last executing test programs:

6.577936002s ago: executing program 1 (id=5581):
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000002c0)={{<r0=>0xffffffffffffffff, &(0x7f0000000040)='$\x00', 0x40000, &(0x7f0000000080)={@align=0x6, {0x4, 0x0, 0x2, 0x2}}, 0x5, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x9798}, 0x1, &(0x7f0000000280)=[{0x3, 0x5, &(0x7f0000000140)='\'[\\*\x00', &(0x7f0000000180)="a29a27e21981d57bb28f231d6e7019d5ecdfddd5f1b4812b070954474b001efb3d454ee708b959da126734bcd054d2ea2df370ecdb72b18c62a0351e2c271a61a68492712e9484a7c48121aec6d98537c198e668119bb7c9be90d8a8405bbee9794ed40c64119852528811ccce79376cbf3fca390554e80ad224a40b404e9a67f5060c18ba9b8bf69b11a3c434b2fa848933662833cc67c73d40f9570d7963aa93327b6c8aac7bb127a2e66f19a2e20da4b50953147f055e20f718a815ef58991a60", 0xc2, 0x10}]})
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async)
r1 = accept4(r0, &(0x7f0000000340)=@rc={0x1f, @none}, &(0x7f00000003c0)=0x80, 0x80000)
getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r0) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x10) (async)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000600)={0x3, 0x1}) (async)
sendmsg$xdp(r0, &(0x7f0000000900)={&(0x7f0000000640)={0x2c, 0x4, r2, 0x4}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000680)="66cd0f61bc47f8a9798d307e947f21089d0d181ba7e4a1a4b556b0db9e739e9554f48048ef408fe3e9b009d6530eb0330bbc116f5d9c090a24c226472e15167454f7c03a440ee4d49f6101f3441032e4c71d081ce394ac84cef2c5d6ef730a8fd87b75323183cbb85d4fd473c3a7afa0553fb56ec1e44576", 0x78}, {&(0x7f0000000700)="b2136fbbcf06a14435d1c8d905ac4bfb2d53039d619b1cc2c1aa2a1ee1de452d737dbddeede21d66258b57b123d03c1a5eef7b4ca236432838e40bdf6bcb6a9eddbcf47e67f9ba6b4429dd77e602bb4c28958f27a3f9eaec54324479ae4d7307f731dfdbcdd0c2d475be5785", 0x6c}, {&(0x7f0000000780)="8985eac3fe30281ea42a010f4d4d87142730349c27417b29e6d0dacecf2e546afe7aef2b3cad3afeb3777358ffc1680a65d8bfef3d0a82ece12580b97cf3f63d687ca918ab0a5593beb94d43289ab60e551517a2a8182811c8292af92800a53666ea7be0109afe885de86e1176ac12e05a5801be74dc78f99975a7900f5eac71d935ef915617338e84c947b1892ad955687c88", 0x93}, {&(0x7f0000000840)="bbb5c4dbbdcb47efb097fb294917848d0c561ad97a6f81a277be6f87b201ad7416874a51acc40cf3f1d8e4de88e3a82f300e07cac957a4a749439b29cba67979eb5e5487f6ea6a85", 0x48}], 0x4, 0x0, 0x0, 0x1}, 0x5918c12ed207f12a)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'syztnl0\x00', <r4=>r2, 0x2d, 0x2, 0x5, 0x5, 0x2, @empty, @empty, 0x10, 0x80, 0x2, 0xa8c2}}) (async)
getpeername$packet(r0, &(0x7f0000000a40)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a80)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000ac0)={'batadv_slave_0\x00', <r6=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000b80)={'gretap0\x00', &(0x7f0000000b00)={'syztnl2\x00', <r7=>r2, 0x20, 0x8, 0x8a1, 0xb, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x65, 0x0, 0x6, 0x29, 0x0, @broadcast, @empty, {[@end, @rr={0x7, 0x13, 0xca, [@local, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}]}}}}})
sendmsg$nl_route(r1, &(0x7f0000000d40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)=@RTM_NEWMDB={0x138, 0x54, 0x200, 0x70bd28, 0x25dfdbfc, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x4, {@ip4=@rand_addr=0x64010102, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x3, 0x4, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x14}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x7, 0x4, {@in6_addr=@empty, 0xd5b3}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x2, {@ip4=@dev={0xac, 0x14, 0x14, 0x42}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x2, 0x3, {@in6_addr=@private0, 0x18367}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x1, 0x0, {@ip4=@broadcast, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x6, 0x2, {@ip4=@loopback}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x0, 0x3, {@in6_addr=@private0, 0x8edd}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40040}, 0x4008850) (async)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000dc0), r1)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, r8, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xfffff9b2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000f40)={'sit0\x00', &(0x7f0000000ec0)={'gre0\x00', r7, 0x10, 0x7800, 0xfff, 0xa, {{0xa, 0x4, 0x0, 0x6, 0x28, 0x64, 0x0, 0x5, 0x2f, 0x0, @multicast2, @broadcast, {[@end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0xa7, [@private=0xa010100, @multicast1, @multicast1]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000002600)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000000fc0)={0x15fc, r8, 0x4, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xf4}, @ETHTOOL_A_LINKMODES_OURS={0x12fc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2e, 0x5, "8fc6eac5099082c70b5ba8d1caccc9c4c67957c909f895c5f9bb961833c0f7aae28e5a62a0e0d15971bb"}, @ETHTOOL_A_BITSET_VALUE={0xbd, 0x4, "a93f42323417d8be4ec0820fe63a5213ad36bac2074528221c13b684072c2486ddf391ad69af8e83a878a4a5298ce4a20f8f29547469a3313dbea47bbdbf08ff382ce54db51f79f715f79d0c0018cff6ef678dbf00191519256d3eea1636e7638f59780cf3993e7fcf5e81537e6e388bf765b3d7d45576d31468adfb53e3470253eb8f416513c186ff3618974f6de2e89d1d8d5cce48f65ed8c5cd5e1d9f7c9207b2e6b8ff25fbfe510274d3010b42ed4106b7f62f9ba9a7b6"}, @ETHTOOL_A_BITSET_MASK={0x3e, 0x5, "794f5dd5674440f0de10fe80af2e8a2fc8652c908fc0ddbec1ae81524356091580ac7568159d1989aa893f7a76cfdd64c3df0050d8879fd36530"}, @ETHTOOL_A_BITSET_VALUE={0xc5, 0x4, "ca0d2ef021c5382ccf3fd8e7e08458012e62807a61dd249a46ade2b33c7c38d389a9dac30d79612ccb9a7c93001ed3af3fab55ee6d7538592e79f930c384111468ad76a5a74319daee66702744fca5b4d536aa018ffade227b866ee98b9f2728a00806c9c3b8b4ac3ff8ea8b13ae03d4c72479bfa31df9b7d571497666dd55773e10e1013b90b8be10f712b529ebb48e84b2869750e6b42a10115fc5d16a87da5bc00e0e5481564056c9f60d1cc491bfb7afbc412e74f7b7a4ab7a4d977628f5d9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4307}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x39, 0x5, "c8771127fa00d7b8155bbf230af2c853286f091644b459947f3eb815223a69d585f151bb566946c1e9ca17d998e1571bad99308006"}, @ETHTOOL_A_BITSET_MASK={0xaf, 0x5, "721446b07d0e5d2665f35effe629818dcea48885c34674e37473dd1a5239590b5e0d2120bf141385bcbb4d8f6da06dc7260da2141309f89c5ab6b88b004d656679677ad2a656fbc92cfb520de52703a739db8713ea0f32189106b929b02914fd68a29ff12cb738356cceb1e76943b7698426cc7c636d77f9421a2281fa35782c24fa93bf0983ce1739ff1e279656cd7541e31de1055a87008fb402dbf017d5e594370867006c8fdb02e854"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKMODES_OURS={0x2bc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xce4}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff34ab}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd59}]}]}, @ETHTOOL_A_BITSET_VALUE={0x5f, 0x4, "d214e851202e136e2f45f6a818663ed2fb82bda36a2ebb54944918fcb94832139e5a0c8c97d889ce9dd3c5ff16729c5998da8d805b9205e540dbe6708b201aff19b3a8bc419308afb467916f52610c18e2869898d53c03965ca305"}, @ETHTOOL_A_BITSET_BITS={0x178, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\/#-\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'[\\*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '|\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x4}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#(}!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl2\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\\)[\x82.@.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl0\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '-&!].(-)-!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x15fc}, 0x1, 0x0, 0x0, 0x4040080}, 0xc0) (async)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000002640)={'veth0\x00'}) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002680)='./cgroup/syz0\x00', 0x200002, 0x0) (async)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000002800)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002700)={0x90, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x800)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000002840)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0, 0x0]}, &(0x7f0000002880)=0x20)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000028c0)={r9, 0x8}, 0x8) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002940), r0)
sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x34, r10, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002a40)={0x1, 'ip6_vti0\x00', {}, 0x7})
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000002a80), 0x410002, 0x0)
write$tun(r11, &(0x7f0000002ac0)={@void, @void, @arp=@generic={0x201, 0x8c0c, 0x6, 0x6, 0x9, @local, "1ee1e922391f", @multicast, "99a648d1eb6c91256dfb4a"}}, 0x25) (async)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x28, r10, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000080)

6.480432397s ago: executing program 1 (id=5582):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x8504, 0x1}, 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x1a, 0x0, &(0x7f0000000000))

2.423129554s ago: executing program 1 (id=5594):
socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={<r0=>0x0, 0xffff}, &(0x7f0000000340)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={r0, 0xfffffffe}, &(0x7f00000003c0)=0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x12)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x2c, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x2c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4, @empty}})
r6 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r6, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/13, 0xd}, 0x6}, {{0x0, 0x0, 0x0}, 0x80}], 0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x4b, &(0x7f0000000040)=0x6, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xcc}, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x6c, &(0x7f00000002c0)=""/108, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r1, 0x80867000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10)

1.470508112s ago: executing program 1 (id=5600):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_pid(r0, &(0x7f00000004c0), 0x12)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000400000000000000000000000850000004f000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x50)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)

1.470308713s ago: executing program 1 (id=5601):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000f800800020010000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r4=>0x0})
setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000200)={@multicast1, @remote, r4}, 0xc)
recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18007939ca1bc49d00000000000000000061100c00bb4af6f300000000000000872019cd3796de428dfdca1df0ec09271a6dbefdc1c83da65e0be6a6cf1d6f06c224ca54860e38a30311edd3f028bab263f7bc71408fd5d915f917430c0772a1ba70ba1f42b79397d421a056f893443508c4f89585b199d0b69516dc8c05a753"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x81}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000)=r5, 0x4)

1.199801056s ago: executing program 2 (id=5605):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x49}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7f6}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
getsockopt$MRT(r4, 0x0, 0xce, &(0x7f0000000040), &(0x7f00000001c0)=0x4)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000012c0)={0x0, 0x7, 0x47a}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x47a}, 0x39)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x2}, 0x8)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000300)=0x101)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private1, {0x0, 0x7, 0x800000000000, 0x4, 0xb5f7, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8, 0x0, 0x3}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x40, "06ec87"}}]}, 0x140}}, 0x844)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x40010, &(0x7f00000002c0)={0xa, 0x4e21, 0x2, @local, 0x8}, 0x1c)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x10)

1.118072323s ago: executing program 2 (id=5608):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/280], 0xa3)

972.227083ms ago: executing program 2 (id=5610):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r3=>0x0})
sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000480)=@delsa={0x3c4, 0x11, 0x800, 0x70bd2b, 0x25dfdbfe, {@in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x4d6, 0x2, 0x32}, [@algo_auth={0x53, 0x1, {{'xcbc(aes-asm)\x00'}, 0x58, "75e92d3fce2a063523209f"}}, @algo_comp={0x59, 0x3, {{'lzs\x00'}, 0x88, "1ecff713b49fa3d9467dda8a95862bf4ae"}}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@loopback, 0x0, 0xa}}, @algo_comp={0xa6, 0x3, {{'lzjh\x00'}, 0x2f0, "5350229aa906ce8a25952340139acacf8590a9f81eae0e4ea416a270052cf34ac5d02975ec85d234ab52df8a947c1aa0cc3a8d76b83f6aa57604bd3f45198bb6dd9ed6960fae5f6625d25279dbc14bd2dc1bb131b2a17c144ca5ac700969"}}, @proto={0x5, 0x19, 0x2b}, @algo_auth={0x11e, 0x1, {{'poly1305\x00'}, 0x6b0, "bd523b3e23d12cbbbf4423e5f59033f3868a73f2bf91a15433118b28b6848eb6190326f64ed168573ee48744271c14d9231cf533233e43c4aadc072ab9e3b210617742b16c6614c492172d8f5d8555badec34aef81371b94751d6bbbff48cf7f5733d814693e682367b78c4f982ab85ba032e3e4539f7c1be9e2200471d80aebae28364a8d069875d711d71cea548d52a0e0a34fac1d8f3771e9f3d8a6a4c6c35bfe598ac71cd0594764f66e52f8db30e3346590d6541cf024f3faf54a3de895930e61c2e25ab4542177eb9968ce82ccab4e87cd42cc"}}, @sec_ctx={0xd1, 0x8, {0xcd, 0x8, 0x0, 0x9, 0xc5, "382f85ec43615659835d42ce5174a89c370084093efd72817ad8e742f63dbb5337dec5ad0443c7388e0d4261f5e7f8c93b5d46ba76b8a71d83b3454ee8ecc6193341378fe94ece6ea15ffa723e4fd8c0666f63bb2eb01f2b4493064249eee0d6a73ce857d0e0eb0c4ef0fde7580ee7db4f735cf44d9e8b65db4f57172dadea9cfa3650e95458d594e2b372daff1fe6f8190d9bb34546230eda4a20df22e4720bbbff5596cbfc068b2bb1248458deb06f50f55ca2abe100b88b89482f249131183c72b07c80"}}, @offload={0xc, 0x1c, {r3, 0x1}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1000}, @replay_thresh={0x8, 0xb, 0x7}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x11}, 0x8010)
setsockopt$inet_int(r1, 0x0, 0x7, 0x0, 0x0)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r7, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0)

898.79328ms ago: executing program 2 (id=5613):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x4010, 0xffffffffffffffff, 0xab9e9000)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={r3, 0x2}, 0x8)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r4, 0x20)
getsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f00000003c0), &(0x7f0000002000)=0x4)

897.084355ms ago: executing program 2 (id=5614):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x20048004}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=<r6=>0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x80)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="07000000000000000207000000001400"/34], 0x28}}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES32=r6], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="00fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}, 0x1, 0x0, 0x0, 0x8004}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438cbeda03ab55fe60b7"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r10=>0x0})
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r7, 0x0, 0x48000)
socket$netlink(0x10, 0x3, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x2000012, 0x55, 0x0, &(0x7f0000000480)="63eced8e46dc3f742b83badc4710b0e667e0cfd69e39b46a315071bcc4e82ffed5e2833c1da5b45be719d49e4485aaebb639d57a0bbff83abef2e6ffc785ef7a0e15446d67e57ff25cca5e10fba183a920a89c9b66", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)

570.330509ms ago: executing program 1 (id=5618):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x5)
syz_emit_ethernet(0x72, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x3c, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x6, 0x2, 0x8, 0x4, 0x6}, @window={0x3, 0x3, 0x5}, @window={0x3, 0x3, 0x3}, @mss={0x2, 0x4, 0x5}, @timestamp={0x8, 0xa, 0x2, 0x300000}, @nop]}}}}}}}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000700)=[@in6={0xa, 0x4e22, 0xc89, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}], 0x1c)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
shutdown(r4, 0x1)
recvmmsg(r4, &(0x7f0000005000)=[{{0x0, 0x2a, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x82, &(0x7f0000000200)={0x2, 0x1e3, 0x1e0, 0x8001}, 0x8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)="087e19", 0x3}], 0x1, 0x0)
close(0x3)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
write$cgroup_type(r6, &(0x7f0000000180), 0x9)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0)

258.760886ms ago: executing program 0 (id=5622):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0xb, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x1, 0x6, 0x7ffffffd, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x200, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x1, 0x2, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f1, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x2, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0xfffffff0, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x7, 0x7, 0x3, 0x8, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x7, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0xff, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x7, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0xa, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x43, 0x0, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14)
r9 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0xfe, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)

