last executing test programs:

1.289854326s ago: executing program 2 (id=6343):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r1 = socket(0x80000000000000a, 0x2, 0x0)
ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r1}, 0x20)
getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000000)=<r5=>0x0, &(0x7f00000000c0)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000200)={'ip6gre0\x00', r5, 0x29, 0x9, 0xb5, 0x0, 0x2, @loopback, @local, 0x10, 0x20, 0x5, 0xffff}})
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
pipe(&(0x7f00000001c0))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.223865469s ago: executing program 0 (id=6347):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r0}, 0x20)
close(0x3)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r2, 0x40043d0d, &(0x7f00000020c0)={0x25, 0x4})

1.138921621s ago: executing program 0 (id=6348):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000000), 0xe)
listen(r0, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4)

1.138403302s ago: executing program 0 (id=6349):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x2090}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @local}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x4}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x4c}, 0x1, 0x2}, 0x4050)
r2 = socket(0x80000000000000a, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000140), 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r2}, 0x20)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
pipe(&(0x7f00000001c0))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

418.346493ms ago: executing program 2 (id=6355):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f0000000000), 0xe)
listen(r0, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000640), &(0x7f0000000680)=0x4)

417.172096ms ago: executing program 2 (id=6357):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f00000001c0)={0x2a, 0xffffffffffffffff}, 0xc)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000240)="476a94", 0x3}], 0x1)
r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@bcast, @bcast, @netrom, @netrom, @bcast, @null, @bcast, @netrom]}, &(0x7f00000000c0)=0x48, 0x0)
getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000100)=0x1, &(0x7f0000000180)=0x4)
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x1, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4000000)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close(0x3)

416.939737ms ago: executing program 1 (id=6358):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @mcast2}]}}}]}, 0x54}}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c0002800600", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r3 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x1c, 0x800)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=<r4=>0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e23, 0xf57d, 0x2, 0xa0, 0x80, 0x6, r2, r4}, {0x5, 0xc3cf, 0x10, 0x5, 0x200, 0x59eb, 0x7, 0x81c00000000000}, {0xa, 0x244, 0x5d8f, 0x9}, 0x1, 0x80000001, 0x2, 0x1, 0x1, 0x3}, {{@in=@loopback, 0x4d6, 0xff}, 0x2, @in=@empty, 0x3503, 0x0, 0x1, 0x1, 0xffffffff, 0x4, 0xfff}}, 0xe8)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r6 = socket(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) (async)
ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000040)={{0x1000, 0x800}, {0x9, 0x3fc000}, 0x3, 0x1})

349.648287ms ago: executing program 2 (id=6359):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$phonet(0x23, 0x2, 0x1)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000e00)='wlan0\x00', 0x10)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001a40)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@dev={0xac, 0x14, 0x14, 0x1}, @remote, 0xff, 0x0, 0x3, 0x9, {@mac=@remote, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x401, 0x6, 0x0, 0x400, 0x8, 'geneve0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x0, 0x8b999478824e41}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @private=0xa010102, 0x4}}}, {{@arp={@loopback, @private=0xa010101, 0xff000000, 0xff, 0xe, 0x1, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x3ff, 0x28, 0x8000, 0x5, 0xffff, 0x48a3, 'xfrm0\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0xc0}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x5, 0x1}}}, {{@arp={@rand_addr=0x64010101, @broadcast, 0xff, 0xff, 0x9, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x2, 0x39, 0x3137, 0x3, 0x1, 0x2, 'veth0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0xa}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000080)=0x7)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl(r3, 0x4b, &(0x7f0000000200)="f85250242f69a669efa12f10804f5a7ba95128c1382931e6de4bd614a081da59befed83f2913d7330989ffefe1efbb8728bafca9cb041c8cb99c59fc1b1a8116d978bad2e7a11c698ae9ab6d9d588d21b04f6aa95347b8154974fc29cb6c334b76b261e9817f03c8b2378227d5cb07c102bf0137a8e12a069e57e279d6e451ec91b84c215df710c2874ac8db8423682b2876159acb")
socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000fc0)={'geneve1\x00', &(0x7f0000000f40)=@ethtool_dump={0x40, 0x4, 0x2}})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000037c0)=ANY=[@ANYBLOB="7c1700002f00010000000000fcdbdf256417f2800c00060008ac0f000010000014000100fc00000000000000000000000000000008004400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5], 0x177c}], 0x1, 0x0, 0x0, 0x1}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r7, 0x0, r9, 0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000000)=0xdce, 0x4)
vmsplice(r8, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000000000000000001400040000000000000000000000ffffac1414000c00028005000100000000003c0002802c000180140003000000000000000000000000000000000014000400fc0200000000000000000000000000000c00028005000100000000000800074000"], 0xa0}, 0x1, 0xfffff000}, 0x0)
write(r6, &(0x7f00000002c0)="8ef82f", 0x3)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', <r13=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0xffffffffffffffa7, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0xffffffffffffffa7, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

348.991166ms ago: executing program 1 (id=6360):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0xfeca)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f00000000c0)={'\x00', 0x8, 0x2, 0x8})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xe9e, 0x4)
sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x40c0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40401820}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r3, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10001}, @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x279}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x86}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x401}]}, 0x9c}}, 0x24004014)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0400001800dd8d0000000000000000020000000000000600000000060015000100000008041680040401"], 0x42c}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x110, 0x60030000, {0x0, 0xff000000}, [@common=@hbh={{0x48}, {0x6, 0x7, 0x0, [0x4, 0x5, 0x1, 0x1ff, 0x3, 0x3, 0x219, 0xf, 0x3, 0x6, 0x4, 0x0, 0x5, 0x4, 0x9, 0xa], 0xc}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x480000, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r6, 0xc0403d11, &(0x7f00000020c0)={0x25, 0x4})

276.833307ms ago: executing program 1 (id=6361):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f00000000c0)={0x12})

275.700921ms ago: executing program 0 (id=6362):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=@newtaction={0x64, 0x30, 0x871a15abc695f91d, 0x0, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x988d, 0x2, 0x7, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r1, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xa, 0x62}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0xf5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0xe6f6a4d06a1a25b0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r3, 0xc4c03d09, &(0x7f00000000c0)={0x12})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x73a5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=@newtaction={0x64, 0x30, 0x871a15abc695f91d, 0x0, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x988d, 0x2, 0x7, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, r1, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xa, 0x62}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0xf5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0xe6f6a4d06a1a25b0) (async)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
ioctl$PTP_SYS_OFFSET_EXTENDED(r3, 0xc4c03d09, &(0x7f00000000c0)={0x12}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) (async)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r5, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x73a5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) (async)

275.325743ms ago: executing program 1 (id=6363):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x4, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000000)={{0x1007fff, 0x800}, {0x1007fff, 0x9}, 0x7, 0x5})

209.971714ms ago: executing program 0 (id=6364):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) (async)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0xc, 0x0, 0x5, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0}, 0x40)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x64}, [@ldst={0x1, 0x0, 0x6, 0x7, 0x3, 0xffffffffffffffe0, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @generic={0xff, 0x5, 0xf, 0x8, 0x5}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0xc3, &(0x7f0000000340)=""/195, 0x40f00, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0xe, 0x1, 0x637c}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0x1, 0x3}], 0x10, 0x4}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x25, 0x8, @val=@netkit={@void, @value=r4, @void, @void, r3}}, 0x1c) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, 0x0, 0x25, 0x8, @val=@netkit={@void, @value=r4, @void, @void, r3}}, 0x1c)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d0e, &(0x7f00000020c0)={0x3})

