388][T24915] netlink: 'syz.1.5273': attribute type 1 has an invalid length.
[  526.643342][T24919] netlink: 'syz.1.5274': attribute type 83 has an invalid length.
[  527.054026][T24935] veth1: Caught tx_queue_len zero misconfig
[  527.188793][T17144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  527.456418][T24961] netlink: 'syz.2.5284': attribute type 9 has an invalid length.
[  527.462328][T24961] netlink: 'syz.2.5284': attribute type 6 has an invalid length.
[  527.465645][T24961] netlink: 'syz.2.5284': attribute type 7 has an invalid length.
[  527.472916][T24961] netlink: 'syz.2.5284': attribute type 8 has an invalid length.
[  527.628501][T24971] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  527.697300][T24982] IPVS: ip_vs_edit_dest(): server weight less than zero
[  527.913223][T24988] netlink: 'syz.2.5291': attribute type 5 has an invalid length.
[  528.552456][T17144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.258477][T24999] __nla_validate_parse: 72 callbacks suppressed
[  532.258490][T24999] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5294'.
[  532.264237][T24999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5294'.
[  532.331233][T24999] sctp: [Deprecated]: syz.1.5294 (pid 24999) Use of struct sctp_assoc_value in delayed_ack socket option.
[  532.331233][T24999] Use struct sctp_sack_info instead
[  532.345776][T24999] sctp: [Deprecated]: syz.1.5294 (pid 24999) Use of struct sctp_assoc_value in delayed_ack socket option.
[  532.345776][T24999] Use struct sctp_sack_info instead
[  532.361598][T24999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  532.388528][T17144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.393769][T25002] xt_l2tp: v2 tid > 0xffff: 37482740
[  532.471369][T25010] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  532.535363][T25011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  532.584850][T25010] ip6tnl6: entered allmulticast mode
[  532.764439][T25020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  532.779247][T12300] lo speed is unknown, defaulting to 1000
[  532.784309][T12300] sqz0: Port: 1 Link DOWN
[  532.787661][T12300] lo speed is unknown, defaulting to 1000
[  532.939872][T25024] bridge25: entered promiscuous mode
[  532.943486][T25024] bridge25: entered allmulticast mode
[  532.957049][T25024] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  532.959357][T25024] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  533.021799][T25029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5302'.
[  533.161101][T25032] xt_CT: No such helper "snmp"
[  533.229850][T25032] xt_CT: No such helper "snmp"
[  533.278016][T25032] xt_CT: No such helper "snmp"
[  533.342597][T25032] xt_CT: No such helper "snmp"
[  533.406371][T25032] xt_CT: No such helper "snmp"
[  533.459193][T25032] xt_CT: No such helper "snmp"
[  533.503603][T25032] xt_CT: No such helper "snmp"
[  533.528525][T25032] xt_CT: No such helper "snmp"
[  533.548745][T25032] xt_CT: No such helper "snmp"
[  533.576569][T25032] xt_CT: No such helper "snmp"
[  533.728335][T25067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5308'.
[  533.883546][T25073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5309'.
[  533.895471][T25074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5309'.
[  533.948801][T25081] netlink: 'syz.2.5311': attribute type 14 has an invalid length.
[  533.967951][T25081] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5311'.
[  533.973667][T25076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5310'.
[  536.373893][T25154] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  536.646027][T25181] netlink: 'syz.2.5330': attribute type 3 has an invalid length.
[  536.650806][T25181] netlink: 'syz.2.5330': attribute type 1 has an invalid length.
[  536.654223][T25181] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5330'.
[  536.658189][T25181] NCSI netlink: No device for ifindex 36
[  536.997154][T25194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5333'.
[  537.952402][T25206] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  537.966834][T25206] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5336'.
[  537.969798][T25206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5336'.
[  538.019008][T25214] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  538.052900][T25219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5340'.
[  538.131173][T25223] wg1 speed is unknown, defaulting to 1000
[  538.215711][T25228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.286246][T25233] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.378929][T25223] hsr0 speed is unknown, defaulting to 1000
[  538.382350][T25223] lo speed is unknown, defaulting to 1000
[  538.769019][T25242] xt_ct_set_helper: 10 callbacks suppressed
[  538.769032][T25242] xt_CT: No such helper "snmp_trap"
[  538.983285][T25253] netlink: 'syz.1.5348': attribute type 1 has an invalid length.
[  538.998857][T25253] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5348'.
[  539.085766][T25255] geneve6: entered promiscuous mode
[  539.353978][T25267] wg1 speed is unknown, defaulting to 1000
[  539.735673][T25267] hsr0 speed is unknown, defaulting to 1000
[  539.740752][T25267] lo speed is unknown, defaulting to 1000
[  540.316909][T25295] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  540.332191][T25295] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  540.965093][T25312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5360'.
[  541.162716][T25316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5362'.
[  541.192086][T25316] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  541.229611][T25316] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  541.283764][T25320] netlink: 'syz.2.5364': attribute type 1 has an invalid length.
[  541.287323][T25320] netlink: 'syz.2.5364': attribute type 6 has an invalid length.
[  541.291847][T25320] netlink: 'syz.2.5364': attribute type 7 has an invalid length.
[  541.296840][T25320] netlink: 'syz.2.5364': attribute type 1 has an invalid length.
[  541.314805][T25321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5363'.
[  541.408135][T25316] bond0: Caught tx_queue_len zero misconfig
[  541.522496][T25329] 8021q: adding VLAN 0 to HW filter on device bond55
[  541.562813][T25332] bond56: entered allmulticast mode
[  541.571305][T25332] macvlan1: entered promiscuous mode
[  541.573334][T25332] macvlan1: entered allmulticast mode
[  541.575936][T25332] bond56: (slave macvlan1): Opening slave failed
[  541.641651][T25336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5368'.
[  541.648607][T25336] vlan6: entered promiscuous mode
[  541.721515][T25338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5369'.
[  541.739584][T25340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5370'.
[  541.803846][T25338] xt_CT: You must specify a L4 protocol and not use inversions on it
[  541.900841][T25347] syzkaller1: entered promiscuous mode
[  541.905262][T25347] syzkaller1: entered allmulticast mode
[  541.950621][T25349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  542.248744][T25351] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  542.285015][T17293] hsr0 speed is unknown, defaulting to 1000
[  542.287033][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  542.290198][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  542.293185][T17293] syz2: Port: 1 Link DOWN
[  542.297689][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  542.305251][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  542.311513][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  542.315744][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  542.321660][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  542.324754][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  542.421547][T25363] tipc: New replicast peer: 255.255.255.255
[  542.423913][T25363] tipc: Enabled bearer <udp:syz1>, priority 10
[  542.509766][T25371] netlink: 'syz.0.5380': attribute type 12 has an invalid length.
[  542.516342][T25371] macsec0: entered promiscuous mode
[  542.527180][T25371] macsec0 (unregistering): left promiscuous mode
[  542.956131][T25417] Unsupported ieee802154 address type: 0
[  543.010046][T25423] netlink: 'syz.1.5394': attribute type 2 has an invalid length.
[  543.106808][T25428] netlink: 'syz.1.5395': attribute type 16 has an invalid length.
[  543.109830][T25428] __nla_validate_parse: 17 callbacks suppressed
[  543.109887][T25428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5395'.
[  543.116122][T25428] netlink: 'syz.1.5395': attribute type 16 has an invalid length.
[  543.119892][T25428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5395'.
[  543.281405][T25436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  543.317567][T25437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5397'.
[  543.500982][T25448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5400'.
[  543.756424][T25455] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5402'.
[  543.781238][T25455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5402'.
[  544.260692][T25476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5407'.
[  544.369583][T25481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5408'.
[  544.481110][T25485] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5411'.
[  544.485889][T25485] openvswitch: netlink: Flow key attr not present in new flow.
[  544.495033][T25485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5411'.
[  544.827295][T25496] netlink: 'syz.2.5413': attribute type 21 has an invalid length.
[  544.831831][T25496] netlink: 'syz.2.5413': attribute type 6 has an invalid length.
[  544.905999][T25502] netlink: 'syz.1.5415': attribute type 1 has an invalid length.
[  545.109160][T25523] bond42: entered promiscuous mode
[  545.110974][T25523] bond42: entered allmulticast mode
[  545.112925][T25523] 8021q: adding VLAN 0 to HW filter on device bond42
[  545.176815][T25526] bond43: (slave bridge39): Enslaving as an active interface with an up link
[  545.377720][T25544] ipt_rpfilter: unknown options
[  545.551615][T25557] netlink: 'syz.1.5433': attribute type 6 has an invalid length.
[  545.624815][T25558] vxcan0: entered allmulticast mode
[  545.661380][T25563] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  545.931981][T25574] bond66: option ad_user_port_key: invalid value (65535)
[  545.934361][T25574] bond66: option ad_user_port_key: allowed values 0 - 1023
[  545.940559][T25574] bond66 (unregistering): Released all slaves
[  546.116285][ T5671] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  546.126671][ T5671] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  546.137121][ T5671] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  546.146832][ T5671] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  546.447016][  T797] wg1 speed is unknown, defaulting to 1000
[  546.449627][T17842] syz1: Port: 1 Link DOWN
[  546.451373][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  546.454819][  T797] syz0: Port: 1 Link DOWN
[  546.457981][   T13] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  546.464913][   T13] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  546.472430][  T797] wg1 speed is unknown, defaulting to 1000
[  546.474577][   T13] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  546.650720][T25623] netlink: 'syz.1.5450': attribute type 1 has an invalid length.
[  546.699267][T25623] 8021q: adding VLAN 0 to HW filter on device bond44
[  546.710287][T25623] vlan6: entered promiscuous mode
[  546.712113][T25623] bond44: entered promiscuous mode
[  546.713980][T25623] vlan6: entered allmulticast mode
[  546.715832][T25623] bond44: entered allmulticast mode
[  546.726067][T25623] 8021q: adding VLAN 0 to HW filter on device batadv0
[  546.733283][T25623] bond44: (slave batadv0): making interface the new active one
[  546.735851][T25623] batadv0: entered promiscuous mode
[  546.737765][T25623] batadv0: entered allmulticast mode
[  546.741167][T25623] bond44: (slave batadv0): Enslaving as an active interface with an up link
[  546.834689][T25627] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  547.228694][T25653] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  547.465879][T25674] netlink: 'syz.1.5461': attribute type 4 has an invalid length.
[  547.578225][T25683] SET target dimension over the limit!
[  547.792734][T25689] syzkaller0: entered promiscuous mode
[  547.795069][T25689] syzkaller0: entered allmulticast mode
[  547.799305][T25699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  547.946625][T25710] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  548.144492][T25728] wg1 speed is unknown, defaulting to 1000
[  548.226679][T25728] hsr0 speed is unknown, defaulting to 1000
[  548.230908][T25728] lo speed is unknown, defaulting to 1000
[  548.891551][T25753] bridge40: entered promiscuous mode
[  548.898131][T25753] bridge40: entered allmulticast mode
[  548.939625][T25757] syzkaller0: entered promiscuous mode
[  548.955587][T25757] syzkaller0: entered allmulticast mode
[  548.985976][T25766] netlink: 'syz.1.5482': attribute type 1 has an invalid length.
[  549.016029][T25766] bond45: entered promiscuous mode
[  549.020840][T25766] 8021q: adding VLAN 0 to HW filter on device bond45
[  549.034094][T25766] 8021q: adding VLAN 0 to HW filter on device bond45
[  549.039784][T25766] bond45: (slave wireguard0): The slave device specified does not support setting the MAC address
[  549.045154][T25766] bond45: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  549.055685][T25766] bond45: (slave wireguard0): making interface the new active one
[  549.058722][T25766] wireguard0: entered promiscuous mode
[  549.061493][T25766] bond45: (slave wireguard0): Enslaving as an active interface with an up link
[  549.093942][T25766] netem: change failed
[  549.106979][T25766] bond45: (slave wireguard1): The slave device specified does not support setting the MAC address
[  549.123148][T25766] bond45: (slave wireguard1): Enslaving as a backup interface with an up link
[  549.231012][T25777] __nla_validate_parse: 24 callbacks suppressed
[  549.231027][T25777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5486'.
[  549.267396][T25777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5486'.
[  549.462399][T25794] netlink: 'syz.0.5489': attribute type 1 has an invalid length.
[  549.491339][T25794] bond66: (slave bridge26): making interface the new active one
[  549.499128][T25794] bond66: (slave bridge26): Enslaving as an active interface with an up link
[  549.509055][T25794] bond66: (slave vlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  549.593933][T25799] syzkaller1: entered promiscuous mode
[  549.595851][T25799] syzkaller1: entered allmulticast mode
[  549.599780][T25799] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5490'.
[  549.725925][T25804] netlink: 'syz.1.5491': attribute type 1 has an invalid length.
[  549.744790][T25804] bond46: entered promiscuous mode
[  549.749545][T25804] bond46: entered allmulticast mode
[  549.764299][T25804] 8021q: adding VLAN 0 to HW filter on device bond46
[  549.914589][T25810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5493'.
[  549.996148][T25812] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5494'.
[  550.054761][T25820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5496'.
[  550.144657][T25825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5499'.
[  550.163536][T25825] bond47: entered promiscuous mode
[  550.165603][T25825] 8021q: adding VLAN 0 to HW filter on device bond47
[  550.193154][T25830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5501'.
[  550.221635][T25834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5500'.
[  550.224567][T25834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5500'.
[  550.230532][T25834] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20000
[  550.393723][T25836] macsec1: entered promiscuous mode
[  550.785417][T25851] Bluetooth: hci1: too big key_count value 29096
[  550.820861][T25843] veth23: entered allmulticast mode
[  550.829933][T25843] bond67: (slave veth23): Enslaving as an active interface with an up link
[  550.840781][T25847] bond67 (unregistering): (slave veth23): Releasing backup interface
[  550.853818][T25847] bond67 (unregistering): Released all slaves
[  551.437299][T25887] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  551.456150][T25887] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  551.587586][T12300] hsr0 speed is unknown, defaulting to 1000
[  551.589857][  T797] hsr0 speed is unknown, defaulting to 1000
[  551.591888][T25895] netlink: 'syz.1.5519': attribute type 3 has an invalid length.