99.596506ms ago: executing program 0 (id=5623):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x200)
r1 = socket$kcm(0x29, 0x2, 0x0)
close(r1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ffffffff000000000000000504000000020000000000001202000000020000000000000e030000000000000000002e"], 0x0, 0x54}, 0x28)
r2 = socket$kcm(0x2b, 0x1, 0x0)
close(r2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @private=0xa010100}, 0x10, 0x0}, 0x34044080)
setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r2)

99.403819ms ago: executing program 0 (id=5624):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x70bd26, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xb572}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) (async)
close(r4) (async)
socket(0x10, 0x809, 0x8)

50.271574ms ago: executing program 0 (id=5625):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x40000, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)

48.508818ms ago: executing program 0 (id=5626):
r0 = socket$packet(0x11, 0x2, 0x300) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x9fffffff}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0xbf}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000000040)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008004)

533.123µs ago: executing program 2 (id=5627):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x80000001}, 0x1c)
unshare(0x22020600)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x7, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0x12)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="ea0326bd7000f8dbdf250200000008003a00", @ANYRES32=r8], 0x1c}}, 0x4008054)
write$nci(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14)
write$nci(r5, 0x0, 0xfffffffffffffda2)

0s ago: executing program 0 (id=5628):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}}, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0) (async)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1) (async)
sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async)
close(0x3) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r8=>0x0})
bind$packet(r7, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x6, 0x6, @remote}, 0x14) (async)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r10, 0x0) (async)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x7, &(0x7f00000000c0)="fdddab5e", 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) (async)
vmsplice(r7, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000080)="26a92318688267d13a224879df23f89f89a07577dc22f65f35e73c91bff7310315389c21c36a4da5872a99508c62ee33", 0x30}, {&(0x7f0000000100)="fba293ecaab88d9b38a3448d3cc90871354c207bdd8c393fe391", 0x1a}], 0x3, 0xf)

kernel console output (not intermixed with test programs):

