last executing test programs:

1.977975095s ago: executing program 1 (id=2485):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) (async)
recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000000480)=""/4075, 0xfeb}, {&(0x7f0000001500)=""/99, 0x63}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f00000018c0)=""/182, 0xb6}], 0x6}}], 0x1, 0x40010122, 0x0)
ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000040)={@default, @null}) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async, rerun: 64)
setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000100)=0x7fffffff, 0x4) (async, rerun: 64)
recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) (async, rerun: 64)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r3, 0x2}, 0x20) (async)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000080)) (async)
write(r0, &(0x7f00000015c0)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010004b0400000020000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000a0000024001280a899aefcd890ff0b000100627269646765000000000005002b00080000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x804)

1.849256626s ago: executing program 1 (id=2486):
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000"], 0x80}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
splice(r0, 0x0, r2, 0x0, 0x800000000082, 0xf)
close(0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0xc800)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)

1.748844729s ago: executing program 2 (id=2488):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.stat\x00', 0x0, 0x0) (async)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x300, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000050bbe01bd208376c357710e1aa454d085de61b9702db5e946c4d38f550acee0088c5001e11fb67c9a0179baa64a2017ddb18e141652d9a8b4729aa49d76a324a1634f67d07fd5788a6a67fe56d1e7479020e2e0b6f21566402c39c728a6e11620004cd", @ANYRES16=r6, @ANYBLOB="000125bd7000ffdbdf250500000008000200040000000800030004000000"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0xa50d9986120083c6) (async, rerun: 64)
ioctl$FIONCLEX(r4, 0x5450) (async, rerun: 64)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff8, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x800) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0x0, 0x1}, {0xffff, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20002031}, 0x20084014)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002ad41a567c9abd7b2500000008000300", @ANYRES32=r13, @ANYBLOB="14005500d4c64567a1bbc54b0594451c1dd67fae"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async)
unshare(0x2020600) (async)
ppoll(&(0x7f0000000640)=[{r9, 0x8009}], 0x1, &(0x7f0000000700)={0x0, 0x989680}, 0x0, 0x0) (async, rerun: 64)
r14 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000380)=0x6, 0x4)
unshare(0x60600)
setsockopt$inet_tcp_int(r14, 0x6, 0x2c, &(0x7f0000000140)=0xfb78, 0x4) (async)
writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)="2e9b5b0007e03dd651", 0x9}, {&(0x7f00000004c0)="b70000000180", 0x6}, {&(0x7f00000003c0)="06000000750d08c4", 0x8}], 0x3)

1.688658446s ago: executing program 1 (id=2490):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x83}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4c4}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000040))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan0\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB="0757c1cd466d7329097c850004e869e8b82118a9fbe8cb5b99aeb67089060758046c6f5bf087", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf252500000005002a000000000008000200", @ANYRES32=r6, @ANYBLOB="0500290000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x800)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000804)
socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0xa001}, 0x24040040)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl(r0, 0x0, &(0x7f0000000740)="925bd6c6e39ea5139899c99d84e3948d137943630fe3a4af34f90ea2a69aa2a3d7b8c66aff1b2a1a94fe893a5ee2e6fe20ccc3828292c9d4155ee2d9a549c2e53daa50ab9d9e8cc0e5318b101be1")
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c01b00002e000b0000000000000000000200000008000300040001000c0001"], 0x1bc0}}, 0x8000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a010400e1ffffffff9923aa04890d6f1d01007379003100000000ff015fa134d0a62bf2afce0800024000000006140000001100010000"], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4000004)
r9 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000140)=0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@enum64={0x6, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x2, 0x43, 0x1}]}, @struct={0xe, 0x0, 0x0, 0x4, 0x0, 0x3}]}, {0x0, [0x5f, 0x71, 0x0, 0x5f, 0x30, 0x2e]}}, &(0x7f0000003340)=""/5, 0x44, 0x5, 0x1, 0x6abb}, 0x28)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x45, 0x9, 0x1, 0x0, 0x7}, &(0x7f00000006c0)=0x14)
sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f00000005c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000a00)={0x108, 0x1, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xe}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xf3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb7}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6e}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff9}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xb}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7ff}, @NFACCT_BYTES={0xc}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe97}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_MASK={0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20008800}, 0x4040000)
close(r2)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0)

1.589995237s ago: executing program 0 (id=2491):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="9c411aa3140cf37b10f0cd900e3c597ec10154805f"], 0x3c}, 0x1, 0x0, 0x0, 0x4081}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000400)={@private0, 0x15, r2})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
r6 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000044000000eb000000001410"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES8=r6], 0xe4}, 0x1, 0x0, 0x0, 0x4011}, 0x10084)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x700)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.530350953s ago: executing program 2 (id=2492):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000ce000000951000000b000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21}, 0x94)
setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000340)={0x3, {{0x2, 0x4e1f, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$kcm(0x2, 0x922000000001, 0x106)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000005ac90d0a2c3a12eceea60000050000000900010073797a31000000002c000000030a01010000000000000000050000080900010073797a30000000000900030073797a300000000050000000060a0104000000000000000005000000300004802c0001800b00010074756e6e656c00001c0002800800034000000001080002400000000c08000340000000010900010073797a300000000014000000110060a40c69b4d43a3105010000000000000000000a00000a"], 0xc4}, 0x1, 0x0, 0x0, 0x6040040}, 0x0)
r7 = openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r7, 0x2000)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000001c0)={0x4, 0x3}, 0x4)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0xffffa000)
setsockopt$sock_attach_bpf(r5, 0x1, 0x25, &(0x7f00000002c0), 0x8)
splice(r2, 0x0, r4, 0x0, 0x6, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x7ce14000)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'erspan0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x200048d1}, 0x3209ef630022d50)
write(r1, 0x0, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
socket(0x1a, 0xa, 0x5)
mmap(&(0x7f000046c000/0x800000)=nil, 0x800000, 0x100000b, 0x11, r4, 0xa3b3e000)
getsockopt$IP_VS_SO_GET_DAEMON(r9, 0x0, 0x15, 0x0, &(0x7f00000000c0))

1.370207223s ago: executing program 1 (id=2493):
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x80)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$inet(0x2, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40054}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec1d39e537c4c3060c60100106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
unshare(0x66000080)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={<r7=>r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000280)=0x84)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$l2tp6(0xa, 0x2, 0x73)
r10 = accept4$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80800)
ppoll(&(0x7f0000000180)=[{r8, 0x8400}, {r9, 0x80}, {r2, 0x8000}, {r10, 0x1050}, {r4, 0x260}, {r5, 0x1}, {r1, 0x100}], 0x7, &(0x7f0000000240)={0x77359400}, &(0x7f0000000300)={[0xfffffffffffffffb]}, 0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={r7, 0x3}, &(0x7f00000000c0)=0x8)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
sendfile(r2, r3, 0x0, 0xffffffff004)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0)={0xe440, 0x7fffffff, 0xfffffffb, 0xfffffffb, 0xfffffffc}, 0x14)

1.369765601s ago: executing program 0 (id=2494):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
unshare(0x400)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, r1, 0x36, 0x4, 0x0, @void, @value=r1}, 0x20)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000110f26bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="02400000000000001c00128009000100626f6e646b0000000c00028005000d007f000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44001}, 0x0)
connect(r0, &(0x7f0000000040)=@llc={0x1a, 0x101, 0x3c, 0x2, 0x4, 0x7a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffd}, 0x1e)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
close(r2)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0xe0c}, 0x1, 0x0, 0x0, 0x8040}, 0x80)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async)
unshare(0x400) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, r1, 0x36, 0x4, 0x0, @void, @value=r1}, 0x20) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000110f26bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="02400000000000001c00128009000100626f6e646b0000000c00028005000d007f000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44001}, 0x0) (async)
connect(r0, &(0x7f0000000040)=@llc={0x1a, 0x101, 0x3c, 0x2, 0x4, 0x7a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) (async)
pipe(&(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)) (async)
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffd}, 0x1e) (async)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
close(r2) (async)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0xe0c}, 0x1, 0x0, 0x0, 0x8040}, 0x80) (async)

1.284012645s ago: executing program 0 (id=2495):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0xc000)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00006dbffc), 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0)
setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="14800000", @ANYRES16=r2, @ANYBLOB="000128bd7000fedbdf2563000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2000000)
socket$nl_audit(0x10, 0x3, 0x9)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x4044}, 0x24000840)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'})
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400000000fcffffff00000000", @ANYRES32=r6, @ANYBLOB="01980000020800001800128008000100677265000c00028008000700ac1414295f7b0b331397b4bfbcbfdb7ee4788dd9edc2d211e17556a035d978732bbbc215795d868419f016f4f75ccf474e172b46c8af8591d38ef72b509187a3404a8340e4b40f4012bab05b621b53f3b18ed2f71879"], 0x38}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="5400000010003c0402010000000000223f690e00640208d4c7165207d41530327b11d4dc6e8ace445c56cc68da998b978dd6ea342a18537e99e2693722b0eae70d4adb6d8cc7e3db3920875b433cc2cb584af48bd9b78f79b5f34bc4c8c30230f902db177aa64e361e078751338f8a9b6cee41010fcffff85ca8d5dc80490320f03527c95fdc549145fbc52183fd8e7cd94a0f9ab3a8d3a4d77a4d7d0f6fdede9968bcca265b292736d5193de11348b24807c933ce51b32e93df3825fb4b98aa67069293", @ANYRES32=r6, @ANYBLOB="401000000041040034001280080001006772650028000280080007000a0101000600030017000000060003000000000004001200060010004e200000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0xfffffffa, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0x1c, 0x0, 0x0, @binary="9604"}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

1.126546111s ago: executing program 0 (id=2496):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000003c0), 0x8)
close(0xffffffffffffffff)
r3 = socket$kcm(0x29, 0x5, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendfile(r5, r6, 0x0, 0x6)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
r7 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180)=0x4c, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
sendfile(r3, r4, 0x0, 0xffffffff000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x40000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r9, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040))
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0xfffffffffffffeab, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4004851}, 0x20000041)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000001c0)=@newtclass={0x54, 0x28, 0x0, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x5}, {0x0, 0xfff1}, {0xc, 0xffff}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x2}}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_clsact={0xb}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0)

580.385589ms ago: executing program 1 (id=2497):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r4, &(0x7f00000002c0)="05032200d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[], 0x32600) (async)
write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
syz_init_net_socket$ax25(0x3, 0x2, 0x7) (async)
r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000100)={0x3, @bcast})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_int(r11, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4)
recvmmsg(r11, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000001380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/185, 0xb9}, {&(0x7f00000014c0)=""/186, 0xba}, {&(0x7f0000001580)=""/148, 0x94}, {&(0x7f0000001640)=""/200, 0xc8}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000001840)=""/202, 0xca}, {&(0x7f0000001940)=""/211, 0xd3}, {&(0x7f0000001a40)=""/170, 0xaa}], 0x8}, 0x7f}, {{&(0x7f0000001b80), 0x80, &(0x7f0000004300)=[{&(0x7f0000001c00)=""/2, 0x2}, {&(0x7f0000001c40)=""/195, 0xc3}, {&(0x7f0000001d40)=""/208, 0xd0}, {&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/201, 0xc9}, {&(0x7f0000000880)=""/174, 0xae}, {&(0x7f0000003080)=""/252, 0xfc}, {&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f0000004500)=""/4096, 0x1000}], 0xa, &(0x7f00000043c0)=""/69, 0x45}, 0x402}], 0x3, 0x100, 0x0)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fcdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="b1a259810877e98a8ac35aad77ba7a0557bfbb408d24ec314256648096badaa044b920e70e546c677f54b8d70cfbba3a8cd4c4000000004f2294e17c851212"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) (async)
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002bbd7000fcdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="b1a259810877e98a8ac35aad77ba7a0557bfbb408d24ec314256648096badaa044b920e70e546c677f54b8d70cfbba3a8cd4c4000000004f2294e17c851212"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x30, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x2, 0xfff3}, {0xfff3, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

579.982089ms ago: executing program 2 (id=2498):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x21c000, 0x800}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000005e6bf02f000000180001801400020076657468315f746f5f626174616476000c000380"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0), 0x4)
r3 = socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bond0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r6=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$pppl2tp(r7, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}}, 0x32)
sendmmsg(r7, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='a\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYRES64=r10, @ANYRES32=r5, @ANYBLOB="08000200", @ANYRESHEX=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
r11 = socket$kcm(0x15, 0x5, 0x0)
r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r12, 0x8971, &(0x7f0000000180)={'dummy0\x00', @ifru_flags=0x1000})
sendmsg$kcm(r11, &(0x7f0000000440)={&(0x7f0000000000)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x80, 0x0}, 0x240440c0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00'})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)

230.600254ms ago: executing program 0 (id=2499):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x150, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5d}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_REG_RULES={0x110, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffff7fff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6a1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xdbe}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x800}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x74d7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8000}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5754}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffff667}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x150}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

229.36101ms ago: executing program 1 (id=2500):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r1)
bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000380)={{0x8, 0xb3}, 0x100, './file0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xf}]}}]}, 0x38}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000040000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c00020018001780140001"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x800)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
bind$rxrpc(r5, &(0x7f0000000040)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000810000000000000004000630162000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

98.872663ms ago: executing program 0 (id=2501):
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES16=<r3=>r2], 0x20}}, 0x0)
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0xc}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x0, 0x1, 0x2009, 0xb}, 0x20)
sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0)
write$tun(r5, &(0x7f0000001840)=ANY=[], 0xfce)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x80}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a300000"], 0x110}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000100000000000000010000850000001300000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r10, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x6}}, 0x1c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'})
sendmsg$nl_route_sched(r11, 0x0, 0x0)

98.388476ms ago: executing program 2 (id=2502):
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x94)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ec103628000000e4c9effdfa9eb09e5a9697405e6b85ee2c4ea8c78809825c122882b6c597da6408eb5b6a551fee2ab4704ac7c4590c7d93cedfcf180e39e5d486752b7b4eeec279e00abfcba6f0233b80f8fecda36ed8a27bf0af3144c4c62c10f81cce836df47668ff7e6d04000000000000000b93336df04d1e24349aff83aaff3c69a237c93e11c564956bd5773771bcba13f9c165a35eb3e7de99370ebf", @ANYRES16=r0, @ANYBLOB="01002dbd7000ffdbdf25040000001400018008000500030000000600010008000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071127e000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r3=>r2})
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'netdevsim0\x00', <r5=>0x0})
r6 = socket(0x11, 0x800000003, 0x0)
bind$packet(r6, &(0x7f0000000d00)={0x11, 0x8, r5, 0x1, 0x6}, 0x14)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x2}, 0x4)
socket$packet(0x11, 0x3, 0x300)
sendto$packet(0xffffffffffffffff, &(0x7f00000004c0)="b51267adff3e5da2dd2fcc5ffe3835991cbe03623048e97473be51dcb41f28beac7a88c547f0691ea21249def83ad2c1fb4dfc058585abf8f9801a3ecae21a81ec7a26b27c33c5864a662376f3", 0x4d, 0x24008814, &(0x7f0000000540)={0x11, 0x1, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r7 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4)
syz_emit_ethernet(0x66, &(0x7f00000008c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008004500005800000000022f9078000000e0e000c800b48065580000000010000800000086dd080088be000000001000000088fbffff00000000080022eb00000002200000000200000000000000000000000800655800000000d5f234b6c56272214e243fa975c5"], 0x0)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='D'], 0x44}, 0x1, 0x0, 0x0, 0x4000804}, 0x20004040)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0xfeffff, 0x1c0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000600)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf25020000000900010073797a32000000000900030073797a32000000000900030073797a31000000000900010073797a31000000001400020076657468305f746f5f626174616476000900010073797a30000000000900010073797a3000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x40004)
setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x2100)
ioctl$TUNSETNOCSUM(r11, 0xff0a, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

220.218µs ago: executing program 2 (id=2503):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0xe, 0x4, 0x1, 0x16, 0x4c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast, {[@timestamp={0x44, 0x24, 0x39, 0x0, 0x1, [0x1, 0x8, 0x9, 0x2, 0x800, 0x5, 0xe0e, 0x9]}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x4, 0x16, 0x1, 0x401, 0x3}}}, 0x5a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x48, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x35625, 0x60601}, [@IFLA_TXQLEN={0x8, 0xd, 0xa78}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_batadv\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4048010)

0s ago: executing program 2 (id=2504):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000007740)={0x0, 0x0, &(0x7f0000007700)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000090a01040000000000000000000000000000020073797a320000000008000c4000000005080005400000001508000a40000000000900010073797a30000000000800034000000031140000001100010000000000000000000a00000a"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x20000840)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0xfffffffffffffe43}], 0x1}, 0x40)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000007740)={0x0, 0x0, &(0x7f0000007700)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000090a01040000000000000000000000000000020073797a320000000008000c4000000005080005400000001508000a40000000000900010073797a30000000000800034000000031140000001100010000000000000000000a00000a"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x20000840) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0xfffffffffffffe43}], 0x1}, 0x40) (async)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) (async)

kernel console output (not intermixed with test programs):