209.757802ms ago: executing program 1 (id=6365):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff000)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="2f86000002000200", 0x13)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000180)=ANY=[], 0x8)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x43403d0e, &(0x7f0000000000)={0x3})

207.359997ms ago: executing program 2 (id=6366):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x25, &(0x7f0000000340), 0x14)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

206.945717ms ago: executing program 0 (id=6367):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
unshare(0xe060400)
r0 = gettid()
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0)
sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/ipc\x00')
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
close(r3)
socketpair(0x10, 0x2, 0x7f, &(0x7f0000000340)={<r4=>0xffffffffffffffff})
sendmsg$netlink(r4, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = socket(0x10, 0xa, 0x3)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000007000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r2)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r10 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r10, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="d6", 0x1}], 0x1}}], 0x1, 0xc010)

139.797911ms ago: executing program 2 (id=6368):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x78, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x78}}, 0x20000000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r5, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8)
getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x51483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x26}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)
pselect6(0x40, &(0x7f0000000a80)={0x5, 0x5, 0x0, 0x100000000, 0x6, 0x1, 0x3, 0xfffffffffffffffd}, &(0x7f00000003c0)={0xdc, 0xa, 0x100000002ddd, 0x3, 0x1000000000f, 0x7fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=6369):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002400)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)='_', 0x1}], 0x1}}], 0x2, 0x20040140)
write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r2, 0x43403d0e, &(0x7f00000020c0)={0x25, 0x4})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002400)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000000)="7f", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e21, 0x100, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)='_', 0x1}], 0x1}}], 0x2, 0x20040140) (async)
write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
ioctl$PTP_EXTTS_REQUEST2(r2, 0x43403d0e, &(0x7f00000020c0)={0x25, 0x4}) (async)

kernel console output (not intermixed with test programs):