93] Buffer I/O error on dev nbd2, logical block 1, async page read
[  270.800488][ T5993] ldm_validate_partition_table(): Disk read failed.
[  270.819335][ T5993] Dev nbd2: unable to read RDB block 0
[  270.823612][ T5993]  nbd2: unable to read partition table
[  270.842490][ T5993] ldm_validate_partition_table(): Disk read failed.
[  270.850071][ T5993] Dev nbd2: unable to read RDB block 0
[  270.853467][ T5993]  nbd2: unable to read partition table
[  271.428545][T13411] netlink: 'syz.1.2194': attribute type 1 has an invalid length.
[  271.431173][T13411] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2194'.
[  273.477966][T13438] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.496236][T13438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  273.526188][T13448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2202'.
[  273.639009][T13456] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2203'.
[  273.660430][T13458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2206'.
[  273.667379][T13458] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2206'.
[  274.538785][T13479] netlink: 'syz.1.2213': attribute type 12 has an invalid length.
[  274.579725][T13481] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2215'.
[  274.682656][T13485] sctp: [Deprecated]: syz.0.2217 (pid 13485) Use of struct sctp_assoc_value in delayed_ack socket option.
[  274.682656][T13485] Use struct sctp_sack_info instead
[  274.802954][T13488] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2219'.
[  274.816312][T13488] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2219'.
[  274.951173][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2221'.
[  274.955398][T13500] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2222'.
[  274.959832][T13498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2221'.
[  275.110012][T13518] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2229'.
[  275.119237][T13519] netlink: 'syz.1.2227': attribute type 1 has an invalid length.
[  275.121967][T13519] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2227'.
[  275.133526][T13518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2229'.
[  275.281951][T13534] netlink: 'syz.2.2235': attribute type 1 has an invalid length.
[  275.451480][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2238'.
[  275.507514][T13547] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.511354][T13547] 8021q: adding VLAN 0 to HW filter on device team0
[  275.520428][T13547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  276.021183][T13580] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20004
[  276.442018][T13599] netlink: 'syz.2.2256': attribute type 6 has an invalid length.
[  278.293249][T13644] dummy0: mtu less than device minimum
[  278.556866][T13661] Cannot find del_set index 49151 as target
[  278.856275][T13672] xt_hashlimit: size too large, truncated to 1048576
[  278.917064][T13675] xt_hashlimit: size too large, truncated to 1048576
[  279.374268][T13702] x_tables: duplicate underflow at hook 2
[  280.171341][T13706] __nla_validate_parse: 9 callbacks suppressed
[  280.171353][T13706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2285'.
[  280.191154][T13706] netlink: 'syz.2.2285': attribute type 2 has an invalid length.
[  280.194136][T13706] netlink: 'syz.2.2285': attribute type 2 has an invalid length.
[  280.199776][T13706] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2285'.
[  281.208057][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2291'.
[  281.415629][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2295'.
[  281.455245][T13735] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2295'.
[  281.458990][T13735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2295'.
[  281.462531][T13735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2295'.
[  281.486674][T13735] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.489966][T13735] 8021q: adding VLAN 0 to HW filter on device team0
[  281.493651][T13735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  281.756734][T13743] netlink: 'syz.1.2297': attribute type 1 has an invalid length.
[  281.760062][T13743] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2297'.
[  282.193620][T13753] geneve0: left allmulticast mode
[  282.196498][T13753] vlan1: left allmulticast mode
[  282.198697][T13753] geneve2: left promiscuous mode
[  282.200477][T13753] team1: left promiscuous mode
[  282.202007][T13753] team1: left allmulticast mode
[  282.429245][T13778] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2307'.
[  282.433077][T13778] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2307'.
[  282.707481][T13806] netlink: 'syz.1.2317': attribute type 4 has an invalid length.
[  285.281424][T13888] __nla_validate_parse: 13 callbacks suppressed
[  285.281435][T13888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2343'.
[  286.492555][T13916] netlink: 'syz.2.2352': attribute type 1 has an invalid length.
[  286.630410][T13918] netlink: 'syz.1.2353': attribute type 12 has an invalid length.
[  286.672072][T13924] netlink: 'syz.2.2354': attribute type 1 has an invalid length.
[  286.678292][T13924] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2354'.
[  287.526483][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2366'.
[  287.541654][T13956] : entered promiscuous mode
[  289.390590][T14060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2392'.
[  289.662461][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2401'.
[  289.733095][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2401'.
[  290.478070][T14114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2407'.
[  290.484143][T14114] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2407'.
[  290.493126][T14114] syzkaller0: entered promiscuous mode
[  290.495821][T14114] syzkaller0: entered allmulticast mode
[  290.729603][T14123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2411'.
[  290.767761][T14123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2411'.
[  290.771752][T14123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2411'.
[  290.777883][T14123] netlink: 'syz.0.2411': attribute type 2 has an invalid length.
[  290.781425][T14123] netlink: 'syz.0.2411': attribute type 2 has an invalid length.
[  290.787294][T14123] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2411'.
[  290.890591][T14118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2409'.
[  291.215637][T14152] netlink: 'syz.1.2419': attribute type 1 has an invalid length.
[  291.218352][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2419'.
[  291.222931][T14152] netlink: 'syz.1.2419': attribute type 4 has an invalid length.
[  291.367790][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2420'.
[  291.407666][T14156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2421'.
[  291.627589][T14168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  291.639474][T14168] netlink: 'syz.2.2427': attribute type 21 has an invalid length.
[  291.901088][T14203] netlink: 'syz.0.2436': attribute type 5 has an invalid length.
[  291.910548][T14203] geneve3: entered promiscuous mode
[  291.912338][T14203] geneve3: entered allmulticast mode
[  291.918256][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  291.920917][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  291.923536][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  291.927422][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  291.951362][T14206] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  291.978456][T14198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  292.248456][T14229] syzkaller0: entered promiscuous mode
[  292.250430][T14229] syzkaller0: entered allmulticast mode
[  292.938110][T14269] netlink: 'syz.1.2457': attribute type 1 has an invalid length.
[  293.125279][T14286] dummy0: mtu less than device minimum
[  293.139739][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  293.142752][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  293.146199][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  293.150579][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  293.161013][T14286] netlink: 'syz.0.2461': attribute type 13 has an invalid length.
[  293.171451][T14286] netlink: 'syz.0.2461': attribute type 17 has an invalid length.
[  293.248675][T14286] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.266265][T14286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  293.751768][T14326] netlink: 'syz.1.2471': attribute type 33 has an invalid length.
[  293.758893][T14326] `: renamed from team0
[  294.441867][T14370] netlink: 'syz.0.2484': attribute type 1 has an invalid length.
[  294.981593][T14399] xt_hashlimit: size too large, truncated to 1048576
[  295.183932][T14407] netlink: 'syz.2.2497': attribute type 2 has an invalid length.
[  295.189957][T14407] netlink: 'syz.2.2497': attribute type 2 has an invalid length.
[  295.333352][T14415] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.346554][T14415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  295.489338][T14431] netlink: 'syz.2.2503': attribute type 89 has an invalid length.
[  295.577379][T14436] lo: entered allmulticast mode
[  295.758507][T14450] __nla_validate_parse: 24 callbacks suppressed
[  295.758521][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2510'.
[  295.769233][T14449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2510'.
[  296.153580][T14460] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.157050][T14460] 8021q: adding VLAN 0 to HW filter on device team0
[  296.165543][T14460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  296.234785][T14462] tunl0: Caught tx_queue_len zero misconfig
[  296.985037][T14488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2522'.
[  297.203050][T14498] validate_nla: 1 callbacks suppressed
[  297.203066][T14498] netlink: 'syz.2.2526': attribute type 1 has an invalid length.
[  297.219868][T14498] 8021q: adding VLAN 0 to HW filter on device bond10
[  298.298015][T14569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2546'.
[  298.336089][T14574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2547'.
[  298.439459][T14583] netlink: 'syz.0.2551': attribute type 89 has an invalid length.
[  298.571165][T14600] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.578982][T14600] 8021q: adding VLAN 0 to HW filter on device team0
[  298.586669][T14600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  298.878710][T14623] openvswitch: netlink: IP tunnel TTL not specified.
[  298.988915][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2563'.
[  298.997144][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  298.997946][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2563'.
[  299.005818][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  299.011626][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  299.017249][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  299.730871][T14639] dummy0: mtu less than device minimum
[  299.825508][T14646] sctp: [Deprecated]: syz.1.2570 (pid 14646) Use of int in maxseg socket option.
[  299.825508][T14646] Use struct sctp_assoc_value instead
[  299.938421][T14664] team0 (unregistering): Port device team_slave_1 removed
[  301.117177][T14704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2584'.
[  301.547963][T14721] netlink: 'syz.1.2588': attribute type 1 has an invalid length.
[  301.550748][T14721] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2588'.
[  301.973613][T14723] sctp: [Deprecated]: syz.2.2589 (pid 14723) Use of int in maxseg socket option.
[  301.973613][T14723] Use struct sctp_assoc_value instead
[  302.270555][T14747] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2597'.
[  302.287583][T14747] xt_hashlimit: size too large, truncated to 1048576
[  302.473266][T14753] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2599'.
[  302.515038][T14757] xt_hashlimit: size too large, truncated to 1048576
[  302.657706][T14764] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2603'.
[  302.661281][T14764] dummy0: mtu less than device minimum
[  303.302780][T14771] xt_hashlimit: size too large, truncated to 1048576
[  303.424507][T14777] pim6reg1: entered promiscuous mode
[  303.426540][T14777] pim6reg1: entered allmulticast mode
[  303.542623][T14779] 8021q: adding VLAN 0 to HW filter on device bond0
[  303.554262][T14779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  303.756504][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2612'.
[  304.119355][T14825] netlink: 'syz.0.2623': attribute type 89 has an invalid length.
[  304.290470][T14837] netlink: 'syz.2.2627': attribute type 1 has an invalid length.
[  304.293075][T14837] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2627'.
[  304.377130][T14840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2628'.
[  304.382085][T14840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2628'.
[  304.386907][T14840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2628'.
[  304.807654][T14845] xt_hashlimit: size too large, truncated to 1048576
[  305.107928][T14857] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  305.466863][T14891] xt_hashlimit: size too large, truncated to 1048576
[  306.209351][T14916] dummy0: mtu less than device minimum
[  306.317074][T14918] __nla_validate_parse: 1 callbacks suppressed
[  306.317091][T14918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2649'.
[  306.357322][ T5857] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.360262][ T5857] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.369547][ T5857] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.374240][ T5857] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  306.671426][T14926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2653'.
[  306.797668][T14933] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2657'.
[  307.880315][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2675'.
[  307.977866][T15003] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2677'.
[  308.170587][T15014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2682'.
[  308.212913][T15014] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2682'.
[  308.350873][T15035] delete_channel: no stack
[  308.665319][T15055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2690'.
[  309.679895][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2698'.
[  309.690090][T15074] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2698'.
[  310.366097][T15111] sctp: [Deprecated]: syz.1.2710 (pid 15111) Use of struct sctp_assoc_value in delayed_ack socket option.
[  310.366097][T15111] Use struct sctp_sack_info instead
[  310.379530][T15111] smc: net device wlan0 erased user defined pnetid SYZ0
[  311.390246][T15151] syz_tun: entered allmulticast mode
[  311.394717][T15151] syz_tun: left allmulticast mode
[  311.443823][T15148] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.447916][T15148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  311.562088][T15160] __nla_validate_parse: 3 callbacks suppressed
[  311.562099][T15160] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2725'.
[  311.574276][T15160] netlink: 'syz.1.2725': attribute type 2 has an invalid length.
[  312.326774][T15211] xt_hashlimit: size too large, truncated to 1048576
[  312.375675][T15214] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2739'.
[  312.465743][T15218] xt_hashlimit: size too large, truncated to 1048576
[  312.489232][T15221] openvswitch: netlink: Message has 144 unknown bytes.
[  312.541308][T15226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2743'.
[  312.602762][T15231] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2744'.
[  313.060892][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2756'.
[  313.064122][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2756'.
[  313.217870][T15272] IPVS: Scheduler module ip_vs_ not found
[  313.223929][T15272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2760'.
[  313.376690][T15285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2764'.
[  313.417845][T15291] netlink: 'syz.1.2766': attribute type 1 has an invalid length.
[  313.449505][T15291] bond4: entered promiscuous mode
[  313.452154][T15291] 8021q: adding VLAN 0 to HW filter on device bond4
[  313.461320][T15291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2766'.
[  313.491741][T15291] bond4: (slave bridge4): making interface the new active one
[  313.494973][T15291] bridge4: entered promiscuous mode
[  313.497727][T15291] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  313.629124][T15297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2767'.
[  313.852514][T15309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  313.856060][T15309] bond_slave_0: left allmulticast mode
[  313.859087][T15309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  313.862573][T15309] bond_slave_1: left allmulticast mode
[  313.865361][T15309] bond0 (unregistering): Released all slaves
[  316.572618][T15299] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  316.660537][T15320] netlink: 'syz.2.2773': attribute type 1 has an invalid length.
[  316.669064][T15320] __nla_validate_parse: 1 callbacks suppressed
[  316.669077][T15320] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2773'.
[  317.600972][T15347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2784'.
[  317.607093][T15348] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2783'.
[  317.619711][T15347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2784'.
[  317.622923][T15347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2784'.
[  317.632097][T15347] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2784'.
[  317.646070][T15351] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2785'.
[  318.007615][T15393] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2797'.
[  319.849042][T15448] pim6reg: entered allmulticast mode
[  319.872810][T15454] pim6reg: left allmulticast mode
[  319.912343][T15458] Bluetooth: MGMT ver 1.23
[  319.928987][T15458] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  319.934330][T15458] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2813'.
[  321.416722][T15507] netlink: 'syz.1.2830': attribute type 22 has an invalid length.
[  321.419817][T15507] netlink: 'syz.1.2830': attribute type 1 has an invalid length.
[  321.422621][T15507] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2830'.
[  322.456822][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  323.071913][T15531] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2838'.
[  323.242703][T15538] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  324.133990][T15558] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2846'.
[  324.988524][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2858'.
[  324.991628][T15603] chnl_net:caif_netlink_parms(): no params data found
[  325.045757][T15604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2858'.
[  325.369342][T15615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2861'.
[  325.434909][T15620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2863'.
[  325.434907][T15619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2863'.
[  325.455377][T15620] netlink: 'syz.0.2863': attribute type 2 has an invalid length.
[  325.457950][T15620] netlink: 'syz.0.2863': attribute type 2 has an invalid length.
[  325.460819][T15619] netlink: 'syz.0.2863': attribute type 2 has an invalid length.
[  325.463531][T15619] netlink: 'syz.0.2863': attribute type 2 has an invalid length.
[  325.562836][T15621] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2863'.
[  325.714982][T15631] Unknown metaid 0 dlen 28
[  325.845871][T15644] netlink: 'syz.1.2870': attribute type 11 has an invalid length.
[  325.889486][T15645] xt_hashlimit: size too large, truncated to 1048576
[  325.891972][T15644] xt_hashlimit: size too large, truncated to 1048576
[  326.059086][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2872'.
[  326.107567][T15657] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  326.112070][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2873'.
[  326.303049][T15665] syzkaller1: entered promiscuous mode
[  326.310923][T15665] syzkaller1: entered allmulticast mode
[  326.442126][T15666] xfrm1: entered allmulticast mode
[  326.936775][T15657] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  327.209811][T15695] netlink: 'syz.1.2881': attribute type 1 has an invalid length.
[  328.656627][T15738] netlink: 'syz.2.2894': attribute type 1 has an invalid length.
[  328.661557][T15738] __nla_validate_parse: 7 callbacks suppressed
[  328.661570][T15738] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2894'.
[  328.987110][T15740] xt_HMARK: proto mask must be zero with L3 mode
[  328.990530][T15740] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2895'.
[  329.103984][T15751] dummy0: mtu less than device minimum
[  329.217470][T15754] netlink: 'syz.1.2900': attribute type 1 has an invalid length.
[  329.220048][T15754] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2900'.
[  329.978407][T15762] netlink: 'syz.0.2902': attribute type 13 has an invalid length.
[  329.980872][T15762] netlink: 'syz.0.2902': attribute type 17 has an invalid length.
[  330.014713][T15762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  330.022448][T15762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2902'.
[  330.123404][T15768] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2905'.
[  330.138880][T15768] sock: sock_timestamping_bind_phc: sock not bind to device
[  330.222782][T15774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2908'.
[  330.281709][T15782] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2910'.