800000 phys_seg 1 prio class 2
[  148.485985][ T9863] Buffer I/O error on dev nbd1, logical block 2, async page read
[  148.489287][ T9863] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  148.492584][ T9863] Buffer I/O error on dev nbd1, logical block 3, async page read
[  148.495547][ T9863] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  148.499103][ T9863] Buffer I/O error on dev nbd1, logical block 0, async page read
[  148.501609][ T9863] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  148.504627][ T9863] Buffer I/O error on dev nbd1, logical block 1, async page read
[  148.507823][ T9863] ldm_validate_partition_table(): Disk read failed.
[  148.510361][ T9863] Dev nbd1: unable to read RDB block 0
[  148.512535][ T9863]  nbd1: unable to read partition table
[  148.519809][ T9863] ldm_validate_partition_table(): Disk read failed.
[  148.525076][ T9863] Dev nbd1: unable to read RDB block 0
[  148.528215][ T9863]  nbd1: unable to read partition table
[  148.547102][T10301] smc: net device wlan0 applied user defined pnetid SYZ0
[  148.601778][T10309] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1112'.
[  148.648566][T10316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.651636][T10317] syzkaller0: entered promiscuous mode
[  148.653512][T10317] syzkaller0: entered allmulticast mode
[  148.689955][T10317] tipc: Resetting bearer <eth:syzkaller0>
[  148.714634][T10315] tipc: Resetting bearer <eth:syzkaller0>
[  148.725384][T10315] tipc: Disabling bearer <eth:syzkaller0>
[  148.760426][T10322] netlink: 'syz.2.1115': attribute type 12 has an invalid length.
[  148.763536][T10322] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1115'.
[  148.791773][T10322] netlink: 'syz.2.1115': attribute type 39 has an invalid length.
[  148.842042][T10332] netlink: 'syz.1.1117': attribute type 1 has an invalid length.
[  148.866488][T10332] bond19: (slave bridge10): Enslaving as a backup interface with an up link
[  148.902896][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'.
[  149.374217][T10337] veth0_macvtap: Caught tx_queue_len zero misconfig
[  149.401648][T10339] netlink: 'syz.0.1120': attribute type 1 has an invalid length.
[  149.404677][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1120'.
[  149.408308][T10340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1120'.
[  149.451402][T10345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1121'.
[  149.458134][T10345] vlan5: entered promiscuous mode
[  149.519121][T10347] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1122'.
[  149.559495][T10349] ip6tnl0: Caught tx_queue_len zero misconfig
[  149.872262][T10378] veth12: entered allmulticast mode
[  149.903093][T10381] gtp2: entered allmulticast mode
[  149.978768][T10388] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  150.064300][ T5838] tipc: Subscription rejected, illegal request
[  150.156075][T10407] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  150.191304][T10416] syzkaller1: entered promiscuous mode
[  150.193367][T10416] syzkaller1: entered allmulticast mode
[  150.418778][T10435] bond14: entered allmulticast mode
[  150.598124][T10440] veth0: entered promiscuous mode
[  150.613711][T10439] veth0: left promiscuous mode
[  150.846374][T10451] validate_nla: 2 callbacks suppressed
[  150.846387][T10451] netlink: 'syz.2.1150': attribute type 3 has an invalid length.
[  150.851683][T10451] __nla_validate_parse: 7 callbacks suppressed
[  150.851690][T10451] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1150'.
[  150.859180][T10451] netlink: 'syz.2.1150': attribute type 1 has an invalid length.
[  150.862323][T10451] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1150'.
[  151.043831][T10453] netlink: 'syz.0.1151': attribute type 1 has an invalid length.
[  151.064490][T10453] 8021q: adding VLAN 0 to HW filter on device bond25
[  151.099125][T10458] lo: Caught tx_queue_len zero misconfig
[  151.101608][T10458] mac80211_hwsim hwsim7 wlan1: Caught tx_queue_len zero misconfig
[  151.182470][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'.
[  151.248410][T10434] bond14: left allmulticast mode
[  151.298951][T10467] netlink: 'syz.0.1156': attribute type 10 has an invalid length.
[  151.437307][T10476] xt_CT: You must specify a L4 protocol and not use inversions on it
[  151.440230][T10476] netlink: 'syz.1.1158': attribute type 21 has an invalid length.
[  151.519006][T10478] netlink: 844 bytes leftover after parsing attributes in process `syz.1.1159'.
[  151.564875][T10480] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1160'.
[  151.568860][T10480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1160'.
[  151.578279][T10480] vlan9: entered promiscuous mode
[  151.580341][T10480] team0: entered promiscuous mode
[  152.065553][T10508] veth15: entered promiscuous mode
[  152.096725][T10512] syzkaller1: entered promiscuous mode
[  152.099013][T10512] syzkaller1: entered allmulticast mode
[  152.171600][T10514] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1168'.
[  152.412154][T10529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1173'.
[  152.526314][T10541] netlink: 'syz.2.1176': attribute type 32 has an invalid length.
[  152.560540][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1178'.
[  152.595597][T10545] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.598430][T10545] syzkaller0: entered promiscuous mode
[  152.601964][T10545] syzkaller0: entered allmulticast mode
[  152.607321][T10545] tipc: Resetting bearer <eth:syzkaller0>
[  152.620595][T10545] tipc: Resetting bearer <eth:syzkaller0>
[  152.629947][T10545] tipc: Disabling bearer <eth:syzkaller0>
[  152.672688][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'.
[  152.718169][T10561] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  152.968108][T10572] IPv6: NLM_F_CREATE should be specified when creating new route
[  153.092569][T10577] netlink: 'syz.1.1185': attribute type 1 has an invalid length.
[  153.125675][T10577] 8021q: adding VLAN 0 to HW filter on device bond21
[  153.686358][T10616] bond26: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  153.691336][T10616] bond26 (unregistering): Released all slaves
[  153.821641][T10622] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.830604][T10621] syzkaller0: entered promiscuous mode
[  153.836751][T10621] syzkaller0: entered allmulticast mode
[  153.855303][T10621] tipc: Resetting bearer <eth:syzkaller0>
[  153.864335][T10620] tipc: Resetting bearer <eth:syzkaller0>
[  153.872990][T10620] tipc: Disabling bearer <eth:syzkaller0>
[  154.160348][T10638] netlink: 'syz.0.1200': attribute type 1 has an invalid length.
[  154.175611][T10638] bond26: entered promiscuous mode
[  154.177629][T10638] 8021q: adding VLAN 0 to HW filter on device bond26
[  154.361389][T10647] openvswitch: netlink: Flow key attr not present in new flow.
[  154.402930][T10643] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  154.405839][T10643] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  154.432172][T10647] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.609775][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  154.617104][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  154.627306][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  154.635564][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  155.279303][T10672] netlink: 'syz.1.1210': attribute type 1 has an invalid length.
[  155.301069][T10672] bond22: entered promiscuous mode
[  155.303468][T10672] 8021q: adding VLAN 0 to HW filter on device bond22
[  155.551468][T10686] dvmrp6: entered allmulticast mode
[  155.598232][T10686] bridge0: left promiscuous mode
[  155.600143][T10686] bridge0: entered promiscuous mode
[  155.603714][T10686] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.606828][T10686] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  155.616010][T10686] xt_connbytes: Forcing CT accounting to be enabled
[  155.672302][T10698] nftables ruleset with unbound chain
[  155.757005][T10700] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.774965][T10700] team0 (unregistering): Port device bridge5 removed
[  155.971997][T10731] netlink: 'syz.1.1223': attribute type 1 has an invalid length.
[  155.975510][T10731] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR
[  155.980822][T10721] __nla_validate_parse: 15 callbacks suppressed
[  155.980832][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'.
[  156.253856][T10755] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1228'.
[  156.301790][T10761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.410111][T10765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1231'.
[  156.414996][T10773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.426365][T10773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.555107][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'.
[  156.613195][T10781] netlink: 'syz.1.1234': attribute type 1 has an invalid length.
[  156.615791][T10781] netlink: 'syz.1.1234': attribute type 1 has an invalid length.
[  156.658057][T10792] netlink: 'syz.1.1236': attribute type 28 has an invalid length.
[  156.660467][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1236'.
[  156.823464][T10807] bond27: entered promiscuous mode
[  156.850800][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'.
[  156.860729][T10812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1242'.
[  156.867715][T10813] netlink: 784 bytes leftover after parsing attributes in process `syz.1.1242'.
[  156.871177][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'.
[  156.912402][T10820] netlink: 'syz.1.1244': attribute type 1 has an invalid length.
[  156.941900][T10820] bond23: entered promiscuous mode
[  156.944024][T10820] 8021q: adding VLAN 0 to HW filter on device bond23
[  156.951630][T10820] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1244'.
[  156.960087][T10820] bond23: (slave bridge11): making interface the new active one
[  156.962544][T10820] bridge11: entered promiscuous mode
[  156.964692][T10820] bond23: (slave bridge11): Enslaving as an active interface with an up link
[  156.977793][T10822] bond23: (slave bridge12): Enslaving as a backup interface with an up link
[  157.132530][T10830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  157.135944][T10830] syzkaller0: entered promiscuous mode
[  157.138715][T10830] syzkaller0: entered allmulticast mode
[  157.206893][T10830] tipc: Resetting bearer <eth:syzkaller0>
[  157.211473][T10829] tipc: Resetting bearer <eth:syzkaller0>
[  157.232488][T10829] tipc: Disabling bearer <eth:syzkaller0>
[  157.314244][T10835] bond5: left promiscuous mode
[  157.315799][T10835] bridge3: left promiscuous mode
[  157.319781][T10835] vlan5: left allmulticast mode
[  157.321383][T10835] bond5: left allmulticast mode
[  157.322905][T10835] bridge3: left allmulticast mode
[  157.324735][T10835] team2: left promiscuous mode
[  157.326591][T10835] team2: left allmulticast mode
[  157.328241][T10835] team3: left promiscuous mode
[  157.330219][T10835] team3: left allmulticast mode
[  157.332108][T10835] ip6gre1: left promiscuous mode
[  157.333670][T10835] ip6gre1: left allmulticast mode
[  157.335492][T10835] bond6: left promiscuous mode
[  157.337554][T10835] bond7: left promiscuous mode
[  157.339061][T10835] bond7: left allmulticast mode
[  157.340729][T10835] geneve4: left promiscuous mode
[  157.342408][T10835] bridge5: left promiscuous mode
[  157.343971][T10835] bridge5: left allmulticast mode
[  157.345580][T10835] bond9: left promiscuous mode
[  157.347829][T10835] bridge6: left promiscuous mode
[  157.349539][T10835] bond10: left promiscuous mode
[  157.351172][T10835] ip6gre2: left promiscuous mode
[  157.353429][T10835] bond11: left promiscuous mode
[  157.355439][T10835] vlan6: left promiscuous mode
[  157.358872][T10835] bond13: left promiscuous mode
[  157.360522][T10835] vlan6: left allmulticast mode
[  157.362227][T10835] bond13: left allmulticast mode
[  157.363886][T10835] vlan7: left allmulticast mode
[  157.365464][T10835] macvtap0: left allmulticast mode
[  157.368349][T10835] ip6tnl2: left allmulticast mode
[  157.380151][T10835] veth15: left promiscuous mode
[  157.387817][T10839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.394088][T10835] bond22: left promiscuous mode
[  157.404217][T10835] bond23: left promiscuous mode
[  157.410586][T10835] bridge11: left promiscuous mode
[  157.423926][ T5838] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  157.427166][ T5838] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  157.434900][ T5838] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  157.440521][ T5838] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  158.017506][T10849] netlink: 'syz.0.1253': attribute type 1 has an invalid length.
[  158.029219][T10849] bond28: entered promiscuous mode
[  158.030772][T10849] bond28: entered allmulticast mode
[  158.032615][T10849] 8021q: adding VLAN 0 to HW filter on device bond28
[  158.044254][T10849] erspan1: entered allmulticast mode
[  158.048353][T10849] bond28: (slave erspan1): making interface the new active one
[  158.051008][T10849] erspan1: entered promiscuous mode
[  158.054395][T10849] bond28: (slave erspan1): Enslaving as an active interface with an up link
[  158.284258][T10863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  158.851743][T10880] netlink: 'syz.2.1261': attribute type 83 has an invalid length.
[  158.855551][T10880] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  158.905324][T10881] gretap0: entered promiscuous mode
[  158.928075][T10849] syz.0.1253 (10849) used greatest stack depth: 18144 bytes left
[  159.248240][T10915] netlink: 'syz.0.1275': attribute type 9 has an invalid length.
[  159.255818][T10915] gretap0: entered promiscuous mode
[  159.260941][T10915] macvlan4: entered promiscuous mode
[  159.263252][T10915] macvlan4: entered allmulticast mode
[  159.267711][T10915] gretap0: entered allmulticast mode
[  159.427329][T10946] netlink: 'syz.2.1282': attribute type 1 has an invalid length.
[  159.449707][T10946] bond24: entered promiscuous mode
[  159.451405][T10946] bond24: entered allmulticast mode
[  159.453168][T10946] 8021q: adding VLAN 0 to HW filter on device bond24
[  159.455449][T10930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.468517][T10946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.496357][T10953] syzkaller1: entered promiscuous mode
[  159.498211][T10953] syzkaller1: entered allmulticast mode
[  159.621942][T10958] netlink: 'syz.0.1286': attribute type 1 has an invalid length.
[  160.355929][T10976] 8021q: adding VLAN 0 to HW filter on device bond24
[  160.375100][T10979] vxcan0: entered allmulticast mode
[  160.503384][T10992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.952701][T11042] bond29: entered promiscuous mode
[  160.954926][T11042] 8021q: adding VLAN 0 to HW filter on device bond29
[  161.028002][T11055] __nla_validate_parse: 33 callbacks suppressed
[  161.028018][T11055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1308'.
[  161.133323][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1311'.
[  161.192586][T11076] SET target dimension over the limit!
[  161.211931][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'.
[  161.246698][T11079] bond12: (slave ip6gretap3): making interface the new active one
[  161.249807][T11079] bond12: (slave ip6gretap3): Enslaving as an active interface with an up link
[  161.276345][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'.
[  161.304827][T11088] validate_nla: 3 callbacks suppressed
[  161.304836][T11088] netlink: 'syz.0.1317': attribute type 1 has an invalid length.
[  161.320424][T11088] 8021q: adding VLAN 0 to HW filter on device bond30
[  161.412257][T11099] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1319'.
[  161.444936][T11103] netlink: 'syz.0.1321': attribute type 1 has an invalid length.
[  161.515477][T11112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1324'.
[  161.620152][T11121] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1327'.
[  161.638210][T11121] openvswitch: netlink: Flow actions attr not present in new flow.
[  161.794533][T11133] batadv0: entered promiscuous mode
[  161.804254][T11133] batadv0: left promiscuous mode
[  162.023636][T11149] netlink: 'syz.2.1335': attribute type 1 has an invalid length.
[  162.028496][T11149] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR
[  162.091527][T11156] bond25: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  162.099854][T11156] bond25 (unregistering): Released all slaves
[  162.133416][T11157] bond25: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  162.139106][T11157] bond25 (unregistering): Released all slaves
[  162.222993][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1334'.
[  162.480422][T11168] x_tables: duplicate underflow at hook 1
[  162.486081][T11168] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1339'.
[  162.599104][T11175] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1341'.
[  162.723417][T11175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.768313][T11185] geneve6: entered promiscuous mode
[  162.771240][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 58411 - 0
[  162.771823][T11184] netlink: 'syz.2.1343': attribute type 6 has an invalid length.
[  162.775828][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 58411 - 0
[  162.780372][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 58411 - 0
[  162.783250][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 58411 - 0
[  162.969111][T11202] bond0: (slave dummy0): Releasing backup interface
[  162.973692][T11202] bridge_slave_1: left allmulticast mode
[  162.975932][T11202] bridge_slave_1: left promiscuous mode
[  162.978844][T11202] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.984856][T11202] bond0: (slave bond_slave_0): Releasing backup interface
[  162.990865][T11202] bond0: (slave bond_slave_1): Releasing backup interface
[  162.994814][T11202] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.999700][T11202] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.002997][T11202] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  163.112386][T11214] macsec0: entered promiscuous mode