 after parsing attributes in process `syz.2.2876'.
[  465.026074][T15082] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2877'.
[  465.040720][T15082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2877'.
[  465.133038][T15093] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2882'.
[  465.156448][T15097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2883'.
[  465.159295][T15097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2883'.
[  465.316862][T15117] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2891'.
[  465.322404][   T56] Bluetooth: hci2: command 0x0405 tx timeout
[  465.342497][T15119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2892'.
[  465.420640][T15133] netlink: 'syz.1.2896': attribute type 21 has an invalid length.
[  465.424295][T15133] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2896'.
[  465.457442][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2898'.
[  466.373359][T15185] bond0: option arp_validate: invalid value (55553)
[  466.381626][ T5887] bond0: (slave team0): interface is now down
[  466.395737][ T5887] bond0: now running without any active interface!
[  467.093779][T15257] netlink: 'syz.1.2938': attribute type 21 has an invalid length.
[  467.096519][T15257] netlink: 'syz.1.2938': attribute type 4 has an invalid length.
[  467.099698][T15257] netlink: zone id is out of range
[  467.101354][T15257] netlink: zone id is out of range
[  467.104234][T15257] netlink: zone id is out of range
[  467.106512][T15257] netlink: zone id is out of range
[  467.108101][T15257] netlink: zone id is out of range
[  467.109763][T15257] netlink: get zone limit has 4 unknown bytes
[  467.190999][T15267] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  467.194362][T15267] syzkaller0: entered promiscuous mode
[  467.196243][T15267] syzkaller0: entered allmulticast mode
[  467.200497][T15266] tipc: Resetting bearer <eth:syzkaller0>
[  467.216621][T15266] tipc: Disabling bearer <eth:syzkaller0>
[  467.361687][T15280] netlink: 'syz.1.2945': attribute type 1 has an invalid length.
[  467.392930][T15280] 8021q: adding VLAN 0 to HW filter on device bond3
[  467.409812][T15278] bond3: (slave veth13): Enslaving as an active interface with a down link
[  467.414741][T15278] bond3: entered allmulticast mode
[  467.510811][T15295] netlink: 'syz.1.2951': attribute type 39 has an invalid length.
[  467.783012][T15334] Bluetooth: MGMT ver 1.23
[  467.784455][T15334] Bluetooth: hci1: too big key_count value 29096
[  467.948196][T15352] bond7: entered promiscuous mode
[  467.950059][T15352] 8021q: adding VLAN 0 to HW filter on device bond7
[  467.966518][T15352] 8021q: adding VLAN 0 to HW filter on device bond8
[  467.969298][T15352] bond8: entered promiscuous mode
[  467.971667][T15352] bond7: (slave bond8): Enslaving as an active interface with an up link
[  468.701355][T15372] hsr_slave_0: left promiscuous mode
[  468.705745][T15372] hsr_slave_1: left promiscuous mode
[  468.921120][T15395] netlink: 'syz.2.2984': attribute type 33 has an invalid length.
[  468.936835][T15395] wg1 speed is unknown, defaulting to 1000
[  469.030461][T15395] wg1 speed is unknown, defaulting to 1000
[  469.355034][T15426] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  472.644185][T15448] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  472.715555][T15459] __nla_validate_parse: 48 callbacks suppressed
[  472.715565][T15459] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3001'.
[  472.848806][T15460] netlink: 'syz.2.3002': attribute type 30 has an invalid length.
[  472.872470][T15460] bond7: option arp_missed_max: invalid value (0)
[  472.874765][T15460] bond7: option arp_missed_max: allowed values 1 - 255
[  472.879640][T15460] bond7 (unregistering): Released all slaves
[  472.973234][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3009'.
[  472.976509][T15478] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  473.549692][T15497] geneve2: entered promiscuous mode
[  473.552403][ T5662] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  473.554900][ T5662] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  473.579764][ T5662] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  473.589025][ T5662] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  473.598137][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3018'.
[  474.039697][T15532] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:0
[  474.053501][T15532] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD
[  474.103628][T15533] wg1 speed is unknown, defaulting to 1000
[  474.305231][T15536] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  474.410057][T15543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3029'.
[  474.426842][T15543] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3029'.
[  474.475484][T15545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3030'.
[  474.508318][T15547] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3031'.
[  474.523664][T15533] wg1 speed is unknown, defaulting to 1000
[  474.901355][T15576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3039'.
[  475.018967][T15585] netlink: 'syz.2.3038': attribute type 1 has an invalid length.
[  475.035627][T15585] bond7 (unregistering): Released all slaves
[  475.570218][T15592] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3042'.
[  475.634485][T15594] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3044'.
[  476.291729][T15613] xt_SECMARK: invalid mode: 0
[  476.998845][T15643] --map-set only usable from mangle table
[  477.168840][T15679] x_tables: duplicate underflow at hook 1
[  478.012886][T15692] __nla_validate_parse: 4 callbacks suppressed
[  478.012898][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3072'.
[  478.022505][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3072'.
[  478.111634][T15692] veth0: mtu less than device minimum
[  478.153799][T15718] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3078'.
[  478.244894][T15734] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3084'.
[  478.248452][T15734] team0: No ports can be present during mode change
[  478.336674][T15746] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3086'.
[  479.248553][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3088'.
[  479.252345][T15758] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  479.296251][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3091'.
[  479.299027][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3091'.
[  479.386496][T15775] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  479.390397][T15775] syzkaller0: entered promiscuous mode
[  479.395560][T15775] syzkaller0: entered allmulticast mode
[  479.406379][T15781] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3097'.
[  479.427692][T15775] tipc: Resetting bearer <eth:syzkaller0>
[  479.437181][T15774] tipc: Resetting bearer <eth:syzkaller0>
[  479.448819][T15774] tipc: Disabling bearer <eth:syzkaller0>
[  479.472799][T15786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3099'.
[  479.487782][T15788] netlink: 'syz.1.3100': attribute type 62 has an invalid length.
[  479.720006][T15808] netlink: 'syz.0.3105': attribute type 3 has an invalid length.
[  479.727675][T15811] netlink: 'syz.1.3108': attribute type 15 has an invalid length.
[  479.735902][T15811] netlink: 'syz.1.3108': attribute type 15 has an invalid length.
[  479.736116][ T5662] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0
[  479.742086][ T5662] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0
[  479.754019][ T5662] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0
[  479.757887][ T5662] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0
[  479.777434][T15808] dvmrp0: entered allmulticast mode
[  479.853373][T15818] 0: reclassify loop, rule prio 0, protocol 800
[  479.976231][T15831] openvswitch: netlink: Flow key attr not present in new flow.
[  480.090109][T15843] netlink: 'syz.0.3121': attribute type 1 has an invalid length.
[  480.098670][T15841] Set syz0 is full, maxelem 0 reached
[  480.686537][T15872] xt_l2tp: unknown flags: 51
[  480.897385][T15896] wg1 speed is unknown, defaulting to 1000
[  480.993370][T15906] syzkaller0: entered promiscuous mode
[  481.077590][T15906] syzkaller0: entered allmulticast mode
[  481.080218][T15896] wg1 speed is unknown, defaulting to 1000
[  481.457637][T15940] veth0: entered promiscuous mode
[  481.548445][T15942] wg1 speed is unknown, defaulting to 1000
[  481.705837][T15942] wg1 speed is unknown, defaulting to 1000
[  481.822129][T15967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  481.865140][T15972] netlink: 'syz.1.3158': attribute type 1 has an invalid length.
[  481.980270][T15978] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:0
[  482.003371][T15978] wg1 speed is unknown, defaulting to 1000
[  482.090830][T15982] syzkaller0: entered promiscuous mode
[  482.093544][T15982] syzkaller0: entered allmulticast mode
[  482.111504][T15978] wg1 speed is unknown, defaulting to 1000
[  483.688458][T16035] batadv_slave_1: entered promiscuous mode
[  483.695060][T16034] batadv_slave_1: left promiscuous mode
[  483.779654][T16044] netlink: 'syz.0.3180': attribute type 1 has an invalid length.
[  483.782004][T16044] __nla_validate_parse: 15 callbacks suppressed
[  483.782016][T16044] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3180'.
[  483.790003][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3180'.
[  483.909983][T16055] netlink: 'syz.0.3183': attribute type 13 has an invalid length.