[  330.449662][T15798] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.453472][T15798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  330.458492][T15797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2913'.
[  330.461509][T15797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2913'.
[  330.471699][T15797] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2913'.
[  330.619479][T15804] netlink: 'syz.1.2917': attribute type 1 has an invalid length.
[  330.631796][T15805] bond5: option xmit_hash_policy: invalid value (10)
[  330.635901][T15805] bond5 (unregistering): Released all slaves
[  330.797816][T15812] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  330.800670][T15812] syzkaller0: entered promiscuous mode
[  330.802503][T15812] syzkaller0: entered allmulticast mode
[  330.810336][T15812] tipc: Resetting bearer <eth:syzkaller0>
[  330.815483][T15811] tipc: Resetting bearer <eth:syzkaller0>
[  330.828855][T15811] tipc: Disabling bearer <eth:syzkaller0>
[  331.112849][T15831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  331.165333][T15832] netlink: 'syz.1.2922': attribute type 1 has an invalid length.
[  331.996824][T15857] ipt_REJECT: TCP_RESET invalid for non-tcp
[  331.999487][T15857] netlink: 'syz.1.2931': attribute type 1 has an invalid length.
[  332.021913][T15857] 8021q: adding VLAN 0 to HW filter on device bond5
[  332.039625][T15857] bond5: (slave veth17): Enslaving as an active interface with a down link
[  332.104247][T15857] 8021q: adding VLAN 0 to HW filter on device batadv1
[  332.107975][T15857] bond5: (slave batadv1): making interface the new active one
[  332.111527][T15857] batadv1: entered promiscuous mode
[  332.113745][T15857] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  332.123018][T15858] 8021q: adding VLAN 0 to HW filter on device batadv2
[  332.127851][T15858] bond5: (slave batadv2): Enslaving as an active interface with an up link
[  332.378887][T15892] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  332.617992][T15909] openvswitch: netlink: IP tunnel dst address not specified
[  333.046957][T15923] netlink: zone id is out of range
[  333.048979][T15923] netlink: zone id is out of range
[  333.050972][T15923] netlink: zone id is out of range
[  333.053001][T15923] netlink: zone id is out of range
[  333.222466][T15932] netlink: 'syz.1.2955': attribute type 1 has an invalid length.
[  334.596963][T15973] __nla_validate_parse: 6 callbacks suppressed
[  334.596979][T15973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2969'.
[  334.608764][T15973] netlink: 'syz.2.2969': attribute type 2 has an invalid length.
[  334.611300][T15973] netlink: 'syz.2.2969': attribute type 2 has an invalid length.
[  334.616700][T15973] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2969'.
[  334.690525][ T5674] nci: nci_ntf_packet: unknown ntf opcode 0x136
[  335.038779][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2973'.
[  335.395280][T16002] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2976'.
[  335.399196][T16002] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2976'.
[  335.402832][T16002] netlink: 'syz.0.2976': attribute type 6 has an invalid length.
[  335.406667][T16002] netlink: 'syz.0.2976': attribute type 5 has an invalid length.
[  335.410020][T16002] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2976'.
[  335.423253][T15973] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  335.571203][T16009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2979'.
[  335.703392][T16020] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  335.837733][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2985'.
[  336.256694][T16031] net_ratelimit: 51 callbacks suppressed
[  336.256706][T16031] openvswitch: netlink: Flow key attr not present in new flow.
[  336.465742][T16044] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2991'.
[  336.469934][T16044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2991'.
[  336.847383][T16071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  336.858811][T16072] netlink: 'syz.2.2999': attribute type 2 has an invalid length.
[  336.861429][T16072] netlink: 'syz.2.2999': attribute type 2 has an invalid length.
[  337.127987][T16091] netlink: 'syz.0.3005': attribute type 4 has an invalid length.
[  337.131963][T16091] netlink: 'syz.0.3005': attribute type 4 has an invalid length.
[  337.368938][T16102] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  337.433371][T16115] netlink: 'syz.2.3014': attribute type 33 has an invalid length.
[  338.963074][T16143] tipc: New replicast peer: 255.255.255.255
[  338.967553][T16143] tipc: Enabled bearer <udp:syz2>, priority 10
[  339.513261][T16157] xt_hashlimit: size too large, truncated to 1048576
[  339.960179][T16193] __nla_validate_parse: 12 callbacks suppressed
[  339.960189][T16193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3044'.
[  340.084046][  T991] tipc: Node number set to 1
[  340.174477][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3046'.
[  340.178199][T16198] netlink: 'syz.1.3046': attribute type 29 has an invalid length.
[  340.181446][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3046'.
[  340.377619][T16212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3048'.
[  340.645850][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3049'.
[  340.645972][T16215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3049'.
[  340.732244][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3050'.
[  341.080310][T16240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3055'.
[  341.149306][T16240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3055'.
[  341.153032][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3055'.
[  341.163644][T16240] netlink: 'syz.2.3055': attribute type 2 has an invalid length.
[  341.170152][T16240] netlink: 'syz.2.3055': attribute type 2 has an invalid length.
[  341.719378][T16281] xt_hashlimit: size too large, truncated to 1048576
[  341.810849][T16287] xt_hashlimit: size too large, truncated to 1048576
[  341.828742][ T5674] nci: nci_rsp_packet: unknown rsp opcode 0x705
[  341.918599][T16292] syzkaller0: entered promiscuous mode
[  341.920646][T16292] syzkaller0: entered allmulticast mode
[  341.977075][T16295] sock: sock_timestamping_bind_phc: sock not bind to device
[  342.470924][T16273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  342.729813][T16312] ipvlan3: entered promiscuous mode
[  343.026484][T16339] pimreg: left allmulticast mode
[  343.058322][T16339] x_tables: duplicate underflow at hook 2
[  343.596968][T16360] team_slave_1: Caught tx_queue_len zero misconfig
[  343.629280][T16360] netlink: 'syz.1.3089': attribute type 11 has an invalid length.
[  343.632002][T16360] netlink: 'syz.1.3089': attribute type 4 has an invalid length.
[  344.340059][T16379] erspan0: entered promiscuous mode
[  344.342460][T16379] erspan0: entered allmulticast mode
[  344.438157][   T10] IPVS: starting estimator thread 0...
[  344.441369][T16381] IPVS: rr: FWM 3 0x00000003 - no destination available
[  344.537950][T16384] IPVS: using max 81 ests per chain, 194400 per kthread
[  344.608009][T16388] netlink: 'syz.0.3098': attribute type 2 has an invalid length.
[  344.611400][T16388] netlink: 'syz.0.3098': attribute type 2 has an invalid length.
[  344.617695][T16389] netlink: 'syz.0.3098': attribute type 2 has an invalid length.
[  344.621140][T16392] Unknown metaid 0 dlen 28
[  344.621302][T16389] netlink: 'syz.0.3098': attribute type 2 has an invalid length.
[  344.664135][ T5674] IPVS: stop unused estimator thread 0...
[  344.715614][T16397] netlink: 'syz.0.3101': attribute type 12 has an invalid length.
[  344.877310][T16409] netlink: 'syz.2.3105': attribute type 2 has an invalid length.
[  344.881367][T16409] netlink: 'syz.2.3105': attribute type 2 has an invalid length.
[  345.142650][T16429] __nla_validate_parse: 21 callbacks suppressed
[  345.142663][T16429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3109'.
[  345.158649][T16429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3109'.
[  345.161704][T16429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3109'.
[  345.166319][T16429] netlink: 'syz.2.3109': attribute type 2 has an invalid length.
[  345.168863][T16429] netlink: 'syz.2.3109': attribute type 2 has an invalid length.
[  345.172296][T16429] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3109'.
[  345.267272][T16437] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3113'.
[  345.357916][T16440] xt_hashlimit: size too large, truncated to 1048576
[  345.459829][T16444] can: request_module (can-proto-0) failed.
[  345.463394][T16444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3115'.
[  345.470213][T16444] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3115'.
[  345.776222][T16453] syzkaller1: entered promiscuous mode
[  345.778157][T16453] syzkaller1: entered allmulticast mode
[  346.522935][T16467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3122'.
[  346.623500][T16473] xt_hashlimit: invalid rate
[  346.753493][T16488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3123'.
[  346.912276][T16495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  347.092530][T16512] xt_hashlimit: size too large, truncated to 1048576
[  347.467225][T16546] xt_hashlimit: size too large, truncated to 1048576
[  347.747729][T16573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  347.788066][T16579] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3151'.
[  347.822701][T16582] xt_hashlimit: size too large, truncated to 1048576
[  348.072329][   T24] IPVS: starting estimator thread 0...
[  348.163782][T16601] IPVS: using max 81 ests per chain, 194400 per kthread
[  348.257638][T16610] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  348.342475][T16619] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  351.292355][T16614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  351.296412][T16620] __nla_validate_parse: 3 callbacks suppressed
[  351.296427][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3161'.
[  351.471883][T16661] syzkaller0: entered promiscuous mode
[  351.476344][T16661] syzkaller0: entered allmulticast mode
[  351.535529][T16663] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3173'.
[  351.539418][T16663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3173'.
[  351.542914][T16665] team_slave_1: Caught tx_queue_len zero misconfig
[  351.552732][T16663] xt_hashlimit: size too large, truncated to 1048576
[  351.601468][T16673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3173'.
[  351.614396][T16673] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3173'.
[  351.737454][T16682] xt_hashlimit: size too large, truncated to 1048576
[  352.180534][T16716] dummy0: mtu less than device minimum
[  352.260186][T16721] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  352.264804][T16721] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  352.300155][T16727] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3193'.
[  353.612577][T16759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3202'.
[  353.676217][T16760] validate_nla: 2 callbacks suppressed
[  353.676228][T16760] netlink: 'syz.0.3202': attribute type 1 has an invalid length.
[  353.683927][T16760] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3202'.
[  353.688416][T16760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3202'.
[  353.692217][T16760] 8021q: VLANs not supported on gre0
[  353.979894][T16770] netlink: 'syz.1.3206': attribute type 2 has an invalid length.
[  353.983300][T16770] netlink: 'syz.1.3206': attribute type 8 has an invalid length.
[  353.987463][T16770] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3206'.
[  354.001863][T16770] netlink: 'syz.1.3206': attribute type 2 has an invalid length.
[  354.005639][T16770] netlink: 'syz.1.3206': attribute type 8 has an invalid length.
[  355.637465][T16852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  355.753872][T16856] netlink: 'syz.0.3227': attribute type 1 has an invalid length.
[  356.538076][T16882] syzkaller1: entered promiscuous mode
[  356.540421][T16882] syzkaller1: entered allmulticast mode
[  356.732776][T16894] __nla_validate_parse: 4 callbacks suppressed
[  356.732788][T16894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3242'.
[  356.761254][T16896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3244'.
[  356.790352][T16901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3246'.
[  356.861685][T16904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3246'.
[  357.986427][T16940] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3256'.
[  357.989505][T16939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3256'.
[  358.360339][T16964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3262'.
[  358.416442][T16964] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3262'.
[  359.848824][T16978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3265'.
[  359.866055][T16978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3265'.
[  360.816257][T16931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  360.820782][T16937] netlink: 'syz.1.3254': attribute type 1 has an invalid length.
[  360.830790][T16963] netlink: 'syz.2.3262': attribute type 2 has an invalid length.
[  360.834856][T16963] netlink: 'syz.2.3262': attribute type 2 has an invalid length.
[  360.838093][T16978] netlink: 'syz.0.3265': attribute type 2 has an invalid length.
[  360.847206][T16978] netlink: 'syz.0.3265': attribute type 2 has an invalid length.
[  361.152782][T17002] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  361.159015][T17003] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  364.498994][T17041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  364.669117][T17076] siw: device registration error -23
[  364.727495][T17080] netlink: 'syz.1.3292': attribute type 1 has an invalid length.
[  364.741606][T17080] bond6: entered promiscuous mode
[  364.743581][T17080] 8021q: adding VLAN 0 to HW filter on device bond6
[  364.762219][T17080] 8021q: adding VLAN 0 to HW filter on device bond6
[  364.768314][T17080] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address
[  364.772609][T17080] bond6: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  364.780463][T17080] bond6: (slave wireguard1): making interface the new active one
[  364.783073][T17080] wireguard1: entered promiscuous mode
[  364.786203][T17080] bond6: (slave wireguard1): Enslaving as an active interface with an up link
[  364.851132][T17089] netlink: 'syz.1.3294': attribute type 22 has an invalid length.
[  364.853896][T17089] __nla_validate_parse: 4 callbacks suppressed
[  364.853907][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3294'.
[  364.859861][T17089] netlink: 'syz.1.3294': attribute type 22 has an invalid length.
[  364.862636][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3294'.
[  365.251560][T17112] netlink: 'syz.1.3302': attribute type 1 has an invalid length.
[  365.255146][T17112] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3302'.
[  365.426021][T17114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3303'.
[  365.522236][T17117] netlink: 'syz.0.3304': attribute type 1 has an invalid length.
[  365.525376][T17117] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3304'.
[  366.073193][T17119] syzkaller0: entered promiscuous mode
[  366.077216][T17119] syzkaller0: entered allmulticast mode
[  366.280675][T17127] syzkaller1: entered promiscuous mode
[  366.282898][T17127] syzkaller1: entered allmulticast mode
[  366.459409][T17135] syzkaller0: entered promiscuous mode
[  366.461385][T17135] syzkaller0: entered allmulticast mode
[  366.491094][T17140] delete_channel: no stack
[  366.552868][T17153] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3317'.
[  366.627014][T17153] syzkaller0: entered promiscuous mode
[  366.629220][T17153] syzkaller0: entered allmulticast mode
[  366.764770][T17165] bond7 (unregistering): Released all slaves
[  366.929463][T17177] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3323'.
[  366.934017][T17177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3323'.
[  366.941222][T17177] xt_hashlimit: size too large, truncated to 1048576
[  367.748281][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.751441][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.754592][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.757681][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.760755][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.764402][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.766917][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.769920][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.772890][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.777278][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.780708][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.783452][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.786730][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.789464][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.791902][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.794785][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.797208][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.800492][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.803236][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.809309][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.812020][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.814882][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.817460][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.819887][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.822417][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.825400][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.827802][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.830197][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.832775][T17201] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  367.870152][T17206] x_tables: duplicate underflow at hook 1
[  367.876173][T17207] xt_hashlimit: size too large, truncated to 1048576
[  367.933195][T17210] syzkaller0: entered promiscuous mode
[  367.939775][T17210] syzkaller0: entered allmulticast mode
[  368.396238][T17238] dummy0: mtu less than device minimum
[  368.549236][T17246] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3343'.
[  368.569049][T17248] dummy0: mtu less than device minimum
[  369.359270][T17268] xt_hashlimit: size too large, truncated to 1048576
[  369.650973][T17277] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3351'.
[  369.970796][T17290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  370.062315][T17302] syzkaller0: entered promiscuous mode
[  370.064371][T17302] syzkaller0: entered allmulticast mode
[  370.425411][T17324] __nla_validate_parse: 1 callbacks suppressed
[  370.425421][T17324] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3364'.
[  370.852103][T17340] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3369'.
[  371.271284][T17365] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3376'.
[  371.277070][T17365] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3376'.
[  371.314535][T17368] bond4: entered allmulticast mode
[  372.518525][T17397] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3388'.
[  372.951716][T17404] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3390'.
[  372.957728][T17404] openvswitch: netlink: Flow key attr not present in new flow.
[  373.118714][T17409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3391'.
[  373.125495][T17409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3391'.
[  373.338158][T17424] tipc: Enabling <eth:lo> not permitted
[  373.341148][T17424] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  374.310090][T17472] dvmrp6: entered allmulticast mode
[  374.332800][T17472] 8021q: adding VLAN 0 to HW filter on device bond0
[  374.339165][T17472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  374.948593][T17493] xt_hashlimit: size too large, truncated to 1048576
[  375.274254][T17508] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3424'.
[  375.277654][T17508] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3424'.
[  375.446496][T17522] 0: renamed from batadv_slave_1
[  375.714241][T17555] __nla_validate_parse: 1 callbacks suppressed
[  375.714251][T17555] netlink: 8284 bytes leftover after parsing attributes in process `syz.2.3439'.
[  375.719663][T17555] openvswitch: netlink: Flow key attr not present in new flow.
[  375.766738][T17557] netlink: 'syz.2.3440': attribute type 11 has an invalid length.
[  375.900524][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3444'.
[  375.978602][T17577] netlink: 'syz.0.3446': attribute type 3 has an invalid length.
[  376.060921][T17580] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  376.070397][T17580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3447'.
[  376.282227][T17589] netlink: 'syz.0.3450': attribute type 1 has an invalid length.
[  376.286022][T17589] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3450'.
[  377.722336][T17635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3467'.
[  377.949325][T17659] sctp: [Deprecated]: syz.2.3472 (pid 17659) Use of struct sctp_assoc_value in delayed_ack socket option.
[  377.949325][T17659] Use struct sctp_sack_info instead
[  377.956235][T17659] sctp: [Deprecated]: syz.2.3472 (pid 17659) Use of struct sctp_assoc_value in delayed_ack socket option.
[  377.956235][T17659] Use struct sctp_sack_info instead
[  378.767402][T17674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3476'.
[  378.773123][T17672] sctp: [Deprecated]: syz.0.3475 (pid 17672) Use of struct sctp_assoc_value in delayed_ack socket option.
[  378.773123][T17672] Use struct sctp_sack_info instead