[  163.114153][T11214] macsec0: entered allmulticast mode
[  163.500219][T11218] syzkaller0: entered promiscuous mode
[  163.502104][T11218] syzkaller0: entered allmulticast mode
[  164.002518][T11220] bond25: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  164.007750][T11220] bond25 (unregistering): Released all slaves
[  164.020544][T11227] netlink: 'syz.1.1354': attribute type 1 has an invalid length.
[  164.020552][T11226] netlink: 'syz.1.1354': attribute type 1 has an invalid length.
[  164.038765][T11227] 8021q: adding VLAN 0 to HW filter on device bond25
[  165.020346][T11227] bond25: (slave gretap4): making interface the new active one
[  165.024022][T11227] bond25: (slave gretap4): Enslaving as an active interface with an up link
[  165.046000][T11270] bond25: (slave bond_slave_1): Device is not bonding slave
[  165.049540][T11270] bond25: option active_slave: invalid value (bond_slave_1)
[  165.053941][T11270] bond25 (unregistering): Released all slaves
[  172.756731][T11291] __nla_validate_parse: 8 callbacks suppressed
[  172.756744][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1359'.
[  172.790151][T11293] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  172.795195][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1361'.
[  172.813326][T11293] netlink: 'syz.2.1361': attribute type 5 has an invalid length.
[  172.817517][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1361'.
[  172.823037][T11293] netlink: 'syz.2.1361': attribute type 1 has an invalid length.
[  172.876320][T11296] netlink: 'syz.2.1362': attribute type 1 has an invalid length.
[  172.997462][T11305] bridge11: entered promiscuous mode
[  173.373677][T11322] netlink: 'syz.2.1368': attribute type 7 has an invalid length.
[  173.377461][T11322] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1368'.
[  173.416570][T11327] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1369'.
[  173.420354][T11327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1369'.
[  173.426001][T11328] xt_hashlimit: size too large, truncated to 1048576
[  173.515030][T11334] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  173.519349][T11334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.603049][T11335] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1370'.
[  173.624289][T11337] vxcan4: entered allmulticast mode
[  173.730637][T11339] ip6tnl4: entered allmulticast mode
[  173.865257][T11343] IPv6: NLM_F_CREATE should be specified when creating new route
[  174.135791][T11351] netlink: 'syz.0.1376': attribute type 1 has an invalid length.
[  174.139430][T11351] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1376'.
[  174.143191][T11351] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1376'.
[  174.147130][T11351] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1376'.
[  174.217709][T11352] syzkaller0: entered promiscuous mode
[  174.219952][T11352] syzkaller0: entered allmulticast mode
[  174.620995][T11363] bridge0: left promiscuous mode
[  174.623616][T11363] bridge0: entered promiscuous mode
[  174.628170][T11363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.707642][T11373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.769483][T11383] netlink: 'syz.1.1384': attribute type 1 has an invalid length.
[  174.813668][T11383] bond26: entered promiscuous mode
[  174.815636][T11383] 8021q: adding VLAN 0 to HW filter on device bond26
[  175.139366][T11401] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  175.348277][T11413] bond27: entered promiscuous mode
[  175.350887][T11413] bond27: entered allmulticast mode
[  175.353302][T11413] 8021q: adding VLAN 0 to HW filter on device bond27
[  175.397365][T11419] bond28: entered promiscuous mode
[  175.408927][T11419] bond28: entered allmulticast mode
[  175.411009][T11419] 8021q: adding VLAN 0 to HW filter on device bond28
[  175.643316][T11451] syzkaller0: entered promiscuous mode
[  175.645085][T11451] syzkaller0: entered allmulticast mode
[  175.649766][T11450] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.671535][T11450] tipc: Resetting bearer <eth:syzkaller0>
[  175.690643][T11450] tipc: Disabling bearer <eth:syzkaller0>
[  175.720235][T11464] : entered promiscuous mode
[  175.740007][T11466] netlink: 'syz.0.1402': attribute type 2 has an invalid length.
[  175.753110][T11466] bond31: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  175.757574][T11466] bond31 (unregistering): Released all slaves
[  175.758600][T11469] netlink: 'syz.1.1403': attribute type 1 has an invalid length.
[  175.794943][T11469] bond29: entered promiscuous mode
[  175.797810][T11469] 8021q: adding VLAN 0 to HW filter on device bond29
[  175.804856][T11469] bond29: entered allmulticast mode
[  175.820804][T11469] bond29: (slave bridge14): making interface the new active one
[  175.824862][T11469] bridge14: entered promiscuous mode
[  175.828026][T11469] bridge14: entered allmulticast mode
[  175.831358][T11469] bond29: (slave bridge14): Enslaving as an active interface with an up link
[  175.956327][T11478] block nbd2: server does not support multiple connections per device.
[  175.959126][T11478] block nbd2: shutting down sockets
[  176.031989][ T5891] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 58411 - 0
[  176.049483][T11490] bridge16: entered promiscuous mode
[  176.055677][T11490] bridge16: entered allmulticast mode
[  176.084682][ T5891] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 58411 - 0
[  176.087718][ T5891] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 58411 - 0
[  176.093781][ T5891] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 58411 - 0
[  176.142976][T11481] bridge16: entered promiscuous mode
[  176.145102][T11481] bridge16: entered allmulticast mode
[  176.241701][T11502] netlink: 'syz.0.1409': attribute type 1 has an invalid length.
[  176.244356][T11503] netlink: 'syz.0.1409': attribute type 1 has an invalid length.
[  176.252087][T11502] syzkaller0: entered promiscuous mode
[  176.253798][T11502] syzkaller0: entered allmulticast mode
[  176.703428][T11535] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check.
[  176.741622][T11539] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  176.749898][T11541] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.754726][T11541] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  177.184878][T11573] syzkaller0: entered promiscuous mode
[  177.187665][T11573] syzkaller0: entered allmulticast mode
[  177.864120][T11582] __nla_validate_parse: 18 callbacks suppressed
[  177.864136][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1431'.
[  177.874187][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1431'.
[  177.878287][T11582] validate_nla: 2 callbacks suppressed
[  177.878298][T11582] netlink: 'syz.2.1431': attribute type 13 has an invalid length.
[  177.883710][T11582] netlink: 'syz.2.1431': attribute type 11 has an invalid length.
[  178.164624][T11599] bond31: entered allmulticast mode
[  178.196451][T11605] netlink: 'syz.2.1438': attribute type 1 has an invalid length.
[  178.224761][T11605] 8021q: adding VLAN 0 to HW filter on device bond27
[  178.241865][T11602] bond27: (slave veth11): Enslaving as an active interface with a down link
[  178.254167][T11605] bond27: (slave veth13): Enslaving as an active interface with a down link
[  178.276412][T11617] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1440'.
[  178.279408][T11617] netlink: 'syz.2.1440': attribute type 1 has an invalid length.
[  178.292021][T11617] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1440'.
[  178.314664][T11620] IPv6: NLM_F_CREATE should be specified when creating new route
[  178.317741][T11620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  178.320282][T11620] IPv6: NLM_F_CREATE should be set when creating new route
[  178.322596][T11620] IPv6: NLM_F_CREATE should be set when creating new route
[  178.324729][T11620] IPv6: NLM_F_CREATE should be set when creating new route
[  178.332021][T11620] netlink: 'syz.0.1441': attribute type 10 has an invalid length.
[  178.340178][T11620] netlink: 'syz.0.1441': attribute type 10 has an invalid length.
[  178.442808][T11634] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1446'.
[  178.450116][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1446'.
[  178.473019][T11631] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1445'.
[  178.520017][T11634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1446'.
[  178.523077][T11634] 8021q: VLANs not supported on ip6gre0
[  178.633328][T11650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1449'.
[  178.693998][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'.
[  178.846670][T11667] syzkaller1: entered promiscuous mode
[  178.848935][T11667] syzkaller1: entered allmulticast mode
[  178.854169][T11667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  179.000059][T11680] netlink: 'syz.0.1460': attribute type 1 has an invalid length.
[  179.028122][T11678] xt_hashlimit: size too large, truncated to 1048576
[  179.200031][T11700] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  179.203329][T11700] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.207577][T11702] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  179.216712][T11700] syzkaller0: entered promiscuous mode
[  179.218786][T11700] syzkaller0: entered allmulticast mode
[  179.230633][T11700] tipc: Resetting bearer <eth:syzkaller0>
[  179.235996][T11698] tipc: Resetting bearer <eth:syzkaller0>
[  179.247399][T11698] tipc: Disabling bearer <eth:syzkaller0>
[  179.305337][T11709] netlink: 'syz.1.1467': attribute type 1 has an invalid length.
[  179.321324][T11709] 8021q: adding VLAN 0 to HW filter on device bond30
[  179.347968][T11709] bond30: (slave veth19): Enslaving as an active interface with a down link
[  179.370488][T11709] bond30: (slave veth21): Enslaving as an active interface with a down link
[  179.380907][T11709] bond30: entered allmulticast mode
[  179.477165][T11721] netlink: 'syz.1.1468': attribute type 13 has an invalid length.
[  179.479952][T11721] netlink: 'syz.1.1468': attribute type 17 has an invalid length.
[  179.508884][T11721] gretap0: left promiscuous mode
[  179.534292][T11721] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.549855][T11721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  180.956546][ T5815] Bluetooth: hci1: command 0x0406 tx timeout
[  181.046590][ T5201] Bluetooth: hci2: command 0x0406 tx timeout
[  182.793952][T11753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  182.897530][T11779] validate_nla: 2 callbacks suppressed
[  182.897540][T11779] netlink: 'syz.1.1485': attribute type 21 has an invalid length.
[  182.906416][T11779] netlink: 'syz.1.1485': attribute type 22 has an invalid length.
[  182.908985][T11779] netlink: 'syz.1.1485': attribute type 23 has an invalid length.
[  182.911627][T11779] netlink: 'syz.1.1485': attribute type 25 has an invalid length.
[  182.914258][T11779] netlink: 'syz.1.1485': attribute type 26 has an invalid length.
[  182.917407][T11783] netlink: 'syz.2.1486': attribute type 10 has an invalid length.
[  182.925145][T11779] __nla_validate_parse: 17 callbacks suppressed
[  182.925153][T11779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1485'.
[  182.925181][T11783] syz_tun: entered promiscuous mode
[  182.984922][T11796] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1487'.
[  183.017456][T11802] netlink: 'syz.0.1491': attribute type 1 has an invalid length.
[  183.041311][T11802] 8021q: adding VLAN 0 to HW filter on device bond32
[  183.078162][T11804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1492'.
[  183.133164][T11819] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1496'.
[  183.145550][T11816] 8021q: adding VLAN 0 to HW filter on device bond28
[  183.187781][T11819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1496'.
[  183.247200][T11813] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  183.475956][T11851] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1505'.
[  183.480998][T11852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1505'.
[  183.532522][T11858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1507'.
[  183.537550][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1507'.
[  183.540759][T11858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1507'.
[  183.664928][T11865] bond29: option xmit_hash_policy: invalid value (10)
[  183.688112][T11865] bond29 (unregistering): Released all slaves
[  184.541272][T11898] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  184.546975][T11898] tap0: tun_chr_ioctl cmd 2147767521
[  186.824162][T11884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  186.828599][T11900] netlink: 'syz.1.1516': attribute type 10 has an invalid length.
[  186.904774][T11913] bridge0: port 1(erspan0) entered blocking state
[  186.911738][T11913] bridge0: port 1(erspan0) entered disabled state
[  186.914509][T11913] erspan0: entered allmulticast mode
[  186.918288][T11913] erspan0: entered promiscuous mode
[  186.920832][T11913] bridge0: port 1(erspan0) entered blocking state
[  186.923729][T11913] bridge0: port 1(erspan0) entered forwarding state
[  186.937853][T11913] erspan0: left allmulticast mode
[  186.939961][T11913] erspan0: left promiscuous mode
[  186.942105][T11913] bridge0: port 1(erspan0) entered disabled state
[  187.048872][T11922] netlink: 'syz.2.1521': attribute type 1 has an invalid length.
[  187.101754][T11922] bond29: entered promiscuous mode
[  187.109148][T11922] 8021q: adding VLAN 0 to HW filter on device bond29
[  187.140432][T11922] 8021q: adding VLAN 0 to HW filter on device bond29
[  187.143441][T11922] bond29: (slave wireguard1): The slave device specified does not support setting the MAC address
[  187.148738][T11922] bond29: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  187.158982][T11922] bond29: (slave wireguard1): making interface the new active one
[  187.162023][T11922] wireguard1: entered promiscuous mode
[  187.166889][T11922] bond29: (slave wireguard1): Enslaving as an active interface with an up link
[  188.244089][T11961] bond31: Unable to set down delay as MII monitoring is disabled
[  188.248772][T11961] bond31 (unregistering): Released all slaves
[  188.293979][T11969] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.474753][T11984] __nla_validate_parse: 8 callbacks suppressed
[  188.474768][T11984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'.
[  188.579780][T11995] netlink: 'syz.2.1536': attribute type 1 has an invalid length.
[  188.705749][T12001] syzkaller0: entered promiscuous mode
[  188.708409][T12001] syzkaller0: entered allmulticast mode
[  188.724260][T12009] lo speed is unknown, defaulting to 1000
[  188.730877][T12009] lo speed is unknown, defaulting to 1000
[  188.734548][T12009] lo speed is unknown, defaulting to 1000
[  188.852624][T12020] netlink: 'syz.2.1542': attribute type 1 has an invalid length.
[  188.914827][T12009] infiniband sqz0: set down
[  188.918995][T12009] infiniband sqz0: added lo
[  189.039351][T12009] RDS/IB: sqz0: added
[  189.041623][T12009] smc: adding ib device sqz0 with port count 1
[  189.048654][T12009] smc:    ib device sqz0 port 1 has no pnetid
[  189.720476][T12020] workqueue: Failed to create a rescuer kthread for wq "bond30": -EINTR
[  189.738708][   T24] lo speed is unknown, defaulting to 1000
[  189.785290][T12030] netlink: 'syz.1.1543': attribute type 6 has an invalid length.
[  189.788640][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'.
[  189.804562][  T783] lo speed is unknown, defaulting to 1000
[  189.810373][T12009] lo speed is unknown, defaulting to 1000
[  189.973562][T12009] lo speed is unknown, defaulting to 1000
[  190.006978][T12049] syzkaller1: entered promiscuous mode
[  190.008878][T12049] syzkaller1: entered allmulticast mode
[  190.011158][T12049] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  190.113157][T12055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1550'.
[  190.138352][T12055] bond30: entered promiscuous mode
[  190.140737][T12055] 8021q: adding VLAN 0 to HW filter on device bond30
[  190.155817][T12055] 8021q: adding VLAN 0 to HW filter on device bond30
[  190.163708][T12055] bond30: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  190.169322][T12055] bond30: (slave ip6gre2): Error -95 calling set_mac_address
[  190.180172][T12009] lo speed is unknown, defaulting to 1000
[  190.186585][T12060] tap0: tun_chr_ioctl cmd 1074025680
[  190.189269][T12062] tap0: tun_chr_ioctl cmd 1074025673
[  190.191487][T12061] tap0: tun_chr_ioctl cmd 1074025680
[  190.251752][T12064] netlink: 'syz.2.1553': attribute type 10 has an invalid length.
[  190.276573][T11951] bond0: (slave syz_tun): interface is now down
[  190.400206][T12075] netlink: 'syz.0.1555': attribute type 89 has an invalid length.
[  190.407434][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1553'.
[  190.562313][T12088] syzkaller0: entered promiscuous mode
[  190.564385][T12088] syzkaller0: entered allmulticast mode
[  191.477140][T12105] xt_hashlimit: size too large, truncated to 1048576
[  191.552418][T12115] netlink: 'syz.1.1564': attribute type 39 has an invalid length.
[  191.608638][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1566'.
[  191.611842][T12120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1566'.
[  191.659903][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.662958][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.667195][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.670212][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.842393][T12156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1572'.
[  191.852296][T12155] netlink: 'syz.1.1573': attribute type 13 has an invalid length.
[  191.912828][T12155] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1573'.
[  192.116932][T12173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1578'.
[  192.131001][T12181] netlink: 'syz.2.1579': attribute type 13 has an invalid length.
[  192.144932][T12181] netlink: 'syz.2.1579': attribute type 17 has an invalid length.
[  192.270003][T12193] pim6reg1: entered promiscuous mode
[  192.272125][T12193] pim6reg1: entered allmulticast mode