[  551.620963][T25895] nbd: nbd1 already in use
[  551.622674][T25895] block nbd1: NBD_DISCONNECT
[  551.624174][T25895] block nbd1: Send disconnect failed -32
[  551.626002][T25895] block nbd1: shutting down sockets
[  551.662170][T25895] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  551.811759][T25904] wg1 speed is unknown, defaulting to 1000
[  551.903079][T25904] hsr0 speed is unknown, defaulting to 1000
[  551.905183][T25906] wg1 speed is unknown, defaulting to 1000
[  551.909779][T25904] lo speed is unknown, defaulting to 1000
[  552.138271][T25906] hsr0 speed is unknown, defaulting to 1000
[  552.185962][T25906] lo speed is unknown, defaulting to 1000
[  552.570623][T25930] wg1 speed is unknown, defaulting to 1000
[  552.833123][T25930] hsr0 speed is unknown, defaulting to 1000
[  552.849640][T25930] lo speed is unknown, defaulting to 1000
[  552.880327][T25926] wg1 speed is unknown, defaulting to 1000
[  553.458539][T25926] hsr0 speed is unknown, defaulting to 1000
[  553.465384][T25926] lo speed is unknown, defaulting to 1000
[  554.122868][T25947] netlink: 'syz.2.5532': attribute type 4 has an invalid length.
[  554.201278][T25951] Bluetooth: hci1: too big key_count value 29096
[  554.381996][T25963] __nla_validate_parse: 13 callbacks suppressed
[  554.382017][T25963] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5538'.
[  554.557380][T25962] netlink: 'syz.2.5537': attribute type 2 has an invalid length.
[  554.868648][   T33] audit: type=1804 audit(1778605100.689:12): pid=25972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5540" name="/newroot/1961/cgroup.controllers" dev="tmpfs" ino=10019 res=1 errno=0
[  554.877239][   T33] audit: type=1800 audit(1778605100.699:13): pid=25972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5540" name="cgroup.controllers" dev="tmpfs" ino=10019 res=0 errno=0
[  555.074446][T25980] nbd: must specify at least one socket
[  555.291437][T25987] syzkaller1: entered promiscuous mode
[  555.293325][T25987] syzkaller1: entered allmulticast mode
[  555.420951][T25992] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  555.428472][T25992] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  555.584158][T25997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5548'.
[  555.599593][T25997] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5548'.
[  555.699020][T26009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5551'.
[  555.772761][T26013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5552'.
[  555.856441][T26015] openvswitch: netlink: IP tunnel dst address not specified
[  556.000982][T26023] netlink: 'syz.2.5556': attribute type 21 has an invalid length.
[  556.003722][T26023] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5556'.
[  556.007093][T26023] netlink: 'syz.2.5556': attribute type 4 has an invalid length.
[  556.010712][T26023] netlink: 'syz.2.5556': attribute type 3 has an invalid length.
[  556.013410][T26023] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5556'.
[  556.046496][T26021] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  556.227723][T26027] xt_hashlimit: size too large, truncated to 1048576
[  556.230859][T26027] xt_hashlimit: max too large, truncated to 1048576
[  556.242593][T26027] netlink: 'syz.2.5558': attribute type 1 has an invalid length.
[  556.245215][T26027] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5558'.
[  556.480905][T26040] netlink: 'syz.1.5560': attribute type 1 has an invalid length.
[  556.487446][T26040] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5560'.
[  556.563477][T26053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5564'.
[  557.772546][T26079] netlink: 'syz.2.5574': attribute type 4 has an invalid length.
[  557.788585][T26081] bridge28: entered promiscuous mode
[  557.792578][T26081] bridge28: entered allmulticast mode
[  558.414720][T26101] wg1 speed is unknown, defaulting to 1000
[  558.578129][T26101] hsr0 speed is unknown, defaulting to 1000
[  558.582506][T26101] lo speed is unknown, defaulting to 1000
[  559.504935][T26125] __nla_validate_parse: 20 callbacks suppressed
[  559.504983][T26125] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5588'.
[  559.517778][T26125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5588'.
[  559.582653][T26125] bond48: entered promiscuous mode
[  559.584655][T26125] 8021q: adding VLAN 0 to HW filter on device bond48
[  559.633438][T26135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5593'.
[  559.859991][T26149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5595'.
[  559.892316][T26149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5595'.
[  559.936077][T26155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5596'.
[  559.999067][T26157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5596'.
[  560.002908][T26157] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5596'.
[  560.006808][T26157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5596'.
[  560.015838][T26157] netlink: 348 bytes leftover after parsing attributes in process `syz.2.5596'.
[  560.181812][T26164] syzkaller0: entered promiscuous mode
[  560.190439][T26164] syzkaller0: entered allmulticast mode
[  560.245746][T26167] netlink: 'syz.2.5598': attribute type 4 has an invalid length.
[  560.706198][T26195] netlink: 'syz.1.5603': attribute type 4 has an invalid length.
[  560.728593][T26196] netlink: 'syz.1.5603': attribute type 4 has an invalid length.
[  561.475041][T26223] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  561.478124][T26223] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  561.685655][T26229] netlink: 'syz.2.5613': attribute type 3 has an invalid length.
[  561.689149][T26229] netlink: 'syz.2.5613': attribute type 3 has an invalid length.
[  561.698610][T26230] netlink: 'syz.2.5613': attribute type 3 has an invalid length.
[  561.701819][T26230] netlink: 'syz.2.5613': attribute type 3 has an invalid length.
[  562.366835][T26262] netlink: 'syz.2.5626': attribute type 7 has an invalid length.
[  562.402492][T26263] bond49: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  562.410336][T26263] bond49 (unregistering): Released all slaves
[  562.455608][T26266] bond49: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  562.472343][T26266] bond49 (unregistering): Released all slaves
[  562.595754][T26273] bond67: entered promiscuous mode
[  562.599195][T26273] 8021q: adding VLAN 0 to HW filter on device bond67
[  562.657017][T26277] netlink: 'syz.0.5630': attribute type 1 has an invalid length.
[  562.701950][T26277] bond68: entered promiscuous mode
[  562.703946][T26277] 8021q: adding VLAN 0 to HW filter on device bond68
[  562.775879][T26283] bond49: entered promiscuous mode
[  562.778461][T26283] 8021q: adding VLAN 0 to HW filter on device bond49
[  563.293365][T26306] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  563.312207][T26309] netlink: 'syz.2.5640': attribute type 1 has an invalid length.
[  563.374861][T26310] bond0: entered promiscuous mode
[  563.377503][T26310] batadv0: entered promiscuous mode
[  563.380018][T26310] debugfs: 'hsr0' already exists in 'hsr'
[  563.382011][T26310] Cannot create hsr debugfs directory
[  563.383883][T26310] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  563.387235][T26310] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  563.396671][T26310] 8021q: adding VLAN 0 to HW filter on device hsr0
[  563.400599][T26310] bond0: left promiscuous mode
[  563.403084][T26310] batadv0: left promiscuous mode
[  563.421655][T26309] bond0: entered promiscuous mode
[  563.423957][T26309] batadv0: entered promiscuous mode
[  563.426133][T26309] debugfs: 'hsr0' already exists in 'hsr'
[  563.430647][T26309] Cannot create hsr debugfs directory
[  563.432629][T26309] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  563.436076][T26309] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  563.440116][T26309] 8021q: adding VLAN 0 to HW filter on device hsr0
[  563.443597][T26309] bond0: left promiscuous mode
[  563.448883][T26309] batadv0: left promiscuous mode
[  563.692419][T26325] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  564.307519][T26348] syzkaller1: tun_chr_ioctl cmd 2147767506
[  564.311003][T26348] netlink: 'syz.0.5650': attribute type 30 has an invalid length.
[  564.320047][ T5694] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  564.323546][T26348] netlink: 'syz.0.5650': attribute type 30 has an invalid length.
[  564.330149][ T5694] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  564.335943][ T5694] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  564.339877][ T5694] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  564.416602][T26350] netlink: 'syz.0.5651': attribute type 1 has an invalid length.
[  564.516137][T26350] 8021q: adding VLAN 0 to HW filter on device bond70
[  564.536555][T26350] bond69: (slave bond70): making interface the new active one
[  564.548352][T26350] bond69: (slave bond70): Enslaving as an active interface with an up link
[  564.917139][T26370] __nla_validate_parse: 32 callbacks suppressed
[  564.917156][T26370] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5657'.
[  565.121895][T26388] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5660'.
[  565.211075][T26397] IPVS: length: 528 != 632
[  565.217629][T26397] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5662'.
[  565.377641][T26399] wg1 speed is unknown, defaulting to 1000
[  565.726538][T17842] hsr0 speed is unknown, defaulting to 1000
[  565.728710][T12300] hsr0 speed is unknown, defaulting to 1000
[  565.812796][T26414] netlink: 'syz.2.5668': attribute type 4 has an invalid length.
[  565.815501][T26414] netlink: 'syz.2.5668': attribute type 8 has an invalid length.
[  565.818450][T26414] netlink: 'syz.2.5668': attribute type 1 has an invalid length.
[  565.821072][T26414] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5668'.
[  565.824279][T26414] NCSI netlink: No device for ifindex 0
[  566.036006][T26399] hsr0 speed is unknown, defaulting to 1000
[  566.045675][T26399] lo speed is unknown, defaulting to 1000
[  566.061559][T26423] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  566.068085][T26423] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  566.072506][T26428] netlink: 'syz.1.5671': attribute type 2 has an invalid length.
[  566.081455][T26428] netlink: 'syz.1.5671': attribute type 1 has an invalid length.
[  566.228689][T26432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5672'.
[  566.333454][T26438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5672'.
[  566.373786][T26432] 8021q: adding VLAN 0 to HW filter on device bond58
[  566.437665][T26436] 8021q: adding VLAN 0 to HW filter on device bond59
[  566.443401][T26436] bond58: (slave bond59): Enslaving as an active interface with an up link
[  566.462527][T26438] bond58 (unregistering): (slave bond59): Releasing backup interface
[  566.473798][T26438] bond58 (unregistering): Released all slaves
[  566.490744][T26431] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5673'.
[  566.714616][T26444] netlink: 'syz.2.5674': attribute type 1 has an invalid length.
[  566.845795][T26446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5676'.
[  566.891654][T26448] bond58: (slave vxcan1): The slave device specified does not support setting the MAC address
[  566.911149][T26448] bond58: (slave vxcan1): Error -95 calling set_mac_address
[  566.970542][T26444] macvlan1: entered promiscuous mode
[  566.977070][T26444] macvlan1: entered allmulticast mode
[  566.989723][T26444] bond58: entered promiscuous mode
[  566.993577][T26444] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  567.012417][T26444] bond58: left promiscuous mode
[  567.145122][T26455] syzkaller1: entered allmulticast mode
[  567.149491][T26455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5679'.
[  567.153636][T26455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5679'.
[  567.542715][   T33] audit: type=1804 audit(1778605113.369:14): pid=26467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5684" name="/newroot/2017/memory.events" dev="tmpfs" ino=10307 res=1 errno=0
[  567.572026][   T33] audit: type=1800 audit(1778605113.369:15): pid=26467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5684" name="memory.events" dev="tmpfs" ino=10307 res=0 errno=0
[  567.597123][   T33] audit: type=1804 audit(1778605113.369:16): pid=26467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5684" name="/newroot/2017/memory.events" dev="tmpfs" ino=10307 res=1 errno=0
[  567.617191][T26470] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  567.626423][T26470] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.708497][T26472] syzkaller1: entered promiscuous mode
[  567.710595][T26472] syzkaller1: entered allmulticast mode
[  567.800074][T26470] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  567.803308][T26470] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.027125][T26470] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  568.037665][T26470] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.167182][T26470] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  568.174585][T26470] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.403575][ T5694] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  568.406284][ T5694] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  568.420330][ T5694] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  568.423942][ T5694] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  568.436978][ T5694] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  568.442380][ T5694] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  568.465727][ T5694] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  568.501909][ T5694] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  569.277445][T26549] syzkaller0: entered promiscuous mode
[  569.282068][T26549] syzkaller0: entered allmulticast mode
[  569.485724][T26552] validate_nla: 81 callbacks suppressed
[  569.485736][T26552] netlink: 'syz.0.5708': attribute type 10 has an invalid length.
[  569.501957][T26552] debugfs: 'netdev:nicvf0' already exists in 'phy7'
[  570.014617][T26571] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  570.094456][T26580] __nla_validate_parse: 91 callbacks suppressed
[  570.094480][T26580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5716'.
[  570.294739][T26593] SET target dimension over the limit!
[  570.566171][T26601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5723'.
[  570.728847][T26613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5725'.
[  571.123049][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5731'.
[  571.209705][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5731'.
[  571.219025][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5731'.
[  571.230909][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5731'.
[  571.265704][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5731'.
[  571.277787][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5731'.
[  571.288341][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5731'.
[  572.592755][T26710] bond60: entered promiscuous mode
[  572.595315][T26710] 8021q: adding VLAN 0 to HW filter on device bond60
[  572.666425][T26714] netlink: 'syz.2.5752': attribute type 10 has an invalid length.
[  572.845918][T26721] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  573.126962][T26737] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  573.803128][   T33] audit: type=1804 audit(1778605119.629:17): pid=26762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5765" name="/newroot/1962/memory.events" dev="tmpfs" ino=10044 res=1 errno=0
[  573.822248][   T33] audit: type=1800 audit(1778605119.649:18): pid=26762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5765" name="memory.events" dev="tmpfs" ino=10044 res=0 errno=0
[  573.999903][T26769] veth47: entered allmulticast mode
[  574.009638][T26769] bond61: (slave veth47): Enslaving as an active interface with an up link
[  574.023220][T26769] bond61 (unregistering): (slave veth47): Releasing backup interface
[  574.029830][T26769] bond61 (unregistering): Released all slaves
[  574.153073][T26778] xt_CT: No such helper "syz0"
[  574.230827][T26786] netlink: 'syz.2.5773': attribute type 4 has an invalid length.
[  574.333323][T26793] netlink: 'syz.2.5774': attribute type 1 has an invalid length.
[  574.377638][T26796] netlink: 'syz.1.5769': attribute type 10 has an invalid length.
[  574.389028][T26793] 8021q: adding VLAN 0 to HW filter on device bond61
[  574.413520][T26790] wg1 speed is unknown, defaulting to 1000
[  574.446648][T26796] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  574.555576][T26800] bond0: option arp_validate: invalid value (55553)
[  574.569840][T26790] hsr0 speed is unknown, defaulting to 1000
[  574.583406][T26790] lo speed is unknown, defaulting to 1000
[  575.210864][T26803] xt_hashlimit: size too large, truncated to 1048576
[  575.324803][T26806] __nla_validate_parse: 22 callbacks suppressed
[  575.324821][T26806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5776'.
[  575.342865][T26806] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5776'.