[  483.917486][T16055] gretap0: refused to change device tx_queue_len
[  483.919410][T16055] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  484.144009][T16095] netlink: 'syz.0.3190': attribute type 83 has an invalid length.
[  484.471803][T16118] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3201'.
[  484.475232][T16118] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3201'.
[  484.659654][T16130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3205'.
[  484.824870][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3209'.
[  485.019103][T16162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3217'.
[  485.075849][T16170] openvswitch: netlink: Message has 4 unknown bytes.
[  485.099128][T16174] pimreg: entered allmulticast mode
[  485.101516][T16174] pimreg: left allmulticast mode
[  485.302502][T16197] wg1 speed is unknown, defaulting to 1000
[  485.327658][T16199] bridge0: port 3(macvtap1) entered blocking state
[  485.329914][T16199] bridge0: port 3(macvtap1) entered disabled state
[  485.332576][T16199] macvtap1: entered allmulticast mode
[  485.340646][T16199] macvtap1: left allmulticast mode
[  485.496694][T16197] wg1 speed is unknown, defaulting to 1000
[  485.870644][T16231] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  485.899339][T16234] sctp: [Deprecated]: syz.1.3237 (pid 16234) Use of struct sctp_assoc_value in delayed_ack socket option.
[  485.899339][T16234] Use struct sctp_sack_info instead
[  486.129472][T16252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3243'.
[  486.134875][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3243'.
[  486.137865][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3243'.
[  486.321006][T16264] xt_time: unknown flags 0xf4
[  486.433774][T16271] wg1 speed is unknown, defaulting to 1000
[  486.517614][T16271] wg1 speed is unknown, defaulting to 1000
[  486.612771][T16278] syzkaller1: entered promiscuous mode
[  486.615464][T16278] syzkaller1: entered allmulticast mode
[  486.629564][T16278] xt_limit: Overflow, try lower: 271964/0
[  486.715482][T16280] netlink: 'syz.1.3253': attribute type 2 has an invalid length.
[  487.174047][T16323] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  487.307773][T16332] netlink: 'syz.1.3273': attribute type 10 has an invalid length.
[  487.581967][T16355] netlink: 'syz.0.3282': attribute type 5 has an invalid length.
[  487.673729][T16376] netlink: 'syz.0.3290': attribute type 4 has an invalid length.
[  487.762864][T16388] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  487.870075][T16396] wg1 speed is unknown, defaulting to 1000
[  488.005437][T16396] wg1 speed is unknown, defaulting to 1000
[  488.474279][T16449] netlink: 'syz.0.3314': attribute type 13 has an invalid length.
[  488.743898][T16479] netlink: 'syz.2.3325': attribute type 1 has an invalid length.
[  488.751621][T16480] netlink: 'syz.2.3325': attribute type 1 has an invalid length.
[  488.769077][T16478] netlink: 'syz.1.3324': attribute type 1 has an invalid length.
[  488.772806][T16478] netlink: 'syz.1.3324': attribute type 2 has an invalid length.
[  488.930441][T16498] __nla_validate_parse: 13 callbacks suppressed
[  488.930452][T16498] netlink: 356 bytes leftover after parsing attributes in process `syz.1.3331'.
[  488.952512][T16500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3330'.
[  488.955423][T16495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3330'.
[  489.005675][T16506] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3333'.
[  489.009002][T16506] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3333'.
[  489.014827][T16506] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3333'.
[  489.441470][T16560] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3352'.
[  489.454332][T16560] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3352'.
[  489.457574][T16560] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3352'.
[  489.460366][T16560] netlink: 'syz.0.3352': attribute type 5 has an invalid length.
[  489.463159][T16560] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3352'.
[  490.909684][T16666] bond9: entered promiscuous mode
[  490.911562][T16666] 8021q: adding VLAN 0 to HW filter on device bond9
[  491.806749][T16787] validate_nla: 11 callbacks suppressed
[  491.806764][T16787] netlink: 'syz.2.3405': attribute type 6 has an invalid length.
[  491.974709][T16792] siw: device registration error -23
[  491.982902][T16792] xt_TCPMSS: Only works on TCP SYN packets
[  492.158271][T16795] netlink: 'syz.0.3408': attribute type 10 has an invalid length.
[  492.166599][T16795] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  492.607695][T16816] batadv_slave_1: entered promiscuous mode
[  492.940408][T16854] ip6gre0: entered promiscuous mode
[  492.942480][T16854] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  493.377980][T16815] batadv_slave_1: left promiscuous mode
[  493.380627][T16841] netlink: 'syz.2.3419': attribute type 23 has an invalid length.
[  493.613680][T16890] netlink: 'syz.2.3434': attribute type 3 has an invalid length.
[  493.930763][T16927] geneve4: entered promiscuous mode
[  493.932700][T16927] geneve4: entered allmulticast mode
[  493.969644][T16927] geneve4: entered promiscuous mode
[  493.971283][T16927] geneve4: entered allmulticast mode
[  494.020717][T16927] geneve4: entered promiscuous mode
[  494.023032][T16927] geneve4: entered allmulticast mode
[  494.081920][T16927] geneve4: entered promiscuous mode
[  494.084162][T16927] geneve4: entered allmulticast mode
[  494.140700][T16927] geneve4: entered promiscuous mode
[  494.142571][T16927] geneve4: entered allmulticast mode
[  494.201447][T16927] geneve4: entered promiscuous mode
[  494.203501][T16927] geneve4: entered allmulticast mode
[  494.262003][T16927] geneve4: entered promiscuous mode
[  494.263971][T16927] geneve4: entered allmulticast mode
[  494.319450][T16927] geneve4: entered promiscuous mode
[  494.321132][T16927] geneve4: entered allmulticast mode
[  494.386608][T16927] geneve4: entered promiscuous mode
[  494.388892][T16927] geneve4: entered allmulticast mode
[  494.443222][T16927] geneve4: entered promiscuous mode
[  494.445155][T16927] geneve4: entered allmulticast mode
[  494.502764][T16927] geneve4: entered promiscuous mode
[  494.505013][T16927] geneve4: entered allmulticast mode
[  494.570232][T16927] geneve4: entered promiscuous mode
[  494.571873][T16927] geneve4: entered allmulticast mode
[  494.609784][T16936] netlink: 'syz.1.3447': attribute type 5 has an invalid length.
[  494.619058][T16927] geneve4: entered promiscuous mode
[  494.620928][T16927] geneve4: entered allmulticast mode
[  494.684964][T16927] geneve4: entered promiscuous mode
[  494.687015][T16927] geneve4: entered allmulticast mode
[  494.753776][T16927] geneve4: entered promiscuous mode
[  494.755832][T16927] geneve4: entered allmulticast mode
[  495.595678][T16966] syzkaller0: entered promiscuous mode
[  495.598689][T16966] syzkaller0: entered allmulticast mode
[  495.601092][T16964] GUP no longer grows the stack in syz.2.3454 (16964): 200000003000-20000000a000 (200000001000)
[  495.609763][T16964] CPU: 0 UID: 0 PID: 16964 Comm: syz.2.3454 Not tainted syzkaller #0 PREEMPT(full) 
[  495.609780][T16964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  495.609787][T16964] Call Trace:
[  495.609792][T16964]  <TASK>
[  495.609797][T16964]  dump_stack_lvl+0x189/0x250
[  495.609818][T16964]  ? __pfx_dump_stack_lvl+0x10/0x10
[  495.609830][T16964]  ? __pfx__printk+0x10/0x10
[  495.609843][T16964]  ? find_vma+0xe7/0x160
[  495.609874][T16964]  __get_user_pages+0x2470/0x2a00
[  495.609906][T16964]  ? __lock_acquire+0x6b6/0x2cf0
[  495.609933][T16964]  ? __gup_longterm_locked+0xc63/0x1660
[  495.609945][T16964]  ? down_read_killable+0x1bc/0x350
[  495.609958][T16964]  __gup_longterm_locked+0xde4/0x1660
[  495.609968][T16964]  ? try_grab_folio_fast+0x1bf/0x6a0
[  495.610010][T16964]  ? gup_fast_fallback+0x1b86/0x22d0
[  495.610023][T16964]  gup_fast_fallback+0x1d65/0x22d0
[  495.610045][T16964]  ? __pfx_gup_fast_fallback+0x10/0x10
[  495.610052][T16964]  ? __mutex_lock+0x335/0x1350
[  495.610064][T16964]  ? is_valid_gup_args+0x11f/0x200
[  495.610072][T16964]  ? get_user_pages_fast+0x4d/0xb0
[  495.610080][T16964]  __iov_iter_get_pages_alloc+0x39f/0xb40
[  495.610093][T16964]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  495.610100][T16964]  ? wait_for_space+0x248/0x2d0
[  495.610107][T16964]  iov_iter_get_pages2+0x5e/0xa0
[  495.610120][T16964]  __se_sys_vmsplice+0x548/0x10d0
[  495.610134][T16964]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  495.610140][T16964]  ? __pfx_futex_wait+0x10/0x10
[  495.610173][T16964]  ? do_syscall_64+0xbe/0xf80
[  495.610184][T16964]  do_syscall_64+0xfa/0xf80
[  495.610192][T16964]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.610199][T16964]  ? exc_page_fault+0xab/0x100
[  495.610208][T16964]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.610214][T16964] RIP: 0033:0x7f692858f7c9
[  495.610222][T16964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  495.610228][T16964] RSP: 002b:00007f6929427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  495.610236][T16964] RAX: ffffffffffffffda RBX: 00007f69287e5fa0 RCX: 00007f692858f7c9
[  495.610241][T16964] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008
[  495.610245][T16964] RBP: 00007f69285f297f R08: 0000000000000000 R09: 0000000000000000