[  192.390686][T12202] tipc: Failed to remove unknown binding: 66,1,1/0:3405702583/3405702585
[  192.395364][T12202] netlink: 'syz.1.1585': attribute type 2 has an invalid length.
[  192.398609][T12202] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1585'.
[  192.408101][T12202] tipc: Failed to remove unknown binding: 66,1,1/0:3405702583/3405702585
[  192.568015][T12215] veth7: left allmulticast mode
[  192.572383][T12215] gretap1: left allmulticast mode
[  192.574771][T12215] gtp2: left allmulticast mode
[  192.580338][T12215] bond24: left allmulticast mode
[  192.604786][T11951] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.608341][T11951] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.611839][T11951] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.615149][T11951] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.627681][T12215] syz_tun: left promiscuous mode
[  192.631131][T12215] bridge0: left promiscuous mode
[  192.633128][T12215] bridge0: entered promiscuous mode
[  192.636035][T12215] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.642083][T12215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  192.655852][T11951] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.675861][T11951] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.680542][T11951] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  192.684468][T11951] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.445477][T12232] syzkaller0: entered promiscuous mode
[  193.448548][T12232] syzkaller0: entered allmulticast mode
[  193.514469][T12237] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  193.691060][T12239] __nla_validate_parse: 4 callbacks suppressed
[  193.691075][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'.
[  194.443382][T12247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  194.446338][T12247] IPv6: NLM_F_CREATE should be set when creating new route
[  194.448990][T12247] IPv6: NLM_F_CREATE should be set when creating new route
[  194.451367][T12247] IPv6: NLM_F_CREATE should be set when creating new route
[  194.465578][T12246] xt_hashlimit: size too large, truncated to 1048576
[  194.550700][T12253] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.555867][T12253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  194.563292][  T977] lo speed is unknown, defaulting to 1000
[  194.565586][  T977] sqz0: Port: 1 Link ACTIVE
[  194.568399][  T977] lo speed is unknown, defaulting to 1000
[  194.623007][T12256] veth1_to_hsr: entered allmulticast mode
[  194.625434][T12256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1601'.
[  194.680164][T12246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1600'.
[  194.683103][T12246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  195.321696][T11302] udevd[11302]: setting owner of /dev/rfcomm68 to uid=0, gid=18 failed: No such file or directory
[  195.416057][T12284] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1610'.
[  195.422036][T12284] validate_nla: 3 callbacks suppressed
[  195.422050][T12284] netlink: 'syz.2.1610': attribute type 1 has an invalid length.
[  195.509016][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'.
[  195.511831][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'.
[  195.514644][T12290] netlink: 'syz.2.1612': attribute type 12 has an invalid length.
[  195.525453][T12290] netlink: 'syz.2.1612': attribute type 11 has an invalid length.
[  195.545214][T12292] netlink: 'syz.1.1613': attribute type 1 has an invalid length.
[  195.568473][T12292] bond31: entered promiscuous mode
[  195.570263][T12292] 8021q: adding VLAN 0 to HW filter on device bond31
[  195.600420][T12302] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  195.610791][T12302] dvmrp6: entered allmulticast mode
[  195.617981][T12302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1616'.
[  195.638567][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1615'.
[  195.647210][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1615'.
[  195.751483][  T921] hid-generic 0005:046D:0A0E.0001: item fetching failed at offset 0/1
[  195.760426][  T921] hid-generic 0005:046D:0A0E.0001: probe with driver hid-generic failed with error -22
[  195.927473][T12322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'.
[  196.078851][T12332] 0: renamed from hsr_slave_1
[  196.087223][T12332] 0: entered allmulticast mode
[  196.096390][T12332] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  196.111486][T12332] netlink: 'syz.0.1625': attribute type 1 has an invalid length.
[  196.207802][T12334] netlink: 'syz.0.1626': attribute type 1 has an invalid length.
[  196.232638][T12334] bond34: entered promiscuous mode
[  196.234448][T12334] 8021q: adding VLAN 0 to HW filter on device bond34
[  196.257807][T12334] bond34: (slave bridge16): making interface the new active one
[  196.260253][T12334] bridge16: entered promiscuous mode
[  196.262967][T12334] bridge16: left promiscuous mode
[  196.390570][T12340] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  197.444060][T12354] macvtap2: entered promiscuous mode
[  197.445788][T12354] bond0: entered promiscuous mode
[  197.467784][T12354] macvtap2: entered allmulticast mode
[  197.470005][T12354] bond0: entered allmulticast mode
[  197.472389][T12354] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  197.495652][T12357] bond0: left allmulticast mode
[  197.500471][T12357] bond0: left promiscuous mode
[  197.507440][T12357] macvtap2: left promiscuous mode
[  197.509029][T12357] macvtap2: left allmulticast mode
[  197.524293][T12360] syzkaller1: entered promiscuous mode
[  197.526883][T12360] syzkaller1: entered allmulticast mode
[  197.620049][T12368] lo speed is unknown, defaulting to 1000
[  197.662644][T12375] netlink: 'syz.2.1635': attribute type 22 has an invalid length.
[  197.665520][T12375] netlink: 'syz.2.1635': attribute type 22 has an invalid length.
[  197.769587][T12382] netlink: 'syz.1.1638': attribute type 4 has an invalid length.
[  197.773118][T12382] netlink: 'syz.1.1638': attribute type 4 has an invalid length.
[  197.910256][T12392] veth15: entered allmulticast mode
[  197.934474][T12390] syz_tun: entered promiscuous mode
[  197.936743][T12390] macvtap0: entered promiscuous mode
[  197.944792][T12390] syz_tun: left promiscuous mode
[  198.388153][T12411] 8021q: adding VLAN 0 to HW filter on device bond32
[  198.417434][T12415] atomic_op ffff88816a721998 conn xmit_atomic 0000000000000000
[  198.516704][T12418] veth15: entered promiscuous mode
[  198.698639][T12442] __nla_validate_parse: 18 callbacks suppressed
[  198.698707][T12442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1652'.
[  198.717674][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'.
[  198.720603][T12444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1655'.
[  198.906824][T12450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'.
[  199.033913][T12450] vlan0: entered promiscuous mode
[  199.108624][T10140] block nbd2: Receive control failed (result -32)
[  199.111515][   T57] block nbd2: Receive control failed (result -32)
[  199.339331][T12466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1662'.
[  199.387442][T12470] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1663'.
[  199.477970][T12472] 8021q: adding VLAN 0 to HW filter on device bond33
[  199.490017][T12479] vlan0: entered promiscuous mode
[  199.492036][T12479] bond33: entered promiscuous mode
[  199.501477][T12479] vlan0: entered allmulticast mode
[  199.506439][T12479] bond33: entered allmulticast mode
[  199.673414][T12486] pim6reg1: entered promiscuous mode
[  199.675161][T12486] pim6reg1: entered allmulticast mode
[  199.907700][T12491] bond34: entered promiscuous mode
[  199.909421][T12491] bond34: entered allmulticast mode
[  199.926583][T12491] 8021q: adding VLAN 0 to HW filter on device bond34
[  200.107528][T12499] syzkaller1: entered allmulticast mode
[  200.362907][T12512] bridge0: entered promiscuous mode
[  200.489464][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1677'.
[  200.493135][T12516] validate_nla: 7 callbacks suppressed
[  200.493146][T12516] netlink: 'syz.1.1677': attribute type 15 has an invalid length.
[  200.499603][T12516] netlink: 'syz.1.1677': attribute type 25 has an invalid length.
[  200.502656][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1677'.
[  200.548379][T12521] netlink: 'syz.0.1679': attribute type 49 has an invalid length.
[  200.726881][T12527] xfrm0: entered promiscuous mode
[  200.728804][T12527] xfrm0: entered allmulticast mode
[  200.755948][T12529] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1682'.
[  200.763714][T12529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'.
[  200.832164][T12536] netlink: 'syz.1.1684': attribute type 1 has an invalid length.
[  200.883367][T12540] tunl0: entered allmulticast mode
[  200.913650][T12545] hsr_slave_0: left promiscuous mode
[  200.919930][T12545] hsr_slave_1: left promiscuous mode
[  200.934666][T12547] netlink: 'syz.1.1687': attribute type 16 has an invalid length.
[  200.938096][T12547] netlink: 'syz.1.1687': attribute type 17 has an invalid length.
[  200.951573][T12547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  200.991968][T12551] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  200.995132][T12551] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  201.150297][T12565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.164674][T12565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.299309][T12573] xt_socket: unknown flags 0x8
[  201.808061][T12583] netlink: 'syz.0.1698': attribute type 13 has an invalid length.
[  201.811423][T12583] netlink: 'syz.0.1698': attribute type 17 has an invalid length.
[  201.842208][T12583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  201.850009][T12580] lo speed is unknown, defaulting to 1000
[  202.091751][T12594] netlink: 'syz.1.1700': attribute type 4 has an invalid length.
[  202.128395][T12594] netlink: 'syz.1.1700': attribute type 4 has an invalid length.
[  202.137772][T12600] bond0: (slave vlan1): Opening slave failed
[  202.281728][T12606] bond35 (unregistering): Released all slaves
[  202.296919][T12596] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  202.409983][T12611] gretap3: entered allmulticast mode
[  202.414820][T12611] bond35: (slave gretap3): making interface the new active one
[  202.418999][T12611] bond35: (slave gretap3): Enslaving as an active interface with an up link
[  205.158699][ T5201] Bluetooth: hci2: link tx timeout
[  205.160338][ T5201] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  207.196476][ T5815] Bluetooth: hci2: command 0x0406 tx timeout
[  210.919700][T12667] __nla_validate_parse: 6 callbacks suppressed
[  210.919714][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1710'.
[  210.931795][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1710'.
[  210.942002][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1709'.
[  211.023665][T12680] validate_nla: 1 callbacks suppressed
[  211.023675][T12680] netlink: 'syz.2.1713': attribute type 10 has an invalid length.
[  211.079975][T12678] netlink: 'syz.1.1712': attribute type 16 has an invalid length.
[  211.082416][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'.
[  211.088793][T12678] rB: renamed from lo (while UP)
[  211.106925][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'.
[  211.111922][T12684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1714'.
[  211.161621][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1715'.
[  211.283386][T12703] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1718'.
[  212.185520][T12706] bond37 (unregistering): Released all slaves
[  214.020313][T12680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  214.188167][T12717] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  214.218519][T12736] netlink: 'syz.0.1724': attribute type 1 has an invalid length.
[  214.221862][T12734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1726'.
[  214.231859][T12734] netlink: 580 bytes leftover after parsing attributes in process `syz.1.1726'.
[  214.250892][T12736] bond37: entered promiscuous mode
[  214.253450][T12736] 8021q: adding VLAN 0 to HW filter on device bond37
[  214.381681][T12742] lo speed is unknown, defaulting to 1000
[  214.801729][T12756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  215.024832][T12781] netlink: 'syz.0.1738': attribute type 1 has an invalid length.
[  215.046792][T12781] bond38: entered promiscuous mode
[  215.049290][T12781] 8021q: adding VLAN 0 to HW filter on device bond38
[  215.058675][T12781] bond38: entered allmulticast mode
[  217.962962][T12776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  218.053629][T12804] team_slave_1: Caught tx_queue_len zero misconfig
[  218.137496][T12806] block nbd3: server does not support multiple connections per device.
[  218.153885][T12806] block nbd3: shutting down sockets
[  218.175790][T12808] veth0_to_team: entered promiscuous mode
[  218.246710][T12814] __nla_validate_parse: 7 callbacks suppressed
[  218.246726][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1746'.
[  218.275839][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1747'.
[  218.281090][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1747'.
[  218.341641][T12820] bridge0: Caught tx_queue_len zero misconfig
[  218.343117][T12821] netlink: 'syz.0.1748': attribute type 1 has an invalid length.
[  218.503796][T12836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1753'.
[  218.525207][T12836] bond32: entered promiscuous mode
[  218.527306][T12836] 8021q: adding VLAN 0 to HW filter on device bond32
[  218.542089][T12836] 8021q: adding VLAN 0 to HW filter on device bond32
[  218.547535][T12836] bond32: (slave ip6gre3): The slave device specified does not support setting the MAC address
[  218.552221][T12836] bond32: (slave ip6gre3): Error -95 calling set_mac_address
[  218.597862][T12842] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1755'.
[  218.604397][T12842] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1755'.
[  218.637737][T12844] netlink: 'syz.1.1756': attribute type 1 has an invalid length.
[  218.667112][T12844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1756'.
[  218.672114][T12844] 8021q: adding VLAN 0 to HW filter on device bond33
[  218.677503][T12844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1756'.
[  218.687590][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'.
[  218.760045][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1757'.
[  218.805152][T12854] syzkaller0: entered promiscuous mode
[  218.808105][T12854] syzkaller0: entered allmulticast mode
[  221.730845][T12849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  221.991264][T12895] lo speed is unknown, defaulting to 1000
[  222.152173][T12920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  222.154441][T12920] IPv6: NLM_F_CREATE should be set when creating new route
[  222.156769][T12920] IPv6: NLM_F_CREATE should be set when creating new route
[  222.159014][T12920] IPv6: NLM_F_CREATE should be set when creating new route
[  222.270749][T12925] netlink: 'syz.1.1776': attribute type 1 has an invalid length.
[  222.308915][T12928] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.660756][T12947] netlink: 'syz.2.1780': attribute type 1 has an invalid length.
[  222.702801][T12947] 8021q: adding VLAN 0 to HW filter on device bond35
[  222.721587][T12954] debugfs: '1^!Y
[  222.721587][T12954] 3UH5rBn\' already exists in 'ieee80211'
[  222.767507][T12957] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  222.845138][T12963] x_tables: duplicate underflow at hook 1
[  222.945440][T12968] netlink: 'syz.0.1784': attribute type 1 has an invalid length.
[  222.970174][T12968] bond39: entered promiscuous mode
[  222.972901][T12968] 8021q: adding VLAN 0 to HW filter on device bond39
[  222.982105][T12969] bond39: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  222.987300][T12969] bond39: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  222.991243][T12969] bond39: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  223.115362][T12978] netlink: 'syz.1.1787': attribute type 1 has an invalid length.
[  223.135531][T12978] bond34: entered promiscuous mode
[  223.145126][T12978] 8021q: adding VLAN 0 to HW filter on device bond34
[  223.229482][T12992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.271079][T12996] __nla_validate_parse: 10 callbacks suppressed
[  223.271094][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'.
[  223.285481][T12996] netlink: 'syz.0.1792': attribute type 13 has an invalid length.
[  223.291301][T12996] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1792'.
[  223.295739][T12998] netlink: 'syz.1.1793': attribute type 4 has an invalid length.
[  223.428606][  T977] tipc: Node number set to 3457801735
[  223.551566][T13011] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  223.557529][T13011] netlink: 'syz.1.1795': attribute type 10 has an invalid length.
[  223.623884][T13015] xfrm1: entered promiscuous mode
[  223.625502][T13015] xfrm1: entered allmulticast mode
[  223.699136][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1797'.
[  224.129394][T13038] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  224.344764][T13052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1804'.
[  224.642501][T13075] IPv6: sit2: Disabled Multicast RS
[  224.814320][T13083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  225.184899][T13101] veth0_to_batadv: entered allmulticast mode
[  225.188708][T13101] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  225.229016][T13105] netlink: 'syz.2.1817': attribute type 1 has an invalid length.
[  225.260649][T13105] bond36: (slave vxcan1): The slave device specified does not support setting the MAC address
[  225.265361][T13105] bond36: (slave vxcan1): Error -95 calling set_mac_address
[  225.304031][T13107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1817'.
[  225.319878][T13107] bond36: (slave bridge13): Enslaving as an active interface with a down link
[  225.329749][T13105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1817'.
[  225.335776][T13105] 8021q: adding VLAN 0 to HW filter on device bond36
[  225.345107][T13105] macvlan0: entered promiscuous mode