[  575.686550][T26813] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5778'.
[  576.134143][T26831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  576.143001][T26823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5783'.
[  576.155414][T26833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5784'.
[  576.179723][T26833] xt_l2tp: invalid flags combination: 8
[  576.196348][T26833] netlink: 'syz.2.5784': attribute type 1 has an invalid length.
[  576.204582][T26833] gre0: entered promiscuous mode
[  576.206835][T26833] gre0: entered allmulticast mode
[  576.334025][T26835] tc action pedit 'at' offset 6 out of bounds
[  577.095965][T26847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5788'.
[  577.265860][T26862] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  577.387643][T26869] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5794'.
[  577.822462][T26883] wg1 speed is unknown, defaulting to 1000
[  578.023272][T26897] xt_hashlimit: max too large, truncated to 1048576
[  578.026932][T26897] xt_hashlimit: Unknown mode mask 300, kernel too old?
[  578.179621][T26883] hsr0 speed is unknown, defaulting to 1000
[  578.183152][T26883] lo speed is unknown, defaulting to 1000
[  579.345429][T26928] netlink: 'syz.0.5807': attribute type 1 has an invalid length.
[  579.366781][T26933] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  579.396581][T26928] 8021q: adding VLAN 0 to HW filter on device bond71
[  579.415141][T26925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5805'.
[  579.464456][T26935] bond71: (slave veth27): Enslaving as an active interface with a down link
[  579.468706][T26933] netlink: 'syz.1.5809': attribute type 11 has an invalid length.
[  579.542900][T26937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5811'.
[  579.640608][T26940] netlink: 'syz.2.5812': attribute type 1 has an invalid length.
[  579.727029][T26946] bridge0: port 1(veth0_virt_wifi) entered blocking state
[  579.733276][T26946] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  579.748851][T26946] veth0_virt_wifi: entered allmulticast mode
[  579.786926][T26946] veth0_virt_wifi: entered promiscuous mode
[  579.825233][T26948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5814'.
[  580.571870][T27010] __nla_validate_parse: 3 callbacks suppressed
[  580.571930][T27010] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5824'.
[  580.661526][T27017] netlink: 'syz.0.5827': attribute type 3 has an invalid length.
[  580.891513][T27033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5830'.
[  581.192611][T27052] openvswitch: netlink: IP tunnel dst address not specified
[  581.313243][T27056] bridge29: entered promiscuous mode
[  581.316209][T27056] bridge29: entered allmulticast mode
[  581.456380][T27069] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5843'.
[  581.467664][T27064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5844'.
[  581.876794][ T5650] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  581.881967][ T5650] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  581.931228][ T5650] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  581.941219][ T5650] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  582.285454][T27094] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  582.614427][T27108] netlink: 'syz.0.5854': attribute type 10 has an invalid length.
[  582.720723][T27114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5857'.
[  582.751161][T27114] workqueue: Failed to create a rescuer kthread for wq "bond62": -EINTR
[  582.891726][T27123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5858'.
[  582.988951][T27123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5858'.
[  583.717054][T27149] xt_hashlimit: size too large, truncated to 1048576
[  583.904101][T27154] ip6gre5: entered promiscuous mode
[  583.906277][T27154] ip6gre5: entered allmulticast mode
[  584.226883][T27176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5870'.
[  584.293845][T27178] syzkaller0: entered promiscuous mode
[  584.295977][T27178] syzkaller0: entered allmulticast mode
[  584.301288][T27178] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5871'.
[  584.435562][T27189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5874'.
[  584.597021][T27197] bond72: (slave bridge30): Enslaving as an active interface with an up link
[  584.619750][T27196] bond72: (slave bridge31): Enslaving as an active interface with an up link
[  584.782803][T27201] team0: entered promiscuous mode
[  584.787541][T27201] team0: entered allmulticast mode
[  584.796085][T27201] 8021q: adding VLAN 0 to HW filter on device team0
[  584.825199][T27204] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  584.863734][T27204] team1: entered promiscuous mode
[  584.866336][T27204] team1: entered allmulticast mode
[  584.872815][T27204] 8021q: adding VLAN 0 to HW filter on device team1
[  585.276670][T27232] wg1 speed is unknown, defaulting to 1000
[  585.576851][T27255] netlink: zone id is out of range
[  585.593326][T27255] netlink: zone id is out of range
[  585.602839][T27232] hsr0 speed is unknown, defaulting to 1000
[  585.605688][T27232] lo speed is unknown, defaulting to 1000
[  585.611817][T27255] netlink: zone id is out of range
[  585.629018][T27255] netlink: zone id is out of range
[  585.632875][T27255] netlink: zone id is out of range
[  585.640684][T27255] netlink: zone id is out of range
[  585.653270][T27255] netlink: zone id is out of range
[  585.658087][T27255] netlink: zone id is out of range
[  585.661622][T27255] netlink: zone id is out of range
[  585.913565][T27268] bond62: entered promiscuous mode
[  585.915691][T27268] 8021q: adding VLAN 0 to HW filter on device bond62
[  586.362193][T27280] xt_CT: You must specify a L4 protocol and not use inversions on it
[  586.376335][T27290] __nla_validate_parse: 10 callbacks suppressed
[  586.376348][T27290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5895'.
[  586.385181][T27290] net_ratelimit: 45 callbacks suppressed
[  586.385192][T27290] openvswitch: netlink: Invalid VLAN frame
[  586.403556][T27290] siw: device registration error -23
[  586.407925][T27280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5897'.
[  586.411650][T27291] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  586.414530][T27290] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  586.417961][T27290] sctp: [Deprecated]: syz.1.5895 (pid 27290) Use of int in max_burst socket option.
[  586.417961][T27290] Use struct sctp_assoc_value instead
[  586.596436][T27304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5901'.
[  586.599935][T27304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5901'.
[  586.604498][T27304] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5901'.
[  586.667261][T27313] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  586.906172][T27307] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5903'.
[  587.242690][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5907'.
[  587.398376][T27347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5911'.
[  587.440906][T27344] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5910'.
[  587.445303][T27344] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5910'.
[  587.453293][T27344] netlink: 'syz.1.5910': attribute type 3 has an invalid length.
[  588.042775][T27373] netlink: 'syz.0.5917': attribute type 10 has an invalid length.
[  588.401975][T27399] bond51: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  588.410780][T27399] bond51 (unregistering): Released all slaves
[  588.518784][T27407] netlink: 'syz.2.5927': attribute type 18 has an invalid length.
[  588.535988][   T33] audit: type=1800 audit(1778605134.359:19): pid=27407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5927" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=10340 res=0 errno=0
[  589.238364][T27437] netlink: 'syz.1.5935': attribute type 1 has an invalid length.
[  589.528294][T27446] netlink: 'syz.1.5938': attribute type 13 has an invalid length.
[  590.201179][T27448] tipc: Resetting bearer <eth:syzkaller0>
[  590.702604][ T7577] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  590.718185][ T7577] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  590.725805][ T7577] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  590.735894][ T7577] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  590.750035][ T7577] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  590.758164][ T7577] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  590.766706][ T7577] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  590.778399][ T7577] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  590.854871][T27464] netlink: 'syz.0.5943': attribute type 5 has an invalid length.
[  590.867192][T27464] netlink: 'syz.0.5943': attribute type 10 has an invalid length.
[  590.871115][T27464] netlink: 'syz.0.5943': attribute type 4 has an invalid length.
[  590.874379][T27464] netlink: 'syz.0.5943': attribute type 5 has an invalid length.
[  591.614123][T27503] __nla_validate_parse: 10 callbacks suppressed
[  591.614139][T27503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5950'.
[  591.623317][T27503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5950'.
[  591.729748][T27508] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5951'.
[  591.735674][T27507] only policy match revision 0 supported
[  591.735694][T27507] unable to load match
[  592.032810][T27520] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5955'.
[  592.692174][T27525] bond60: entered allmulticast mode
[  592.699238][T27525] dvmrp8: entered allmulticast mode
[  592.704266][T27524] bond60: left allmulticast mode
[  592.755690][T27527] netlink: 'syz.2.5958': attribute type 1 has an invalid length.
[  592.761128][T27527] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5958'.
[  592.912373][T27532] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5960'.
[  592.919480][T27532] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5960'.
[  592.944717][T27533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5959'.
[  593.041616][T27541] Unknown options in mask 6
[  593.117417][T27545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5962'.
[  593.701209][T27570] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5971'.
[  594.735430][T27620] : entered allmulticast mode
[  594.743512][T27620] : left allmulticast mode
[  595.308466][T27659] tipc: MTU too low for tipc bearer
[  598.259884][T27697] __nla_validate_parse: 9 callbacks suppressed
[  598.259895][T27697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6003'.
[  598.326062][T27702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6003'.
[  598.331348][T27699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6002'.
[  598.338570][T27699] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6002'.
[  598.357216][T27708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6004'.
[  598.396186][T27712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6006'.
[  598.402315][T27712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6006'.
[  598.406340][T27712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6006'.
[  598.807112][T27733] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  598.963083][T27739] xt_hashlimit: max too large, truncated to 1048576
[  599.211405][T27741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6013'.
[  599.216817][T27741] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6013'.
[  599.821575][T27788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  599.862034][T27792] netlink: 'syz.1.6029': attribute type 1 has an invalid length.
[  599.948282][T27792] bond52: entered promiscuous mode
[  599.950217][T27792] 8021q: adding VLAN 0 to HW filter on device bond52
[  599.985292][T27798] bond52: entered allmulticast mode
[  600.027674][T27792] bond52: (slave bridge44): making interface the new active one
[  600.030594][T27792] bridge44: entered promiscuous mode
[  600.032749][T27792] bridge44: entered allmulticast mode
[  600.036770][T27792] bond52: (slave bridge44): Enslaving as an active interface with an up link
[  600.255519][T27831] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  600.491424][T27842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  600.674353][T27850] netlink: 'syz.1.6045': attribute type 1 has an invalid length.
[  601.096985][T27874] erspan0: left promiscuous mode
[  601.119552][T27874] 8021q: adding VLAN 0 to HW filter on device bond0
[  601.123247][T27874] 8021q: adding VLAN 0 to HW filter on device `
[  601.175128][T27874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  601.188162][T27874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  601.205627][T27874] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  601.225420][T15190] lo speed is unknown, defaulting to 1000
[  601.229776][T15190] sqz0: Port: 1 Link ACTIVE
[  601.272346][T27879] netlink: 'syz.1.6054': attribute type 1 has an invalid length.
[  601.284986][T15190] lo speed is unknown, defaulting to 1000
[  601.285065][T27879] netlink: 'syz.1.6054': attribute type 1 has an invalid length.
[  601.301105][ T5689] hsr0 speed is unknown, defaulting to 1000
[  601.305856][ T5689] syz2: Port: 1 Link ACTIVE
[  601.331765][T27882] netlink: 'syz.2.6055': attribute type 11 has an invalid length.
[  601.403647][T27882] netlink: 'syz.2.6055': attribute type 1 has an invalid length.
[  601.406301][T27882] netlink: 'syz.2.6055': attribute type 2 has an invalid length.
[  601.569024][T27896] sctp: [Deprecated]: syz.2.6059 (pid 27896) Use of int in maxseg socket option.
[  601.569024][T27896] Use struct sctp_assoc_value instead
[  601.702100][T27908] Cannot find set identified by id 65534 to match
[  601.765514][T27914] netlink: 'syz.0.6063': attribute type 1 has an invalid length.
[  601.791506][T27914] 8021q: adding VLAN 0 to HW filter on device bond74
[  601.822833][T27914] bond74: (slave veth29): Enslaving as an active interface with a down link
[  602.480443][T27935] netlink: 'syz.2.6068': attribute type 4 has an invalid length.
[  602.520713][T27942] macsec1: entered promiscuous mode
[  602.543964][T27935] netlink: 'syz.2.6068': attribute type 4 has an invalid length.
[  602.784569][T27963] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  602.856322][T27969] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  602.869887][T27969] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  603.068940][T27981] bond75: (slave bridge32): making interface the new active one
[  603.072639][T27981] bond75: (slave bridge32): Enslaving as an active interface with an up link
[  603.084622][T27981] bond75: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  603.431264][T27993] __nla_validate_parse: 18 callbacks suppressed
[  603.431274][T27993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6085'.
[  603.762059][T28011] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  603.765543][T28011] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  603.876718][T28008] tipc: Resetting bearer <eth:syzkaller0>
[  603.887489][T28018] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6091'.
[  604.164050][T28026] netlink: zone id is out of range
[  604.214707][T28026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6093'.
[  604.253878][T28033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6094'.
[  604.260397][T28033] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  604.263030][T28033] syzkaller0: entered promiscuous mode
[  604.265001][T28033] syzkaller0: entered allmulticast mode
[  604.269642][T28033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6094'.
[  604.276701][T28033] tipc: Resetting bearer <eth:syzkaller0>
[  604.281902][T28032] tipc: Resetting bearer <eth:syzkaller0>
[  604.303878][T28032] tipc: Disabling bearer <eth:syzkaller0>
[  604.442341][T28037] siw: device registration error -23
[  604.443163][T28038] siw: device registration error -23
[  604.563562][T28045] xt_CT: You must specify a L4 protocol and not use inversions on it
[  604.966594][T28058] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6101'.
[  605.006259][T28060] wg1 speed is unknown, defaulting to 1000
[  605.114480][T28060] hsr0 speed is unknown, defaulting to 1000
[  605.119069][T28060] lo speed is unknown, defaulting to 1000
[  605.389332][T28067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6104'.
[  605.683484][T28093] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  606.090908][T28107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6114'.
[  606.095415][T28107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6114'.
[  606.104843][T28107] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma?
[  606.217029][T28109] syzkaller0: entered allmulticast mode
[  606.226833][T28109] syzkaller0: entered promiscuous mode
[  606.275374][T28109] syzkaller0 (unregistering): left promiscuous mode
[  606.283449][T28109] syzkaller0 (unregistering): left allmulticast mode
[  606.447439][T28119] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6119'.
[  606.574268][   T33] audit: type=1804 audit(1778605152.399:20): pid=28126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6121" name="/newroot/1871/cgroup.controllers" dev="tmpfs" ino=9590 res=1 errno=0
[  606.595543][   T33] audit: type=1800 audit(1778605152.399:21): pid=28126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6121" name="cgroup.controllers" dev="tmpfs" ino=9590 res=0 errno=0
[  606.839268][T28141] validate_nla: 6 callbacks suppressed
[  606.839284][T28141] netlink: 'syz.2.6122': attribute type 61 has an invalid length.