[  495.610250][T16964] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  495.610254][T16964] R13: 00007f69287e6038 R14: 00007f69287e5fa0 R15: 00007fff35e061a8
[  495.610265][T16964]  </TASK>
[  495.700254][T16970] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  495.757366][T16965] tipc: Resetting bearer <eth:syzkaller0>
[  495.774114][T16965] tipc: Disabling bearer <eth:syzkaller0>
[  495.877244][T16984] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  495.880423][T16984] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  496.266155][T17008] netlink: 'syz.1.3469': attribute type 3 has an invalid length.
[  496.371435][T17014] __nla_validate_parse: 25 callbacks suppressed
[  496.371450][T17014] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3471'.
[  496.699945][T17052] xt_hashlimit: invalid rate
[  496.728964][T17049] IPv6: NLM_F_CREATE should be specified when creating new route
[  496.849937][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3490'.
[  496.853130][T17070] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3490'.
[  496.855794][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3490'.
[  496.862271][T17070] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3490'.
[  496.865382][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3490'.
[  496.938754][T17078] lo: Caught tx_queue_len zero misconfig
[  497.054064][T17094] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  497.056559][T17094] syzkaller0: entered promiscuous mode
[  497.058466][T17094] syzkaller0: entered allmulticast mode
[  497.073694][T17094] tipc: Resetting bearer <eth:syzkaller0>
[  497.080108][T17094] ip6gretap1: entered allmulticast mode
[  497.083385][T17093] tipc: Resetting bearer <eth:syzkaller0>
[  497.093054][T17093] tipc: Disabling bearer <eth:syzkaller0>
[  497.332794][T17128] Cannot find map_set index 135 as target
[  497.468783][T17148] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3518'.
[  497.472462][T17150] netlink: 'syz.0.3519': attribute type 1 has an invalid length.
[  497.498640][T17150] 8021q: adding VLAN 0 to HW filter on device bond10
[  497.519892][T17149] 8021q: adding VLAN 0 to HW filter on device bond10
[  497.522330][T17149] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  497.525965][T17149] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  497.544472][T17151] veth15: entered promiscuous mode
[  497.548261][T17151] bond10: (slave veth15): Enslaving as an active interface with a down link
[  497.558885][ T6261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  497.564106][ T6261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  497.619832][T17163] netlink: 'syz.1.3521': attribute type 9 has an invalid length.
[  497.624024][T17163] netlink: 'syz.1.3521': attribute type 9 has an invalid length.
[  497.626682][T17163] netlink: 'syz.1.3521': attribute type 9 has an invalid length.
[  497.629237][T17163] netlink: 'syz.1.3521': attribute type 9 has an invalid length.
[  497.631757][T17163] netlink: 'syz.1.3521': attribute type 9 has an invalid length.
[  497.637367][T17163] netlink: 'syz.1.3521': attribute type 9 has an invalid length.
[  497.640173][T17163] netlink: 'syz.1.3521': attribute type 9 has an invalid length.
[  497.643264][T17163] netlink: 'syz.1.3521': attribute type 9 has an invalid length.
[  497.645964][T17163] netlink: 'syz.1.3521': attribute type 9 has an invalid length.
[  497.726010][T17182] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3526'.
[  497.743416][T17178] bond11 (unregistering): Released all slaves
[  497.806749][T17195] sctp: [Deprecated]: syz.2.3529 (pid 17195) Use of int in maxseg socket option.
[  497.806749][T17195] Use struct sctp_assoc_value instead
[  497.830793][T17195] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20001
[  497.856533][T17200] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3531'.
[  497.913414][T17207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3534'.
[  497.916267][T17207] nbd: must specify at least one socket
[  497.953734][T17214] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  497.964326][T17214] syzkaller0: entered promiscuous mode
[  497.966712][T17214] syzkaller0: entered allmulticast mode
[  497.983681][T17214] tipc: Resetting bearer <eth:syzkaller0>
[  497.988612][T17213] tipc: Resetting bearer <eth:syzkaller0>
[  498.000711][T17213] tipc: Disabling bearer <eth:syzkaller0>
[  498.135890][T17227] block nbd0: server does not support multiple connections per device.
[  498.141233][T17227] block nbd0: shutting down sockets
[  498.267424][T17252] C: renamed from lo
[  498.270678][T17252] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  498.825087][T17305] delete_channel: no stack
[  498.830005][T17305] delete_channel: no stack
[  498.835542][T17306] wireguard0: entered promiscuous mode
[  498.837562][T17306] wireguard0: entered allmulticast mode
[  498.846706][T17306] team0: Device wireguard0 is of different type
[  499.058414][T17321] SET target dimension over the limit!
[  499.065307][T17246] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  499.304537][T17348] bond0: Caught tx_queue_len zero misconfig
[  500.282321][   T56] Bluetooth: hci1: command 0x0406 tx timeout
[  500.491521][T17404] NCSI netlink: No device for ifindex 131092
[  501.124894][T17461] netlink: zone id is out of range
[  501.125875][T17468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  501.126568][T17461] netlink: zone id is out of range
[  501.126602][T17461] netlink: zone id is out of range
[  501.131998][T17468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  501.138016][T17469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  501.141061][T17461] netlink: zone id is out of range
[  501.141840][T17468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  501.142809][T17461] netlink: zone id is out of range
[  501.143057][T17461] netlink: zone id is out of range
[  501.151295][T17469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  501.155438][T17461] netlink: zone id is out of range
[  501.156990][T17461] netlink: zone id is out of range
[  501.158612][T17461] netlink: zone id is out of range
[  501.519159][T17493] __nla_validate_parse: 7 callbacks suppressed
[  501.519169][T17493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3626'.
[  501.790171][T17523] xt_policy: output policy not valid in PREROUTING and INPUT
[  501.885881][T17526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3636'.
[  501.888877][T17526] bridge_slave_1: left allmulticast mode
[  501.890640][T17526] bridge_slave_1: left promiscuous mode
[  501.892598][T17526] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.896430][T17526] bridge_slave_0: left allmulticast mode
[  501.898194][T17526] bridge_slave_0: left promiscuous mode
[  501.900456][T17526] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.928699][T17526] vlan3 (unregistering): left allmulticast mode
[  501.930666][T17526] bridge0 (unregistering): left allmulticast mode
[  501.933259][T17526] vlan3 (unregistering): left promiscuous mode
[  501.935189][T17526] bridge0 (unregistering): left promiscuous mode
[  501.937165][T17526] bridge1: port 1(vlan3) entered disabled state
[  502.115191][T17532] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3638'.
[  502.175504][T17536] sctp: [Deprecated]: syz.0.3638 (pid 17536) Use of int in maxseg socket option.
[  502.175504][T17536] Use struct sctp_assoc_value instead
[  502.217142][T17538] policy can only be matched on NF_INET_PRE_ROUTING
[  502.217153][T17538] unable to load match
[  502.333720][T17542] 8021q: adding VLAN 0 to HW filter on device bond4
[  502.336744][T17542] bridge0: port 1(bond4) entered blocking state
[  502.338809][T17542] bridge0: port 1(bond4) entered disabled state
[  502.340879][T17542] bond4: entered allmulticast mode
[  502.343887][T17542] bond4: entered promiscuous mode
[  502.540555][T17559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3644'.
[  502.543546][T17559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3644'.
[  502.970422][T17593] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3657'.
[  502.981635][T17595] netlink: 'syz.2.3658': attribute type 11 has an invalid length.
[  502.982708][T17593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3657'.
[  503.116815][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3663'.
[  503.119753][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3663'.
[  503.373625][T17618] IPv6: Can't replace route, no match found
[  503.378299][T17618] SET target dimension over the limit!
[  503.745739][T17634] wg1 speed is unknown, defaulting to 1000
[  503.949621][T17634] wg1 speed is unknown, defaulting to 1000
[  503.957140][T17641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3672'.
[  504.236772][T17665] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  504.274253][T17667] SET target dimension over the limit!
[  504.431645][T17680] syzkaller0: entered promiscuous mode
[  504.442314][T17680] syzkaller0: entered allmulticast mode
[  504.445887][T17680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  504.451486][T17679] tipc: Resetting bearer <eth:syzkaller0>
[  504.471499][T17679] tipc: Disabling bearer <eth:syzkaller0>
[  505.480843][T17765] x_tables: duplicate underflow at hook 2
[  505.949147][T17791] team_slave_1: Caught tx_queue_len zero misconfig
[  506.207676][T17805] tunl0: Caught tx_queue_len zero misconfig
[  507.232128][T17850] syz.0.3742: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  507.247799][T17850] CPU: 0 UID: 0 PID: 17850 Comm: syz.0.3742 Not tainted syzkaller #0 PREEMPT(full) 