[  225.348323][T13105] macvlan0: entered allmulticast mode
[  225.351163][T13105] bond36: entered promiscuous mode
[  225.353726][T13105] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  225.357685][T13105] bond36: left promiscuous mode
[  225.504139][T13113] bond3: (slave bridge2): Releasing active interface
[  225.509431][T13113] bond5: (slave bridge3): Releasing active interface
[  225.515417][T13113] bond8: (slave geneve2): Releasing active interface
[  225.530287][T13113] bond9: (slave bond10): Releasing backup interface
[  225.534170][T13113] bond11: (slave ip6gre1): Releasing backup interface
[  225.539678][T13113] bond13: (slave erspan1): Releasing active interface
[  225.543770][T13113] bond16: (slave bridge5): Releasing backup interface
[  225.548429][T13113] bond18: (slave wireguard0): Releasing backup interface
[  225.554606][T13113] bond19: (slave veth3): Releasing active interface
[  225.557513][T13113] bond19: (slave veth3): the permanent HWaddr of slave - 3a:21:9b:69:b8:30 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  225.564214][T13113] bond19: (slave veth5): Releasing active interface
[  225.568114][T13113] bond27: (slave veth11): Releasing active interface
[  225.570639][T13113] bond27: (slave veth11): the permanent HWaddr of slave - 92:13:c0:c1:ba:76 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  225.577630][T13113] bond27: (slave veth13): Releasing active interface
[  225.580773][T13113] bond29: (slave wireguard1): Releasing backup interface
[  225.583289][T13113] wireguard1: left promiscuous mode
[  225.587541][T13113] bond36: (slave bridge13): Releasing active interface
[  225.603198][T13113] ip6gre2: entered allmulticast mode
[  225.704837][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.707776][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.781058][T13141] xt_hashlimit: size too large, truncated to 1048576
[  225.940871][T13141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  234.147909][T13168] tunl0: left allmulticast mode
[  234.150396][T13168] dvmrp6: left allmulticast mode
[  234.270063][T13179] netlink: zone id is out of range
[  234.271958][T13179] netlink: zone id is out of range
[  234.273972][T13179] netlink: zone id is out of range
[  234.278474][T13179] netlink: zone id is out of range
[  234.280674][T13179] netlink: zone id is out of range
[  234.282722][T13179] netlink: zone id is out of range
[  234.284803][T13179] netlink: zone id is out of range
[  234.288008][T13179] netlink: zone id is out of range
[  234.290086][T13179] netlink: zone id is out of range
[  234.292182][T13179] netlink: zone id is out of range
[  234.336425][T13188] veth1_to_bond: entered allmulticast mode
[  234.339195][T13188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'.
[  234.343089][T13188] veth1_to_bond (unregistering): left allmulticast mode
[  234.402083][ T5706] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x25
[  234.402677][T13191] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  234.412307][T13195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  234.452630][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'.
[  234.483312][T13209] netlink: 'syz.1.1841': attribute type 1 has an invalid length.
[  234.508166][T13209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1841'.
[  234.518352][T13209] bond35: (slave bridge17): making interface the new active one
[  234.521195][T13209] bond35: (slave bridge17): Enslaving as an active interface with an up link
[  234.553744][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1843'.
[  234.569419][T13218] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1843'.
[  234.573186][T13218] netlink: 'syz.2.1843': attribute type 1 has an invalid length.
[  234.707227][T13236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1848'.
[  235.047080][T13273] netlink: 'syz.0.1855': attribute type 6 has an invalid length.
[  235.049983][T13273] netlink: 3936 bytes leftover after parsing attributes in process `syz.0.1855'.
[  235.053617][T13273] netlink: 'syz.0.1855': attribute type 1 has an invalid length.
[  235.056976][T13273] block nbd3: Unsupported socket: should be TCP or UNIX.
[  235.139208][T13281] syzkaller1: left allmulticast mode
[  235.467212][T13309] syzkaller0: entered promiscuous mode
[  235.469060][T13309] syzkaller0: entered allmulticast mode
[  235.472704][T13307] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.479552][T13306] tipc: Resetting bearer <eth:syzkaller0>
[  235.493876][T13306] tipc: Disabling bearer <eth:syzkaller0>
[  235.647349][T13320] netlink: 'syz.1.1867': attribute type 21 has an invalid length.
[  235.649877][T13320] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1867'.
[  235.656239][T13320] netlink: 'syz.1.1867': attribute type 5 has an invalid length.
[  235.664248][T13320] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1867'.
[  235.688282][T13336] syzkaller1: entered promiscuous mode
[  235.690076][T13336] syzkaller1: entered allmulticast mode
[  235.707627][T13338] bond0: Error: Cannot enslave bond to itself.
[  235.715499][T13338] bridge18: entered promiscuous mode
[  235.718863][T13338] bridge18: entered allmulticast mode
[  235.758541][T13340] netlink: 'syz.1.1872': attribute type 4 has an invalid length.
[  235.764938][T13342] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1873'.
[  235.850915][T13352] bond0: Caught tx_queue_len zero misconfig
[  235.954417][T13360] netlink: 'syz.0.1880': attribute type 1 has an invalid length.
[  236.005347][T13360] bond40: entered promiscuous mode
[  236.008259][T13360] 8021q: adding VLAN 0 to HW filter on device bond40
[  236.016950][T13365] vlan0: entered allmulticast mode
[  236.019129][T13365] bond40: entered allmulticast mode
[  236.044925][T13360] bond40: (slave bridge17): making interface the new active one
[  236.048430][T13360] bridge17: entered promiscuous mode
[  236.050714][T13360] bridge17: entered allmulticast mode
[  236.053736][T13360] bond40: (slave bridge17): Enslaving as an active interface with an up link
[  236.163459][T13374] netlink: 'syz.0.1884': attribute type 2 has an invalid length.
[  236.167469][T13374] netlink: 'syz.0.1884': attribute type 33 has an invalid length.
[  236.306710][T13378] bond37: entered promiscuous mode
[  236.309085][T13378] 8021q: adding VLAN 0 to HW filter on device bond37
[  236.320550][T13378] vlan1: entered allmulticast mode
[  236.322248][T13378] bond37: entered allmulticast mode
[  236.334709][T13378] bond37: (slave bridge14): making interface the new active one
[  236.337839][T13378] bridge14: entered promiscuous mode
[  236.340520][T13378] bridge14: entered allmulticast mode
[  236.342912][T13378] bond37: (slave bridge14): Enslaving as an active interface with an up link
[  236.437433][T13392] macvlan0: entered promiscuous mode
[  236.439437][T13392] macvlan0: entered allmulticast mode
[  236.628511][T13409] bond41: (slave vxcan3): The slave device specified does not support setting the MAC address
[  236.633174][T13409] bond41: (slave vxcan3): Error -95 calling set_mac_address
[  236.670508][T13412] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  236.680495][T13414] bond41: (slave bridge18): Enslaving as an active interface with an up link
[  236.860560][T13432] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  236.863436][T13433] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  236.866940][T13432] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  236.869488][T13432] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  236.882222][T13432] tipc: Resetting bearer <eth:syzkaller0>
[  236.970002][T13446] bond42: entered promiscuous mode
[  236.971903][T13446] 8021q: adding VLAN 0 to HW filter on device bond42
[  236.981429][T13447] syzkaller1: entered promiscuous mode
[  236.983363][T13447] syzkaller1: entered allmulticast mode
[  237.065327][T13453] wg1: entered promiscuous mode
[  237.067675][T13453] wg1: entered allmulticast mode
[  237.240968][T13459] syzkaller0: entered promiscuous mode
[  237.242941][T13459] syzkaller0: entered allmulticast mode
[  239.140032][T13503] bond43: entered promiscuous mode
[  239.142035][T13503] 8021q: adding VLAN 0 to HW filter on device bond43
[  239.185549][T13508] xt_hashlimit: size too large, truncated to 1048576
[  239.233029][T13506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.247291][T13506] syzkaller0: entered promiscuous mode
[  239.255600][T13506] syzkaller0: entered allmulticast mode
[  239.272715][T13505] tipc: Resetting bearer <eth:syzkaller0>
[  239.296917][T13505] tipc: Disabling bearer <eth:syzkaller0>
[  239.301489][T13513] veth0_to_bond: Caught tx_queue_len zero misconfig
[  239.305215][T13517] wg1: Caught tx_queue_len zero misconfig
[  239.397211][T13524] __nla_validate_parse: 20 callbacks suppressed
[  239.397221][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1926'.
[  239.402841][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1926'.
[  239.752545][T13562] validate_nla: 11 callbacks suppressed
[  239.752555][T13562] netlink: 'syz.1.1930': attribute type 61 has an invalid length.
[  239.838301][T13571] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.841720][T13571] syzkaller0: entered promiscuous mode
[  239.843965][T13571] syzkaller0: entered allmulticast mode
[  239.862270][T13571] tipc: Resetting bearer <eth:syzkaller0>
[  239.867653][T13570] tipc: Resetting bearer <eth:syzkaller0>
[  239.900677][T13570] tipc: Disabling bearer <eth:syzkaller0>
[  240.060308][T13588] netlink: 'syz.1.1935': attribute type 3 has an invalid length.
[  240.064158][T13588] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1935'.
[  240.071931][T13588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'.
[  240.074852][T13588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1935'.
[  240.078216][T13588] netlink: 'syz.1.1935': attribute type 19 has an invalid length.
[  240.080884][T13588] netlink: 'syz.1.1935': attribute type 20 has an invalid length.
[  240.374611][T13624] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1939'.
[  240.388827][T13627] netlink: 6976 bytes leftover after parsing attributes in process `syz.0.1942'.
[  240.394279][T13623] netlink: 11 bytes leftover after parsing attributes in process `syz.2.1941'.
[  240.411687][T13624] netlink: 'syz.1.1939': attribute type 7 has an invalid length.
[  240.619844][T13648] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  240.622632][T13648] CPU: 0 UID: 0 PID: 13648 Comm: syz.0.1948 Not tainted syzkaller #0 PREEMPT(full) 
[  240.622649][T13648] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.622657][T13648] Call Trace:
[  240.622663][T13648]  <TASK>
[  240.622669][T13648]  dump_stack_lvl+0xe8/0x150
[  240.622694][T13648]  sysfs_warn_dup+0x8e/0xa0
[  240.622715][T13648]  sysfs_do_create_link_sd+0xc0/0x110
[  240.622736][T13648]  device_add_class_symlinks+0x1cf/0x240
[  240.622785][T13648]  device_add+0x475/0xb70
[  240.622807][T13648]  wiphy_register+0x1d73/0x2d50
[  240.622834][T13648]  ? __pfx_wiphy_register+0x10/0x10
[  240.622848][T13648]  ? __pfx_netdev_run_todo+0x10/0x10
[  240.622866][T13648]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  240.622892][T13648]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  240.622915][T13648]  ieee80211_register_hw+0x3562/0x4200
[  240.622945][T13648]  ? ieee80211_register_hw+0x14f1/0x4200
[  240.622970][T13648]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  240.623001][T13648]  ? __hrtimer_setup+0x181/0x200
[  240.623019][T13648]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  240.623042][T13648]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  240.623082][T13648]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  240.623099][T13648]  ? kstrndup+0xbf/0x160
[  240.623123][T13648]  hwsim_new_radio_nl+0xf35/0x1bd0
[  240.623157][T13648]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  240.623183][T13648]  ? rcu_is_watching+0x15/0xb0
[  240.623202][T13648]  ? trace_kmalloc+0x2a/0x110
[  240.623221][T13648]  ? __nla_parse+0x40/0x60
[  240.623240][T13648]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  240.623264][T13648]  genl_family_rcv_msg_doit+0x22a/0x330
[  240.623288][T13648]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  240.623316][T13648]  ? bpf_lsm_capable+0x9/0x20
[  240.623332][T13648]  ? security_capable+0x7e/0x2c0
[  240.623356][T13648]  genl_rcv_msg+0x61c/0x7a0
[  240.623378][T13648]  ? __pfx_genl_rcv_msg+0x10/0x10
[  240.623394][T13648]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  240.623413][T13648]  ? __lock_acquire+0x6b5/0x2cf0
[  240.623436][T13648]  netlink_rcv_skb+0x232/0x4b0
[  240.623451][T13648]  ? __pfx_genl_rcv_msg+0x10/0x10
[  240.623468][T13648]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  240.623494][T13648]  ? down_read+0x272/0x2e0
[  240.623510][T13648]  ? genl_rcv+0xd/0x40
[  240.623527][T13648]  genl_rcv+0x28/0x40
[  240.623542][T13648]  netlink_unicast+0x80f/0x9b0
[  240.623569][T13648]  ? __pfx_netlink_unicast+0x10/0x10
[  240.623591][T13648]  ? netlink_sendmsg+0x650/0xb40
[  240.623611][T13648]  ? skb_put+0x11b/0x210
[  240.623630][T13648]  netlink_sendmsg+0x813/0xb40
[  240.623650][T13648]  ? __pfx_netlink_sendmsg+0x10/0x10
[  240.623687][T13648]  ? aa_sock_msg_perm+0xf1/0x1b0
[  240.623706][T13648]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  240.623723][T13648]  ____sys_sendmsg+0x972/0x9f0
[  240.623736][T13648]  ? futex_unqueue+0x211/0x240
[  240.623780][T13648]  ? __pfx_____sys_sendmsg+0x10/0x10
[  240.623801][T13648]  ? import_iovec+0x73/0xa0
[  240.623816][T13648]  ___sys_sendmsg+0x2a5/0x360
[  240.623832][T13648]  ? __pfx____sys_sendmsg+0x10/0x10
[  240.623850][T13648]  ? futex_wait+0x29a/0x380
[  240.623882][T13648]  ? __fget_files+0x2a/0x420
[  240.623892][T13648]  ? __fget_files+0x3a0/0x420
[  240.623910][T13648]  __x64_sys_sendmsg+0x1bd/0x2a0
[  240.623926][T13648]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  240.623949][T13648]  ? rcu_is_watching+0x15/0xb0
[  240.623974][T13648]  do_syscall_64+0x14d/0xf80
[  240.623986][T13648]  ? trace_irq_disable+0x3b/0x150
[  240.623992][T13648]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.624002][T13648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.624009][T13648] RIP: 0033:0x7f2ac7d9cdd9
[  240.624018][T13648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  240.624025][T13648] RSP: 002b:00007f2ac8bef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  240.624034][T13648] RAX: ffffffffffffffda RBX: 00007f2ac8015fa0 RCX: 00007f2ac7d9cdd9
[  240.624039][T13648] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000b
[  240.624044][T13648] RBP: 00007f2ac7e32d69 R08: 0000000000000000 R09: 0000000000000000
[  240.624048][T13648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  240.624053][T13648] R13: 00007f2ac8016038 R14: 00007f2ac8015fa0 R15: 00007fffb5e709c8
[  240.624065][T13648]  </TASK>
[  240.913338][T13660] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1952'.
[  240.996685][T13668] netlink: 'syz.0.1954': attribute type 1 has an invalid length.
[  241.025084][T13670] netlink: 'syz.2.1955': attribute type 9 has an invalid length.
[  241.192898][T13687] netlink: 'syz.1.1959': attribute type 4 has an invalid length.
[  241.195296][T13687] netlink: 'syz.1.1959': attribute type 4 has an invalid length.
[  241.209445][T13687] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  241.281851][T13698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1964'.
[  241.413153][T13716] netlink: 'syz.0.1968': attribute type 1 has an invalid length.
[  241.754053][T13749] xt_CT: You must specify a L4 protocol and not use inversions on it
[  241.935645][T13773] bond44: entered promiscuous mode
[  241.942221][T13773] 8021q: adding VLAN 0 to HW filter on device bond44
[  241.947929][T13773] bond44: entered allmulticast mode
[  241.956645][T13773] bond44: (slave bridge20): making interface the new active one
[  241.959068][T13773] bridge20: entered promiscuous mode
[  241.960768][T13773] bridge20: entered allmulticast mode
[  241.963500][T13773] bond44: (slave bridge20): Enslaving as an active interface with an up link
[  242.208642][T13808] tap0: tun_chr_ioctl cmd 1074025677
[  242.210789][T13808] tap0: linktype set to 773
[  242.592476][T13850] syzkaller0: entered promiscuous mode
[  242.594616][T13850] syzkaller0: entered allmulticast mode
[  243.879441][T13901] bond36: (slave 26rB): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  243.899026][T13901] bond36: (slave 26rB): Enslaving as an active interface with an up link
[  243.906660][T13901] net_ratelimit: 335 callbacks suppressed
[  243.906674][T13901] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  244.005379][T13908] syzkaller0: entered promiscuous mode
[  244.009330][T13908] syzkaller0: entered allmulticast mode
[  244.135878][T13917] batman_adv: batadv0: Adding interface: ipvlan0
[  244.138963][T13917] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  244.147349][T13917] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active
[  244.185424][T13923] batman_adv: batadv0: Removing interface: ipvlan0
[  244.474604][T13944] __nla_validate_parse: 15 callbacks suppressed
[  244.474615][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2005'.
[  244.480724][T13944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2005'.
[  244.485475][T13936] lo speed is unknown, defaulting to 1000
[  244.664289][T13955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2007'.
[  244.749740][T13958] syzkaller1: tun_chr_ioctl cmd 1074025677
[  244.752104][T13958] syzkaller1: linktype set to 780
[  244.754244][T13958] syzkaller1: tun_chr_ioctl cmd 1074025677
[  244.759848][T13958] syzkaller1: linktype set to 780
[  244.799949][T13962] validate_nla: 30 callbacks suppressed
[  244.799958][T13962] netlink: 'syz.2.2010': attribute type 1 has an invalid length.
[  245.185666][T13997] netlink: 'syz.1.2018': attribute type 33 has an invalid length.
[  245.188550][T13997] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2018'.
[  245.238878][T14004] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  245.242216][T14004] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2021'.
[  245.275612][T14002] netlink: 'syz.2.2020': attribute type 11 has an invalid length.