[  378.780027][T17674] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3476'.
[  378.783379][T17677] sctp: [Deprecated]: syz.0.3475 (pid 17677) Use of struct sctp_assoc_value in delayed_ack socket option.
[  378.783379][T17677] Use struct sctp_sack_info instead
[  378.790684][T17674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3476'.
[  378.795192][T17674] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3476'.
[  378.795246][T17675] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3476'.
[  378.928385][T17686] xt_hashlimit: size too large, truncated to 1048576
[  378.931374][T17690] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  378.972909][T17688] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  380.923771][ T5830] Bluetooth: hci1: command 0x0406 tx timeout
[  381.095559][T17790] netlink: 'syz.2.3510': attribute type 1 has an invalid length.
[  381.099356][T17790] __nla_validate_parse: 3 callbacks suppressed
[  381.099367][T17790] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3510'.
[  381.104894][T17791] netlink: 'syz.2.3510': attribute type 1 has an invalid length.
[  381.108572][T17791] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3510'.
[  382.028795][T17842] netlink: 'syz.2.3525': attribute type 89 has an invalid length.
[  382.349077][T17854] xt_hashlimit: size too large, truncated to 1048576
[  382.778652][T17875] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3535'.
[  382.920908][T17882] netlink: 'syz.0.3537': attribute type 1 has an invalid length.
[  382.924298][T17882] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3537'.
[  382.928154][T17882] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3537'.
[  383.563224][T17932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3553'.
[  383.738795][T17937] netlink: 'syz.2.3554': attribute type 1 has an invalid length.
[  383.741968][T17937] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3554'.
[  383.843580][T17944] can: request_module (can-proto-0) failed.
[  383.887861][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  384.252452][T17966] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3561'.
[  384.256642][T17966] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3561'.
[  384.260416][T17966] netlink: 'syz.0.3561': attribute type 5 has an invalid length.
[  384.265071][T17966] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3561'.
[  384.278163][T17966] netlink: 'syz.0.3561': attribute type 21 has an invalid length.
[  384.281664][T17966] netlink: 'syz.0.3561': attribute type 20 has an invalid length.
[  384.479007][T17975] netlink: 'syz.1.3564': attribute type 14 has an invalid length.
[  385.312334][T17992] netlink: 'syz.0.3568': attribute type 2 has an invalid length.
[  385.923600][T18060] xt_hashlimit: size too large, truncated to 1048576
[  386.641023][T18068] validate_nla: 1 callbacks suppressed
[  386.641033][T18068] netlink: 'syz.0.3589': attribute type 89 has an invalid length.
[  387.255749][T18088] dvmrp1: entered allmulticast mode
[  387.258715][T18091] __nla_validate_parse: 5 callbacks suppressed
[  387.258723][T18091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3593'.
[  387.300514][T18093] netlink: 'syz.0.3596': attribute type 6 has an invalid length.
[  387.970345][T18102] sock: sock_timestamping_bind_phc: sock not bind to device
[  388.375512][T18128] netlink: 556 bytes leftover after parsing attributes in process `syz.1.3607'.
[  388.380943][T18128] netlink: 320 bytes leftover after parsing attributes in process `syz.1.3607'.
[  388.385738][T18128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3607'.
[  388.388844][T18128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3607'.
[  388.392004][T18128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3607'.
[  388.400918][T18128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3607'.
[  388.405054][T18128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3607'.
[  388.710704][T18148] netlink: 'syz.1.3613': attribute type 1 has an invalid length.
[  388.987347][T18155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3616'.
[  389.032410][T18155] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3616'.
[  389.109927][T18163] xt_hashlimit: size too large, truncated to 1048576
[  390.357661][T18218] syzkaller0: entered promiscuous mode
[  390.359581][T18218] syzkaller0: entered allmulticast mode
[  390.856034][T18236] syzkaller0: entered promiscuous mode
[  390.861034][T18236] syzkaller0: entered allmulticast mode
[  391.034122][T18245] netlink: 'syz.0.3641': attribute type 1 has an invalid length.
[  392.569385][T18272] __nla_validate_parse: 1 callbacks suppressed
[  392.569397][T18272] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3649'.
[  393.009556][T18295] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3654'.
[  393.411576][T18312] bpq0: entered allmulticast mode
[  394.521917][T18340] ip6t_srh: unknown srh invflags 4000
[  394.694657][T18350] lo speed is unknown, defaulting to 1000
[  394.709709][T18350] lo speed is unknown, defaulting to 1000
[  394.712712][T18350] lo speed is unknown, defaulting to 1000
[  394.763620][T18354] gtp2: entered promiscuous mode
[  394.765945][T18354] gtp2: entered allmulticast mode
[  394.786652][T18354] bond10: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  394.791876][T18354] bond10 (unregistering): Released all slaves
[  394.871963][T18350] infiniband sqz0: set down
[  394.873089][   T31] lo speed is unknown, defaulting to 1000
[  394.878929][T18350] infiniband sqz0: added lo
[  394.896877][T18350] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  394.902881][T18350] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  394.910984][T18350] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  394.940814][T18350] RDS/IB: sqz0: added
[  394.946138][T18350] smc: adding ib device sqz0 with port count 1
[  394.948684][T18350] smc:    ib device sqz0 port 1 has no pnetid
[  394.955156][ T6859] lo speed is unknown, defaulting to 1000
[  394.961990][T18350] lo speed is unknown, defaulting to 1000
[  395.089860][T18350] lo speed is unknown, defaulting to 1000
[  395.211114][T18350] lo speed is unknown, defaulting to 1000
[  395.497346][T18380] syzkaller0: entered promiscuous mode
[  395.514050][T18380] syzkaller0: entered allmulticast mode
[  395.651450][T18387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3683'.
[  395.658378][T18387] netlink: 'syz.1.3683': attribute type 2 has an invalid length.
[  395.661771][T18387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3683'.
[  395.860024][T18402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3687'.
[  396.222699][T18416] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3694'.
[  396.235300][T18416] openvswitch: netlink: Missing key (keys=40, expected=100)
[  397.388540][T18460] netlink: 'syz.1.3708': attribute type 14 has an invalid length.
[  397.462780][T18465] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  397.516633][T18465] bond7 (unregistering): Released all slaves
[  397.834585][T18482] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  397.916325][T18484] syzkaller0: entered promiscuous mode
[  397.918693][T18484] syzkaller0: entered allmulticast mode
[  398.482001][T18498] syzkaller0: entered promiscuous mode
[  398.484143][T18498] syzkaller0: entered allmulticast mode
[  398.542952][T18503] netlink: 33 bytes leftover after parsing attributes in process `syz.2.3719'.
[  398.548461][T18503] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3719'.
[  398.632279][T18505] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.637501][T18505] vlan2 (unregistering): left promiscuous mode
[  398.639727][T18505] bridge_slave_0 (unregistering): left promiscuous mode
[  398.642556][T18505] bridge0: port 3(vlan2) entered disabled state
[  398.678619][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3721'.
[  398.681564][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3721'.
[  398.786288][T18513] netlink: 'syz.0.3724': attribute type 89 has an invalid length.
[  399.847068][T18531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3727'.
[  400.261905][T18560] netlink: 'syz.2.3735': attribute type 10 has an invalid length.
[  400.412825][T18564] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.436973][T18562] tipc: Disabling bearer <eth:syzkaller0>
[  400.519645][T18573] ip6gre1: entered promiscuous mode
[  404.338462][T18650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3759'.
[  404.682678][T18679] netlink: 'syz.0.3768': attribute type 1 has an invalid length.
[  404.685227][T18679] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3768'.
[  404.846716][T18688] netlink: 'syz.2.3772': attribute type 12 has an invalid length.
[  405.489461][T18708] netlink: 'syz.1.3778': attribute type 1 has an invalid length.
[  405.498046][T18708] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3778'.
[  405.870274][T18733] lo speed is unknown, defaulting to 1000
[  406.443948][ T5833] Bluetooth: hci2: command 0x0405 tx timeout
[  406.491483][T18747] bond7: entered promiscuous mode
[  407.308752][T18805] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3808'.
[  407.314833][T18805] IPv6: sit1: Disabled Multicast RS
[  407.317351][T18805] sit1: entered allmulticast mode
[  407.694187][T18838] bond1: left promiscuous mode
[  407.696848][T18838] bond4: left promiscuous mode
[  407.699084][T18838] bond5: left allmulticast mode
[  407.701483][T18838] vlan3: left promiscuous mode
[  407.703373][T18838] bond8: left promiscuous mode
[  407.706569][T18838] bridge2: left promiscuous mode
[  407.708588][T18838] vlan3: left allmulticast mode
[  407.710504][T18839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3816'.
[  407.710540][T18838] bond8: left allmulticast mode
[  407.718607][T18838] bridge2: left allmulticast mode
[  407.723128][T18838] ip6gre1: left promiscuous mode
[  407.800474][T18842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3818'.
[  408.474879][T18864] netlink: 'syz.0.3826': attribute type 1 has an invalid length.
[  408.477431][T18864] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3826'.
[  408.611952][T18871] xt_hashlimit: size too large, truncated to 1048576
[  408.787599][T18877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  408.791735][T18878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  408.986853][T18903] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3835'.
[  409.029740][T18907] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3837'.
[  409.035151][T18907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3837'.
[  409.125593][T18914] netlink: 'syz.2.3839': attribute type 1 has an invalid length.
[  409.341689][T18925] syzkaller1: entered promiscuous mode
[  409.343777][T18925] syzkaller1: entered allmulticast mode
[  409.839374][T18946] __nla_validate_parse: 2 callbacks suppressed
[  409.839386][T18946] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3850'.
[  409.953447][T18953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3851'.
[  410.001784][T18961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3854'.
[  410.007400][T18961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3854'.
[  410.110215][T18961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3854'.
[  410.166605][T18967] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3855'.
[  410.182300][T18967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3855'.
[  410.186410][T18967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3855'.
[  410.195820][T18967] netlink: 'syz.2.3855': attribute type 2 has an invalid length.
[  410.199203][T18967] netlink: 'syz.2.3855': attribute type 2 has an invalid length.
[  410.203357][T18967] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3855'.
[  410.496224][T18982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3861'.
[  410.862492][T18991] lo speed is unknown, defaulting to 1000
[  411.997624][T19005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  412.003425][T19005] IPv6: NLM_F_CREATE should be set when creating new route
[  412.006472][T19005] IPv6: NLM_F_CREATE should be set when creating new route
[  413.271883][T19037] IPVS: Unknown mcast interface: dvmrp0
[  413.399289][T19045] xt_hashlimit: size too large, truncated to 1048576
[  413.401560][T19045] xt_hashlimit: max too large, truncated to 1048576
[  413.456278][T19049] netlink: 'syz.2.3880': attribute type 2 has an invalid length.
[  413.469289][T19049] !9: entered promiscuous mode
[  413.472491][T19049] netlink: 'syz.2.3880': attribute type 2 has an invalid length.
[  413.476711][T19049] !9: left promiscuous mode
[  413.527202][T19054] vlan0: left allmulticast mode
[  413.528999][T19054] macsec0: left allmulticast mode
[  413.531052][T19054] vlan0: left promiscuous mode
[  413.533050][T19054] macsec0: left promiscuous mode
[  413.540083][T19054] bridge0: port 5(vlan0) entered disabled state
[  413.544348][T19054] hsr0: left allmulticast mode
[  413.546099][T19054] hsr_slave_0: left allmulticast mode
[  413.548021][T19054] hsr_slave_1: left allmulticast mode
[  413.549878][T19054] hsr0: left promiscuous mode
[  413.551868][T19054] bridge0: port 4(hsr0) entered disabled state
[  413.555666][T19054] bridge_slave_1: left allmulticast mode
[  413.557423][T19054] bridge_slave_1: left promiscuous mode
[  413.559293][T19054] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.355085][T19106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  415.283214][T19128] __nla_validate_parse: 4 callbacks suppressed
[  415.283224][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3902'.
[  415.667394][T19135] netlink: 'syz.0.3904': attribute type 64 has an invalid length.
[  415.747663][T19141] bond0: entered promiscuous mode
[  415.749512][T19141] bond0: entered allmulticast mode
[  415.751792][T19141] 8021q: adding VLAN 0 to HW filter on device bond0
[  415.793071][T19146] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  415.793392][T19147] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  416.769843][T19165] netlink: 340 bytes leftover after parsing attributes in process `syz.0.3914'.
[  417.408309][T19205] netlink: 'syz.0.3926': attribute type 5 has an invalid length.
[  417.708275][T19214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3928'.
[  417.714581][T19214] netlink: 'syz.0.3928': attribute type 1 has an invalid length.
[  417.717962][T19214] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3928'.
[  418.325177][T19221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  418.802527][T19248] netlink: 'syz.1.3937': attribute type 1 has an invalid length.
[  418.805870][T19248] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3937'.
[  418.844231][T19252] xt_ecn: cannot match TCP bits for non-tcp packets
[  418.973052][T19258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3940'.
[  419.085644][T19267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3942'.
[  419.979432][T19275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3944'.
[  420.281742][T19288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3948'.
[  421.454362][T19309] netlink: 34 bytes leftover after parsing attributes in process `syz.0.3955'.
[  421.457285][T19309] netlink: 34 bytes leftover after parsing attributes in process `syz.0.3955'.
[  422.033380][T19338] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3963'.
[  422.091283][T19342] lo speed is unknown, defaulting to 1000
[  422.806034][T19354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3966'.
[  423.417009][T19393] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3974'.
[  423.427216][T19402] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3977'.
[  423.470576][T19402] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3977'.
[  423.563588][T19409] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3979'.
[  423.761239][T19416] netlink: 'syz.2.3981': attribute type 1 has an invalid length.
[  423.765543][T19416] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3981'.
[  424.229855][T19432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3987'.
[  424.892450][T19447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  425.998180][T19478] netlink: 'syz.1.3997': attribute type 22 has an invalid length.
[  426.000798][T19478] netlink: 'syz.1.3997': attribute type 1 has an invalid length.
[  427.153412][T19508] netlink: 'syz.2.4007': attribute type 3 has an invalid length.
[  427.156638][T19508] __nla_validate_parse: 3 callbacks suppressed
[  427.156646][T19508] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4007'.
[  427.352107][T19510] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4008'.
[  427.459962][T19530] macsec0: entered allmulticast mode
[  427.462944][T19530] veth1_macvtap: entered allmulticast mode
[  427.468879][T19530] macsec0: left allmulticast mode
[  427.470619][T19530] veth1_macvtap: left allmulticast mode
[  427.649658][T19544] netlink: 'syz.0.4020': attribute type 2 has an invalid length.
[  427.906416][T19570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4027'.
[  428.906893][T19609] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4039'.
[  428.920273][T19609] netlink: 'syz.0.4039': attribute type 2 has an invalid length.
[  428.922897][T19609] netlink: 'syz.0.4039': attribute type 2 has an invalid length.
[  428.983396][T19616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4041'.
[  429.444516][T19641] 8021q: VLANs not supported on sit0
[  429.456896][T19641] bond10: (slave bond_slave_1): Device is not bonding slave
[  429.459396][T19641] bond10: option active_slave: invalid value (bond_slave_1)
[  429.462724][T19641] bond10 (unregistering): Released all slaves
[  430.066230][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4051'.
[  430.069323][T19653] netlink: 'syz.2.4051': attribute type 1 has an invalid length.
[  430.071897][T19653] netlink: 'syz.2.4051': attribute type 2 has an invalid length.
[  430.088093][T19653] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4051'.
[  430.091345][T19653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4051'.
[  430.094623][T19653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4051'.
[  430.172525][T19656] batadv_slave_0: entered promiscuous mode
[  430.609737][T19665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4054'.
[  430.760051][T19674] sctp: [Deprecated]: syz.0.4057 (pid 19674) Use of int in maxseg socket option.
[  430.760051][T19674] Use struct sctp_assoc_value instead
[  430.777884][T19674] dummy0: mtu less than device minimum
[  430.822775][T19676] openvswitch: netlink: Message has 8 unknown bytes.
[  430.825129][T19676] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.951110][T19654] batadv_slave_0: left promiscuous mode
[  431.805171][T19729] xt_hashlimit: size too large, truncated to 1048576
[  432.190493][T19769] __nla_validate_parse: 2 callbacks suppressed
[  432.190508][T19769] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.4084'.
[  432.256046][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4086'.
[  432.260091][T19773] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  432.467371][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4088'.
[  432.470580][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4088'.
[  432.621239][T19792] lo speed is unknown, defaulting to 1000
[  432.928682][T19804] x_tables: duplicate underflow at hook 1
[  433.148571][T19814] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4096'.
[  433.153310][T19814] netlink: 'syz.2.4096': attribute type 10 has an invalid length.
[  433.158219][T19814] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4096'.
[  434.001771][T19842] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4101'.
[  434.012929][T19842] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  434.460124][T19858] veth0: entered promiscuous mode
[  434.464734][T19857] veth0: left promiscuous mode
[  434.556165][T19867] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  434.566917][T19867] bond3: (slave lo): Enslaving as an active interface with an up link
[  434.569746][T19867] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  434.706549][   T12] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  434.714797][   T12] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  434.734026][ T5807] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  434.765483][T19882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  434.923979][T19898] netlink: 276 bytes leftover after parsing attributes in process `syz.1.4116'.
[  434.926801][T19897] netlink: 276 bytes leftover after parsing attributes in process `syz.1.4116'.
[  434.948150][T19894] xt_hashlimit: size too large, truncated to 1048576
[  435.132490][T19915] bond3: option mode: unable to set because the bond device has slaves
[  435.373263][T19930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4124'.
[  435.561543][T19946] xt_ecn: cannot match TCP bits for non-tcp packets
[  435.644246][   T31] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  435.724611][   T31] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  436.550267][T19978] bond10: option ad_select: invalid value (34)
[  436.553552][T19978] bond10 (unregistering): Released all slaves
[  436.697262][T19986] netlink: 'syz.1.4143': attribute type 1 has an invalid length.
[  436.745973][T19995] netlink: 'syz.0.4145': attribute type 21 has an invalid length.
[  436.749031][T19995] netlink: 'syz.0.4145': attribute type 4 has an invalid length.
[  437.265459][T20022] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  437.689786][T20035] netlink: 'syz.0.4156': attribute type 61 has an invalid length.
[  437.693882][T20035] netlink: 'syz.0.4156': attribute type 1 has an invalid length.
[  437.758910][T20039] syzkaller0: entered promiscuous mode