[  608.254354][T28189] netlink: 'syz.1.6135': attribute type 1 has an invalid length.
[  610.446352][T28189] workqueue: Failed to create a rescuer kthread for wq "bond53": -EINTR
[  610.581456][T28209] __nla_validate_parse: 15 callbacks suppressed
[  610.581473][T28209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6142'.
[  610.611891][T28211] netlink: 'syz.2.6143': attribute type 2 has an invalid length.
[  610.617710][T28211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6143'.
[  610.638152][T28203] bond76: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  610.643097][T28203] bond76 (unregistering): Released all slaves
[  610.729541][T28220] xt_hashlimit: max too large, truncated to 1048576
[  610.735399][T28220] xt_hashlimit: Unknown mode mask 300, kernel too old?
[  610.817611][T28227] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  610.934110][T28232] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6147'.
[  611.004650][T28232] netlink: 'syz.2.6147': attribute type 18 has an invalid length.
[  611.180234][T28246] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6150'.
[  611.236364][T28248] netlink: 'syz.2.6151': attribute type 1 has an invalid length.
[  611.254366][T28248] bond63: entered promiscuous mode
[  611.256702][T28248] bond63: entered allmulticast mode
[  611.261496][T28248] 8021q: adding VLAN 0 to HW filter on device bond63
[  611.283992][T28248] bridge33: entered promiscuous mode
[  611.286354][T28248] bridge33: entered allmulticast mode
[  611.289466][T28248] bond63: (slave bridge33): Enslaving as a backup interface with an up link
[  611.305309][T28248] bridge34: entered promiscuous mode
[  611.307629][T28248] bridge34: entered allmulticast mode
[  611.312313][T28248] bond63: (slave bridge34): Enslaving as a backup interface with a down link
[  611.344004][T28251] netlink: 'syz.2.6152': attribute type 1 has an invalid length.
[  611.381599][ T7577] bond63: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  611.393986][T28251] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6152'.
[  611.450560][T28254] netlink: 'syz.2.6153': attribute type 1 has an invalid length.
[  611.476314][T28254] 8021q: adding VLAN 0 to HW filter on device bond64
[  611.531587][ T7577] bond63: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  611.575177][T28257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6155'.
[  611.585600][T28254] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.6153'.
[  611.631944][T28254] tipc: Enabling of bearer <eth:macvlan1> rejected, failed to enable media
[  612.312282][T28277] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  612.385913][T28282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6163'.
[  613.265825][T28321] netlink: 'syz.2.6172': attribute type 21 has an invalid length.
[  613.274752][T28321] netlink: 'syz.2.6172': attribute type 22 has an invalid length.
[  613.283667][T28321] netlink: 'syz.2.6172': attribute type 23 has an invalid length.
[  613.291831][T28321] netlink: 'syz.2.6172': attribute type 25 has an invalid length.
[  613.300149][T28321] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6172'.
[  613.437920][T28330] netlink: 'syz.2.6173': attribute type 49 has an invalid length.
[  613.844267][T28330] ip6gretap0: entered promiscuous mode
[  613.846630][T28330] ip6gretap0: entered allmulticast mode
[  614.168686][T28340] 8021q: adding VLAN 0 to HW filter on device bond65
[  614.255483][T28345] bridge35: entered promiscuous mode
[  614.268002][T28345] bridge35: entered allmulticast mode
[  614.571363][T28361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6180'.
[  614.757376][T28369] netlink: 'syz.0.6181': attribute type 1 has an invalid length.
[  614.806382][T28370] veth53: entered allmulticast mode
[  614.812705][T28370] bond66: (slave veth53): Enslaving as an active interface with an up link
[  614.857185][T28361] bond66 (unregistering): (slave veth53): Releasing backup interface
[  614.864323][T28361] bond66 (unregistering): Released all slaves
[  614.894561][T28372] bond76: (slave vxcan1): The slave device specified does not support setting the MAC address
[  614.900137][T28372] bond76: (slave vxcan1): Error -95 calling set_mac_address
[  614.946247][T28375] bond76: (slave vxcan1): The slave device specified does not support setting the MAC address
[  614.953632][T28375] bond76: (slave vxcan1): Error -95 calling set_mac_address
[  615.140196][T28390] 8021q: adding VLAN 0 to HW filter on device bond7
[  615.154273][T28389] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  615.482258][T28414] openvswitch: netlink: Flow key attribute not present in set flow.
[  615.783107][T28408] IPVS: Scheduler module ip_vs_sip not found
[  616.600837][T28460] wg1 speed is unknown, defaulting to 1000
[  616.772107][T28460] hsr0 speed is unknown, defaulting to 1000
[  616.775081][T28460] lo speed is unknown, defaulting to 1000
[  617.653328][T28490] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  618.721932][T28502] __nla_validate_parse: 4 callbacks suppressed
[  618.721943][T28502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6212'.
[  618.807041][T28502] wg1 speed is unknown, defaulting to 1000
[  618.857098][T28506] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6213'.
[  618.933331][T28502] hsr0 speed is unknown, defaulting to 1000
[  618.936356][T28502] lo speed is unknown, defaulting to 1000
[  618.989212][T28511] veth1_to_hsr: entered allmulticast mode
[  619.191430][T28514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6215'.
[  622.340513][T28528] netlink: 'syz.1.6216': attribute type 22 has an invalid length.
[  622.353560][T28528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6216'.
[  622.375583][T28528] netlink: 'syz.1.6216': attribute type 22 has an invalid length.
[  622.388951][T28528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6216'.
[  622.446338][T28530] bond77: option fail_over_mac: invalid value (127)
[  622.463842][T28530] bond77 (unregistering): Released all slaves
[  622.690168][T28538] netlink: 'syz.2.6222': attribute type 89 has an invalid length.
[  622.830488][T28549] x_tables: duplicate underflow at hook 1
[  622.865693][T28547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6223'.
[  622.873527][T28555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6228'.
[  623.116476][T28569] netlink: 'syz.0.6230': attribute type 1 has an invalid length.
[  623.247770][T28569] bond77: entered promiscuous mode
[  623.259371][T28569] bond77: entered allmulticast mode
[  623.276713][T28569] 8021q: adding VLAN 0 to HW filter on device bond77
[  623.404035][T28571] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6231'.
[  623.543356][T28582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6233'.
[  623.549095][T28582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6233'.
[  623.719570][T28593] wg1 speed is unknown, defaulting to 1000
[  623.872922][T28593] hsr0 speed is unknown, defaulting to 1000
[  623.876869][T28593] lo speed is unknown, defaulting to 1000
[  624.021092][T28608] netlink: 'syz.1.6240': attribute type 1 has an invalid length.
[  624.052999][T28608] bond53: entered promiscuous mode
[  624.058472][T28608] 8021q: adding VLAN 0 to HW filter on device bond53
[  624.826287][T28637] netlink: 'syz.1.6250': attribute type 1 has an invalid length.
[  624.841743][T28637] bond54: entered promiscuous mode
[  624.843515][T28637] bond54: entered allmulticast mode
[  624.845686][T28637] 8021q: adding VLAN 0 to HW filter on device bond54
[  624.848563][T28637] netlink: 'syz.1.6250': attribute type 1 has an invalid length.
[  624.851270][T28637] netlink: 'syz.1.6250': attribute type 1 has an invalid length.
[  624.853840][T28637] netlink: 'syz.1.6250': attribute type 1 has an invalid length.
[  625.043308][T28648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  625.421955][T28652] __nla_validate_parse: 2 callbacks suppressed
[  625.421966][T28652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6256'.
[  625.602581][T28661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6259'.
[  625.616549][T28661] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6259'.
[  625.673392][T28665] syzkaller0: left promiscuous mode
[  625.675281][T28665] syzkaller0: left allmulticast mode
[  625.708793][T28667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6261'.
[  625.885952][T28680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6265'.
[  625.893285][T28680] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6265'.
[  626.103547][T28695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6269'.
[  626.107518][T28695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6269'.
[  626.198760][T28697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6270'.
[  626.664349][T28711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6264'.
[  626.798004][T28721] netlink: 'syz.0.6275': attribute type 13 has an invalid length.
[  626.801110][T12296] lo speed is unknown, defaulting to 1000
[  626.803669][T12296] sqz0: Port: 1 Link DOWN
[  626.814665][T28721] gretap0: refused to change device tx_queue_len
[  626.819702][T28721] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  626.856781][T12296] lo speed is unknown, defaulting to 1000
[  626.866222][ T5689] lo speed is unknown, defaulting to 1000
[  626.873908][ T5689] sqz0: Port: 1 Link ACTIVE
[  627.174873][T28736] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  627.302037][T28739] bond60: entered allmulticast mode
[  627.318905][T28738] bond60: left allmulticast mode
[  627.428735][T28746] validate_nla: 2 callbacks suppressed
[  627.428755][T28746] netlink: 'syz.2.6283': attribute type 32 has an invalid length.
[  627.840368][T28770] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048)
[  627.860920][T28764] netlink: 'syz.1.6286': attribute type 2 has an invalid length.
[  627.919223][T28770] netlink: 'syz.2.6288': attribute type 3 has an invalid length.
[  627.928321][T28770] netlink: 'syz.2.6288': attribute type 3 has an invalid length.
[  628.220298][T28780] syzkaller1: entered promiscuous mode
[  628.227720][T28780] syzkaller1: entered allmulticast mode
[  628.490784][T28801] netlink: 'syz.1.6296': attribute type 12 has an invalid length.
[  628.509981][T28801] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  628.857324][   T33] audit: type=1800 audit(1778605174.679:22): pid=28814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6300" name="memory.events" dev="tmpfs" ino=11349 res=0 errno=0
[  628.990179][T28822] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  628.995644][T28822] netlink: 'syz.0.6302': attribute type 1 has an invalid length.
[  629.023106][T28822] 8021q: adding VLAN 0 to HW filter on device bond78
[  629.037454][T28822] bond0: Device is already in use.
[  629.086542][T28827] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  629.092168][T28827] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  629.180192][T28833] tipc: Resetting bearer <eth:syzkaller0>
[  629.492834][T28844] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  629.520540][T28844] netlink: 'syz.2.6307': attribute type 1 has an invalid length.
[  629.524846][T28844] bridge0: Device is already in use.
[  629.645125][T28849] netlink: 'syz.2.6309': attribute type 8 has an invalid length.
[  629.710464][T28848] 8021q: adding VLAN 0 to HW filter on device bond66
[  629.800777][T28849] bond66: (slave geneve7): Enslaving as an active interface with an up link
[  629.821635][ T5650] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  629.840448][ T5650] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  629.861419][ T5650] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  629.871666][ T5650] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  630.239170][T28873] nbd: illegal input index -469761793
[  630.435873][T28885] __nla_validate_parse: 15 callbacks suppressed
[  630.435891][T28885] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6320'.
[  630.523386][T28890] wg1 speed is unknown, defaulting to 1000
[  630.625765][T28890] hsr0 speed is unknown, defaulting to 1000
[  630.630131][T28890] lo speed is unknown, defaulting to 1000
[  631.194681][T28908] veth0_macvtap: Caught tx_queue_len zero misconfig
[  631.263933][T28913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6327'.
[  631.270246][T28913] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  631.289709][T28917] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6330'.
[  631.332259][T28924] netlink: 'syz.0.6329': attribute type 12 has an invalid length.
[  631.342457][T28923] wg1 speed is unknown, defaulting to 1000
[  631.458709][T28923] hsr0 speed is unknown, defaulting to 1000
[  631.462440][T28923] lo speed is unknown, defaulting to 1000
[  631.487332][T28914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6329'.
[  631.498289][T28914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6329'.
[  632.410567][T28963] netlink: 'syz.1.6341': attribute type 1 has an invalid length.
[  632.414003][T28963] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.6341'.
[  632.424188][T28963] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6341'.
[  632.519635][T28968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6342'.
[  632.528309][T28965] 8021q: adding VLAN 0 to HW filter on device 
[  632.619328][T17668] wg1 speed is unknown, defaulting to 1000
[  632.621775][T17668] syz0: Port: 1 Link ACTIVE
[  632.623707][T17668] wg1 speed is unknown, defaulting to 1000
[  632.626270][ T5650] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  632.637681][ T5650] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  632.654045][ T5076] syz1: Port: 1 Link ACTIVE
[  632.657270][ T5650] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  632.674626][ T5650] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  632.702426][T28979] wg1 speed is unknown, defaulting to 1000
[  632.758745][T28987] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6347'.
[  632.844841][T28994] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6348'.
[  632.886602][T28979] hsr0 speed is unknown, defaulting to 1000
[  632.892924][T28979] lo speed is unknown, defaulting to 1000
[  632.920979][T28997] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  632.924691][T28998] netlink: 'syz.0.6350': attribute type 3 has an invalid length.
[  633.007224][T29002] bond50: (slave lo): Releasing backup interface
[  633.020086][T29002] bond50: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  633.035469][T29002] bond52: (slave team_slave_1): Releasing backup interface
[  633.040848][T29002] team_slave_1: left promiscuous mode
[  633.043458][T29002] team_slave_1: left allmulticast mode
[  633.063334][T29002] veth0_virt_wifi: left allmulticast mode
[  633.065536][T29002] veth0_virt_wifi: left promiscuous mode
[  633.067560][T29002] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  633.089688][T29002] bond51: (slave geneve5): Releasing active interface
[  633.105192][T29002] bond63: (slave bridge33): Removing an active aggregator
[  633.125305][T29002] bond63: (slave bridge33): Releasing backup interface
[  633.135326][T29002] bond63: (slave bridge33): the permanent HWaddr of slave - 8a:02:4f:42:89:a3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  633.144103][T29002] bridge33: left promiscuous mode
[  633.146671][T29002] bridge33: left allmulticast mode
[  633.155701][T29002] bond63: (slave bridge34): Releasing backup interface
[  633.161705][T29002] bridge34: left promiscuous mode
[  633.164275][T29002] bridge34: left allmulticast mode
[  633.172294][T29002] bond66: (slave geneve7): Releasing backup interface
[  633.212795][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  633.216454][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  633.239113][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  633.243040][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  633.319230][T29014] xt_hashlimit: size too large, truncated to 1048576
[  633.406905][T29019] netlink: 'syz.0.6355': attribute type 4 has an invalid length.
[  633.468565][ T5076] lo speed is unknown, defaulting to 1000
[  633.470808][ T5076] sqz0: Port: 1 Link DOWN
[  633.472642][ T5076] lo speed is unknown, defaulting to 1000
[  633.546545][T29024] SET target dimension over the limit!