[  245.281553][T14002] netlink: 'syz.2.2020': attribute type 4 has an invalid length.
[  245.347871][T14015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2023'.
[  245.449272][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2024'.
[  245.453026][T14022] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2024'.
[  246.232722][T14029] pim6reg1: entered promiscuous mode
[  246.234714][T14029] pim6reg1: entered allmulticast mode
[  246.239775][T14029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'.
[  246.243619][T14029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'.
[  246.314621][T14034] lo speed is unknown, defaulting to 1000
[  246.343617][T14038] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  246.368160][T14040] netlink: 'syz.1.2031': attribute type 1 has an invalid length.
[  246.404613][T14040] bond37: entered promiscuous mode
[  246.407218][T14040] 8021q: adding VLAN 0 to HW filter on device bond37
[  246.424723][T14041] pim6reg1: entered allmulticast mode
[  246.469533][T14046] xt_CT: You must specify a L4 protocol and not use inversions on it
[  246.585288][T14054] netlink: 'syz.2.2034': attribute type 1 has an invalid length.
[  247.049723][T14065] ipt_REJECT: ECHOREPLY no longer supported.
[  247.138749][T14070] netlink: 'syz.0.2037': attribute type 32 has an invalid length.
[  247.570720][T14087] PKCS7: Unknown OID: [4] (bad)
[  247.572789][T14087] PKCS7: Only support pkcs7_signedData type
[  247.603616][T14087] bond39: Invalid ad_actor_system MAC address.
[  247.605917][T14087] bond39: option ad_actor_system: invalid value (7)
[  247.610416][T14087] bond39 (unregistering): Released all slaves
[  247.624162][T14088] syzkaller1: entered promiscuous mode
[  247.627001][T14088] syzkaller1: entered allmulticast mode
[  247.839745][T14097] bond38 (unregistering): Released all slaves
[  248.033243][T14101] netlink: 'syz.1.2046': attribute type 1 has an invalid length.
[  248.044521][T14112] tipc: Can't bind to reserved service type 1
[  248.191846][T14127] netlink: 'syz.1.2053': attribute type 6 has an invalid length.
[  248.233417][T14132] netlink: 'syz.2.2055': attribute type 4 has an invalid length.
[  248.383802][T14138] macvtap0: entered promiscuous mode
[  248.484374][T14148] netlink: 'syz.2.2060': attribute type 8 has an invalid length.
[  248.491414][T14148] syzkaller1: entered promiscuous mode
[  248.493861][T14148] syzkaller1: entered allmulticast mode
[  248.588104][T14156] syzkaller1: left promiscuous mode
[  248.590405][T14156] syzkaller1: left allmulticast mode
[  248.700567][T14161] lo speed is unknown, defaulting to 1000
[  249.327312][T14171] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.330841][T14171] rB: Caught tx_queue_len zero misconfig
[  249.707950][T14206] __nla_validate_parse: 17 callbacks suppressed
[  249.707960][T14206] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2076'.
[  249.889230][T14226] netlink: 'syz.1.2080': attribute type 10 has an invalid length.
[  249.931469][T14233] netlink: 'syz.2.2083': attribute type 10 has an invalid length.
[  249.933898][T14233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2083'.
[  249.939055][T14234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2083'.
[  249.942033][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2083'.
[  250.033213][T14237] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2084'.
[  250.037957][T14241] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2084'.
[  250.659229][T14243] bridge20: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  250.876075][T14254] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  251.257355][T14266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2091'.
[  251.271624][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2091'.
[  251.475150][T14272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2092'.
[  252.975169][T14236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  253.094487][T14277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2094'.
[  253.147941][T14277] bond39: entered promiscuous mode
[  253.152988][T14277] 8021q: adding VLAN 0 to HW filter on device bond39
[  253.172540][T14287] 8021q: adding VLAN 0 to HW filter on device bond39
[  253.174900][T14287] bond39: (slave ip6gre3): The slave device specified does not support setting the MAC address
[  253.187856][T14287] bond39: (slave ip6gre3): Error -95 calling set_mac_address
[  253.228165][T14296] netlink: 'syz.2.2097': attribute type 1 has an invalid length.
[  253.268227][T14296] bond39: entered promiscuous mode
[  253.271455][T14296] 8021q: adding VLAN 0 to HW filter on device bond39
[  253.284527][T14296] bond39: left promiscuous mode
[  253.310028][T14296] bond39: (slave bridge15): making interface the new active one
[  253.317302][T14296] bond39: (slave bridge15): Enslaving as an active interface with an up link
[  253.323166][T14302] netlink: 'syz.1.2099': attribute type 1 has an invalid length.
[  253.344843][T14302] bond40: entered promiscuous mode
[  253.347011][T14302] 8021q: adding VLAN 0 to HW filter on device bond40
[  253.354562][T14302] ipvlan0: entered allmulticast mode
[  253.356988][T14302] bond40: entered allmulticast mode
[  253.365174][T14302] bond40: (slave bridge21): making interface the new active one
[  253.368375][T14302] bridge21: entered promiscuous mode
[  253.370172][T14302] bridge21: entered allmulticast mode
[  253.372519][T14302] bond40: (slave bridge21): Enslaving as an active interface with an up link
[  253.430849][T14309] netlink: 'syz.0.2102': attribute type 4 has an invalid length.
[  253.573763][T14321] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.828292][T14340] syzkaller1: entered promiscuous mode
[  253.830356][T14340] syzkaller1: entered allmulticast mode
[  254.287278][T14352] can: request_module (can-proto-0) failed.
[  254.439636][T14365] x_tables: duplicate underflow at hook 2
[  254.871712][T14386] xt_nfacct: accounting object `syz0' does not exist
[  254.928884][T14395] netlink: 'syz.2.2125': attribute type 1 has an invalid length.
[  254.965032][T14395] 8021q: adding VLAN 0 to HW filter on device bond40
[  254.983401][T14396] bond40: (slave geneve5): making interface the new active one
[  254.990472][T14396] bond40: (slave geneve5): Enslaving as an active interface with an up link
[  254.994237][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.997575][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  255.000291][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  255.000945][T14401] __nla_validate_parse: 11 callbacks suppressed
[  255.000953][T14401] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2126'.
[  255.003082][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.196955][T14418] Bluetooth: MGMT ver 1.23
[  255.487661][T14440] netlink: 'syz.2.2131': attribute type 1 has an invalid length.
[  255.501543][T14440] 8021q: adding VLAN 0 to HW filter on device bond41
[  255.509404][T14443] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2132'.
[  255.530774][T14440] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2131'.
[  255.532230][T14447] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2133'.
[  255.561061][T14447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'.
[  255.564844][T14447] netlink: 'syz.1.2133': attribute type 11 has an invalid length.
[  255.568414][T14447] netlink: 'syz.1.2133': attribute type 11 has an invalid length.
[  255.571710][T14447] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2133'.
[  255.580065][T14440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2131'.
[  255.718190][T14457] netlink: 8752 bytes leftover after parsing attributes in process `syz.2.2135'.
[  255.723299][T14456] bridge_slave_1: entered allmulticast mode
[  255.779765][T14452] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2134'.
[  255.815222][   T33] audit: type=1800 audit(1778582540.270:5): pid=14463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2137" name="memory.events" dev="tmpfs" ino=3605 res=0 errno=0
[  256.022332][T14487] macsec3: entered promiscuous mode
[  256.029461][T14487] macsec4: entered promiscuous mode
[  256.077415][T14496] netlink: 'syz.1.2145': attribute type 1 has an invalid length.
[  256.099110][T14475] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2140'.
[  256.109318][T14496] bond41: entered promiscuous mode
[  256.111745][T14496] 8021q: adding VLAN 0 to HW filter on device bond41
[  256.128073][T14496] bond41: (slave bridge22): making interface the new active one
[  256.130558][T14496] bridge22: entered promiscuous mode
[  256.133520][T14496] bond41: (slave bridge22): Enslaving as an active interface with an up link
[  256.155444][T14501] bond37: entered allmulticast mode
[  256.788843][T14504] netlink: 'syz.2.2147': attribute type 10 has an invalid length.
[  256.793945][T14505] netlink: 'syz.2.2147': attribute type 10 has an invalid length.
[  256.801616][T14505] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  256.909111][T14498] bond37: left allmulticast mode
[  256.999837][T14519] bond36: (slave 26rB): Releasing backup interface
[  257.004707][T14519] bond36: (slave 26rB): last VLAN challenged slave left bond - VLAN blocking is removed
[  257.012112][T14521] netlink: 'syz.2.2153': attribute type 1 has an invalid length.
[  257.021387][T14519] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  257.083314][T14519] ip6gre3: entered allmulticast mode
[  257.095649][T14521] bond42: (slave bridge16): making interface the new active one
[  257.099919][T14521] bond42: (slave bridge16): Enslaving as an active interface with an up link
[  257.179724][T14540] bond42: entered promiscuous mode
[  257.191215][T14540] bridge16: entered promiscuous mode
[  257.196438][T14540] bond42: entered allmulticast mode
[  257.198086][T14540] bridge16: entered allmulticast mode
[  257.207956][T14540] 8021q: adding VLAN 0 to HW filter on device bond42
[  257.230006][T14542] syzkaller1: entered promiscuous mode
[  257.232319][T14542] syzkaller1: entered allmulticast mode
[  257.290120][T14544] netlink: 'syz.0.2158': attribute type 1 has an invalid length.
[  257.372232][T14550] netlink: 'syz.1.2160': attribute type 1 has an invalid length.
[  257.395741][T14551] hmac(sha2: entered promiscuous mode
[  257.407119][T14550] bond42: (slave ip6gretap0): Enslaving as a backup interface with an up link
[  257.430771][T14550] veth27: entered promiscuous mode
[  257.439506][T14550] bond42: (slave veth27): Enslaving as a backup interface with a down link
[  257.448178][ T5706] bond42: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  257.448296][T14550] 8021q: adding VLAN 0 to HW filter on device bond42
[  257.556281][ T5891] bond42: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  257.556702][T14562] syzkaller1: entered promiscuous mode
[  257.562706][T14562] syzkaller1: entered allmulticast mode
[  257.645346][T14566] IPVS: Unknown mcast interface: team0
[  257.815019][T14577] netlink: 'syz.0.2167': attribute type 20 has an invalid length.
[  257.818009][T14578] netlink: 'syz.0.2167': attribute type 20 has an invalid length.
[  257.826840][ T5891] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  257.831140][ T5706] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  257.834481][ T5706] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  257.840471][ T5706] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  258.305632][T14608] lo speed is unknown, defaulting to 1000
[  258.993975][T14644] bond45 (unregistering): Released all slaves
[  259.180721][T14652] bridge17: port 1(veth0_to_bond) entered blocking state
[  259.183173][T14652] bridge17: port 1(veth0_to_bond) entered disabled state
[  259.185456][T14652] veth0_to_bond: entered allmulticast mode
[  259.206227][T14652] veth0_to_bond: entered promiscuous mode
[  259.236201][ T5838] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.247925][ T5838] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.250392][ T5838] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.253187][ T5838] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.426333][   T12] bond42: (slave ip6gretap0): link status up again after 0 ms
[  259.438012][   T12] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  259.618619][   T12] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  259.726827][ T5891] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  259.808584][T14696] lo speed is unknown, defaulting to 1000
[  259.840589][ T5706] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  259.997693][ T5706] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  260.109085][ T5838] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  260.233871][T14730] IPVS: set_ctl: invalid protocol: 50 172.20.20.41:20004
[  260.245409][T14731] __nla_validate_parse: 21 callbacks suppressed
[  260.245425][T14731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2205'.
[  260.318500][T14737] dvmrp8: left allmulticast mode
[  260.382504][T14737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2206'.
[  260.387445][T14737] nbd: must specify a device to reconfigure
[  260.608471][T14780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2220'.
[  260.611491][T14779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2220'.
[  260.685453][T14787] validate_nla: 5 callbacks suppressed
[  260.685463][T14787] netlink: 'syz.2.2223': attribute type 8 has an invalid length.
[  260.748017][T14790] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  260.752289][T14790] CPU: 1 UID: 0 PID: 14790 Comm: syz.0.2224 Not tainted syzkaller #0 PREEMPT(full) 
[  260.752306][T14790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  260.752313][T14790] Call Trace:
[  260.752319][T14790]  <TASK>
[  260.752324][T14790]  dump_stack_lvl+0xe8/0x150
[  260.752347][T14790]  sysfs_warn_dup+0x8e/0xa0
[  260.752366][T14790]  sysfs_do_create_link_sd+0xc0/0x110
[  260.752384][T14790]  device_add_class_symlinks+0x1cf/0x240
[  260.752406][T14790]  device_add+0x475/0xb70
[  260.752424][T14790]  wiphy_register+0x1d73/0x2d50
[  260.752470][T14790]  ? __pfx_wiphy_register+0x10/0x10
[  260.752486][T14790]  ? __pfx_netdev_run_todo+0x10/0x10
[  260.752504][T14790]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  260.752551][T14790]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  260.752574][T14790]  ieee80211_register_hw+0x3562/0x4200
[  260.752601][T14790]  ? ieee80211_register_hw+0x14f1/0x4200
[  260.752626][T14790]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  260.752656][T14790]  ? __hrtimer_setup+0x181/0x200
[  260.752679][T14790]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  260.752700][T14790]  mac80211_hwsim_new_radio+0x2f97/0x5330
[  260.752737][T14790]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  260.752754][T14790]  ? kstrndup+0xbf/0x160
[  260.752776][T14790]  hwsim_new_radio_nl+0xf35/0x1bd0
[  260.752807][T14790]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  260.752832][T14790]  ? rcu_is_watching+0x15/0xb0
[  260.752848][T14790]  ? trace_kmalloc+0x2a/0x110
[  260.752867][T14790]  ? __nla_parse+0x40/0x60
[  260.752884][T14790]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  260.752908][T14790]  genl_family_rcv_msg_doit+0x22a/0x330
[  260.752930][T14790]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  260.752956][T14790]  ? bpf_lsm_capable+0x9/0x20
[  260.752974][T14790]  ? security_capable+0x7e/0x2c0
[  260.752996][T14790]  genl_rcv_msg+0x61c/0x7a0
[  260.753016][T14790]  ? __pfx_genl_rcv_msg+0x10/0x10
[  260.753032][T14790]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  260.753050][T14790]  ? __lock_acquire+0x6b5/0x2cf0
[  260.753072][T14790]  netlink_rcv_skb+0x232/0x4b0
[  260.753087][T14790]  ? __pfx_genl_rcv_msg+0x10/0x10
[  260.753105][T14790]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  260.753131][T14790]  ? down_read+0x272/0x2e0
[  260.753147][T14790]  ? genl_rcv+0xd/0x40
[  260.753165][T14790]  genl_rcv+0x28/0x40
[  260.753181][T14790]  netlink_unicast+0x80f/0x9b0
[  260.753205][T14790]  ? __pfx_netlink_unicast+0x10/0x10
[  260.753226][T14790]  ? netlink_sendmsg+0x650/0xb40
[  260.753237][T14790]  ? skb_put+0x11b/0x210
[  260.753255][T14790]  netlink_sendmsg+0x813/0xb40
[  260.753276][T14790]  ? __pfx_netlink_sendmsg+0x10/0x10
[  260.753292][T14790]  ? aa_sock_msg_perm+0xf1/0x1b0
[  260.753311][T14790]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  260.753329][T14790]  ____sys_sendmsg+0x972/0x9f0
[  260.753345][T14790]  ? futex_unqueue+0x211/0x240
[  260.753364][T14790]  ? __pfx_____sys_sendmsg+0x10/0x10
[  260.753387][T14790]  ? import_iovec+0x73/0xa0
[  260.753406][T14790]  ___sys_sendmsg+0x2a5/0x360
[  260.753426][T14790]  ? __pfx____sys_sendmsg+0x10/0x10
[  260.753447][T14790]  ? futex_wait+0x29a/0x380
[  260.753483][T14790]  ? __fget_files+0x2a/0x420
[  260.753496][T14790]  ? __fget_files+0x3a0/0x420
[  260.753514][T14790]  __x64_sys_sendmsg+0x1bd/0x2a0
[  260.753557][T14790]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  260.753580][T14790]  ? rcu_is_watching+0x15/0xb0
[  260.753606][T14790]  do_syscall_64+0x14d/0xf80
[  260.753623][T14790]  ? trace_irq_disable+0x3b/0x150
[  260.753635][T14790]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.753651][T14790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.753663][T14790] RIP: 0033:0x7f2ac7d9cdd9
[  260.753683][T14790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.753694][T14790] RSP: 002b:00007f2ac8bce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  260.753707][T14790] RAX: ffffffffffffffda RBX: 00007f2ac8016090 RCX: 00007f2ac7d9cdd9
[  260.753717][T14790] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[  260.753724][T14790] RBP: 00007f2ac7e32d69 R08: 0000000000000000 R09: 0000000000000000
[  260.753731][T14790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  260.753738][T14790] R13: 00007f2ac8016128 R14: 00007f2ac8016090 R15: 00007fffb5e709c8
[  260.753760][T14790]  </TASK>
[  261.000165][T14802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2228'.
[  261.004574][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2228'.
[  261.024243][T14810] netlink: 'syz.2.2229': attribute type 1 has an invalid length.
[  261.091849][T14810] bond43: entered promiscuous mode