[  437.761038][T20039] syzkaller0: entered allmulticast mode
[  438.261519][T20050] __nla_validate_parse: 7 callbacks suppressed
[  438.261536][T20050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4162'.
[  438.287554][T20050] netlink: 'syz.2.4162': attribute type 13 has an invalid length.
[  438.292828][T20050] netlink: 'syz.2.4162': attribute type 2 has an invalid length.
[  438.296585][T20050] netlink: 'syz.2.4162': attribute type 2 has an invalid length.
[  438.301342][T20050] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4162'.
[  438.444078][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  438.494710][T20056] xt_hashlimit: size too large, truncated to 1048576
[  438.541271][T20052] netlink: 'syz.2.4163': attribute type 1 has an invalid length.
[  438.545154][T20052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4163'.
[  438.606965][T20062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4166'.
[  438.611782][T20062] xt_TCPMSS: Only works on TCP SYN packets
[  438.617576][T20064] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  438.847750][T20089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4174'.
[  438.852520][T20089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4174'.
[  438.860345][T20089] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4174'.
[  439.950784][T20125] lo speed is unknown, defaulting to 1000
[  439.964491][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4185'.
[  439.968785][T20130] netlink: 312 bytes leftover after parsing attributes in process `syz.1.4185'.
[  440.203266][T20152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4191'.
[  440.208932][T20149] netlink: 'syz.2.4190': attribute type 10 has an invalid length.
[  441.020271][T20171] lo speed is unknown, defaulting to 1000
[  441.094121][T20176] sctp: [Deprecated]: syz.2.4198 (pid 20176) Use of int in maxseg socket option.
[  441.094121][T20176] Use struct sctp_assoc_value instead
[  441.341838][T20185] xt_hashlimit: size too large, truncated to 1048576
[  442.211514][T20219] lo speed is unknown, defaulting to 1000
[  443.152871][T20253] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  443.533107][T20274] __nla_validate_parse: 12 callbacks suppressed
[  443.533120][T20274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4227'.
[  443.777318][T20285] syzkaller0: entered promiscuous mode
[  443.779734][T20285] syzkaller0: entered allmulticast mode
[  444.348141][T20298] validate_nla: 2 callbacks suppressed
[  444.348154][T20298] netlink: 'syz.2.4235': attribute type 12 has an invalid length.
[  445.360909][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  445.968764][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[  447.983903][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4246'.
[  448.129869][T20338] lo speed is unknown, defaulting to 1000
[  448.999835][   T55] block nbd3: Receive control failed (result -32)
[  449.298348][T20370] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4259'.
[  449.433830][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4262'.
[  449.438253][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4262'.
[  449.595067][T20390] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4265'.
[  449.598154][T20390] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4265'.
[  449.638518][T20391] netlink: 'syz.1.4263': attribute type 58 has an invalid length.
[  449.648261][T20391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4263'.
[  452.877476][T20427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'.
[  452.880385][T20427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4274'.
[  452.911190][T20433] ip6tnl0: Caught tx_queue_len zero misconfig
[  452.999913][T20436] lo speed is unknown, defaulting to 1000
[  453.162802][T20459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4278'.
[  453.760408][T20466] lo speed is unknown, defaulting to 1000
[  454.141444][T20483] syzkaller0: entered promiscuous mode
[  454.143328][T20483] syzkaller0: entered allmulticast mode
[  454.181976][T20483] xt_hashlimit: size too large, truncated to 1048576
[  454.545571][T20499] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4294'.
[  454.651479][T20502] sock: sock_timestamping_bind_phc: sock not bind to device
[  454.839439][T20508] netlink: 'syz.2.4297': attribute type 11 has an invalid length.
[  454.842187][T20508] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.4297'.
[  455.583608][T20531] xt_hashlimit: size too large, truncated to 1048576
[  455.852868][T20540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4307'.
[  455.993912][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4312'.
[  456.009336][T20564] syzkaller0: entered promiscuous mode
[  456.011232][T20564] syzkaller0: entered allmulticast mode
[  456.025449][T20564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4312'.
[  456.258698][T20567] netlink: 'syz.2.4313': attribute type 10 has an invalid length.
[  456.261928][T20566] netlink: 'syz.2.4313': attribute type 10 has an invalid length.
[  456.326802][T20567] bond0: entered promiscuous mode
[  456.328687][T20567] bond_slave_0: entered promiscuous mode
[  456.375421][T20565] bond0: left promiscuous mode
[  456.377069][T20565] bond_slave_0: left promiscuous mode
[  456.431686][T20577] netlink: 'syz.2.4316': attribute type 1 has an invalid length.
[  456.436163][T20577] netlink: 'syz.2.4316': attribute type 2 has an invalid length.
[  456.525818][T20582] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4317'.
[  456.532064][T20582] netlink: 'syz.2.4317': attribute type 6 has an invalid length.
[  456.535353][T20582] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.4317'.
[  456.541601][T20582] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4317'.
[  456.733399][T20593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4322'.
[  456.958660][T20614] netlink: 'syz.0.4325': attribute type 1 has an invalid length.
[  456.961980][T20614] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4325'.
[  456.966859][T20617] netlink: 'syz.2.4326': attribute type 1 has an invalid length.
[  457.570079][T20625] af_packet: tpacket_rcv: packet too big, clamped from 29 to 4294967272. macoff=96
[  457.811590][T20637] netlink: 'syz.1.4331': attribute type 3 has an invalid length.
[  457.833856][T20637] netlink: 'syz.1.4331': attribute type 1 has an invalid length.
[  457.837192][T20637] NCSI netlink: No device for ifindex 808464432
[  458.742399][T20673] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  459.783584][T20718] __nla_validate_parse: 5 callbacks suppressed
[  459.783598][T20718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4357'.
[  459.790779][T20718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4357'.
[  459.881697][T20727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4360'.
[  459.887067][T20727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4360'.
[  459.911297][T20724] lo speed is unknown, defaulting to 1000
[  459.972359][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4362'.
[  459.992875][T20733] netlink: 65011 bytes leftover after parsing attributes in process `syz.2.4362'.
[  460.012081][T20733] xt_hashlimit: size too large, truncated to 1048576
[  460.050400][T20724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4359'.
[  462.160907][T20782] netlink: 'syz.1.4377': attribute type 4 has an invalid length.
[  462.323535][T20799] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4381'.
[  462.377124][T20805] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4383'.
[  463.576187][T20838] lo speed is unknown, defaulting to 1000
[  463.750416][T20848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4395'.
[  463.756459][T20848] netlink: 'syz.2.4395': attribute type 6 has an invalid length.
[  463.759363][T20848] netlink: 'syz.2.4395': attribute type 5 has an invalid length.
[  463.770844][T20848] netlink: 'syz.2.4395': attribute type 6 has an invalid length.
[  463.770901][ T5857] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  463.775278][T20848] netlink: 'syz.2.4395': attribute type 5 has an invalid length.
[  463.783388][ T5857] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  463.787116][ T5857] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  463.789890][ T5857] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  463.870675][T20852] syzkaller0: entered promiscuous mode
[  463.873878][T20852] syzkaller0: entered allmulticast mode
[  465.113261][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  465.117090][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  465.120001][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  465.122942][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  465.440850][T20890] netlink: 'syz.1.4408': attribute type 1 has an invalid length.
[  467.966936][T20877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  468.048582][T20899] __nla_validate_parse: 6 callbacks suppressed
[  468.048594][T20899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4411'.
[  468.079415][T20909] netlink: 'syz.1.4414': attribute type 5 has an invalid length.
[  468.086558][T20899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4411'.
[  468.093920][T20899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4411'.
[  468.126086][T20919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4418'.
[  468.216104][T20937] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  468.283927][T20940] batadv_slave_1: entered promiscuous mode
[  468.288338][T20939] batadv_slave_1: left promiscuous mode
[  468.629284][T20981] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4428'.
[  468.740134][T20990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4432'.
[  468.756891][T20991] netlink: 'syz.2.4431': attribute type 1 has an invalid length.
[  468.760424][T20991] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4431'.
[  468.906753][T20993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4433'.
[  468.927784][T20993] syzkaller0: entered promiscuous mode
[  468.930419][T20993] syzkaller0: entered allmulticast mode
[  469.003238][T20995] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4434'.
[  469.203492][T21005] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4437'.
[  469.229256][T21005] netlink: 'syz.0.4437': attribute type 2 has an invalid length.
[  469.232640][T21005] netlink: 'syz.0.4437': attribute type 2 has an invalid length.
[  469.580082][T21017] sock: sock_timestamping_bind_phc: sock not bind to device
[  470.002074][T21031] syzkaller0: entered promiscuous mode
[  470.004665][T21031] syzkaller0: entered allmulticast mode
[  470.593042][T21056] netlink: 'syz.2.4451': attribute type 1 has an invalid length.
[  470.954449][T21095] xt_hashlimit: size too large, truncated to 1048576
[  471.027956][T21099] lo speed is unknown, defaulting to 1000
[  471.349052][T21126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  471.372021][T21126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  471.577266][T21135] syzkaller0: entered promiscuous mode
[  471.579055][T21135] syzkaller0: entered allmulticast mode
[  472.000859][ T5857] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xef
[  472.745705][T21159] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  472.875529][T21181] syzkaller0: entered promiscuous mode
[  472.882319][T21181] syzkaller0: entered allmulticast mode
[  473.074660][T21200] __nla_validate_parse: 15 callbacks suppressed
[  473.074683][T21200] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4484'.
[  473.081470][T21200] netlink: 'syz.0.4484': attribute type 1 has an invalid length.
[  473.159946][T21203] syzkaller0: entered promiscuous mode
[  473.161756][T21203] syzkaller0: entered allmulticast mode
[  476.431491][T21228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4490'.
[  476.475462][T21233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4493'.
[  476.497086][T21233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4493'.
[  476.501038][T21233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4493'.
[  476.527248][T21235] syzkaller1: entered promiscuous mode
[  476.529260][T21235] syzkaller1: entered allmulticast mode
[  476.565860][T21237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4495'.
[  476.579901][T21237] syzkaller0: entered promiscuous mode
[  476.582190][T21237] syzkaller0: entered allmulticast mode
[  477.240376][T21263] bridge_slave_1: Caught tx_queue_len zero misconfig
[  477.362963][T21268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4506'.
[  477.376109][T21268] syzkaller0: entered promiscuous mode
[  477.378535][T21268] syzkaller0: entered allmulticast mode
[  477.688714][T21270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4507'.
[  477.698564][T21270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4507'.
[  504.196234][T21297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4514'.
[  504.215890][T21297] syzkaller0: entered promiscuous mode
[  504.218797][T21297] syzkaller0: entered allmulticast mode
[  504.468878][T21324] netlink: 'syz.0.4522': attribute type 1 has an invalid length.
[  504.474113][T21324] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4522'.
[  504.479371][T21324] netlink: 'syz.0.4522': attribute type 1 has an invalid length.
[  504.486626][T21326] syzkaller0: entered promiscuous mode
[  504.488639][T21326] syzkaller0: entered allmulticast mode
[  504.491869][T21324] netlink: 'syz.0.4522': attribute type 8 has an invalid length.
[  504.495727][T21324] netlink: 606 bytes leftover after parsing attributes in process `syz.0.4522'.
[  504.636725][T21329] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4524'.
[  504.642325][T21330] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4524'.
[  504.693214][T21334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4526'.
[  504.727787][T21334] netlink: 'syz.1.4526': attribute type 2 has an invalid length.
[  504.734426][T21334] netlink: 'syz.1.4526': attribute type 2 has an invalid length.
[  504.746208][T21334] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4526'.
[  504.797471][T21338] syzkaller0: entered promiscuous mode
[  504.800200][T21338] syzkaller0: entered allmulticast mode
[  504.873090][T21345] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4530'.
[  505.130718][T21374] syzkaller0: entered promiscuous mode
[  505.132598][T21374] syzkaller0: entered allmulticast mode
[  505.194892][T21376] netlink: 'syz.2.4540': attribute type 2 has an invalid length.
[  505.249987][T21380] Cannot find del_set index 2 as target
[  505.363240][T21386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4542'.
[  505.779366][T21402] dummy0: mtu less than device minimum
[  506.367035][T21422] xt_TCPMSS: Only works on TCP SYN packets
[  506.684333][T21436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4556'.
[  506.767060][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  506.847706][T21456] xt_hashlimit: size too large, truncated to 1048576
[  506.881266][T21459] netlink: 'syz.2.4563': attribute type 1 has an invalid length.
[  508.056919][T21487] tipc: New replicast peer: 172.20.20.12
[  508.059879][T21487] netlink: 'syz.0.4572': attribute type 2 has an invalid length.
[  508.062986][T21487] netlink: 'syz.0.4572': attribute type 2 has an invalid length.
[  508.228735][T21508] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  508.271297][T21512] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  508.437227][T21524] netlink: 'syz.1.4585': attribute type 26 has an invalid length.
[  508.518631][T21528] syzkaller0: entered promiscuous mode
[  508.523317][T21528] syzkaller0: entered allmulticast mode
[  508.599735][T21530] lo speed is unknown, defaulting to 1000
[  508.636919][T21532] x_tables: duplicate underflow at hook 2
[  508.979962][T21546] xt_policy: too many policy elements
[  509.081255][T21555] syzkaller0: entered promiscuous mode
[  509.083618][T21555] syzkaller0: entered allmulticast mode
[  509.941709][T21613] __nla_validate_parse: 11 callbacks suppressed
[  509.941719][T21613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4615'.
[  509.971635][T21615] xt_NFQUEUE: number of total queues is 0
[  510.090762][T21626] pim6reg1: entered promiscuous mode
[  510.093409][T21626] pim6reg1: entered allmulticast mode
[  510.222311][T21631] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4621'.
[  510.241121][T21633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4622'.
[  510.465112][T21653] netlink: 296 bytes leftover after parsing attributes in process `syz.1.4630'.
[  510.472711][T21655] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4629'.
[  510.609736][T21662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4631'.
[  510.613316][T21662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4631'.
[  510.619341][T21662] validate_nla: 3 callbacks suppressed
[  510.619353][T21662] netlink: 'syz.1.4631': attribute type 1 has an invalid length.
[  510.625605][T21662] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4631'.
[  510.831211][T21673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4635'.
[  510.835583][T21673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4635'.
[  511.177960][T21690] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  511.468159][T21715] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  511.683413][T21727] netlink: 'syz.1.4651': attribute type 12 has an invalid length.
[  511.725024][T21734] syzkaller1: tun_chr_ioctl cmd 1074025677
[  511.727342][T21734] syzkaller1: linktype set to 0
[  511.743203][T21736] xt_hashlimit: size too large, truncated to 1048576
[  512.216746][T21766] lo speed is unknown, defaulting to 1000
[  512.315604][T21770] sctp: [Deprecated]: syz.2.4665 (pid 21770) Use of struct sctp_assoc_value in delayed_ack socket option.
[  512.315604][T21770] Use struct sctp_sack_info instead
[  512.330979][T21770] sctp: [Deprecated]: syz.2.4665 (pid 21770) Use of struct sctp_assoc_value in delayed_ack socket option.
[  512.330979][T21770] Use struct sctp_sack_info instead
[  512.502366][T21783] lo speed is unknown, defaulting to 1000
[  512.910431][T21806] xt_NFQUEUE: number of total queues is 0
[  512.921946][T21807] 8021q: adding VLAN 0 to HW filter on device bond10
[  512.981294][T21812] netlink: 'syz.1.4678': attribute type 1 has an invalid length.
[  512.994964][T21812] netlink: 'syz.1.4678': attribute type 3 has an invalid length.
[  513.198156][T21825] sctp: [Deprecated]: syz.1.4682 (pid 21825) Use of int in max_burst socket option.
[  513.198156][T21825] Use struct sctp_assoc_value instead
[  514.256608][T21847] syzkaller0: entered promiscuous mode
[  514.259096][T21847] syzkaller0: entered allmulticast mode
[  514.621389][T21871] macvlan0: entered allmulticast mode
[  514.623379][T21871] hsr0: entered allmulticast mode
[  514.627111][T21871] hsr_slave_0: entered allmulticast mode
[  514.630184][T21871] hsr_slave_1: entered allmulticast mode
[  514.644591][T21869] syzkaller0: entered promiscuous mode
[  514.646396][T21869] syzkaller0: entered allmulticast mode
[  514.780069][T21880] geneve1: Caught tx_queue_len zero misconfig
[  515.027483][T21903] __nla_validate_parse: 13 callbacks suppressed
[  515.027499][T21903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4708'.
[  515.757925][T21921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4715'.
[  515.920173][T21923] hsr0: left allmulticast mode
[  515.921803][T21923] hsr_slave_0: left allmulticast mode
[  515.923551][T21923] hsr_slave_1: left allmulticast mode
[  515.930931][T21923] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4716'.
[  515.988754][T21925] lo speed is unknown, defaulting to 1000
[  516.065540][T21929] xt_NFQUEUE: number of total queues is 0
[  516.887916][T21981] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4732'.
[  516.902333][T21981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4732'.
[  517.014863][T21992] netlink: zone id is out of range
[  517.018670][T21992] netlink: zone id is out of range
[  517.022415][T21992] netlink: zone id is out of range
[  517.029035][T21992] netlink: zone id is out of range
[  517.029094][T21994] dummy0: mtu less than device minimum
[  517.033765][T21992] netlink: zone id is out of range
[  517.037079][T21992] netlink: zone id is out of range
[  517.041033][T21992] netlink: zone id is out of range
[  517.045317][T21992] netlink: zone id is out of range
[  517.048996][T21992] netlink: zone id is out of range
[  517.074309][T21992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4735'.
[  517.082752][T21992] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4735'.
[  517.093744][T21992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4735'.
[  517.280166][T22004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4740'.
[  517.283010][T22004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4740'.
[  517.581105][T22016] netlink: 'syz.0.4741': attribute type 5 has an invalid length.
[  518.212269][T22031] netlink: 'syz.1.4745': attribute type 12 has an invalid length.
[  518.450980][T22051] sctp: [Deprecated]: syz.0.4752 (pid 22051) Use of struct sctp_assoc_value in delayed_ack socket option.
[  518.450980][T22051] Use struct sctp_sack_info instead
[  518.918067][T22097] xt_hashlimit: size too large, truncated to 1048576
[  518.942136][T22098] netlink: 'syz.2.4767': attribute type 1 has an invalid length.
[  519.001983][T22108] xt_NFQUEUE: number of total queues is 0
[  519.090937][T22114] tipc: Enabling of bearer <eth:ipvlan0> rejected, failed to enable media
[  519.783647][T22119] netlink: 'syz.2.4774': attribute type 2 has an invalid length.
[  519.786987][T22119] netlink: 'syz.2.4774': attribute type 2 has an invalid length.
[  520.908913][T22137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  521.029530][T22168] __nla_validate_parse: 9 callbacks suppressed