[  633.599251][T29023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  633.611031][T29026] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  633.619974][T29028] xt_hashlimit: size too large, truncated to 1048576
[  633.622643][T29028] xt_hashlimit: max too large, truncated to 1048576
[  633.714900][T29030] netlink: 'syz.2.6359': attribute type 13 has an invalid length.
[  634.171554][T29042] wg1 speed is unknown, defaulting to 1000
[  634.300222][T29048] geneve1: Caught tx_queue_len zero misconfig
[  634.374460][T29042] hsr0 speed is unknown, defaulting to 1000
[  634.380775][T29042] lo speed is unknown, defaulting to 1000
[  634.816008][T29070] netlink: 'syz.1.6370': attribute type 2 has an invalid length.
[  634.827016][T29070] netlink: 'syz.1.6370': attribute type 2 has an invalid length.
[  635.035799][T29081] netlink: 'syz.1.6373': attribute type 1 has an invalid length.
[  635.149298][T29089] netlink: 'syz.0.6375': attribute type 10 has an invalid length.
[  635.154225][T29090] netlink: 'syz.0.6375': attribute type 10 has an invalid length.
[  635.196095][T29090] ` (unregistering): Port device geneve1 removed
[  635.542642][T29112] __nla_validate_parse: 15 callbacks suppressed
[  635.542662][T29112] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6382'.
[  635.785923][T29136] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.6387'.
[  635.840730][T29136] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6387'.
[  636.074202][T29154] wg1 speed is unknown, defaulting to 1000
[  636.182297][T29154] hsr0 speed is unknown, defaulting to 1000
[  636.186068][T29154] lo speed is unknown, defaulting to 1000
[  636.302146][T29161] netlink: 'syz.0.6392': attribute type 1 has an invalid length.
[  636.308418][T29161] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6392'.
[  636.439149][T29171] syzkaller0: entered promiscuous mode
[  636.441531][T29171] syzkaller0: entered allmulticast mode
[  636.737104][T29193] netlink: 'syz.0.6399': attribute type 1 has an invalid length.
[  636.952275][T29203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6403'.
[  636.998185][T29208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6404'.
[  637.137151][T29218] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  637.146009][T29210] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6406'.
[  637.159981][T29218] syzkaller0: entered promiscuous mode
[  637.165140][T29218] syzkaller0: entered allmulticast mode
[  637.496651][T29235] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6413'.
[  637.729243][T29259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6420'.
[  637.732725][T29259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6420'.
[  637.950656][T29291] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  638.006217][T29296] syzkaller1: entered promiscuous mode
[  638.009756][T29296] syzkaller1: entered allmulticast mode
[  638.077230][T29303] validate_nla: 57 callbacks suppressed
[  638.077250][T29303] netlink: 'syz.0.6429': attribute type 6 has an invalid length.
[  638.173995][T29309] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  638.243553][T29315] netlink: 'syz.2.6434': attribute type 1 has an invalid length.
[  638.246764][T29315] netlink: 'syz.2.6434': attribute type 2 has an invalid length.
[  639.387942][T29348] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  639.394310][T29348] syzkaller0: entered promiscuous mode
[  639.397352][T29348] syzkaller0: entered allmulticast mode
[  639.474200][T29354] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  639.519343][T29356] netlink: 'syz.1.6451': attribute type 1 has an invalid length.
[  639.633676][T29362] netlink: 'syz.1.6453': attribute type 4 has an invalid length.
[  639.672557][T29367] veth0_macvtap: left promiscuous mode
[  639.675062][T29367] veth0_macvtap: entered promiscuous mode
[  639.694248][T29367] 8021q: adding VLAN 0 to HW filter on device bond1
[  639.697784][T29367] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  639.706836][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  639.712480][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  639.716330][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  639.722721][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  639.940466][T29375] netlink: 'syz.1.6457': attribute type 1 has an invalid length.
[  639.943196][T29375] netlink: 'syz.1.6457': attribute type 2 has an invalid length.
[  639.946122][T29375] netlink: 'syz.1.6457': attribute type 3 has an invalid length.
[  640.131498][T29341] tipc: Resetting bearer <eth:syzkaller0>
[  640.157123][T29341] tipc: Disabling bearer <eth:syzkaller0>
[  640.224620][T29384] syzkaller0: entered promiscuous mode
[  640.226747][T29384] syzkaller0: entered allmulticast mode
[  640.332219][T29387] wg1 speed is unknown, defaulting to 1000
[  640.444063][T29387] hsr0 speed is unknown, defaulting to 1000
[  640.447583][T29387] lo speed is unknown, defaulting to 1000
[  640.684660][T29392] netlink: 'syz.2.6460': attribute type 1 has an invalid length.
[  640.713027][T29392] ip6tnl0: Caught tx_queue_len zero misconfig
[  642.947703][T29375] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  643.062821][T29401] netlink: 'syz.0.6463': attribute type 1 has an invalid length.
[  643.082837][T29407] __nla_validate_parse: 11 callbacks suppressed
[  643.082851][T29407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6464'.
[  643.107486][T29403] bond79: (slave vxcan1): The slave device specified does not support setting the MAC address
[  643.113822][T29403] bond79: (slave vxcan1): Error -95 calling set_mac_address
[  643.126012][T29401] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6463'.
[  643.133283][T29407] bond0: entered promiscuous mode
[  643.135588][T29407] batadv_slave_0: entered promiscuous mode
[  643.138523][T29407] debugfs: 'hsr1' already exists in 'hsr'
[  643.140503][T29407] Cannot create hsr debugfs directory
[  643.153887][T29409] macvlan7: entered promiscuous mode
[  643.158036][T29409] macvlan7: entered allmulticast mode
[  643.160974][T29409] bond79: entered promiscuous mode
[  643.163697][T29409] 8021q: adding VLAN 0 to HW filter on device macvlan7
[  643.173686][T29409] bond79: left promiscuous mode
[  643.226504][T29414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  643.228921][T29414] IPv6: NLM_F_CREATE should be set when creating new route
[  643.231346][T29414] IPv6: NLM_F_CREATE should be set when creating new route
[  643.233928][T29414] IPv6: NLM_F_CREATE should be set when creating new route
[  643.385713][T29431] sctp: [Deprecated]: syz.0.6470 (pid 29431) Use of int in maxseg socket option.
[  643.385713][T29431] Use struct sctp_assoc_value instead
[  643.398478][T29427] netlink: 'syz.0.6470': attribute type 1 has an invalid length.
[  643.436100][T29427] bond80: entered promiscuous mode
[  643.438578][T29427] 8021q: adding VLAN 0 to HW filter on device bond80
[  643.459241][T29427] 8021q: adding VLAN 0 to HW filter on device bond80
[  643.470014][T29427] bond80: (slave wireguard1): The slave device specified does not support setting the MAC address
[  643.474141][T29427] bond80: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  643.486500][T29427] bond80: (slave wireguard1): making interface the new active one
[  643.491536][T29427] wireguard1: entered promiscuous mode
[  643.496710][T29427] bond80: (slave wireguard1): Enslaving as an active interface with an up link
[  643.561511][T29439] netlink: 136 bytes leftover after parsing attributes in process `syz.2.6473'.
[  643.566081][T29439] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6473'.
[  643.575834][T29439] netlink: 'syz.2.6473': attribute type 3 has an invalid length.
[  643.579654][T29439] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6473'.
[  643.717684][T29453] lo: MTU too low for tipc bearer
[  643.719653][T29453] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  643.805515][T29457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6480'.
[  643.812665][T29457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6480'.
[  643.992895][T29474] wg1 speed is unknown, defaulting to 1000
[  644.118294][T29474] hsr0 speed is unknown, defaulting to 1000
[  644.119080][T29441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6474'.
[  644.121293][T29474] lo speed is unknown, defaulting to 1000
[  644.124014][T29441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6474'.
[  644.292338][T29480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6484'.
[  644.831089][T29498] netlink: 'syz.2.6491': attribute type 89 has an invalid length.
[  644.942745][T29505] netlink: 'syz.1.6495': attribute type 1 has an invalid length.
[  644.999349][T29505] 8021q: adding VLAN 0 to HW filter on device bond55
[  645.002617][T29508] netlink: 'syz.1.6495': attribute type 1 has an invalid length.
[  645.062972][T29508] bond55: (slave gretap4): making interface the new active one
[  645.071457][T29508] bond55: (slave gretap4): Enslaving as an active interface with an up link
[  645.129573][T29510] netlink: 'syz.0.6497': attribute type 4 has an invalid length.
[  645.282132][T29518] sctp: [Deprecated]: syz.1.6498 (pid 29518) Use of struct sctp_assoc_value in delayed_ack socket option.
[  645.282132][T29518] Use struct sctp_sack_info instead
[  645.343073][T29523] netlink: 'syz.1.6498': attribute type 1 has an invalid length.
[  645.439528][T29536] veth0_virt_wifi: left allmulticast mode
[  645.442047][T29536] veth0_virt_wifi: left promiscuous mode
[  645.449881][T29536] bridge0: port 1(veth0_virt_wifi) entered disabled state
[  645.467921][T29536] bond61: (slave bridge0): Releasing backup interface
[  645.728941][T29551] wg2: Caught tx_queue_len zero misconfig
[  646.136980][T29565] netlink: 'syz.1.6510': attribute type 1 has an invalid length.
[  646.137435][T29566] netlink: 'syz.1.6510': attribute type 1 has an invalid length.
[  646.155206][T29565] bond56: entered promiscuous mode
[  646.157075][T29565] bond56: entered allmulticast mode
[  646.161830][T29565] 8021q: adding VLAN 0 to HW filter on device bond56
[  646.376610][T29584] xt_addrtype: ipv6 does not support BROADCAST matching
[  646.418221][T29586] netlink: 'syz.0.6516': attribute type 10 has an invalid length.
[  646.461382][T29589] veth1_to_team: entered promiscuous mode
[  646.464160][T29589] gretap0: entered promiscuous mode
[  646.467317][T29589] gretap0: left promiscuous mode
[  646.469713][T29589] veth1_to_team: left promiscuous mode
[  646.763504][T29596] bond80: entered allmulticast mode
[  646.765607][T29596] wireguard1: entered allmulticast mode
[  646.769928][T29595] bond80: left allmulticast mode
[  646.773174][T29595] wireguard1: left allmulticast mode
[  646.905730][T29614] openvswitch: netlink: IP tunnel dst address not specified
[  646.966308][T29616] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  647.042393][T29625] Unsupported ieee802154 address type: 0
[  647.096911][T29625] bond81: entered allmulticast mode
[  647.138728][T29636] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[  647.339202][T29650] veth1_to_hsr: left allmulticast mode
[  647.344963][T29650] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  647.354834][ T5689] lo speed is unknown, defaulting to 1000
[  647.361669][ T5689] sqz0: Port: 1 Link ACTIVE
[  647.365131][ T5689] lo speed is unknown, defaulting to 1000
[  647.395888][T29651] wg1 speed is unknown, defaulting to 1000
[  647.625128][T29651] hsr0 speed is unknown, defaulting to 1000
[  647.629597][T29651] lo speed is unknown, defaulting to 1000
[  648.229114][T29665] nbd1: detected capacity change from 0 to 63
[  648.249110][T29671] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  648.255309][   T55] block nbd1: Receive control failed (result -32)
[  648.256616][T28198] block nbd1: Send control failed (result -32)
[  648.310675][T28198] block nbd1: Request send failed, requeueing
[  648.385364][   T11] block nbd1: Dead connection, failed to find a fallback
[  648.388827][   T11] block nbd1: shutting down sockets
[  648.393537][   T11] blk_print_req_error: 138 callbacks suppressed
[  648.393556][   T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  648.397288][T28198] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  648.403715][   T11] buffer_io_error: 138 callbacks suppressed
[  648.403731][   T11] Buffer I/O error on dev nbd1, logical block 0, async page read
[  648.431437][T28198] Buffer I/O error on dev nbd1, logical block 1, async page read
[  648.434752][T28198] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  648.440252][T28198] Buffer I/O error on dev nbd1, logical block 2, async page read
[  648.443854][T28198] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  648.447393][T28198] Buffer I/O error on dev nbd1, logical block 3, async page read
[  648.451302][T28198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  648.455388][T28198] Buffer I/O error on dev nbd1, logical block 0, async page read
[  648.459795][T28198] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  648.465128][T28198] Buffer I/O error on dev nbd1, logical block 1, async page read
[  648.470557][T28198] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  648.474107][T28198] Buffer I/O error on dev nbd1, logical block 2, async page read
[  648.476651][T29683] bond69: (slave bond_slave_1): Device is not bonding slave
[  648.483212][T29683] bond69: option active_slave: invalid value (bond_slave_1)
[  648.486613][T28198] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  648.487285][T29683] bond69 (unregistering): Released all slaves
[  648.493714][T28198] Buffer I/O error on dev nbd1, logical block 3, async page read
[  648.497425][T28198] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  648.504007][T28198] Buffer I/O error on dev nbd1, logical block 0, async page read
[  648.509772][T28198] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  648.514242][T28198] Buffer I/O error on dev nbd1, logical block 1, async page read
[  648.522172][T28198] ldm_validate_partition_table(): Disk read failed.
[  648.525579][T28198] Dev nbd1: unable to read RDB block 0
[  648.530055][T28198]  nbd1: unable to read partition table
[  648.546185][T28198] ldm_validate_partition_table(): Disk read failed.
[  648.549654][T28198] Dev nbd1: unable to read RDB block 0
[  648.552180][T28198]  nbd1: unable to read partition table
[  648.774014][T29697] __nla_validate_parse: 22 callbacks suppressed
[  648.774027][T29697] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6548'.
[  648.822850][T29702] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  648.828634][T29704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6550'.
[  648.840188][T29702] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  648.986918][T29706] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  649.004182][T29706] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  649.044077][T29718] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6553'.
[  649.089051][T29720] validate_nla: 6 callbacks suppressed
[  649.089063][T29720] netlink: 'syz.1.6554': attribute type 10 has an invalid length.
[  649.094822][T29720] netlink: 'syz.1.6554': attribute type 1 has an invalid length.
[  649.097525][T29720] netlink: 'syz.1.6554': attribute type 2 has an invalid length.
[  649.165179][T29727] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  649.192793][T29727] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  649.312037][T29731] wg1 speed is unknown, defaulting to 1000
[  649.408838][T29731] hsr0 speed is unknown, defaulting to 1000
[  649.412152][T29731] lo speed is unknown, defaulting to 1000
[  649.946195][T29763] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6567'.
[  649.953173][T29764] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6567'.