[  261.093989][T14810] bond43: entered allmulticast mode
[  261.096956][T14810] 8021q: adding VLAN 0 to HW filter on device bond43
[  261.105440][T14813] macvlan1: entered promiscuous mode
[  261.108254][T14813] macvlan1: entered allmulticast mode
[  261.112890][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2230'.
[  261.119735][T14813] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  261.178412][T14820] netlink: 'syz.1.2232': attribute type 1 has an invalid length.
[  261.226467][T14823] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2234'.
[  261.229256][T14823] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2234'.
[  261.233296][T14826] netlink: 'syz.2.2235': attribute type 1 has an invalid length.
[  261.288112][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2236'.
[  261.340083][T14838] netlink: 'syz.0.2236': attribute type 1 has an invalid length.
[  262.036695][ T5706] net_ratelimit: 15 callbacks suppressed
[  262.036712][ T5706] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  262.146494][ T5706] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  262.256729][ T5706] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  262.366748][ T5706] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  262.476908][   T12] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  262.586700][   T12] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  262.696409][ T5706] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  262.806622][ T5706] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  262.916735][ T5706] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  263.026848][ T5706] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  267.136746][   T12] net_ratelimit: 36 callbacks suppressed
[  267.136764][   T12] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  267.246486][   T12] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  267.356930][ T5891] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  267.466423][ T5891] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  267.586793][ T5706] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  267.696515][   T12] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  267.816506][ T5706] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  267.926347][ T5891] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  268.036691][ T5706] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  268.146366][   T12] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  271.349378][T14842] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2239'.
[  271.388916][T14851] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.394497][T14851] syzkaller0: MTU too low for tipc bearer
[  271.403523][T14851] tipc: Disabling bearer <eth:syzkaller0>
[  271.408598][T14851] syzkaller0: entered promiscuous mode
[  271.410860][T14851] syzkaller0: entered allmulticast mode
[  271.414275][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2244'.
[  271.457386][T14861] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2245'.
[  271.522951][T14869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2247'.
[  271.531087][T14869] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2247'.
[  271.549050][T14870] erspan0: entered promiscuous mode
[  271.557313][   T13] bond0: (slave dummy0): interface is now down
[  271.560032][T14870] 8021q: adding VLAN 0 to HW filter on device bond0
[  271.577364][   T12] bond0: (slave dummy0): interface is now down
[  271.580009][   T12] bond0: now running without any active interface!
[  271.620039][T14877] bond44: option packets_per_slave: invalid value (1048582)
[  271.622863][T14877] bond44: option packets_per_slave: allowed values 0 - 65535
[  271.626602][T14877] bond44 (unregistering): Released all slaves
[  271.643393][T14878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2249'.
[  271.680511][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2251'.
[  271.693260][T14881] bond44: entered promiscuous mode
[  271.695533][T14881] 8021q: adding VLAN 0 to HW filter on device bond44
[  271.707839][T14881] vlan4: entered allmulticast mode
[  271.709904][T14881] bond44: entered allmulticast mode
[  271.720767][T14884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2252'.
[  271.737934][T14888] netlink: 'syz.2.2253': attribute type 1 has an invalid length.
[  271.751041][T14888] bond45: entered promiscuous mode
[  271.753368][T14888] 8021q: adding VLAN 0 to HW filter on device bond45
[  271.816766][T14894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2254'.
[  271.820293][T14894] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2254'.
[  271.903768][T14902] bond46: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  271.910641][T14902] bond46: (slave lo): Enslaving as an active interface with an up link
[  271.971090][T14906] netlink: 'syz.0.2257': attribute type 1 has an invalid length.
[  271.983164][T14906] bond46: entered promiscuous mode
[  271.985055][T14906] bond46: entered allmulticast mode
[  271.987740][T14906] 8021q: adding VLAN 0 to HW filter on device bond46
[  272.166267][   T12] net_ratelimit: 38 callbacks suppressed
[  272.166284][   T12] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  272.276705][ T5838] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  272.386923][ T5891] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  272.506673][   T12] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  272.616593][ T5838] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  272.766633][ T5891] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  272.878732][ T5838] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  272.996641][ T5891] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  273.106543][   T12] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  273.216231][   T12] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  274.453794][T14861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  274.464951][T14917] netlink: 'syz.0.2261': attribute type 1 has an invalid length.
[  274.581381][T14934] netlink: 'syz.0.2266': attribute type 2 has an invalid length.
[  274.584083][T14934] netlink: 'syz.0.2266': attribute type 2 has an invalid length.
[  274.587158][T14934] netlink: 'syz.0.2266': attribute type 1 has an invalid length.
[  274.693678][T14944] netlink: 'syz.2.2269': attribute type 1 has an invalid length.
[  274.731293][T14944] bond47: entered promiscuous mode
[  274.737962][T14944] 8021q: adding VLAN 0 to HW filter on device bond47
[  274.745688][T14944] bond47: entered allmulticast mode
[  274.755790][T14944] bond47: (slave bridge19): making interface the new active one
[  274.758648][T14944] bridge19: entered promiscuous mode
[  274.760480][T14944] bridge19: entered allmulticast mode
[  274.762834][T14944] bond47: (slave bridge19): Enslaving as an active interface with an up link
[  274.806725][T14953] netlink: 'syz.1.2270': attribute type 30 has an invalid length.
[  277.643027][ T5838] net_ratelimit: 14 callbacks suppressed
[  277.643042][ T5838] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  277.664145][T14953] workqueue: Failed to create a rescuer kthread for wq "bond44": -EINTR
[  277.786968][ T5838] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  277.889073][T14986] bridge20: entered promiscuous mode
[  277.891313][T14986] bridge20: entered allmulticast mode
[  277.969474][ T5891] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  278.017585][T14980] block nbd3: server does not support multiple connections per device.
[  278.021294][T14980] block nbd3: shutting down sockets
[  278.100559][ T5838] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  278.199371][T15021] __nla_validate_parse: 72 callbacks suppressed
[  278.199388][T15021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2280'.
[  278.237139][ T5838] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  278.250875][T15030] netlink: 'syz.1.2281': attribute type 9 has an invalid length.
[  278.290558][T15030] netlink: 'syz.1.2281': attribute type 3 has an invalid length.
[  278.293083][T15030] netlink: 'syz.1.2281': attribute type 3 has an invalid length.
[  278.328673][T15039] xt_hashlimit: size too large, truncated to 1048576
[  278.347453][ T5838] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  278.391216][T15045] netlink: 'syz.2.2283': attribute type 1 has an invalid length.
[  278.467697][ T5891] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  278.501467][T15045] netlink: 'syz.2.2283': attribute type 1 has an invalid length.
[  278.502190][T15051] bond47: option xmit_hash_policy: invalid value (118)
[  278.504454][T15045] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2283'.
[  278.530486][T15051] bond47 (unregistering): Released all slaves
[  278.561125][T15039] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2283'.
[  278.576814][ T5891] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  278.688069][ T5891] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  278.722213][T15074] syzkaller0: entered promiscuous mode
[  278.733124][T15074] syzkaller0: entered allmulticast mode
[  278.827126][ T5891] bond42: (slave ip6gretap0): failed to get link speed/duplex
[  279.014997][T15108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2291'.
[  279.688250][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2300'.
[  279.743614][T15144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2301'.
[  279.749686][T15143] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2301'.
[  279.762009][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2302'.
[  279.767651][T15148] netlink: 'syz.1.2302': attribute type 1 has an invalid length.
[  279.800702][T15148] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2302'.
[  279.882723][T15158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2306'.
[  279.901904][T15158] bond48 (unregistering): Released all slaves
[  279.994440][T15167] netlink: 'syz.0.2308': attribute type 13 has an invalid length.
[  280.053436][T15170] netlink: 'syz.2.2309': attribute type 1 has an invalid length.
[  280.058078][T15169] netlink: 'syz.2.2309': attribute type 1 has an invalid length.
[  280.091368][T15169] bond48: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  280.108189][T15170] 8021q: adding VLAN 0 to HW filter on device bond48
[  280.628866][T15202] netlink: 'syz.1.2319': attribute type 4 has an invalid length.
[  280.704081][T15207] xt_hashlimit: size too large, truncated to 1048576
[  281.009961][T15222] lo speed is unknown, defaulting to 1000
[  281.101219][T15237] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.104515][T15237] syzkaller0: entered promiscuous mode
[  281.107132][T15237] syzkaller0: entered allmulticast mode
[  281.159394][T15236] tipc: Resetting bearer <eth:syzkaller0>
[  281.181654][T15236] tipc: Disabling bearer <eth:syzkaller0>
[  281.269934][T15211] lo speed is unknown, defaulting to 1000
[  281.413268][T15246] syzkaller0: entered promiscuous mode
[  281.415026][T15246] syzkaller0: entered allmulticast mode
[  281.751134][    C1] hrtimer: interrupt took 541631 ns
[  282.477037][T15283] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  282.803021][   T58] block nbd3: Receive control failed (result -32)
[  282.809767][ T9036] block nbd3: Receive control failed (result -32)
[  282.824560][T15285] IPv6: sit3: Disabled Multicast RS
[  282.912045][T15283] 8021q: adding VLAN 0 to HW filter on device bond47
[  282.950839][T15295] bond47: (slave geneve4): making interface the new active one
[  282.955236][T15295] bond47: (slave geneve4): Enslaving as an active interface with an up link
[  283.484045][T15338] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  283.487849][T15338] syzkaller0: entered promiscuous mode
[  283.490699][T15338] syzkaller0: entered allmulticast mode
[  283.524522][T15338] tipc: Resetting bearer <eth:syzkaller0>
[  283.538542][T15332] tipc: Resetting bearer <eth:syzkaller0>
[  283.567114][T15332] tipc: Disabling bearer <eth:syzkaller0>
[  283.633748][T15340] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  283.644403][T15340] syzkaller0: entered promiscuous mode
[  283.653961][T15340] syzkaller0: entered allmulticast mode
[  283.681780][T15340] tipc: Resetting bearer <eth:syzkaller0>
[  283.687931][T15339] tipc: Resetting bearer <eth:syzkaller0>
[  283.708812][T15345] __nla_validate_parse: 6 callbacks suppressed
[  283.708873][T15345] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2353'.
[  283.716094][T15339] tipc: Disabling bearer <eth:syzkaller0>
[  283.729768][T15348] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  283.733793][T15349] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  283.816395][T15349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2354'.
[  283.827898][T15349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2354'.
[  283.833051][T15350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2354'.
[  283.839007][T15350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2354'.
[  283.985619][T15357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2357'.
[  283.991543][T15357] net_ratelimit: 29 callbacks suppressed
[  283.991555][T15357] openvswitch: netlink: Message has 4 unknown bytes.
[  284.224949][T15372] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  284.584140][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2366'.
[  284.712632][T15403] hm3): entered promiscuous mode
[  284.750228][T15406] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2368'.
[  284.765991][T15406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'.
[  284.807423][T15406] bond44: option broadcast_neighbor: invalid value (30)
[  284.811586][T15406] bond44 (unregistering): Released all slaves
[  284.828967][T15409] validate_nla: 6 callbacks suppressed
[  284.828976][T15409] netlink: 'syz.0.2371': attribute type 1 has an invalid length.
[  284.845222][T15409] 8021q: adding VLAN 0 to HW filter on device bond48
[  285.042874][T15417] xt_hashlimit: size too large, truncated to 1048576
[  285.103068][T15421] netlink: 'syz.1.2373': attribute type 1 has an invalid length.
[  285.119346][T15421] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2373'.
[  285.143928][T15425] bridge0: port 1(erspan0) entered blocking state
[  285.151384][T15425] bridge0: port 1(erspan0) entered disabled state
[  285.156886][T15425] erspan0: entered allmulticast mode
[  285.165129][T15425] erspan0: left allmulticast mode
[  285.369086][T15436] workqueue: Failed to create a rescuer kthread for wq "bond49": -EINTR
[  285.768903][T15459] netlink: 'syz.2.2380': attribute type 1 has an invalid length.
[  285.799864][T15459] bond49: (slave bridge22): Enslaving as a backup interface with an up link
[  285.889852][T15471] xt_socket: unknown flags 0x50
[  286.165404][T15491] syzkaller0: entered promiscuous mode
[  286.168326][T15491] syzkaller0: entered allmulticast mode
[  286.974498][T15526] ipip0: entered promiscuous mode
[  286.991722][T15529] netlink: 'syz.0.2395': attribute type 4 has an invalid length.
[  286.996022][T15526] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ipip0
[  287.006600][T15526] gretap6: entered promiscuous mode
[  287.008275][T15526] gretap6: entered allmulticast mode
[  287.101180][T15529] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  287.117625][T15294] lo speed is unknown, defaulting to 1000
[  287.119486][T15294] sqz0: Port: 1 Link DOWN
[  287.120924][T15294] lo speed is unknown, defaulting to 1000
[  287.122960][T15529] netlink: 'syz.0.2395': attribute type 4 has an invalid length.
[  287.135652][T15294] lo speed is unknown, defaulting to 1000
[  287.139510][T15294] sqz0: Port: 1 Link ACTIVE
[  287.141217][  T977] lo speed is unknown, defaulting to 1000
[  287.243648][T15535] dvmrp0: entered allmulticast mode
[  287.448316][T15537] netlink: 'syz.0.2396': attribute type 1 has an invalid length.
[  287.461147][T15537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  287.479089][ T1930] lo speed is unknown, defaulting to 1000
[  287.481902][ T1930] sqz0: Port: 1 Link DOWN
[  287.484299][ T1930] lo speed is unknown, defaulting to 1000
[  287.913139][T15550] netlink: 'syz.0.2401': attribute type 1 has an invalid length.
[  288.053297][T15550] bond49: entered promiscuous mode
[  288.055036][T15550] bond49: entered allmulticast mode
[  288.074622][T15550] 8021q: adding VLAN 0 to HW filter on device bond49
[  288.230147][T15562] hsr0: entered promiscuous mode
[  288.232734][T15560] hsr0: left promiscuous mode
[  288.241610][T15561] 0: renamed from hsr_slave_1
[  288.254006][T15561] 0: entered allmulticast mode
[  288.260038][T15561] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  288.278588][T15561] 1: renamed from c0 (while UP)
[  288.285912][T15294] IPVS: starting estimator thread 0...
[  288.289210][T15565] IPVS: set_ctl: invalid protocol: 60 10.1.0.255:20000
[  288.295499][T15561] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check.
[  288.296619][T15565] IPVS: sh: FWM 3 0x00000003 - no destination available
[  288.376895][T15566] IPVS: using max 73 ests per chain, 175200 per kthread
[  288.382890][T15567] IPVS: sh: FWM 3 0x00000003 - no destination available
[  288.598132][T15576] lo speed is unknown, defaulting to 1000
[  288.604707][T15575] bond46: (slave lo): Releasing backup interface
[  288.609987][T15575] bond46: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  288.614550][T15575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  289.262043][T15585] lo: Caught tx_queue_len zero misconfig
[  289.272071][T15585] netlink: 'syz.0.2409': attribute type 1 has an invalid length.
[  289.275082][T15585] __nla_validate_parse: 13 callbacks suppressed
[  289.275090][T15585] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2409'.
[  289.287731][T15585] netlink: 'syz.0.2409': attribute type 1 has an invalid length.
[  289.290338][T15585] netlink: 264 bytes leftover after parsing attributes in process `syz.0.2409'.
[  289.554665][T15599] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2414'.
[  289.560362][T15599] .70X: renamed from hsr0
[  289.590296][T15599] .70X: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  289.593609][T15599] .70X: Slave B (c1) is not up; please bring it up to get a fully working HSR network