[  507.247813][T17850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  507.247820][T17850] Call Trace:
[  507.247823][T17850]  <TASK>
[  507.247826][T17850]  dump_stack_lvl+0x189/0x250
[  507.247840][T17850]  ? __pfx_dump_stack_lvl+0x10/0x10
[  507.247848][T17850]  ? __pfx__printk+0x10/0x10
[  507.247858][T17850]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  507.247869][T17850]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  507.247879][T17850]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  507.247890][T17850]  warn_alloc+0x214/0x310
[  507.247902][T17850]  ? __pfx_warn_alloc+0x10/0x10
[  507.247914][T17850]  ? __get_vm_area_node+0x28f/0x300
[  507.247949][T17850]  ? xskq_create+0xbf/0x170
[  507.247964][T17850]  __vmalloc_node_range_noprof+0x690/0x12d0
[  507.248000][T17850]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  507.248011][T17850]  ? __kasan_kmalloc+0x93/0xb0
[  507.248023][T17850]  vmalloc_user_noprof+0xad/0xf0
[  507.248032][T17850]  ? xskq_create+0xbf/0x170
[  507.248039][T17850]  xskq_create+0xbf/0x170
[  507.248048][T17850]  xsk_init_queue+0xb0/0x110
[  507.248056][T17850]  xsk_setsockopt+0x57b/0x8d0
[  507.248070][T17850]  ? __pfx_xsk_setsockopt+0x10/0x10
[  507.248078][T17850]  ? __pfx_aa_sk_perm+0x10/0x10
[  507.248089][T17850]  ? aa_sock_opt_perm+0xff/0x1a0
[  507.248097][T17850]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  507.248106][T17850]  ? __pfx_xsk_setsockopt+0x10/0x10
[  507.248113][T17850]  do_sock_setsockopt+0x17c/0x1b0
[  507.248126][T17850]  __x64_sys_setsockopt+0x13f/0x1b0
[  507.248137][T17850]  do_syscall_64+0xfa/0xf80
[  507.248147][T17850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.248153][T17850]  ? exc_page_fault+0xab/0x100
[  507.248162][T17850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  507.248169][T17850] RIP: 0033:0x7fd8c7f8f7c9
[  507.248177][T17850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  507.248185][T17850] RSP: 002b:00007fd8c8d71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  507.248194][T17850] RAX: ffffffffffffffda RBX: 00007fd8c81e6180 RCX: 00007fd8c7f8f7c9
[  507.248199][T17850] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[  507.248203][T17850] RBP: 00007fd8c7ff297f R08: 0000000000000004 R09: 0000000000000000
[  507.248207][T17850] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  507.248211][T17850] R13: 00007fd8c81e6218 R14: 00007fd8c81e6180 R15: 00007fff289b5ac8
[  507.248223][T17850]  </TASK>
[  507.248297][T17850] Mem-Info:
[  507.350043][T17850] active_anon:4665 inactive_anon:0 isolated_anon:0
[  507.350043][T17850]  active_file:1356 inactive_file:38337 isolated_file:0
[  507.350043][T17850]  unevictable:1768 dirty:50 writeback:50
[  507.350043][T17850]  slab_reclaimable:11707 slab_unreclaimable:86789
[  507.350043][T17850]  mapped:20135 shmem:2450 pagetables:895
[  507.350043][T17850]  sec_pagetables:0 bounce:0
[  507.350043][T17850]  kernel_misc_reclaimable:0
[  507.350043][T17850]  free:1118672 free_pcp:23799 free_cma:0
[  507.366322][T17850] Node 0 active_anon:7848kB inactive_anon:0kB active_file:1812kB inactive_file:6876kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:60556kB dirty:24kB writeback:0kB shmem:4876kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6832kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  507.375643][T17850] Node 1 active_anon:10812kB inactive_anon:0kB active_file:3612kB inactive_file:146472kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:19984kB dirty:76kB writeback:0kB shmem:4924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6052kB pagetables:1232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  507.387290][T17850] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  507.399053][T17850] lowmem_reserve[]: 0 1596 2128 2128 2128
[  507.401345][T17850] Node 0 DMA32 free:1607168kB boost:0kB min:25140kB low:31424kB high:37708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1635164kB mlocked:0kB bounce:0kB free_pcp:23004kB local_pcp:10608kB free_cma:0kB
[  507.413616][T17850] lowmem_reserve[]: 0 0 531 531 531
[  507.415746][T17850] Node 0 Normal free:28324kB boost:0kB min:8516kB low:10644kB high:12772kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7808kB inactive_anon:0kB active_file:1812kB inactive_file:6868kB unevictable:3536kB writepending:24kB zspages:0kB present:1572868kB managed:544644kB mlocked:0kB bounce:0kB free_pcp:7628kB local_pcp:7464kB free_cma:0kB
[  507.427658][T17850] lowmem_reserve[]: 0 0 0 0 0
[  507.429136][T17850] Node 1 Normal free:2823836kB boost:0kB min:56212kB low:70264kB high:84316kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10812kB inactive_anon:0kB active_file:3612kB inactive_file:146472kB unevictable:3536kB writepending:76kB zspages:0kB present:3670012kB managed:3594692kB mlocked:0kB bounce:0kB free_pcp:64696kB local_pcp:27736kB free_cma:0kB
[  507.440944][T17850] lowmem_reserve[]: 0 0 0 0 0
[  507.448452][T17850] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  507.453913][T17850] Node 0 DMA32: 10*4kB (UM) 21*8kB (UE) 25*16kB (UME) 23*32kB (UME) 17*64kB (UME) 13*128kB (UME) 8*256kB (UME) 9*512kB (UM) 11*1024kB (UME) 8*2048kB (UM) 383*4096kB (UM) = 1607168kB
[  507.459284][T17850] Node 0 Normal: 423*4kB (UM) 252*8kB (UME) 55*16kB (UME) 66*32kB (UME) 7*64kB (UE) 73*128kB (UM) 26*256kB (UM) 6*512kB (UME) 2*1024kB (UE) 0*2048kB 0*4096kB = 28268kB
[  507.464511][T17850] Node 1 Normal: 1*4kB (E) 33*8kB (ME) 8*16kB (E) 4*32kB (E) 36*64kB (UE) 153*128kB (UME) 73*256kB (UME) 27*512kB (UM) 10*1024kB (UME) 9*2048kB (UME) 669*4096kB (UM) = 2823820kB
[  507.471505][T17850] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  507.475615][T17850] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  507.479347][T17850] 42143 total pagecache pages
[  507.481240][T17850] 0 pages in swap cache
[  507.483119][T17850] Free swap  = 124996kB
[  507.484752][T17850] Total swap = 124996kB
[  507.486462][T17850] 1834877 pages RAM
[  507.487891][T17850] 0 pages HighMem/MovableOnly
[  507.489398][T17850] 387412 pages reserved
[  507.490661][T17850] 0 pages cma reserved
[  507.646711][T17870] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  507.860847][T17883] __nla_validate_parse: 1 callbacks suppressed
[  507.860862][T17883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3753'.
[  507.879952][T17885] validate_nla: 30 callbacks suppressed
[  507.879969][T17885] netlink: 'syz.1.3754': attribute type 21 has an invalid length.
[  507.891146][T17886] netlink: 'syz.1.3754': attribute type 21 has an invalid length.
[  507.897116][T17885] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3754'.
[  507.900732][T17886] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3754'.
[  507.904658][T17885] netlink: 'syz.1.3754': attribute type 4 has an invalid length.
[  507.907706][T17885] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3754'.
[  507.911344][T17886] netlink: 'syz.1.3754': attribute type 4 has an invalid length.
[  507.916157][T17886] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3754'.
[  508.033904][T17904] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3760'.
[  508.098770][T17908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3762'.
[  508.157004][T17916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3766'.
[  508.244394][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3770'.
[  508.247362][T17929] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3770'.
[  508.296477][T17936] Cannot find del_set index 2 as target
[  508.482390][T17946] netlink: 'syz.1.3774': attribute type 83 has an invalid length.
[  508.689802][T17962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  508.693888][T17963] net_ratelimit: 45 callbacks suppressed
[  508.693897][T17963] Set syz0 is full, maxelem 0 reached
[  508.907688][T17968] tipc: MTU too low for tipc bearer
[  509.142766][T17978] netlink: 'syz.2.3786': attribute type 13 has an invalid length.
[  509.235154][T17982] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  509.239656][T17982] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  509.245030][T17982] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  509.249503][T17982] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  509.256186][T17982] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  509.260813][T17982] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  509.268197][T17982] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  509.273239][T17982] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  509.277300][T17982] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  509.281060][T17982] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  509.589801][T17978] tipc: Resetting bearer <eth:veth0_macvtap>
[  509.744225][   T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  509.747547][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  509.750671][   T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  509.754696][   T12] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  509.766398][   T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  509.769032][   T12] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  509.771761][   T12] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  509.782568][   T12] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  509.928165][T18016] xt_cgroup: xt_cgroup: no path or classid specified
[  510.750957][T18069] netlink: 'syz.1.3813': attribute type 1 has an invalid length.