[  649.972275][T29760] syzkaller0: entered promiscuous mode
[  649.986674][T29760] syzkaller0: entered allmulticast mode
[  650.242085][T29777] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  650.252878][T29777] netlink: 'syz.0.6572': attribute type 1 has an invalid length.
[  650.565010][T29791] netlink: 272 bytes leftover after parsing attributes in process `syz.1.6576'.
[  650.579703][T29793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6575'.
[  650.632016][T29795] netlink: 'syz.1.6577': attribute type 3 has an invalid length.
[  650.830807][T29802] vlan0: entered promiscuous mode
[  650.832968][T29802] bridge0: entered promiscuous mode
[  650.936294][T29802] netlink: 'syz.0.6579': attribute type 4 has an invalid length.
[  650.995678][T29807] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6580'.
[  651.226254][T29823] netlink: 'syz.2.6583': attribute type 1 has an invalid length.
[  651.289232][T29824] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  651.317152][T29818] bond69: (slave veth55): Enslaving as an active interface with a down link
[  651.325299][T29824] tipc: Resetting bearer <eth:syzkaller0>
[  651.335091][T29824] tipc: Disabling bearer <eth:syzkaller0>
[  651.394474][T29829] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6587'.
[  651.440077][T29833] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  651.454244][T29836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6589'.
[  651.469923][T29833] bond57: entered allmulticast mode
[  652.115734][T29889] netlink: 'syz.2.6603': attribute type 1 has an invalid length.
[  652.556205][T29919] netlink: 'syz.1.6607': attribute type 1 has an invalid length.
[  652.559994][T29912] wg1 speed is unknown, defaulting to 1000
[  652.562394][T29919] netlink: 'syz.1.6607': attribute type 1 has an invalid length.
[  652.594498][T29919] syzkaller1: entered promiscuous mode
[  652.607981][T29919] syzkaller1: entered allmulticast mode
[  652.771181][T29912] hsr0 speed is unknown, defaulting to 1000
[  652.773529][T29928] netlink: Unknown conntrack attr (0)
[  652.775138][T29912] lo speed is unknown, defaulting to 1000
[  652.876812][T29932] nbd: illegal input index -2046740822
[  652.958053][T29938] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  652.969729][T29938] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  652.974257][T29938] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  653.474128][T29962] syzkaller0: left promiscuous mode
[  653.475993][T29962] syzkaller0: left allmulticast mode
[  653.716709][T29997] ipt_rpfilter: unknown options
[  653.861485][T30004] __nla_validate_parse: 18 callbacks suppressed
[  653.861499][T30004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6631'.
[  653.870401][T30004] 8021q: adding VLAN 0 to HW filter on device bond83
[  653.915850][T30012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6632'.
[  654.072553][T30026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6637'.
[  654.130968][T30029] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  654.777629][T30041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6641'.
[  654.904754][T30050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6643'.
[  655.245251][T30068] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  655.252742][T30068] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  655.346755][T30086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6653'.
[  655.367465][T30086] bond58: entered promiscuous mode
[  655.369413][T30086] bond58: entered allmulticast mode
[  655.371381][T30086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6653'.
[  655.391955][T30091] syzkaller0: entered promiscuous mode
[  655.394356][T30091] syzkaller0: entered allmulticast mode
[  655.561556][T30097] wg1 speed is unknown, defaulting to 1000
[  655.680992][T30097] hsr0 speed is unknown, defaulting to 1000
[  655.683810][T30097] lo speed is unknown, defaulting to 1000
[  656.151420][T30106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6658'.
[  656.270836][T30112] syz.2.6660: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  656.281859][T30112] CPU: 1 UID: 0 PID: 30112 Comm: syz.2.6660 Not tainted syzkaller #0 PREEMPT(full) 
[  656.281879][T30112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  656.281888][T30112] Call Trace:
[  656.281893][T30112]  <TASK>
[  656.281899][T30112]  dump_stack_lvl+0xe8/0x150
[  656.281918][T30112]  warn_alloc+0x249/0x340
[  656.281938][T30112]  ? stack_trace_save+0xa9/0x100
[  656.281959][T30112]  ? __pfx_warn_alloc+0x10/0x10
[  656.281982][T30112]  ? kasan_save_track+0x4f/0x80
[  656.281997][T30112]  ? kasan_save_track+0x3e/0x80
[  656.282009][T30112]  ? __kasan_kmalloc+0x93/0xb0
[  656.282023][T30112]  ? __kmalloc_cache_noprof+0x31c/0x660
[  656.282037][T30112]  ? xskq_create+0x56/0x170
[  656.282052][T30112]  ? xsk_setsockopt+0x54c/0x990
[  656.282065][T30112]  ? do_sock_setsockopt+0x17c/0x1b0
[  656.282080][T30112]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  656.282095][T30112]  ? do_syscall_64+0x15f/0xf80
[  656.282107][T30112]  __vmalloc_node_range_noprof+0x132/0x1750
[  656.282143][T30112]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  656.282163][T30112]  ? __kasan_kmalloc+0x93/0xb0
[  656.282182][T30112]  vmalloc_user_noprof+0xad/0xe0
[  656.282197][T30112]  ? xskq_create+0xbf/0x170
[  656.282213][T30112]  xskq_create+0xbf/0x170
[  656.282230][T30112]  xsk_init_queue+0x8a/0xe0
[  656.282278][T30112]  xsk_setsockopt+0x54c/0x990
[  656.282297][T30112]  ? __pfx_xsk_setsockopt+0x10/0x10
[  656.282312][T30112]  ? __pfx_aa_sk_perm+0x10/0x10
[  656.282330][T30112]  ? aa_sock_opt_perm+0xff/0x1a0
[  656.282348][T30112]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  656.282364][T30112]  ? __pfx_xsk_setsockopt+0x10/0x10
[  656.282379][T30112]  do_sock_setsockopt+0x17c/0x1b0
[  656.282406][T30112]  __x64_sys_setsockopt+0x13d/0x1b0
[  656.282425][T30112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.282438][T30112]  do_syscall_64+0x15f/0xf80
[  656.282449][T30112]  ? trace_irq_disable+0x3b/0x140
[  656.282470][T30112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.282503][T30112] RIP: 0033:0x7f4c4bb9cdd9
[  656.282516][T30112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  656.282527][T30112] RSP: 002b:00007f4c4caa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  656.282542][T30112] RAX: ffffffffffffffda RBX: 00007f4c4be15fa0 RCX: 00007f4c4bb9cdd9
[  656.282550][T30112] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  656.282558][T30112] RBP: 00007f4c4bc32d69 R08: 0000000000000004 R09: 0000000000000000
[  656.282566][T30112] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  656.282573][T30112] R13: 00007f4c4be16038 R14: 00007f4c4be15fa0 R15: 00007ffea2354ba8
[  656.282594][T30112]  </TASK>
[  656.282700][T30112] Mem-Info:
[  656.389161][T30113] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6660'.
[  656.390187][T30112] active_anon:6499 inactive_anon:4 isolated_anon:0
[  656.390187][T30112]  active_file:7329 inactive_file:38889 isolated_file:0
[  656.390187][T30112]  unevictable:1768 dirty:96 writeback:0
[  656.390187][T30112]  slab_reclaimable:12259 slab_unreclaimable:145390
[  656.390187][T30112]  mapped:18542 shmem:2357 pagetables:3283
[  656.390187][T30112]  sec_pagetables:0 bounce:0
[  656.390187][T30112]  kernel_misc_reclaimable:0
[  656.390187][T30112]  free:1062676 free_pcp:12000 free_cma:0
[  656.390303][T30112] Node 0 active_anon:9836kB inactive_anon:8kB active_file:408kB inactive_file:129784kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34264kB dirty:180kB writeback:0kB shmem:4916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11528kB pagetables:2548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  656.390346][T30112] Node 1 active_anon:16160kB inactive_anon:8kB active_file:28908kB inactive_file:25772kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39904kB dirty:204kB writeback:0kB shmem:4512kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8656kB pagetables:10584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  656.390382][T30112] Node 0 DMA free:14328kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  656.390424][T30112] lowmem_reserve[]: 0 1587 2117 2117 2117
[  656.390455][T30112] Node 0 DMA32 free:1378652kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:924kB inactive_anon:0kB active_file:76kB inactive_file:31848kB unevictable:0kB writepending:156kB zspages:0kB present:2080636kB managed:1625236kB mlocked:0kB bounce:0kB free_pcp:988kB local_pcp:116kB free_cma:0kB
[  656.390496][T30112] lowmem_reserve[]: 0 0 530 530 530
[  656.390526][T30112] Node 0 Normal free:10612kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8904kB inactive_anon:8kB active_file:332kB inactive_file:97924kB unevictable:3536kB writepending:24kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:4668kB local_pcp:1672kB free_cma:0kB
[  656.390566][T30112] lowmem_reserve[]: 0 0 0 0 0
[  656.475855][T30112] Node 1 Normal free:2847112kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16160kB inactive_anon:8kB active_file:28908kB inactive_file:25772kB unevictable:3536kB writepending:204kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:42356kB local_pcp:10096kB free_cma:0kB
[  656.494067][T30112] lowmem_reserve[]: 0 0 0 0 0
[  656.495784][T30112] Node 0 DMA: 18*4kB (UME) 18*8kB (UME) 20*16kB (UME) 15*32kB (UM) 12*64kB (UME) 6*128kB (UME) 2*256kB (M) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 1*4096kB (U) = 14328kB
[  656.522843][T30112] Node 0 DMA32: 1192*4kB (UME) 1215*8kB (UME) 928*16kB (UME) 836*32kB (UME) 354*64kB (UME) 136*128kB (UME) 77*256kB (UME) 56*512kB (UM) 41*1024kB (UME) 24*2048kB (UME) 279*4096kB (UM) = 1378456kB
[  656.531602][T30112] Node 0 Normal: 407*4kB (UME) 141*8kB (UME) 153*16kB (UME) 11*32kB (ME) 7*64kB (ME) 4*128kB (E) 4*256kB (ME) 2*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 10612kB
[  656.539788][T30112] Node 1 Normal: 1954*4kB (UME) 1774*8kB (UME) 1483*16kB (UM) 326*32kB (UME) 891*64kB (UME) 522*128kB (UME) 318*256kB (UME) 240*512kB (UME) 173*1024kB (UME) 24*2048kB (UME) 546*4096kB (UM) = 2847016kB
[  656.556475][T30112] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  656.570507][T30112] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  656.579454][T30112] 48576 total pagecache pages
[  656.583130][T30112] 1 pages in swap cache
[  656.589441][T30112] Free swap  = 124992kB
[  656.598162][T30112] Total swap = 124996kB
[  656.599493][T30112] 1834877 pages RAM
[  656.600769][T30112] 0 pages HighMem/MovableOnly
[  656.602223][T30112] 390269 pages reserved
[  656.603545][T30112] 0 pages cma reserved
[  656.658656][T30123] validate_nla: 6 callbacks suppressed
[  656.658671][T30123] netlink: 'syz.0.6664': attribute type 1 has an invalid length.
[  656.713239][T30129] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6664'.
[  656.719759][T30123] bond84: entered promiscuous mode
[  656.721784][T30123] 8021q: adding VLAN 0 to HW filter on device bond84
[  657.063562][T30153] netlink: 'syz.0.6674': attribute type 1 has an invalid length.
[  657.574748][T30213] syzkaller0: entered promiscuous mode
[  657.577367][T30213] syzkaller0: entered allmulticast mode
[  657.643579][T30222] bond59: option lacp_active: invalid value (8)
[  657.646501][T30222] bond59 (unregistering): Released all slaves
[  657.959221][T30263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  658.865270][T30304] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  659.039068][T30326] __nla_validate_parse: 19 callbacks suppressed
[  659.039123][T30326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6720'.
[  659.270460][T30334] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode
[  659.367495][T30339] netlink: 'syz.2.6724': attribute type 1 has an invalid length.
[  659.424097][T30339] bond70: entered promiscuous mode
[  659.431625][T30339] bond70: entered allmulticast mode
[  659.434315][T30339] 8021q: adding VLAN 0 to HW filter on device bond70
[  659.478636][T30339] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6724'.
[  659.570391][T30345] bond59: option arp_interval: invalid value (18446744073709551615)
[  659.577193][T30345] bond59: option arp_interval: allowed values 0 - 2147483647
[  659.586435][T30345] bond59 (unregistering): Released all slaves
[  659.603184][T30348] xt_l2tp: v2 doesn't support IP mode
[  659.679690][T30358] netlink: 'syz.2.6730': attribute type 21 has an invalid length.
[  659.682741][T30358] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6730'.
[  659.686369][T30358] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6730'.
[  659.847517][T30364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6732'.
[  659.939878][T30377] netlink: 'syz.0.6735': attribute type 1 has an invalid length.
[  659.944979][T30378] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  659.965383][T30377] 8021q: adding VLAN 0 to HW filter on device bond86
[  660.043174][T30377] bond86: (slave veth33): Enslaving as an active interface with a down link
[  660.231528][T30395] netlink: set zone limit has 4 unknown bytes
[  660.283350][T30395] netlink: set zone limit has 4 unknown bytes
[  660.495902][T30407] netlink: 'syz.0.6743': attribute type 10 has an invalid length.
[  660.500670][T30407] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6743'.
[  660.659685][T30423] netlink: 'syz.1.6749': attribute type 5 has an invalid length.
[  660.855038][T30435] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  660.859093][T30435] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  660.863003][T30435] tipc: Invalid UDP bearer configuration
[  660.863038][T30435] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  660.999817][T30439] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6754'.
[  661.003573][T30439] tunl0: Caught tx_queue_len zero misconfig
[  661.025155][T30439] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  661.031074][T30439] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  661.802706][T30463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6761'.
[  661.816538][T30457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6760'.
[  661.884885][T30466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6762'.
[  661.960137][T30477] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  661.969698][T30478] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  662.114737][T30501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  662.134167][   T55] block nbd3: Receive control failed (result -32)
[  662.188606][T30507] netlink: 'syz.2.6772': attribute type 5 has an invalid length.
[  662.351400][T30521] bond89 (unregistering): Released all slaves
[  662.566949][T30540] syzkaller0: left promiscuous mode
[  662.569271][T30540] syzkaller0: left allmulticast mode
[  662.614315][T30548] netlink: 'syz.1.6785': attribute type 1 has an invalid length.
[  662.616804][T30548] netlink: 'syz.1.6785': attribute type 2 has an invalid length.