[  289.600595][T15599] .70X: entered allmulticast mode
[  289.602517][T15599] hsr_slave_0: entered allmulticast mode
[  289.619676][T15599] A link change request failed with some changes committed already. Interface .70X may have been left with an inconsistent configuration, please check.
[  289.744951][T15610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2415'.
[  289.927827][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2419'.
[  289.930470][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2419'.
[  289.933530][T15622] netlink: 'syz.2.2419': attribute type 12 has an invalid length.
[  289.936001][T15622] netlink: 'syz.2.2419': attribute type 11 has an invalid length.
[  289.981831][T15625] pimreg: entered allmulticast mode
[  289.985894][T15625] dvmrp0: left allmulticast mode
[  290.009874][T15628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2420'.
[  290.013516][T15628] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  290.054241][T15625] pimreg: left allmulticast mode
[  290.177841][T15632] netlink: 'syz.1.2421': attribute type 1 has an invalid length.
[  290.197935][T15632] 8021q: adding VLAN 0 to HW filter on device bond44
[  290.234255][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2422'.
[  290.316314][T15640] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2423'.
[  290.382775][T15642] syzkaller0: entered promiscuous mode
[  290.384615][T15642] syzkaller0: entered allmulticast mode
[  290.391148][T15642] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  290.407784][T15642] bond45: option packets_per_slave: invalid value (1048582)
[  290.410173][T15642] bond45: option packets_per_slave: allowed values 0 - 65535
[  290.417479][T15642] bond45 (unregistering): Released all slaves
[  290.518510][T15650] netlink: 'syz.0.2426': attribute type 8 has an invalid length.
[  290.526487][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2426'.
[  290.535585][T15650] bond0: entered promiscuous mode
[  290.539989][T15650] bond0: left promiscuous mode
[  290.961591][T15669] lo speed is unknown, defaulting to 1000
[  291.062146][T15681] netlink: 'syz.2.2435': attribute type 7 has an invalid length.
[  291.084641][T15681] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.133201][T15681] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.200078][T15681] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.271843][T15681] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.362682][ T5706] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.380653][ T5706] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.402735][ T5706] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.420628][ T5706] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.029132][T15749] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  293.289330][T15758] netlink: 'syz.2.2454': attribute type 9 has an invalid length.
[  293.804677][T15777] dvmrp0: entered allmulticast mode
[  293.913764][T15786] RDS: rds_bind could not find a transport for ::ffff:100.1.0.255, load rds_tcp or rds_rdma?
[  293.942032][T15786] xt_nat: multiple ranges no longer supported
[  294.111290][T15794] bond50: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  294.115118][T15794] bond50: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms
[  294.128417][T15798] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  294.271644][T15810] tipc: Invalid UDP bearer configuration
[  294.271683][T15810] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  294.305408][T15810] batadv3: entered allmulticast mode
[  294.357345][T15817] __nla_validate_parse: 10 callbacks suppressed
[  294.357362][T15817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2466'.
[  294.411542][T15817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2466'.
[  294.415289][T15817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2466'.
[  294.420020][T15817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2466'.
[  294.491021][T15821] netlink: 'syz.2.2468': attribute type 1 has an invalid length.
[  294.530119][T15821] 8021q: adding VLAN 0 to HW filter on device bond51
[  294.555008][T15821] bond51: (slave veth17): Enslaving as an active interface with a down link
[  294.617195][T15823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  294.698443][T15821] bond51: (slave veth19): Enslaving as an active interface with a down link
[  294.704056][ T1930] lo speed is unknown, defaulting to 1000
[  294.708024][T15824] bond51: entered allmulticast mode
[  294.710948][ T1930] sqz0: Port: 1 Link ACTIVE
[  294.770450][ T1930] lo speed is unknown, defaulting to 1000
[  294.783006][T15819] lo speed is unknown, defaulting to 1000
[  294.807840][T15826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2469'.
[  294.837221][T15828] syzkaller0: entered promiscuous mode
[  294.839336][T15828] syzkaller0: entered allmulticast mode
[  295.013072][T15832] netlink: 'syz.2.2472': attribute type 1 has an invalid length.
[  295.066028][T15832] 8021q: adding VLAN 0 to HW filter on device bond52
[  295.135058][T15834] bond52: (slave veth21): Enslaving as an active interface with a down link
[  295.150386][T15832] 8021q: adding VLAN 0 to HW filter on device batadv4
[  295.156031][T15832] bond52: (slave batadv4): making interface the new active one
[  295.161461][T15832] batadv4: entered promiscuous mode
[  295.163765][T15832] bond52: (slave batadv4): Enslaving as an active interface with an up link
[  295.199276][T15832] bond52 (unregistering): (slave veth21): Releasing active interface
[  295.209123][T15832] bond52 (unregistering): (slave batadv4): Releasing active interface
[  295.219707][T15832] bond52 (unregistering): Released all slaves
[  295.520706][T15846] netlink: 'syz.2.2473': attribute type 1 has an invalid length.
[  295.523907][T15846] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2473'.
[  295.759616][T15830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  303.052590][T15859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2478'.
[  303.069227][T15861] netlink: 'syz.1.2477': attribute type 1 has an invalid length.
[  303.070887][T15863] netlink: 'syz.0.2480': attribute type 1 has an invalid length.
[  303.074362][T15864] netlink: 'syz.0.2480': attribute type 1 has an invalid length.
[  303.095566][T15861] 8021q: adding VLAN 0 to HW filter on device bond45
[  303.123516][T15863] bond50: entered promiscuous mode
[  303.127017][T15863] bond50: entered allmulticast mode
[  303.129472][T15863] 8021q: adding VLAN 0 to HW filter on device bond50
[  303.208965][T15869] veth28: entered allmulticast mode
[  303.474305][T15892] openvswitch: netlink: Flow actions attr not present in new flow.
[  303.635988][T15900] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  303.647037][T15904] openvswitch: netlink: nsh attr 1647 is out of range max 3
[  303.722227][T15907] netlink: 'syz.0.2491': attribute type 1 has an invalid length.
[  303.735242][T15908] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.2490'.
[  303.750569][T15908] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2490'.
[  303.805342][T15907] bond51: entered promiscuous mode
[  303.807640][T15907] 8021q: adding VLAN 0 to HW filter on device bond51
[  303.817295][T15907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2491'.
[  303.830868][T15907] bond51: (slave bridge21): making interface the new active one
[  303.833981][T15907] bridge21: entered promiscuous mode
[  303.837416][T15907] bond51: (slave bridge21): Enslaving as an active interface with an up link
[  303.844591][T15907] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2491'.
[  303.969826][T15914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2492'.
[  304.123136][T15915] lo speed is unknown, defaulting to 1000
[  304.384680][T15934] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  304.460266][T15934] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  304.788919][T15942] syzkaller0: entered promiscuous mode
[  304.790937][T15942] syzkaller0: entered allmulticast mode
[  304.899914][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2498'.
[  305.106790][T15949] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.224243][T15956] netlink: 'syz.2.2502': attribute type 4 has an invalid length.
[  305.279469][T15965] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2504'.
[  305.284924][T15965] netlink: 'syz.2.2504': attribute type 10 has an invalid length.
[  305.336845][   T13] 
[  305.337648][   T13] ============================================
[  305.339584][   T13] WARNING: possible recursive locking detected
[  305.341467][   T13] syzkaller #0 Not tainted
[  305.342931][   T13] --------------------------------------------
[  305.344811][   T13] kworker/u8:1/13 is trying to acquire lock:
[  305.346651][   T13] ffff888114b7d558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  305.349686][   T13] 
[  305.349686][   T13] but task is already holding lock:
[  305.351977][   T13] ffff8880233e0d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  305.354978][   T13] 
[  305.354978][   T13] other info that might help us debug this:
[  305.357443][   T13]  Possible unsafe locking scenario:
[  305.357443][   T13] 
[  305.359729][   T13]        CPU0
[  305.360785][   T13]        ----
[  305.361832][   T13]   lock(&qdisc_xmit_lock_key#4);
[  305.363422][   T13]   lock(&qdisc_xmit_lock_key#4);
[  305.364992][   T13] 
[  305.364992][   T13]  *** DEADLOCK ***
[  305.364992][   T13] 
[  305.367515][   T13]  May be due to missing lock nesting notation
[  305.367515][   T13] 
[  305.370041][   T13] 10 locks held by kworker/u8:1/13:
[  305.371672][   T13]  #0: ffff888012ed3948 ((wq_completion)bond28){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  305.375125][   T13]  #1: ffffc90000127c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  305.379646][   T13]  #2: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0
[  305.383409][   T13]  #3: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890
[  305.387268][   T13]  #4: ffff888022e8f228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x101c/0x3890
[  305.392196][   T13]  #5: ffff8880233e0d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  305.396333][   T13]  #6: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450
[  305.399900][   T13]  #7: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070
[  305.403775][   T13]  #8: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890
[  305.407728][   T13]  #9: ffff8881b84ec228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x101c/0x3890
[  305.412748][   T13] 
[  305.412748][   T13] stack backtrace:
[  305.415151][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  305.415165][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  305.415174][   T13] Workqueue: bond28 bond_alb_monitor
[  305.415193][   T13] Call Trace:
[  305.415198][   T13]  <TASK>
[  305.415204][   T13]  dump_stack_lvl+0xe8/0x150
[  305.415221][   T13]  print_deadlock_bug+0x279/0x290
[  305.415239][   T13]  __lock_acquire+0x253f/0x2cf0
[  305.415255][   T13]  ? fib_table_lookup+0x11ba/0x16e0
[  305.415272][   T13]  ? validate_xmit_skb+0xc5f/0x14a0
[  305.415288][   T13]  lock_acquire+0xf0/0x2e0
[  305.415302][   T13]  ? sch_direct_xmit+0x15f/0x4c0
[  305.415322][   T13]  _raw_spin_lock+0x2e/0x40
[  305.415337][   T13]  ? sch_direct_xmit+0x15f/0x4c0
[  305.415353][   T13]  sch_direct_xmit+0x15f/0x4c0
[  305.415372][   T13]  ? __pfx_sch_direct_xmit+0x10/0x10
[  305.415391][   T13]  __dev_queue_xmit+0x1550/0x3890
[  305.415408][   T13]  ? __dev_queue_xmit+0x277/0x3890
[  305.415424][   T13]  ? __local_bh_enable_ip+0xd0/0x130
[  305.415439][   T13]  ? lockdep_hardirqs_on+0x7a/0x110
[  305.415455][   T13]  ? ___neigh_create+0x1c5f/0x2280
[  305.415466][   T13]  ? __local_bh_enable_ip+0xd0/0x130
[  305.415480][   T13]  ? ___neigh_create+0x1c5f/0x2280
[  305.415492][   T13]  ? __pfx___dev_queue_xmit+0x10/0x10
[  305.415507][   T13]  ? neigh_resolve_output+0x438/0x750
[  305.415519][   T13]  ? eth_header+0x11b/0x200
[  305.415532][   T13]  ? __asan_memcpy+0x40/0x70
[  305.415550][   T13]  ? ip_finish_output2+0x3c2/0x1070
[  305.415564][   T13]  ip_finish_output2+0xca9/0x1070
[  305.415579][   T13]  ? ip_skb_dst_mtu+0x80b/0xa50
[  305.415593][   T13]  ? ip_finish_output+0x40e/0x530
[  305.415608][   T13]  ip_output+0x29f/0x450
[  305.415622][   T13]  ? ip_output+0x5b/0x450
[  305.415635][   T13]  iptunnel_xmit+0x616/0xca0
[  305.415656][   T13]  ip_tunnel_xmit+0x193a/0x1f20
[  305.415676][   T13]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  305.415694][   T13]  ? __pfx_gre_build_header+0x10/0x10
[  305.415709][   T13]  ? kfree+0x1c1/0x630
[  305.415719][   T13]  ? pskb_expand_head+0x460/0x1270
[  305.415736][   T13]  __gre_xmit+0x19e/0x240
[  305.415750][   T13]  ? __pfx___gre_xmit+0x10/0x10
[  305.415766][   T13]  erspan_xmit+0xa81/0x1670
[  305.415800][   T13]  ? __pfx_erspan_xmit+0x10/0x10
[  305.415812][   T13]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  305.415827][   T13]  dev_hard_start_xmit+0x2d8/0x870
[  305.415843][   T13]  sch_direct_xmit+0x251/0x4c0
[  305.415860][   T13]  ? __pfx_sch_direct_xmit+0x10/0x10
[  305.415878][   T13]  ? kthread+0x340/0x470
[  305.415890][   T13]  ? ret_from_fork+0x51e/0xb90
[  305.415906][   T13]  __dev_queue_xmit+0x1550/0x3890
[  305.415930][   T13]  ? __dev_queue_xmit+0x277/0x3890
[  305.415949][   T13]  ? __pfx___dev_queue_xmit+0x10/0x10
[  305.415966][   T13]  ? rcu_is_watching+0x15/0xb0
[  305.415982][   T13]  ? trace_kmem_cache_alloc+0x29/0xf0
[  305.415995][   T13]  ? kmem_cache_alloc_node_noprof+0x3ce/0x690
[  305.416013][   T13]  ? alb_send_lp_vid+0x14e/0x550
[  305.416029][   T13]  alb_send_lp_vid+0x348/0x550
[  305.416046][   T13]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  305.416090][   T13]  ? __lock_acquire+0x6b5/0x2cf0
[  305.416108][   T13]  alb_send_learning_packets+0x12c/0x300
[  305.416124][   T13]  ? register_lock_class+0x31/0x2e0
[  305.416138][   T13]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  305.416156][   T13]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[  305.416169][   T13]  bond_alb_monitor+0x3d5/0x17e0
[  305.416185][   T13]  ? bond_alb_monitor+0xf8/0x17e0
[  305.416201][   T13]  ? __pfx_bond_alb_monitor+0x10/0x10
[  305.416217][   T13]  ? process_scheduled_works+0xa8d/0x18c0
[  305.416231][   T13]  ? process_scheduled_works+0xa8d/0x18c0
[  305.416246][   T13]  process_scheduled_works+0xb6e/0x18c0
[  305.416269][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  305.416285][   T13]  ? assign_work+0x3d5/0x5e0
[  305.416300][   T13]  worker_thread+0xa53/0xfc0
[  305.416319][   T13]  kthread+0x388/0x470
[  305.416329][   T13]  ? __pfx_worker_thread+0x10/0x10
[  305.416342][   T13]  ? __pfx_kthread+0x10/0x10
[  305.416352][   T13]  ret_from_fork+0x51e/0xb90
[  305.416367][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  305.416381][   T13]  ? __switch_to+0xc7d/0x1450
[  305.416395][   T13]  ? __pfx_kthread+0x10/0x10
[  305.416406][   T13]  ret_from_fork_asm+0x1a/0x30
[  305.416427][   T13]  </TASK>
[  305.674003][T15971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2505'.
[  305.685947][T15961] 0: left allmulticast mode
[  305.696385][T15961] bond23: left promiscuous mode
[  305.701794][T15961] vlan5: left promiscuous mode
[  305.703497][T15961] veth12: left allmulticast mode
[  305.711178][T15961] bond26: left promiscuous mode
[  305.715281][T15961] bond27: left promiscuous mode
[  305.747187][T15961] bond28: left promiscuous mode
[  305.748851][T15961] erspan1: left promiscuous mode
[  305.750693][T15961] bond28: left allmulticast mode
[  305.754223][T15961] erspan1: left allmulticast mode
[  305.764611][T15961] macvlan4: left promiscuous mode
[  305.769912][T15961] macvlan4: left allmulticast mode
[  305.774284][T15961] bond29: left promiscuous mode
[  305.811307][T15961] bond31: left allmulticast mode
[  305.814221][T15961] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  305.818627][T15961] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  305.822606][T15961] bond34: left promiscuous mode
[  305.846527][T15961] gretap3: left allmulticast mode
[  305.850629][T15961] bond37: left promiscuous mode
[  305.854538][T15961] bond38: left promiscuous mode
[  305.857271][T15961] bond38: left allmulticast mode
[  305.861944][T15961] bond39: left promiscuous mode
[  305.865914][T15961] bond40: left promiscuous mode
[  305.868835][T15961] bridge17: left promiscuous mode
[  305.873180][T15961] vlan0: left allmulticast mode
[  305.875346][T15961] bond40: left allmulticast mode
[  305.881330][T15961] bridge17: left allmulticast mode
[  305.891474][T15961] gretap0: left allmulticast mode
[  305.894227][T15961] macvlan0: left promiscuous mode
[  305.899002][T15961] macvlan0: left allmulticast mode
[  305.929547][T15961] bond42: left promiscuous mode
[  305.938496][T15961] bond43: left promiscuous mode
[  306.007029][T15961] bond44: left promiscuous mode
[  306.008683][T15961] bridge20: left promiscuous mode
[  306.010546][T15961] bond44: left allmulticast mode
[  306.012367][T15961] bridge20: left allmulticast mode
[  306.033310][T15961] bond46: left promiscuous mode
[  306.034981][T15961] bond46: left allmulticast mode
[  306.041039][T15961] bond49: left promiscuous mode
[  306.042679][T15961] bond49: left allmulticast mode
[  306.044874][T15961] bond50: left promiscuous mode
[  306.047079][T15961] bond50: left allmulticast mode
[  306.049133][T15961] bond51: left promiscuous mode
[  306.050736][T15961] bridge21: left promiscuous mode
[  306.053255][  T977] lo speed is unknown, defaulting to 1000
[  306.055596][  T977] sqz0: Port: 1 Link DOWN
[  306.057515][ T5706] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.060571][ T5706] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.064451][T15292] lo speed is unknown, defaulting to 1000
[  306.066789][ T5706] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.072352][ T5706] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.075009][ T5706] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.078206][ T5706] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  306.104666][ T5706] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.108767][ T5706] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