[  510.753644][T18069] netlink: 'syz.1.3813': attribute type 7 has an invalid length.
[  510.756295][T18069] netlink: 'syz.1.3813': attribute type 8 has an invalid length.
[  510.758662][T18069] NCSI netlink: No device for ifindex 65584
[  510.785288][T18072] openvswitch: netlink: IP tunnel TTL not specified.
[  510.844500][T18077] netlink: 'syz.1.3816': attribute type 15 has an invalid length.
[  511.069294][T18095] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  511.069806][T18096] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  511.456185][T18108] ip6tnl0: Caught tx_queue_len zero misconfig
[  512.671114][T18171] bridge_slave_0: entered promiscuous mode
[  512.675685][T18171] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  512.892686][   T51] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  513.219960][T18224] __nla_validate_parse: 141 callbacks suppressed
[  513.219977][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3851'.
[  513.233162][T18224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3851'.
[  513.367273][ T5894] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  513.520530][T18266] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  513.562660][T17649] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  513.635003][T18277] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3863'.
[  513.941029][T18284] wg1 speed is unknown, defaulting to 1000
[  514.053353][T18284] wg1 speed is unknown, defaulting to 1000
[  514.605741][   T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  514.608945][   T12] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  514.842486][ T5926] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  515.258997][T18377] validate_nla: 1 callbacks suppressed
[  515.259006][T18377] netlink: 'syz.1.3897': attribute type 1 has an invalid length.
[  515.264640][T18377] netlink: 'syz.1.3897': attribute type 2 has an invalid length.
[  515.370662][T18389] wg1 speed is unknown, defaulting to 1000
[  515.374017][T18391] netlink: 'syz.0.3899': attribute type 1 has an invalid length.
[  515.377109][T18391] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3899'.
[  515.397639][T18391] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3899'.
[  515.487574][T18389] wg1 speed is unknown, defaulting to 1000
[  515.663210][T18406] sch_tbf: burst 2 is lower than device dummy0 mtu (1550) !
[  515.681459][T18406] sch_tbf: burst 2 is lower than device dummy0 mtu (1550) !
[  515.685068][T18406] sch_tbf: burst 2 is lower than device dummy0 mtu (1550) !
[  516.690370][T18443] netlink: 'syz.1.3918': attribute type 1 has an invalid length.
[  516.745173][T18458] netlink: 'syz.1.3922': attribute type 1 has an invalid length.
[  516.776346][T18458] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  516.780434][T18458] bond5: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  516.787727][T18458] bond5: (slave vxcan1): making interface the new active one
[  516.791121][T18458] bond5: (slave vxcan1): Enslaving as an active interface with an up link
[  516.796471][T18458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3922'.
[  516.804230][T18458] bond5 (unregistering): (slave vxcan1): Releasing backup interface
[  516.809573][T18458] bond5 (unregistering): Released all slaves
[  516.850515][T18454] netlink: 'syz.0.3921': attribute type 4 has an invalid length.
[  517.018613][T18482] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3929'.
[  517.093238][T18489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3932'.
[  517.123610][T18494] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  517.316935][T18521] syzkaller0: entered promiscuous mode
[  517.318665][T18521] syzkaller0: entered allmulticast mode
[  517.331783][T18523] IPv6: Can't replace route, no match found
[  518.230310][T18523] netlink: 'syz.1.3941': attribute type 12 has an invalid length.
[  518.259482][T18529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3943'.
[  518.538352][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3953'.
[  518.543679][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3953'.
[  518.676653][T18575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3957'.
[  518.680576][T18579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3959'.
[  518.753847][T18583] wg1 speed is unknown, defaulting to 1000
[  518.869674][T18583] wg1 speed is unknown, defaulting to 1000
[  518.922517][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  519.675257][T18617] wg1 speed is unknown, defaulting to 1000
[  519.759638][T18617] wg1 speed is unknown, defaulting to 1000
[  520.091348][T18633] batman_adv: batadv0: Adding interface: dummy0
[  520.094748][T18633] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[  520.102644][T18633] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  520.140082][T18641] IPv6: Can't replace route, no match found
[  520.185915][T18643] netlink: 'syz.2.3980': attribute type 3 has an invalid length.
[  520.240833][T18650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3982'.
[  520.249079][T18650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3982'.
[  520.298704][T18654] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 3, id = 0
[  520.327410][T18658] tipc: New replicast peer: 255.255.255.255
[  520.329733][T18658] tipc: Enabled bearer <udp:syz2>, priority 26
[  520.332053][T18658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3984'.
[  520.606424][T18677] netlink: 'syz.2.3991': attribute type 5 has an invalid length.
[  520.703028][T18684] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  520.707243][T18684] syzkaller0: entered promiscuous mode
[  520.709477][T18684] syzkaller0: entered allmulticast mode
[  520.951772][T18692] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3997'.
[  521.021368][T18699] geneve2: entered promiscuous mode
[  521.026321][T18699] geneve2: entered allmulticast mode
[  521.030889][   T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  521.035603][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  521.042635][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  521.055432][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  521.394127][T18742] syzkaller1: entered promiscuous mode
[  521.396026][T18742] syzkaller1: entered allmulticast mode
[  522.040596][T18767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4019'.
[  522.044058][T18767] netlink: 'syz.1.4019': attribute type 1 has an invalid length.
[  522.198430][T18781] netlink: 'syz.1.4024': attribute type 1 has an invalid length.
[  522.501823][T18808] tap0: tun_chr_ioctl cmd 2147767521
[  523.369886][T18831] __nla_validate_parse: 1 callbacks suppressed
[  523.369902][T18831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4037'.
[  523.736465][T18871] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4054'.
[  523.740180][T18871] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4054'.
[  523.825406][T18873] netlink: 'syz.2.4053': attribute type 2 has an invalid length.
[  523.831686][T18873] !: entered promiscuous mode
[  523.836602][T18873] netlink: 'syz.2.4053': attribute type 2 has an invalid length.
[  523.839160][T18873] !: left promiscuous mode
[  523.883942][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4060'.
[  523.959579][T18893] bond5: option fail_over_mac: invalid value (127)
[  523.974100][T18893] bond5 (unregistering): Released all slaves
[  524.483961][T18948] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4079'.
[  524.487117][T18948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4079'.
[  524.490169][T18948] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4079'.
[  524.494042][T18948] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4079'.
[  524.759165][T18953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4082'.
[  524.763840][T18953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4082'.
[  524.874082][T18957] sctp: [Deprecated]: syz.1.4084 (pid 18957) Use of int in max_burst socket option.
[  524.874082][T18957] Use struct sctp_assoc_value instead
[  525.554184][T19005] wg1 speed is unknown, defaulting to 1000
[  525.682502][T19005] wg1 speed is unknown, defaulting to 1000
[  525.786385][T19024] netlink: 'syz.0.4104': attribute type 29 has an invalid length.
[  525.839265][T19027] netlink: 'syz.1.4106': attribute type 1 has an invalid length.
[  527.139866][T19060] netlink: 'syz.0.4118': attribute type 12 has an invalid length.
[  527.382957][T19103] : renamed from bond_slave_0
[  527.412329][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  527.665662][T19127] netlink: 'syz.0.4138': attribute type 33 has an invalid length.
[  527.822442][T19145] syzkaller0: entered promiscuous mode
[  527.824720][T19145] syzkaller0: entered allmulticast mode
[  527.911144][T19152] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  527.943569][T19155] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  527.945681][T19156] netlink: 'syz.0.4147': attribute type 1 has an invalid length.
[  528.346897][T19200] 8021q: adding VLAN 0 to HW filter on device bond7
[  528.354158][T19200] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  528.369557][T19200] 8021q: adding VLAN 0 to HW filter on device bond7
[  528.378825][T19200] bond7: (slave lo): Enslaving as an active interface with an up link
[  528.480020][T19200] bond7 (unregistering): (slave lo): Releasing backup interface