[  521.029539][T22168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4783'.
[  521.171128][T22182] netlink: 'syz.2.4790': attribute type 1 has an invalid length.
[  521.200453][T22182] bond11: entered promiscuous mode
[  521.203182][T22182] 8021q: adding VLAN 0 to HW filter on device bond11
[  521.234394][T22182] bond11: (slave bridge0): making interface the new active one
[  521.237730][T22182] bridge0: entered promiscuous mode
[  521.241470][T22182] bond11: (slave bridge0): Enslaving as an active interface with an up link
[  521.517093][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4796'.
[  521.579579][T22209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4798'.
[  521.582484][T22209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4798'.
[  521.586618][T22209] netlink: 58 bytes leftover after parsing attributes in process `syz.2.4798'.
[  521.680331][T22213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4799'.
[  522.065281][T22228] netlink: 'syz.2.4803': attribute type 1 has an invalid length.
[  522.068477][T22228] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4803'.
[  522.113327][T22232] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20003
[  522.273428][T22243] netlink: 'syz.2.4809': attribute type 89 has an invalid length.
[  522.429001][T22249] lo speed is unknown, defaulting to 1000
[  523.216885][T22272] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4818'.
[  523.222410][T22272] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4818'.
[  523.230969][T22272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4818'.
[  523.405596][T22289] netlink: 'syz.2.4823': attribute type 1 has an invalid length.
[  523.465840][T22293] xt_hashlimit: size too large, truncated to 1048576
[  523.659168][T22303] bond11: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  523.663482][T22303] bond11 (unregistering): Released all slaves
[  524.283214][T22343] net_ratelimit: 19 callbacks suppressed
[  524.283224][T22343] dummy0: mtu less than device minimum
[  524.402695][T22347] xt_hashlimit: size too large, truncated to 1048576
[  525.271160][T22408] xt_NFQUEUE: number of total queues is 0
[  525.355128][T22412] xt_hashlimit: size too large, truncated to 1048576
[  525.653576][T22436] xt_hashlimit: size too large, truncated to 1048576
[  525.671986][T22428] lo speed is unknown, defaulting to 1000
[  525.797190][T22455] x_tables: duplicate underflow at hook 3
[  526.031699][T22466] netlink: 'syz.2.4870': attribute type 1 has an invalid length.
[  526.034868][T22466] __nla_validate_parse: 11 callbacks suppressed
[  526.034876][T22466] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4870'.
[  526.040168][T22467] netlink: 'syz.2.4870': attribute type 1 has an invalid length.
[  526.042829][T22467] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4870'.
[  526.748086][T22488] netlink: 'syz.0.4879': attribute type 1 has an invalid length.
[  526.751851][T22488] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4879'.
[  526.839036][T22498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4881'.
[  526.842855][T22498] netlink: 'syz.2.4881': attribute type 14 has an invalid length.
[  526.855217][T22498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4881'.
[  526.867392][T22491] sch_tbf: burst 0 is lower than device tunl0 mtu (32769) !
[  526.898969][T22503] xt_hashlimit: size too large, truncated to 1048576
[  527.002334][T22503] xt_CT: You must specify a L4 protocol and not use inversions on it
[  527.017548][T22507] bond11: entered promiscuous mode
[  527.027382][T22507] 8021q: adding VLAN 0 to HW filter on device bond11
[  528.052417][T22569] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4902'.
[  528.131140][T22573] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4903'.
[  528.309703][T22588] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4906'.
[  528.382984][T22597] xt_NFQUEUE: number of total queues is 0
[  528.398031][T22594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4909'.
[  528.417469][T22599] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4911'.
[  528.422595][T22599] xt_hashlimit: size too large, truncated to 1048576
[  528.507694][T22604] netlink: 'syz.0.4912': attribute type 2 has an invalid length.
[  528.511182][T22604] netlink: 'syz.0.4912': attribute type 2 has an invalid length.
[  528.546208][T22606] netlink: 'syz.2.4913': attribute type 1 has an invalid length.
[  528.632152][T22617] xt_CT: You must specify a L4 protocol and not use inversions on it
[  528.695827][T22625] : option downdelay: invalid value (18446744073709547007)
[  528.701918][T22625] : option downdelay: allowed values 0 - 2147483647
[  528.709848][T22625]  (unregistering): Released all slaves
[  528.725078][T22628] xt_hashlimit: size too large, truncated to 1048576
[  529.011327][T22655] xt_hashlimit: size too large, truncated to 1048576
[  529.304295][T22663] netlink: 'syz.0.4932': attribute type 16 has an invalid length.
[  529.307177][T22662] netlink: 'syz.0.4932': attribute type 6 has an invalid length.
[  529.309794][T22662] netlink: 'syz.0.4932': attribute type 5 has an invalid length.
[  529.344232][T22666] sctp: [Deprecated]: syz.0.4933 (pid 22666) Use of int in max_burst socket option.
[  529.344232][T22666] Use struct sctp_assoc_value instead
[  529.811865][T22683] xt_hashlimit: size too large, truncated to 1048576
[  530.616949][T22750] sock: sock_timestamping_bind_phc: sock not bind to device
[  530.619816][T22748] sock: sock_timestamping_bind_phc: sock not bind to device
[  530.746429][T22760] xt_hashlimit: size too large, truncated to 1048576
[  530.885633][T22770] No such timeout policy "syz1"
[  531.000676][T22778] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  531.078519][T22784] xt_CT: You must specify a L4 protocol and not use inversions on it
[  531.128160][T22790] __nla_validate_parse: 21 callbacks suppressed
[  531.128174][T22790] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4966'.
[  531.639495][T22822] netlink: 'syz.0.4974': attribute type 2 has an invalid length.
[  531.649648][T22822] !: entered promiscuous mode
[  531.848289][T22828] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4976'.
[  531.851383][T22828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4976'.
[  532.001542][T22840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4979'.
[  532.132325][T22849] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4983'.
[  532.141514][T22849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4983'.
[  532.178519][T22851] tipc: Enabled bearer <eth:caif0>, priority 14
[  532.181248][T22851] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4984'.
[  532.187246][T22851] 0X: renamed from caif0
[  532.191193][T22851] tipc: Disabling bearer <eth:caif0>
[  532.195631][T22851] 0X: entered allmulticast mode
[  532.197362][T22851] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  532.329424][T22859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4986'.
[  532.357532][T22861] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4987'.
[  532.451490][T22863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4988'.
[  532.455091][T22863] netlink: 'syz.2.4988': attribute type 1 has an invalid length.
[  532.733885][T22884] netlink: 'syz.2.4995': attribute type 1 has an invalid length.
[  532.953059][T22897] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  534.130099][T22978] xt_hashlimit: size too large, truncated to 1048576
[  534.235026][T22984] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  534.253483][T22985] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  534.352834][T23000] netlink: 'syz.2.5021': attribute type 2 has an invalid length.
[  534.360632][T23000] netlink: 'syz.2.5021': attribute type 2 has an invalid length.
[  534.437076][T23006] vlan2: entered allmulticast mode
[  534.438856][T23006] bond0: entered allmulticast mode
[  534.440590][T23006] bond_slave_0: entered allmulticast mode
[  534.572345][T23020] xt_CT: You must specify a L4 protocol and not use inversions on it
[  534.688120][T23028] lo speed is unknown, defaulting to 1000
[  535.677959][T23058] xt_CT: You must specify a L4 protocol and not use inversions on it
[  536.445410][T23057] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  537.823608][T23094] __nla_validate_parse: 59 callbacks suppressed
[  537.823618][T23094] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5048'.
[  537.829020][T23094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5048'.
[  537.869367][T23095] xt_hashlimit: size too large, truncated to 1048576
[  537.948916][T23106] Unsupported ieee802154 address type: 0
[  537.951855][T23106] Unsupported ieee802154 address type: 0
[  538.002780][T23111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5051'.
[  538.006491][T23111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5051'.
[  538.293049][ T5674] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  538.297496][T23140] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  538.345654][T23150] netlink: 'syz.1.5058': attribute type 10 has an invalid length.
[  538.364235][T23151] veth0: entered promiscuous mode
[  538.366904][T23149] batadv_slave_1: entered promiscuous mode
[  538.384393][T23149] batadv_slave_1: left promiscuous mode
[  538.386770][T23149] veth0: left promiscuous mode
[  538.561465][T23166] IPVS: set_ctl: invalid protocol: 51 172.30.1.2:20004
[  538.655599][T23171] netlink: 'syz.1.5062': attribute type 1 has an invalid length.
[  538.658492][T23171] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5062'.
[  539.125242][T23202] netlink: 'syz.0.5065': attribute type 1 has an invalid length.
[  539.128511][T23202] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5065'.
[  539.180414][T23209] xt_CT: You must specify a L4 protocol and not use inversions on it
[  539.424843][T23216] syzkaller0: entered promiscuous mode
[  539.429609][T23216] syzkaller0: entered allmulticast mode
[  539.482029][T23218] xt_CT: You must specify a L4 protocol and not use inversions on it
[  539.519360][T23220] xt_NFQUEUE: number of total queues is 0
[  539.639923][T23230] xt_CT: You must specify a L4 protocol and not use inversions on it
[  539.767819][   T54] block nbd4: Receive control failed (result -32)
[  539.834298][T23251] xt_hashlimit: size too large, truncated to 1048576
[  539.981295][T23259] xt_CT: You must specify a L4 protocol and not use inversions on it
[  540.005323][T23263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5085'.
[  540.039106][T23265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5086'.
[  540.050501][T23265] macsec1: entered promiscuous mode
[  540.052362][T23265] vlan1: entered promiscuous mode
[  540.266050][T23296] netlink: 'syz.0.5092': attribute type 4 has an invalid length.
[  540.311450][T23296] netlink: 'syz.0.5092': attribute type 1 has an invalid length.
[  540.315378][T23296] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5092'.
[  540.347975][T23301] xt_CT: You must specify a L4 protocol and not use inversions on it
[  540.399058][T23305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5095'.
[  540.405595][T23305] netlink: 'syz.0.5095': attribute type 5 has an invalid length.
[  540.408219][T23305] netlink: 'syz.0.5095': attribute type 15 has an invalid length.
[  540.511914][T23311] xt_hashlimit: max too large, truncated to 1048576
[  540.515040][T23311] xt_ecn: cannot match TCP bits for non-tcp packets
[  541.372005][T23337] xt_hashlimit: size too large, truncated to 1048576
[  541.864724][T23383] vlan1: left promiscuous mode
[  542.005774][T23391] netlink: 'syz.2.5119': attribute type 1 has an invalid length.
[  542.068835][T23401] sctp: [Deprecated]: syz.0.5124 (pid 23401) Use of int in max_burst socket option.
[  542.068835][T23401] Use struct sctp_assoc_value instead
[  542.127678][T23410] xt_NFQUEUE: number of total queues is 0
[  542.454026][T23454] xt_NFQUEUE: number of total queues is 0
[  542.569916][T23460] lo speed is unknown, defaulting to 1000
[  543.047736][T23473] xt_hashlimit: size too large, truncated to 1048576
[  543.153368][T23478] __nla_validate_parse: 15 callbacks suppressed
[  543.153383][T23478] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5145'.
[  543.356729][T23492] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5150'.
[  543.359934][T23492] sock: sock_set_timeout: `syz.0.5150' (pid 23492) tries to set negative timeout
[  543.398548][T23494] xt_CT: You must specify a L4 protocol and not use inversions on it
[  543.993600][T23519] syzkaller0: entered promiscuous mode
[  543.997940][T23519] syzkaller0: entered allmulticast mode
[  544.223808][T23528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5162'.
[  544.627921][T23587] xt_hashlimit: size too large, truncated to 1048576
[  544.730333][T23596] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.733251][T23597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  545.091399][T23639] xt_CT: You must specify a L4 protocol and not use inversions on it
[  545.131350][T23644] xt_NFQUEUE: number of total queues is 0
[  545.166699][T23646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5192'.
[  545.170523][T23646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5192'.
[  545.975737][T23662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5194'.
[  546.032285][T23667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5196'.
[  546.115861][T23675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5198'.
[  546.121922][T23665] lo speed is unknown, defaulting to 1000
[  546.198724][T23678] xt_NFQUEUE: number of total queues is 0
[  546.407918][T23686] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5202'.
[  546.411886][T23686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5202'.
[  546.428638][T23686] xt_hashlimit: size too large, truncated to 1048576
[  546.601095][T23696] netlink: 'syz.1.5204': attribute type 5 has an invalid length.
[  546.607708][T23699] xt_CT: You must specify a L4 protocol and not use inversions on it
[  546.901554][T23721] xt_CT: You must specify a L4 protocol and not use inversions on it
[  546.951390][T23729] xt_NFQUEUE: number of total queues is 0
[  546.989665][T23734] xt_CT: You must specify a L4 protocol and not use inversions on it
[  547.163343][T23753] xt_NFQUEUE: number of total queues is 0
[  547.205762][T23757] xt_hl: Unknown Hop Limit match mode: 206
[  547.272345][T23761] pimreg: entered allmulticast mode
[  547.990973][T23799] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  548.069441][T23805] dummy0: mtu less than device minimum
[  550.988939][T23799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  551.098239][T23822] syzkaller0: entered promiscuous mode
[  551.101526][T23822] syzkaller0: entered allmulticast mode
[  551.105538][T23824] netlink: 'syz.1.5241': attribute type 12 has an invalid length.
[  551.259969][T23832] xt_hashlimit: size too large, truncated to 1048576
[  551.431520][T23849] xt_hashlimit: size too large, truncated to 1048576
[  551.658117][T23863] __nla_validate_parse: 4 callbacks suppressed
[  551.658127][T23863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5249'.
[  551.693932][T23863] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5249'.
[  551.816618][T23874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5255'.
[  552.037614][T23890] xfrm0: Caught tx_queue_len zero misconfig
[  552.055014][T23892] xt_NFQUEUE: number of total queues is 0
[  552.577621][T23903] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5262'.
[  552.706176][T23913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5265'.
[  552.722011][T23913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5265'.
[  552.742465][T23913] 8021q: adding VLAN 0 to HW filter on device bond12
[  552.776384][T23916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5266'.
[  552.779230][T23916] openvswitch: netlink: Unknown nsh attribute 0
[  552.886795][T23922] dummy0: mtu less than device minimum
[  553.046517][T23928] lo speed is unknown, defaulting to 1000
[  553.076951][T23931] netlink: 'syz.1.5271': attribute type 13 has an invalid length.
[  553.141982][T23933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5270'.
[  553.767915][T23942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5273'.
[  553.783099][T23942] syzkaller0: entered promiscuous mode
[  553.785049][T23942] syzkaller0: entered allmulticast mode
[  554.118334][T23961] netlink: 'syz.0.5278': attribute type 1 has an invalid length.
[  554.122666][T23961] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5278'.
[  554.720855][T23969] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20001
[  555.108321][T23984] openvswitch: netlink: Multiple metadata blocks provided
[  555.281389][T23996] sock: sock_timestamping_bind_phc: sock not bind to device
[  556.026131][T24007] No such timeout policy "syz0"
[  556.099988][T24012] syzkaller1: tun_chr_ioctl cmd 35108
[  556.553351][T24020] batman_adv: batadv0: Removing interface: batadv_slave_0
[  557.981971][T24039] xt_hashlimit: size too large, truncated to 1048576
[  558.389552][T24067] __nla_validate_parse: 3 callbacks suppressed
[  558.389567][T24067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5307'.
[  558.406551][   T12] tipc: Subscription rejected, illegal request
[  558.416568][T24070] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5310'.
[  558.425802][T24054] netlink: 'syz.2.5307': attribute type 1 has an invalid length.
[  558.435273][T24054] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  558.553639][T24079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5314'.
[  558.557313][T24079] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5314'.
[  558.561123][T24079] netlink: 'syz.1.5314': attribute type 7 has an invalid length.
[  558.566840][T24079] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5314'.
[  558.603143][T24083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5316'.
[  559.090269][T24110] dummy0: mtu less than device minimum
[  559.187252][T24124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5326'.
[  559.344201][T24133] syzkaller1: entered promiscuous mode
[  559.346212][T24133] syzkaller1: entered allmulticast mode
[  559.419066][T24143] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5333'.
[  559.422014][T24143] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5333'.
[  559.450947][T24152] xt_hashlimit: size too large, truncated to 1048576
[  559.456649][T24153] xt_hashlimit: size too large, truncated to 1048576
[  559.486501][T24157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5337'.
[  559.583248][T24161] xt_hashlimit: size too large, truncated to 1048576
[  560.177696][T24217] netlink: 'syz.0.5356': attribute type 2 has an invalid length.
[  560.181431][T24217] netlink: 'syz.0.5356': attribute type 2 has an invalid length.
[  560.186717][T24217] netlink: 'syz.0.5356': attribute type 2 has an invalid length.
[  560.190108][T24217] netlink: 'syz.0.5356': attribute type 2 has an invalid length.
[  560.195315][T24217] netlink: 'syz.0.5356': attribute type 2 has an invalid length.
[  560.198910][T24217] netlink: 'syz.0.5356': attribute type 2 has an invalid length.
[  560.202437][T24217] netlink: 'syz.0.5356': attribute type 2 has an invalid length.
[  560.206774][T24217] netlink: 'syz.0.5356': attribute type 2 has an invalid length.
[  561.016674][T24245] syzkaller1: entered promiscuous mode
[  561.018842][T24245] syzkaller1: entered allmulticast mode
[  561.023414][T24244] pimreg: left allmulticast mode
[  561.265547][T24249] xt_CT: You must specify a L4 protocol and not use inversions on it
[  561.456945][T24263] dummy0: mtu less than device minimum
[  561.785113][T24290] xt_HMARK: spi-set and port-set can't be combined
[  562.897259][T24338] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  562.900028][T24338] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  563.100141][T24359] syzkaller0: entered promiscuous mode
[  563.101923][T24359] syzkaller0: entered allmulticast mode
[  563.357432][T24371] syzkaller0: entered promiscuous mode
[  563.359447][T24371] syzkaller0: entered allmulticast mode
[  563.525603][T24375] sock: sock_set_timeout: `syz.0.5403' (pid 24375) tries to set negative timeout
[  563.760960][T24384] __nla_validate_parse: 20 callbacks suppressed
[  563.760981][T24384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5407'.
[  563.776870][T24384] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  564.009270][T24387] validate_nla: 60 callbacks suppressed
[  564.009284][T24387] netlink: 'syz.0.5408': attribute type 1 has an invalid length.
[  564.092805][T24399] xt_CT: You must specify a L4 protocol and not use inversions on it
[  564.171787][T24406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5413'.
[  564.196548][T24406] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5413'.
[  564.578255][T24443] syzkaller0: entered promiscuous mode
[  564.582066][T24443] syzkaller0: entered allmulticast mode
[  564.653101][T24449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5428'.
[  564.717947][T24455] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5430'.
[  565.114918][T24483] dummy0: mtu less than device minimum
[  565.291199][T24488] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  565.569112][T24507] netlink: 'syz.2.5446': attribute type 1 has an invalid length.
[  565.575405][T24507] netlink: 'syz.2.5446': attribute type 2 has an invalid length.
[  565.727246][T24523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5452'.
[  565.737337][T24523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5452'.
[  565.860871][T24541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5456'.
[  565.903261][T24541] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5456'.
[  565.995493][T24553] xt_CT: You must specify a L4 protocol and not use inversions on it