[  663.130727][T30589] xt_hashlimit: size too large, truncated to 1048576
[  663.134914][T30584] netlink: 'syz.1.6793': attribute type 3 has an invalid length.
[  663.206431][T30593] netlink: 'syz.2.6794': attribute type 1 has an invalid length.
[  663.411973][T30598] netlink: 'syz.2.6796': attribute type 11 has an invalid length.
[  664.112189][T30605] __nla_validate_parse: 10 callbacks suppressed
[  664.112207][T30605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6797'.
[  664.118932][T30605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6797'.
[  664.214971][T30609] openvswitch: netlink: Message has 4 unknown bytes.
[  664.220043][T30609] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  664.489395][T30620] syzkaller1: entered promiscuous mode
[  664.492362][T30620] syzkaller1: entered allmulticast mode
[  664.578271][T30634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6805'.
[  664.616267][T30641] netlink: 'syz.2.6807': attribute type 11 has an invalid length.
[  664.619030][T30641] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.6807'.
[  664.765943][T30655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6810'.
[  664.776313][T30655] vlan7: entered promiscuous mode
[  664.780041][T30659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6811'.
[  664.891223][T30664] netlink: 'syz.2.6812': attribute type 13 has an invalid length.
[  664.897546][T30664] netlink: 'syz.2.6812': attribute type 17 has an invalid length.
[  665.060742][T30671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6812'.
[  665.328600][T30666] openvswitch: : Dropping previously announced user features
[  665.368701][T30664] gre0: left promiscuous mode
[  665.375668][T30664] gre0: left allmulticast mode
[  665.433841][T30680] netlink: 'syz.1.6815': attribute type 1 has an invalid length.
[  665.437234][T30680] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6815'.
[  665.441891][T30664] 8021q: adding VLAN 0 to HW filter on device 
[  665.487332][T30664] A link change request failed with some changes committed already. Interface ; may have been left with an inconsistent configuration, please check.
[  665.506278][T12296] wg1 speed is unknown, defaulting to 1000
[  665.523456][T30680] vti0: entered promiscuous mode
[  665.535795][T12296] wg1 speed is unknown, defaulting to 1000
[  665.546388][ T5076] wg1 speed is unknown, defaulting to 1000
[  665.625913][T30688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6819'.
[  665.650753][T30686] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6817'.
[  665.947478][T30709] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  665.959360][T30709] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  666.676514][T30741] openvswitch: netlink: IPv4 tun info is not correct
[  667.201952][T30750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  667.213443][T30754] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  667.245228][ T5076] wg1 speed is unknown, defaulting to 1000
[  667.248522][T17666] syz1: Port: 1 Link DOWN
[  667.253084][ T5076] syz0: Port: 1 Link DOWN
[  667.262242][   T12] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  667.269565][ T5076] wg1 speed is unknown, defaulting to 1000
[  667.271654][   T12] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  667.282935][   T12] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  667.291551][   T12] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  667.548111][T30800] netlink: 'syz.1.6849': attribute type 13 has an invalid length.
[  667.772184][T30818] nbd: couldn't find a device at index 65546
[  667.790610][T30818] wg1 speed is unknown, defaulting to 1000
[  667.894841][T30818] hsr0 speed is unknown, defaulting to 1000
[  667.902069][T30818] lo speed is unknown, defaulting to 1000
[  667.914112][T30834] netlink: 'syz.0.6859': attribute type 1 has an invalid length.
[  668.003649][T30836] 8021q: adding VLAN 0 to HW filter on device bond89
[  668.422976][T30851] netlink: 'syz.1.6864': attribute type 10 has an invalid length.
[  668.628256][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  668.883608][T30906] netlink: 'syz.2.6874': attribute type 3 has an invalid length.
[  668.888511][T30906] netlink: 'syz.2.6874': attribute type 1 has an invalid length.
[  669.063527][T30894] tipc: Resetting bearer <eth:syzkaller0>
[  669.127963][T30908] __nla_validate_parse: 24 callbacks suppressed
[  669.127977][T30908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6875'.
[  669.134642][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.141878][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.164174][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.167906][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  669.171098][T30912] netlink: 4688 bytes leftover after parsing attributes in process `syz.0.6876'.
[  669.261655][T30925] netlink: 'syz.0.6881': attribute type 21 has an invalid length.
[  669.270285][T30925] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6881'.
[  669.273946][T30925] netlink: 'syz.0.6881': attribute type 4 has an invalid length.
[  669.276944][T30925] netlink: 'syz.0.6881': attribute type 5 has an invalid length.
[  669.280947][T30925] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6881'.
[  669.366295][T30935] netlink: 'syz.2.6883': attribute type 10 has an invalid length.
[  669.369489][T30935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6883'.
[  669.554404][T30952] netlink: 'syz.0.6889': attribute type 1 has an invalid length.
[  669.571498][T30952] 8021q: adding VLAN 0 to HW filter on device bond90
[  669.590543][T30952] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  669.611911][T30955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6890'.
[  669.630681][T17667] bridge0: entered promiscuous mode
[  669.684839][T30961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6892'.
[  669.696698][T30961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6892'.
[  669.701746][T30961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6892'.
[  669.705774][T30961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6892'.
[  670.009611][T30978] bond60 (unregistering): Released all slaves
[  670.184763][   T33] audit: type=1804 audit(1778605216.009:23): pid=31005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6904" name="/newroot/2151/cgroup.controllers" dev="tmpfs" ino=11022 res=1 errno=0
[  670.217316][   T33] audit: type=1800 audit(1778605216.009:24): pid=31005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6904" name="cgroup.controllers" dev="tmpfs" ino=11022 res=0 errno=0
[  670.252649][T31009] openvswitch: netlink: Flow actions attr not present in new flow.
[  670.360058][T31021] openvswitch: netlink: Actions may not be safe on all matching packets
[  670.639945][T31042] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  670.810822][T31047] sctp: [Deprecated]: syz.0.6915 (pid 31047) Use of int in maxseg socket option.
[  670.810822][T31047] Use struct sctp_assoc_value instead
[  671.433793][T31067] tipc: Failed to remove unknown binding: 66,1,1/2886997162:834907518/834907520
[  671.438886][T31067] tipc: Failed to remove unknown binding: 66,1,1/2886997162:834907518/834907520
[  671.851984][T31096] syzkaller0: entered promiscuous mode
[  671.853943][T31096] syzkaller0: entered allmulticast mode
[  671.951371][T31102] syzkaller0: left promiscuous mode
[  671.954510][T31102] tipc: Resetting bearer <eth:syzkaller0>
[  671.957166][T31102] tipc: Resetting bearer <eth:syzkaller0>
[  671.961030][T31102] vlan0: left promiscuous mode
[  671.963541][T31102] erspan0: left promiscuous mode
[  671.967064][T31102] geneve6: left promiscuous mode
[  671.970624][T31102] bond39: left promiscuous mode
[  671.973112][T31102] erspan1: left promiscuous mode
[  671.975569][T31102] bond42: left promiscuous mode
[  671.977713][T31102] vlan6: left promiscuous mode
[  671.980311][T31102] bond44: left promiscuous mode
[  671.982476][T31102] batadv0: left promiscuous mode
[  671.984980][T31102] bridge40: left promiscuous mode
[  671.987308][T31102] bond45: left promiscuous mode
[  671.989976][T31102] wireguard0: left promiscuous mode
[  671.993300][T31102] bond46: left promiscuous mode
[  671.995271][T31102] bond47: left promiscuous mode
[  671.997170][T31102] bond48: left promiscuous mode
[  672.000667][T31102] bond49: left promiscuous mode
[  672.002416][T31102] team0: left promiscuous mode
[  672.004374][T31102] team1: left promiscuous mode
[  672.006162][T31102] bond52: left promiscuous mode
[  672.007769][T31102] bridge44: left promiscuous mode
[  672.010166][T31102] macsec1: left promiscuous mode
[  672.011962][T31102] bond53: left promiscuous mode
[  672.013753][T31102] bond54: left promiscuous mode
[  672.015635][T31102] bond56: left promiscuous mode
[  672.017528][T31102] bond58: left promiscuous mode
[  672.019875][T31102] vti0: left promiscuous mode
[  672.425703][T31131] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  672.511780][T31143] nbd: must specify at least one socket
[  672.513861][T31142] nbd: must specify at least one socket
[  672.730478][T31159] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  672.825200][T31173] sctp: [Deprecated]: syz.0.6956 (pid 31173) Use of struct sctp_assoc_value in delayed_ack socket option.
[  672.825200][T31173] Use struct sctp_sack_info instead
[  672.897119][T31185] validate_nla: 13 callbacks suppressed
[  672.897131][T31185] netlink: 'syz.1.6960': attribute type 10 has an invalid length.
[  673.006535][T31195] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  673.014754][T31195] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  673.022492][T31195] tipc: Invalid UDP bearer configuration
[  673.022540][T31195] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  673.193325][T31202] wg1 speed is unknown, defaulting to 1000
[  673.261766][T31216] xt_hashlimit: size too large, truncated to 1048576
[  673.327416][T31202] hsr0 speed is unknown, defaulting to 1000
[  673.338295][T31202] lo speed is unknown, defaulting to 1000
[  673.369042][T31219] wg1 speed is unknown, defaulting to 1000
[  673.603151][T31219] hsr0 speed is unknown, defaulting to 1000
[  673.609204][T31219] lo speed is unknown, defaulting to 1000
[  673.746139][T31232] netlink: 'syz.2.6971': attribute type 2 has an invalid length.
[  673.754407][T31232] xt_hashlimit: invalid rate
[  674.203233][T31263] siw: device registration error -23
[  674.384714][T31282] netlink: 'syz.0.6984': attribute type 1 has an invalid length.
[  674.518315][T31288] bond91: (slave veth35): Enslaving as an active interface with a down link
[  674.519841][T31282] __nla_validate_parse: 95 callbacks suppressed
[  674.519861][T31282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6984'.
[  674.525816][T31280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6983'.
[  674.567092][T31282] 8021q: adding VLAN 0 to HW filter on device bond91
[  674.569116][T31288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6984'.
[  674.814391][T31300] block nbd0: reconnected socket
[  674.819417][T31300] nbd: socks must be embedded in a SOCK_ITEM attr
[  674.882998][T31305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6988'.
[  674.932386][T15736] block nbd0: Receive control failed (result -32)
[  674.996142][T31307] netlink: 'syz.1.6991': attribute type 1 has an invalid length.
[  675.039673][T31307] 8021q: adding VLAN 0 to HW filter on device bond60
[  675.047619][T31310] netlink: 'syz.0.6992': attribute type 4 has an invalid length.
[  675.052132][T31310] netlink: 17 bytes leftover after parsing attributes in process `syz.0.6992'.
[  675.070383][T31307] sctp: [Deprecated]: syz.1.6991 (pid 31307) Use of int in maxseg socket option.
[  675.070383][T31307] Use struct sctp_assoc_value instead
[  675.187072][T31317] netlink: 'syz.1.6994': attribute type 29 has an invalid length.
[  675.192241][T31317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6994'.
[  675.196604][T31317] netlink: 'syz.1.6994': attribute type 29 has an invalid length.
[  675.200795][T31317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6994'.
[  675.211234][T31317] netlink: 'syz.1.6994': attribute type 29 has an invalid length.
[  675.217647][T31317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6994'.
[  675.221625][T31317] netlink: 'syz.1.6994': attribute type 29 has an invalid length.
[  675.224778][T31317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6994'.
[  675.229544][T31317] netlink: 'syz.1.6994': attribute type 29 has an invalid length.
[  675.233205][T31317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6994'.
[  675.260092][T31321] hsr0: entered promiscuous mode
[  675.272265][T31320] bond92: (slave vxcan1): The slave device specified does not support setting the MAC address
[  675.277092][T31320] bond92: (slave vxcan1): Error -95 calling set_mac_address
[  675.307316][T31316] hsr0: left promiscuous mode
[  675.320066][T31323] macvlan8: entered promiscuous mode
[  675.322025][T31323] macvlan8: entered allmulticast mode
[  675.324567][T31323] bond92: entered promiscuous mode
[  675.328970][T31323] 8021q: adding VLAN 0 to HW filter on device macvlan8
[  675.345637][T31323] bond92: left promiscuous mode
[  675.483677][T31336] lo: MTU too low for tipc bearer
[  675.486134][T31336] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  675.531265][T31342] netlink: 'syz.2.7001': attribute type 11 has an invalid length.
[  675.902527][T31354] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  676.504236][T31396] Cannot find del_set index 3 as target
[  676.725793][T31417] bond61: option packets_per_slave: invalid value (541786145)
[  676.728883][T31417] bond61: option packets_per_slave: allowed values 0 - 65535
[  676.732527][T31417] bond61 (unregistering): Released all slaves
[  676.755606][T31416] bond61: option packets_per_slave: invalid value (541786145)
[  676.758621][T31416] bond61: option packets_per_slave: allowed values 0 - 65535
[  676.763739][T31416] bond61 (unregistering): Released all slaves
[  676.907481][T31436] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  676.912980][T31438] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  676.946586][T31435] xt_TCPMSS: Only works on TCP SYN packets
[  677.052996][T31450] bond44: (slave batadv0): Releasing active interface
[  677.055271][T31450] batadv0 (unregistering): left allmulticast mode
[  677.111972][T31453] 
[  677.112821][T31453] ======================================================
[  677.115034][T31453] WARNING: possible circular locking dependency detected
[  677.117219][T31453] syzkaller #0 Not tainted
[  677.119228][T31453] ------------------------------------------------------
[  677.122051][T31453] syz.2.7028/31453 is trying to acquire lock:
[  677.124466][T31453] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  677.128667][T31453] 
[  677.128667][T31453] but task is already holding lock:
[  677.132043][T31453] ffffffff8e7eb750 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  677.136254][T31453] 
[  677.136254][T31453] which lock already depends on the new lock.
[  677.136254][T31453] 
[  677.140665][T31453] 
[  677.140665][T31453] the existing dependency chain (in reverse order) is:
[  677.144541][T31453] 
[  677.144541][T31453] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  677.147541][T31453]        cpus_read_lock+0x42/0x160
[  677.149613][T31453]        static_key_slow_inc+0x12/0x30
[  677.151957][T31453]        nbd_genl_reconfigure+0x132f/0x1ea0
[  677.154670][T31453]        genl_family_rcv_msg_doit+0x22a/0x330
[  677.157330][T31453]        genl_rcv_msg+0x61c/0x7a0
[  677.159442][T31453]        netlink_rcv_skb+0x232/0x4b0
[  677.161605][T31453]        genl_rcv+0x28/0x40
[  677.163466][T31453]        netlink_unicast+0x75c/0x8e0
[  677.165716][T31453]        netlink_sendmsg+0x813/0xb40
[  677.168250][T31453]        ____sys_sendmsg+0x972/0x9f0
[  677.170510][T31453]        ___sys_sendmsg+0x2a5/0x360
[  677.172377][T31453]        __x64_sys_sendmsg+0x1bd/0x2a0
[  677.174571][T31453]        do_syscall_64+0x15f/0xf80
[  677.176787][T31453]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.179787][T31453] 
[  677.179787][T31453] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  677.182929][T31453]        __mutex_lock+0x1a3/0x1550
[  677.184995][T31453]        nbd_queue_rq+0x37b/0x1100
[  677.187147][T31453]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  677.189810][T31453]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  677.192871][T31453]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  677.195557][T31453]        blk_mq_run_hw_queue+0x348/0x4f0
[  677.197857][T31453]        blk_mq_dispatch_list+0xd16/0xe10
[  677.200249][T31453]        blk_mq_flush_plug_list+0x48d/0x570
[  677.202835][T31453]        __blk_flush_plug+0x3ed/0x4d0
[  677.205402][T31453]        __submit_bio+0x28d/0x580
[  677.207576][T31453]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  677.210071][T31453]        block_read_full_folio+0x599/0x830
[  677.212306][T31453]        filemap_read_folio+0x137/0x3b0
[  677.214589][T31453]        do_read_cache_folio+0x358/0x590
[  677.217073][T31453]        read_part_sector+0xb6/0x2b0
[  677.219349][T31453]        adfspart_check_ICS+0xb1/0x960
[  677.221668][T31453]        bdev_disk_changed+0x817/0x1770
[  677.223959][T31453]        blkdev_get_whole+0x380/0x510
[  677.226129][T31453]        bdev_open+0x31e/0xd30
[  677.228151][T31453]        blkdev_open+0x470/0x610
[  677.230192][T31453]        do_dentry_open+0x785/0x14e0
[  677.232384][T31453]        vfs_open+0x3b/0x340
[  677.234468][T31453]        path_openat+0x2e08/0x3860
[  677.236730][T31453]        do_file_open+0x23e/0x4a0
[  677.238826][T31453]        do_sys_openat2+0x113/0x200
[  677.240966][T31453]        __x64_sys_openat+0x138/0x170
[  677.243220][T31453]        do_syscall_64+0x15f/0xf80
[  677.245286][T31453]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.247945][T31453] 
[  677.247945][T31453] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  677.251345][T31453]        __mutex_lock+0x1a3/0x1550
[  677.253716][T31453]        nbd_queue_rq+0xc6/0x1100
[  677.255831][T31453]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  677.258366][T31453]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  677.261191][T31453]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  677.264301][T31453]        blk_mq_run_hw_queue+0x348/0x4f0
[  677.267126][T31453]        blk_mq_dispatch_list+0xd16/0xe10
[  677.269508][T31453]        blk_mq_flush_plug_list+0x48d/0x570
[  677.271919][T31453]        __blk_flush_plug+0x3ed/0x4d0
[  677.274150][T31453]        __submit_bio+0x28d/0x580
[  677.276210][T31453]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  677.278927][T31453]        block_read_full_folio+0x599/0x830
[  677.281642][T31453]        filemap_read_folio+0x137/0x3b0
[  677.283988][T31453]        do_read_cache_folio+0x358/0x590
[  677.286286][T31453]        read_part_sector+0xb6/0x2b0
[  677.288495][T31453]        adfspart_check_ICS+0xb1/0x960
[  677.290803][T31453]        bdev_disk_changed+0x817/0x1770
[  677.293402][T31453]        blkdev_get_whole+0x380/0x510
[  677.295695][T31453]        bdev_open+0x31e/0xd30
[  677.297656][T31453]        blkdev_open+0x470/0x610
[  677.299676][T31453]        do_dentry_open+0x785/0x14e0
[  677.301813][T31453]        vfs_open+0x3b/0x340
[  677.303896][T31453]        path_openat+0x2e08/0x3860
[  677.306482][T31453]        do_file_open+0x23e/0x4a0
[  677.308770][T31453]        do_sys_openat2+0x113/0x200
[  677.310900][T31453]        __x64_sys_openat+0x138/0x170
[  677.313154][T31453]        do_syscall_64+0x15f/0xf80
[  677.315255][T31453]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.317894][T31453] 
[  677.317894][T31453] -> #3 (set->srcu){.+.+}-{0:0}:
[  677.320889][T31453]        __synchronize_srcu+0xca/0x300
[  677.323408][T31453]        elevator_switch+0x1e8/0x7a0
[  677.325825][T31453]        elevator_change+0x2cc/0x450
[  677.327982][T31453]        elevator_set_default+0x36c/0x430
[  677.330274][T31453]        blk_register_queue+0x3e9/0x4e0
[  677.332471][T31453]        __add_disk+0x677/0xd50
[  677.334643][T31453]        add_disk_fwnode+0xfb/0x480
[  677.337098][T31453]        nbd_dev_add+0x72c/0xb50
[  677.339271][T31453]        nbd_init+0x168/0x1f0
[  677.341202][T31453]        do_one_initcall+0x250/0x870
[  677.343380][T31453]        do_initcall_level+0x104/0x190
[  677.345611][T31453]        do_initcalls+0x59/0xa0
[  677.347622][T31453]        kernel_init_freeable+0x2a6/0x3e0
[  677.350130][T31453]        kernel_init+0x1d/0x1d0
[  677.352266][T31453]        ret_from_fork+0x514/0xb70
[  677.354518][T31453]        ret_from_fork_asm+0x1a/0x30
[  677.356716][T31453] 
[  677.356716][T31453] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  677.359838][T31453]        __mutex_lock+0x1a3/0x1550
[  677.362052][T31453]        elevator_change+0x1b3/0x450
[  677.364423][T31453]        elevator_set_none+0xb5/0x140
[  677.366805][T31453]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  677.369395][T31453]        nbd_start_device+0x17f/0xb10
[  677.371563][T31453]        nbd_genl_connect+0x165b/0x1cf0
[  677.373950][T31453]        genl_family_rcv_msg_doit+0x22a/0x330
[  677.376658][T31453]        genl_rcv_msg+0x61c/0x7a0
[  677.378840][T31453]        netlink_rcv_skb+0x232/0x4b0
[  677.381352][T31453]        genl_rcv+0x28/0x40
[  677.383309][T31453]        netlink_unicast+0x75c/0x8e0
[  677.385566][T31453]        netlink_sendmsg+0x813/0xb40
[  677.387840][T31453]        ____sys_sendmsg+0x972/0x9f0
[  677.389987][T31453]        ___sys_sendmsg+0x2a5/0x360
[  677.392200][T31453]        __x64_sys_sendmsg+0x1bd/0x2a0
[  677.394733][T31453]        do_syscall_64+0x15f/0xf80
[  677.396935][T31453]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.399532][T31453] 
[  677.399532][T31453] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  677.402946][T31453]        blk_alloc_queue+0x546/0x680
[  677.405198][T31453]        __blk_mq_alloc_disk+0x197/0x390
[  677.407641][T31453]        nbd_dev_add+0x499/0xb50
[  677.409815][T31453]        nbd_init+0x168/0x1f0
[  677.411805][T31453]        do_one_initcall+0x250/0x870
[  677.413974][T31453]        do_initcall_level+0x104/0x190
[  677.416177][T31453]        do_initcalls+0x59/0xa0
[  677.418246][T31453]        kernel_init_freeable+0x2a6/0x3e0
[  677.420857][T31453]        kernel_init+0x1d/0x1d0
[  677.422982][T31453]        ret_from_fork+0x514/0xb70
[  677.425181][T31453]        ret_from_fork_asm+0x1a/0x30
[  677.427390][T31453] 
[  677.427390][T31453] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  677.430332][T31453]        __lock_acquire+0x15a5/0x2cf0
[  677.432534][T31453]        lock_acquire+0x106/0x350
[  677.434798][T31453]        fs_reclaim_acquire+0x71/0x100
[  677.437320][T31453]        __kmalloc_cache_noprof+0x40/0x660
[  677.439750][T31453]        find_css_set+0xb41/0x1b40
[  677.441859][T31453]        cgroup_migrate_prepare_dst+0x130/0x700
[  677.444416][T31453]        cgroup_attach_task+0x47c/0x840
[  677.446792][T31453]        __cgroup1_procs_write+0x2d2/0x3d0
[  677.449458][T31453]        cgroup_file_write+0x331/0x8f0
[  677.451792][T31453]        kernfs_fop_write_iter+0x3af/0x540
[  677.454208][T31453]        vfs_write+0x61d/0xb90
[  677.456173][T31453]        ksys_write+0x150/0x270
[  677.458278][T31453]        do_syscall_64+0x15f/0xf80
[  677.460675][T31453]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.463681][T31453] 
[  677.463681][T31453] other info that might help us debug this:
[  677.463681][T31453] 
[  677.467711][T31453] Chain exists of:
[  677.467711][T31453]   fs_reclaim --> &nsock->tx_lock --> cpu_hotplug_lock
[  677.467711][T31453] 
[  677.472602][T31453]  Possible unsafe locking scenario:
[  677.472602][T31453] 
[  677.475535][T31453]        CPU0                    CPU1
[  677.477792][T31453]        ----                    ----
[  677.480147][T31453]   rlock(cpu_hotplug_lock);
[  677.482143][T31453]                                lock(&nsock->tx_lock);
[  677.485038][T31453]                                lock(cpu_hotplug_lock);
[  677.487882][T31453]   lock(fs_reclaim);
[  677.489543][T31453] 
[  677.489543][T31453]  *** DEADLOCK ***
[  677.489543][T31453] 
[  677.492839][T31453] 5 locks held by syz.2.7028/31453:
[  677.495044][T31453]  #0: ffff8881713a74f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  677.499115][T31453]  #1: ffff8881116ac410 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x227/0xb90
[  677.502831][T31453]  #2: ffff888173a53c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540
[  677.506715][T31453]  #3: ffffffff8e99c420 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230
[  677.510815][T31453]  #4: ffffffff8e7eb750 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  677.515064][T31453] 
[  677.515064][T31453] stack backtrace:
[  677.517463][T31453] CPU: 1 UID: 0 PID: 31453 Comm: syz.2.7028 Not tainted syzkaller #0 PREEMPT(full) 
[  677.517482][T31453] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  677.517492][T31453] Call Trace:
[  677.517499][T31453]  <TASK>
[  677.517508][T31453]  dump_stack_lvl+0xe8/0x150
[  677.517527][T31453]  print_circular_bug+0x2e1/0x300
[  677.517547][T31453]  check_noncircular+0x12e/0x150
[  677.517568][T31453]  __lock_acquire+0x15a5/0x2cf0
[  677.517585][T31453]  ? __lock_acquire+0x6b5/0x2cf0
[  677.517602][T31453]  ? __lock_acquire+0x6b5/0x2cf0
[  677.517616][T31453]  ? __kmalloc_cache_noprof+0x40/0x660
[  677.517633][T31453]  lock_acquire+0x106/0x350
[  677.517645][T31453]  ? __kmalloc_cache_noprof+0x40/0x660
[  677.517666][T31453]  fs_reclaim_acquire+0x71/0x100
[  677.517683][T31453]  ? __kmalloc_cache_noprof+0x40/0x660
[  677.517699][T31453]  __kmalloc_cache_noprof+0x40/0x660
[  677.517715][T31453]  ? find_css_set+0xb41/0x1b40
[  677.517733][T31453]  ? _raw_spin_unlock_irq+0x23/0x50
[  677.517751][T31453]  find_css_set+0xb41/0x1b40
[  677.517773][T31453]  ? __pfx_find_css_set+0x10/0x10
[  677.517797][T31453]  cgroup_migrate_prepare_dst+0x130/0x700
[  677.517819][T31453]  cgroup_attach_task+0x47c/0x840
[  677.517831][T31453]  ? __pfx_cgroup_attach_task+0x10/0x10
[  677.517845][T31453]  ? get_task_cred+0x23/0x300
[  677.517863][T31453]  ? get_task_cred+0x23/0x300
[  677.517878][T31453]  ? get_task_cred+0x23/0x300
[  677.517893][T31453]  ? get_task_cred+0x2c1/0x300
[  677.517909][T31453]  ? get_task_cred+0x23/0x300
[  677.517927][T31453]  __cgroup1_procs_write+0x2d2/0x3d0
[  677.517945][T31453]  ? __pfx___cgroup1_procs_write+0x10/0x10
[  677.517960][T31453]  ? kernfs_root+0x1c/0x230
[  677.517975][T31453]  ? kernfs_root+0x1c/0x230
[  677.517990][T31453]  ? kernfs_root+0x1ea/0x230
[  677.518032][T31453]  ? __pfx_cgroup1_tasks_write+0x10/0x10
[  677.518050][T31453]  cgroup_file_write+0x331/0x8f0
[  677.518070][T31453]  ? __pfx_cgroup_file_write+0x10/0x10
[  677.518090][T31453]  ? __pfx_cgroup_file_write+0x10/0x10
[  677.518107][T31453]  kernfs_fop_write_iter+0x3af/0x540
[  677.518122][T31453]  vfs_write+0x61d/0xb90
[  677.518148][T31453]  ? __pfx_vfs_write+0x10/0x10
[  677.518168][T31453]  ? __fget_files+0x2a/0x420
[  677.518186][T31453]  ksys_write+0x150/0x270
[  677.518204][T31453]  ? __pfx_ksys_write+0x10/0x10
[  677.518224][T31453]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.518237][T31453]  do_syscall_64+0x15f/0xf80
[  677.518249][T31453]  ? trace_irq_disable+0x3b/0x140
[  677.518269][T31453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.518282][T31453] RIP: 0033:0x7f4c4bb9cdd9
[  677.518295][T31453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  677.518307][T31453] RSP: 002b:00007f4c4caa1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  677.518322][T31453] RAX: ffffffffffffffda RBX: 00007f4c4be15fa0 RCX: 00007f4c4bb9cdd9
[  677.518333][T31453] RDX: 0000000000000012 RSI: 0000200000000300 RDI: 0000000000000007
[  677.518342][T31453] RBP: 00007f4c4bc32d69 R08: 0000000000000000 R09: 0000000000000000
[  677.518351][T31453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  677.518360][T31453] R13: 00007f4c4be16038 R14: 00007f4c4be15fa0 R15: 00007ffea2354ba8
[  677.518375][T31453]  </TASK>