[  566.087673][T24556] netem: unknown loss type 0
[  566.095790][T24556] netem: change failed
[  566.176562][T24563] netlink: 'syz.0.5462': attribute type 12 has an invalid length.
[  566.842547][T24577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5467'.
[  567.207310][T24596] xt_CT: You must specify a L4 protocol and not use inversions on it
[  567.326007][T24601] netlink: 'syz.0.5475': attribute type 1 has an invalid length.
[  568.216479][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  568.244087][T24609] xt_CT: You must specify a L4 protocol and not use inversions on it
[  568.674359][T24622] xt_ecn: cannot match TCP bits for non-tcp packets
[  568.849044][T24628] netlink: 'syz.2.5485': attribute type 2 has an invalid length.
[  568.854743][T24628] __nla_validate_parse: 4 callbacks suppressed
[  568.854756][T24628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5485'.
[  568.860053][T24628] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5485'.
[  569.626546][T24673] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5499'.
[  569.736976][T24674] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  569.755500][T24674] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  570.151000][T24678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5500'.
[  570.160263][T24678] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5500'.
[  570.249615][T24685] xt_CT: You must specify a L4 protocol and not use inversions on it
[  570.260718][T24687] openvswitch: netlink: Message has 2 unknown bytes.
[  570.618633][T24718] syzkaller0: entered promiscuous mode
[  570.620612][T24718] syzkaller0: entered allmulticast mode
[  570.650716][T24713] netlink: 'syz.2.5510': attribute type 1 has an invalid length.
[  570.761187][T24722] syzkaller0: entered promiscuous mode
[  570.763306][T24722] syzkaller0: entered allmulticast mode
[  570.776052][T24722] netlink: 'syz.0.5512': attribute type 8 has an invalid length.
[  570.891602][T24729] xt_CT: You must specify a L4 protocol and not use inversions on it
[  571.367788][T24743] syzkaller0: entered promiscuous mode
[  571.374570][T24743] syzkaller0: entered allmulticast mode
[  571.565288][T24745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5520'.
[  571.800810][T24759] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5526'.
[  571.857390][T24763] xt_CT: You must specify a L4 protocol and not use inversions on it
[  571.861350][T24765] sock: sock_timestamping_bind_phc: sock not bind to device
[  571.872454][T24762] netlink: 'syz.1.5525': attribute type 1 has an invalid length.
[  571.882896][T24762] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5525'.
[  572.253980][T24791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5535'.
[  572.321714][T24799] x_tables: ip6_tables: mh match: only valid for protocol 135
[  572.389914][T24805] xt_CT: You must specify a L4 protocol and not use inversions on it
[  572.528636][T24819] netlink: 'syz.2.5542': attribute type 1 has an invalid length.
[  572.534516][T24819] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5542'.
[  572.986868][T24855] syzkaller0: entered promiscuous mode
[  572.989260][T24855] syzkaller0: entered allmulticast mode
[  573.398596][T24871] netlink: 'syz.2.5556': attribute type 1 has an invalid length.
[  573.401862][T24872] netlink: 'syz.2.5556': attribute type 1 has an invalid length.
[  573.480207][T24887] xt_CT: You must specify a L4 protocol and not use inversions on it
[  573.636734][T24899] bond11: entered promiscuous mode
[  573.642017][T24899] 8021q: adding VLAN 0 to HW filter on device bond11
[  573.664502][T24899] 8021q: adding VLAN 0 to HW filter on device bond11
[  573.670356][T24899] bond11: (slave sit2): The slave device specified does not support setting the MAC address
[  573.679731][T24899] bond11: (slave sit2): Error -95 calling set_mac_address
[  573.731365][T24916] xt_CT: You must specify a L4 protocol and not use inversions on it
[  573.856785][T24932] netlink: 'syz.1.5573': attribute type 21 has an invalid length.
[  573.868921][ T5857] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  573.871881][T24932] netlink: 'syz.1.5573': attribute type 21 has an invalid length.
[  573.874595][ T5857] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  573.877278][ T5857] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  573.880141][ T5857] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  574.008074][T24941] xt_CT: You must specify a L4 protocol and not use inversions on it
[  574.033186][T24943] __nla_validate_parse: 4 callbacks suppressed
[  574.033199][T24943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5578'.
[  574.499779][T24948] can: request_module (can-proto-4) failed.
[  574.644859][T24963] xt_CT: You must specify a L4 protocol and not use inversions on it
[  574.723184][T24960] lo speed is unknown, defaulting to 1000
[  574.752105][T24969] netlink: 712 bytes leftover after parsing attributes in process `syz.2.5585'.
[  574.757020][T24969] netlink: 5504 bytes leftover after parsing attributes in process `syz.2.5585'.
[  574.760894][T24969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5585'.
[  575.067555][T24980] netlink: 'syz.0.5588': attribute type 1 has an invalid length.
[  575.070357][T24980] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5588'.
[  575.922842][T24994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5591'.
[  578.754560][T25009] bpq0: left allmulticast mode
[  578.766691][T25012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5596'.
[  578.788614][T25008] block nbd5: server does not support multiple connections per device.
[  578.803159][T25008] block nbd5: shutting down sockets
[  578.912595][T25018] netlink: 'syz.0.5597': attribute type 1 has an invalid length.
[  578.916530][T25018] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5597'.
[  579.035941][T25026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5599'.
[  579.636524][T25031] openvswitch: netlink: IP tunnel TTL not specified.
[  579.707053][T25035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5602'.
[  579.836632][T25039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5603'.
[  579.840288][T25039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5603'.
[  579.919044][T25045] x_tables: ip_tables: CT.2 target: invalid size 72 (kernel) != (user) 0
[  580.048539][T25048] netlink: 'syz.0.5607': attribute type 11 has an invalid length.
[  580.215089][T25073] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5614'.
[  580.266069][T25076] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5615'.
[  580.346670][T25076] netlink: 'syz.0.5615': attribute type 13 has an invalid length.
[  580.840706][T25105] syzkaller0: entered promiscuous mode
[  580.846797][T25105] syzkaller0: entered allmulticast mode
[  581.027429][T25113] xt_NFQUEUE: number of total queues is 0
[  581.159415][T25125] 
[  581.160263][T25125] ======================================================
[  581.162447][T25125] WARNING: possible circular locking dependency detected
[  581.164632][T25125] syzkaller #0 Not tainted
[  581.166120][T25125] ------------------------------------------------------
[  581.168317][T25125] syz.2.5627/25125 is trying to acquire lock:
[  581.170239][T25125] ffff8881012d7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430
[  581.173483][T25125] 
[  581.173483][T25125] but task is already holding lock:
[  581.175762][T25125] ffffffff8e7eb6d0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  581.178890][T25125] 
[  581.178890][T25125] which lock already depends on the new lock.
[  581.178890][T25125] 
[  581.182133][T25125] 
[  581.182133][T25125] the existing dependency chain (in reverse order) is:
[  581.184941][T25125] 
[  581.184941][T25125] -> #8 (cpu_hotplug_lock){++++}-{0:0}:
[  581.187335][T25125]        cpus_read_lock+0x42/0x160
[  581.188972][T25125]        static_key_slow_inc+0x12/0x30
[  581.190712][T25125]        setup_udp_tunnel_sock+0x2fd/0x510
[  581.192527][T25125]        l2tp_tunnel_register+0xde2/0x1490
[  581.194374][T25125]        pppol2tp_connect+0x8b7/0x17c0
[  581.196108][T25125]        __sys_connect+0x312/0x450
[  581.197810][T25125]        __x64_sys_connect+0x7a/0x90
[  581.199487][T25125]        do_syscall_64+0x15f/0xf80
[  581.201096][T25125]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.203114][T25125] 
[  581.203114][T25125] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  581.205557][T25125]        lock_sock_nested+0x41/0x100
[  581.207447][T25125]        inet_shutdown+0x6a/0x390
[  581.209245][T25125]        nbd_mark_nsock_dead+0x2e9/0x560
[  581.211205][T25125]        sock_shutdown+0x15e/0x260
[  581.213053][T25125]        nbd_clear_sock+0x24/0x170
[  581.214824][T25125]        nbd_config_put+0x2dd/0x580
[  581.216691][T25125]        nbd_genl_connect+0x19d5/0x1cf0
[  581.218610][T25125]        genl_family_rcv_msg_doit+0x22a/0x330
[  581.220672][T25125]        genl_rcv_msg+0x61c/0x7a0
[  581.222378][T25125]        netlink_rcv_skb+0x232/0x4b0
[  581.224174][T25125]        genl_rcv+0x28/0x40
[  581.225809][T25125]        netlink_unicast+0x75c/0x8e0
[  581.227681][T25125]        netlink_sendmsg+0x813/0xb40
[  581.229544][T25125]        ____sys_sendmsg+0x972/0x9f0
[  581.231423][T25125]        ___sys_sendmsg+0x2a5/0x360
[  581.233230][T25125]        __x64_sys_sendmsg+0x1bd/0x2a0
[  581.235163][T25125]        do_syscall_64+0x15f/0xf80
[  581.236972][T25125]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.239189][T25125] 
[  581.239189][T25125] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  581.241860][T25125]        __mutex_lock+0x1a3/0x1550
[  581.243689][T25125]        nbd_queue_rq+0x37b/0x1100
[  581.245480][T25125]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  581.247640][T25125]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  581.249847][T25125]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  581.251849][T25125]        blk_mq_run_hw_queue+0x348/0x4f0
[  581.253629][T25125]        blk_mq_dispatch_list+0xd16/0xe10
[  581.255460][T25125]        blk_mq_flush_plug_list+0x48d/0x570
[  581.257299][T25125]        __blk_flush_plug+0x3ed/0x4d0
[  581.258984][T25125]        __submit_bio+0x28d/0x580
[  581.260575][T25125]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  581.262545][T25125]        block_read_full_folio+0x599/0x830
[  581.264412][T25125]        filemap_read_folio+0x137/0x3b0
[  581.266120][T25125]        do_read_cache_folio+0x358/0x590
[  581.267917][T25125]        read_part_sector+0xb6/0x2b0
[  581.269646][T25125]        adfspart_check_ICS+0xb1/0x960
[  581.271422][T25125]        bdev_disk_changed+0x817/0x1770
[  581.273287][T25125]        blkdev_get_whole+0x380/0x510
[  581.275192][T25125]        bdev_open+0x31e/0xd30
[  581.277208][T25125]        blkdev_open+0x470/0x610
[  581.279185][T25125]        do_dentry_open+0x785/0x14e0
[  581.281242][T25125]        vfs_open+0x3b/0x340
[  581.282740][T25125]        path_openat+0x2e08/0x3860
[  581.284376][T25125]        do_file_open+0x23e/0x4a0
[  581.285942][T25125]        do_sys_openat2+0x113/0x200
[  581.287586][T25125]        __x64_sys_openat+0x138/0x170
[  581.289320][T25125]        do_syscall_64+0x15f/0xf80
[  581.291098][T25125]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.293103][T25125] 
[  581.293103][T25125] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  581.295313][T25125]        __mutex_lock+0x1a3/0x1550
[  581.296905][T25125]        nbd_queue_rq+0xc6/0x1100
[  581.298534][T25125]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  581.300410][T25125]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  581.302563][T25125]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  581.304632][T25125]        blk_mq_run_hw_queue+0x348/0x4f0
[  581.306375][T25125]        blk_mq_dispatch_list+0xd16/0xe10
[  581.308136][T25125]        blk_mq_flush_plug_list+0x48d/0x570
[  581.309979][T25125]        __blk_flush_plug+0x3ed/0x4d0
[  581.311725][T25125]        __submit_bio+0x28d/0x580
[  581.313312][T25125]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  581.315229][T25125]        block_read_full_folio+0x599/0x830
[  581.317032][T25125]        filemap_read_folio+0x137/0x3b0
[  581.318783][T25125]        do_read_cache_folio+0x358/0x590
[  581.320562][T25125]        read_part_sector+0xb6/0x2b0
[  581.322206][T25125]        adfspart_check_ICS+0xb1/0x960
[  581.323924][T25125]        bdev_disk_changed+0x817/0x1770
[  581.325653][T25125]        blkdev_get_whole+0x380/0x510
[  581.327312][T25125]        bdev_open+0x31e/0xd30
[  581.328804][T25125]        blkdev_open+0x470/0x610
[  581.330397][T25125]        do_dentry_open+0x785/0x14e0
[  581.332061][T25125]        vfs_open+0x3b/0x340
[  581.333541][T25125]        path_openat+0x2e08/0x3860
[  581.335120][T25125]        do_file_open+0x23e/0x4a0
[  581.336688][T25125]        do_sys_openat2+0x113/0x200
[  581.338304][T25125]        __x64_sys_openat+0x138/0x170
[  581.339991][T25125]        do_syscall_64+0x15f/0xf80
[  581.341680][T25125]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.343710][T25125] 
[  581.343710][T25125] -> #4 (set->srcu){.+.+}-{0:0}:
[  581.345972][T25125]        __synchronize_srcu+0xca/0x300
[  581.347682][T25125]        elevator_switch+0x1e8/0x7a0
[  581.349325][T25125]        elevator_change+0x2cc/0x450
[  581.351016][T25125]        elevator_set_default+0x36c/0x430
[  581.352827][T25125]        blk_register_queue+0x3e9/0x4e0
[  581.354584][T25125]        __add_disk+0x677/0xd50
[  581.356107][T25125]        add_disk_fwnode+0xfb/0x480
[  581.357738][T25125]        nbd_dev_add+0x72c/0xb50
[  581.359246][T25125]        nbd_init+0x168/0x1f0
[  581.360746][T25125]        do_one_initcall+0x250/0x870
[  581.362411][T25125]        do_initcall_level+0x104/0x190
[  581.364128][T25125]        do_initcalls+0x59/0xa0
[  581.365659][T25125]        kernel_init_freeable+0x2a6/0x3e0
[  581.367413][T25125]        kernel_init+0x1d/0x1d0
[  581.368914][T25125]        ret_from_fork+0x514/0xb70
[  581.370541][T25125]        ret_from_fork_asm+0x1a/0x30
[  581.372265][T25125] 
[  581.372265][T25125] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  581.374697][T25125]        __mutex_lock+0x1a3/0x1550
[  581.376298][T25125]        elevator_change+0x1b3/0x450
[  581.377974][T25125]        elevator_set_none+0xb5/0x140
[  581.379655][T25125]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  581.381636][T25125]        nbd_start_device+0x17f/0xb10
[  581.383298][T25125]        nbd_genl_connect+0x165b/0x1cf0
[  581.385045][T25125]        genl_family_rcv_msg_doit+0x22a/0x330
[  581.386897][T25125]        genl_rcv_msg+0x61c/0x7a0
[  581.388402][T25125]        netlink_rcv_skb+0x232/0x4b0
[  581.390004][T25125]        genl_rcv+0x28/0x40
[  581.391391][T25125]        netlink_unicast+0x75c/0x8e0
[  581.393004][T25125]        netlink_sendmsg+0x813/0xb40
[  581.394657][T25125]        ____sys_sendmsg+0x972/0x9f0
[  581.396284][T25125]        ___sys_sendmsg+0x2a5/0x360
[  581.397902][T25125]        __x64_sys_sendmsg+0x1bd/0x2a0
[  581.399616][T25125]        do_syscall_64+0x15f/0xf80
[  581.401207][T25125]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.403216][T25125] 
[  581.403216][T25125] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  581.405908][T25125]        blk_alloc_queue+0x546/0x680
[  581.407560][T25125]        __blk_mq_alloc_disk+0x197/0x390
[  581.409296][T25125]        nbd_dev_add+0x499/0xb50
[  581.410899][T25125]        nbd_init+0x168/0x1f0
[  581.412402][T25125]        do_one_initcall+0x250/0x870
[  581.413987][T25125]        do_initcall_level+0x104/0x190
[  581.415652][T25125]        do_initcalls+0x59/0xa0
[  581.417171][T25125]        kernel_init_freeable+0x2a6/0x3e0
[  581.418952][T25125]        kernel_init+0x1d/0x1d0
[  581.420550][T25125]        ret_from_fork+0x514/0xb70
[  581.422179][T25125]        ret_from_fork_asm+0x1a/0x30
[  581.423872][T25125] 
[  581.423872][T25125] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  581.426141][T25125]        fs_reclaim_acquire+0x71/0x100
[  581.427839][T25125]        kmem_cache_alloc_noprof+0x40/0x650
[  581.429704][T25125]        __kernfs_iattrs+0xdf/0x320
[  581.431383][T25125]        kernfs_iop_setattr+0xea/0x3f0
[  581.433128][T25125]        notify_change+0xc1a/0xf40
[  581.434773][T25125]        do_truncate+0x1c2/0x250
[  581.436320][T25125]        path_openat+0x2f89/0x3860
[  581.437890][T25125]        do_file_open+0x23e/0x4a0
[  581.439477][T25125]        do_sys_openat2+0x113/0x200
[  581.441113][T25125]        __x64_sys_openat+0x138/0x170
[  581.442828][T25125]        do_syscall_64+0x15f/0xf80
[  581.444469][T25125]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.446457][T25125] 
[  581.446457][T25125] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  581.449092][T25125]        __lock_acquire+0x15a5/0x2cf0
[  581.450804][T25125]        lock_acquire+0x106/0x350
[  581.452431][T25125]        down_read+0x47/0x2e0
[  581.453912][T25125]        kernfs_iop_permission+0x7f/0x430
[  581.455752][T25125]        inode_permission+0x46f/0x5f0
[  581.457444][T25125]        cgroup_attach_permissions+0x286/0x9e0
[  581.459384][T25125]        __cgroup_procs_write+0x23a/0x300
[  581.461164][T25125]        cgroup_threads_write+0x24/0x50
[  581.462878][T25125]        cgroup_file_write+0x331/0x8f0
[  581.464608][T25125]        kernfs_fop_write_iter+0x3af/0x540
[  581.466434][T25125]        vfs_write+0x61d/0xb90
[  581.467916][T25125]        ksys_write+0x150/0x270
[  581.469418][T25125]        do_syscall_64+0x15f/0xf80
[  581.471050][T25125]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.473107][T25125] 
[  581.473107][T25125] other info that might help us debug this:
[  581.473107][T25125] 
[  581.476283][T25125] Chain exists of:
[  581.476283][T25125]   &root->kernfs_iattr_rwsem --> sk_lock-AF_INET6 --> cpu_hotplug_lock
[  581.476283][T25125] 
[  581.480578][T25125]  Possible unsafe locking scenario:
[  581.480578][T25125] 
[  581.482923][T25125]        CPU0                    CPU1
[  581.484627][T25125]        ----                    ----
[  581.486226][T25125]   rlock(cpu_hotplug_lock);
[  581.487661][T25125]                                lock(sk_lock-AF_INET6);
[  581.489777][T25125]                                lock(cpu_hotplug_lock);
[  581.492006][T25125]   rlock(&root->kernfs_iattr_rwsem);
[  581.493706][T25125] 
[  581.493706][T25125]  *** DEADLOCK ***
[  581.493706][T25125] 
[  581.496163][T25125] 4 locks held by syz.2.5627/25125:
[  581.497797][T25125]  #0: ffff88816dfa6410 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x227/0xb90
[  581.500606][T25125]  #1: ffff88810a596080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540
[  581.503622][T25125]  #2: ffffffff8e99c3a0 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230
[  581.506621][T25125]  #3: ffffffff8e7eb6d0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  581.509865][T25125] 
[  581.509865][T25125] stack backtrace:
[  581.511746][T25125] CPU: 0 UID: 0 PID: 25125 Comm: syz.2.5627 Not tainted syzkaller #0 PREEMPT(full) 
[  581.511758][T25125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  581.511766][T25125] Call Trace:
[  581.511772][T25125]  <TASK>
[  581.511779][T25125]  dump_stack_lvl+0xe8/0x150
[  581.511793][T25125]  print_circular_bug+0x2e1/0x300
[  581.511805][T25125]  check_noncircular+0x12e/0x150
[  581.511816][T25125]  __lock_acquire+0x15a5/0x2cf0
[  581.511834][T25125]  ? kernfs_iop_permission+0x7f/0x430
[  581.511844][T25125]  lock_acquire+0x106/0x350
[  581.511855][T25125]  ? kernfs_iop_permission+0x7f/0x430
[  581.511863][T25125]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  581.511871][T25125]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  581.511878][T25125]  down_read+0x47/0x2e0
[  581.511889][T25125]  ? kernfs_iop_permission+0x7f/0x430
[  581.511896][T25125]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  581.511903][T25125]  kernfs_iop_permission+0x7f/0x430
[  581.511911][T25125]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  581.511918][T25125]  inode_permission+0x46f/0x5f0
[  581.511927][T25125]  cgroup_attach_permissions+0x286/0x9e0
[  581.511939][T25125]  __cgroup_procs_write+0x23a/0x300
[  581.511949][T25125]  cgroup_threads_write+0x24/0x50
[  581.511958][T25125]  ? __pfx_cgroup_threads_write+0x10/0x10
[  581.511966][T25125]  cgroup_file_write+0x331/0x8f0
[  581.511975][T25125]  ? __pfx_cgroup_file_write+0x10/0x10
[  581.511985][T25125]  ? __pfx_cgroup_file_write+0x10/0x10
[  581.511992][T25125]  kernfs_fop_write_iter+0x3af/0x540
[  581.512003][T25125]  vfs_write+0x61d/0xb90
[  581.512014][T25125]  ? __pfx_vfs_write+0x10/0x10
[  581.512023][T25125]  ? __pfx_do_futex+0x10/0x10
[  581.512029][T25125]  ? kmem_cache_free+0x182/0x650
[  581.512042][T25125]  ksys_write+0x150/0x270
[  581.512050][T25125]  ? __pfx_ksys_write+0x10/0x10
[  581.512060][T25125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.512068][T25125]  do_syscall_64+0x15f/0xf80
[  581.512077][T25125]  ? trace_irq_disable+0x3b/0x140
[  581.512087][T25125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  581.512094][T25125] RIP: 0033:0x7fa9efd9c819
[  581.512103][T25125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  581.512110][T25125] RSP: 002b:00007fa9f0bb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  581.512119][T25125] RAX: ffffffffffffffda RBX: 00007fa9f0016090 RCX: 00007fa9efd9c819
[  581.512124][T25125] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 000000000000000b
[  581.512129][T25125] RBP: 00007fa9efe32c91 R08: 0000000000000000 R09: 0000000000000000
[  581.512133][T25125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  581.512138][T25125] R13: 00007fa9f0016128 R14: 00007fa9f0016090 R15: 00007ffd5e68c488
[  581.512146][T25125]  </TASK>