[  528.483050][T19200] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  528.488223][T19200] bond7 (unregistering): Released all slaves
[  528.500420][T19207] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  528.504942][T19207] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.510754][T19207] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  528.593565][T19207] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  528.597071][T19207] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.600153][T19207] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  528.647402][T19207] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  528.658029][T19207] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.660984][T19207] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  528.698666][T19207] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  528.700608][T19226] __nla_validate_parse: 130 callbacks suppressed
[  528.700618][T19226] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4170'.
[  528.701669][T19207] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.701705][T19207] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  528.812944][ T5923] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0
[  528.816741][ T5923] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  528.819520][ T5923] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  528.831949][ T5923] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0
[  528.836258][ T5923] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  528.838913][ T5923] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  528.847218][ T5923] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0
[  528.850327][ T5923] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  528.853759][ T5923] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  528.875454][ T5923] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0
[  528.881741][ T5923] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  528.884657][ T5923] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  528.895816][T19245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4176'.
[  529.044948][T19261] xt_CT: You must specify a L4 protocol and not use inversions on it
[  530.008699][T19278] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  530.535810][T19285] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  530.539814][T19285] bond5 (unregistering): Released all slaves
[  530.672763][T19289] wg1 speed is unknown, defaulting to 1000
[  530.846420][T19289] wg1 speed is unknown, defaulting to 1000
[  530.925762][T19305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4193'.
[  531.004912][T19313] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  531.014180][T19313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4196'.
[  531.059245][T19318] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  531.141851][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4199'.
[  531.503683][T19363] nbd: device at index 2 is going down
[  532.525874][T19410] vlan2: entered allmulticast mode
[  532.527534][T19410] bridge_slave_0: entered allmulticast mode
[  532.685105][T19420] wg1 speed is unknown, defaulting to 1000
[  532.692555][T19430] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4232'.
[  532.813066][T19441] netlink: 'syz.2.4235': attribute type 1 has an invalid length.
[  532.844187][T19441] bond7: entered promiscuous mode
[  532.846432][T19441] 8021q: adding VLAN 0 to HW filter on device bond7
[  532.848862][T19420] wg1 speed is unknown, defaulting to 1000
[  532.860261][T19441] 8021q: adding VLAN 0 to HW filter on device bond7
[  532.863998][T19441] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address
[  532.867400][T19441] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  532.873868][T19441] bond7: (slave wireguard0): making interface the new active one
[  532.876242][T19441] wireguard0: entered promiscuous mode
[  532.879196][T19441] bond7: (slave wireguard0): Enslaving as an active interface with an up link
[  532.883724][T19441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  532.886256][T19441] IPv6: NLM_F_CREATE should be set when creating new route
[  532.888518][T19441] IPv6: NLM_F_CREATE should be set when creating new route
[  532.891517][T19441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  532.912013][T19441] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address
[  532.918448][T19441] bond7: (slave wireguard1): Enslaving as a backup interface with an up link
[  532.998056][   T33] audit: type=1107 audit(1765967347.473:2): pid=19465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  532.999547][T19466] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4238'.
[  533.086681][T19452] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  533.299773][T19481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4242'.
[  533.308014][T19489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4244'.
[  533.318670][T19492] sctp: [Deprecated]: syz.1.4245 (pid 19492) Use of struct sctp_assoc_value in delayed_ack socket option.
[  533.318670][T19492] Use struct sctp_sack_info instead
[  533.325214][T19490] x_tables: duplicate underflow at hook 3
[  533.435717][T19504] netlink: 'syz.2.4250': attribute type 4 has an invalid length.
[  533.440735][T19504] netlink: 'syz.2.4250': attribute type 4 has an invalid length.
[  533.451434][T19504] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4250'.
[  533.549068][T19512] syzkaller1: entered promiscuous mode
[  533.551395][T19512] syzkaller1: entered allmulticast mode
[  533.656663][T19529] wg1 speed is unknown, defaulting to 1000
[  533.792833][T19529] wg1 speed is unknown, defaulting to 1000
[  533.811527][T19558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4265'.
[  534.064204][T19580] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4270'.
[  534.490020][T19589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4272'.
[  534.496058][T19589] geneve3: entered promiscuous mode
[  534.501999][T19589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4272'.
[  534.552633][T19591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4273'.
[  534.556210][T19591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4273'.
[  534.684949][T19605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4278'.
[  534.831337][T19620] syzkaller0: entered promiscuous mode
[  534.833540][T19620] syzkaller0: entered allmulticast mode
[  535.062355][T19639] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4288'.
[  535.073320][T19639] vlan2: entered allmulticast mode
[  535.075122][T19639] erspan0: entered allmulticast mode
[  535.211571][T19644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4292'.
[  535.222625][T19644] block nbd0: Unsupported socket: should be TCP or UNIX.
[  535.254838][T19648] pimreg: tun_chr_ioctl cmd 2147767506
[  535.517480][T19662] syzkaller0: entered promiscuous mode
[  535.519820][T19662] syzkaller0: entered allmulticast mode
[  538.542775][T19668] wg1 speed is unknown, defaulting to 1000
[  538.627067][T19686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4304'.
[  538.630390][T19686] netlink: 'syz.1.4304': attribute type 5 has an invalid length.
[  538.676006][T19668] wg1 speed is unknown, defaulting to 1000
[  538.710143][T19688] wg1 speed is unknown, defaulting to 1000
[  538.831892][T19688] wg1 speed is unknown, defaulting to 1000
[  539.189122][T19726] batadv_slave_0: entered promiscuous mode
[  539.220273][T19729] tcpmss_tg6_check: 11 callbacks suppressed
[  539.220283][T19729] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  539.233850][T19724] batadv_slave_0: left promiscuous mode
[  539.326029][T19729] x_tables: duplicate underflow at hook 1
[  539.414568][T19750] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  539.417380][T19750] __nla_validate_parse: 2 callbacks suppressed
[  539.417388][T19750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4325'.
[  539.422080][T19750] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4325'.
[  539.614237][T19769] IPVS: set_ctl: invalid protocol: 59 10.1.1.0:20003
[  539.629489][T19771] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20004
[  539.767032][T19786] syzkaller0: entered promiscuous mode
[  539.768905][T19786] syzkaller0: entered allmulticast mode
[  539.818929][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4332'.
[  540.180681][T19840] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4344'.
[  540.242543][T19853] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4349'.
[  540.249001][T19853] pim6reg: entered allmulticast mode
[  540.251098][T19853] pim6reg: left allmulticast mode
[  540.301262][T19854] netlink: 'syz.1.4349': attribute type 6 has an invalid length.
[  540.312855][T19854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4349'.
[  540.325320][T19854] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4349'.
[  540.450268][   T33] audit: type=1800 audit(1765967354.923:3): pid=19876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4355" name="memory.events" dev="tmpfs" ino=7858 res=0 errno=0
[  540.548662][T19882] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4358'.
[  540.609008][T19891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4360'.
[  540.612417][T19890] openvswitch: netlink: IPv4 tunnel dst address is zero
[  540.720512][T19907] pim6reg: entered allmulticast mode
[  540.861534][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4370'.
[  540.938452][T19941] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  541.141647][T19964] vlan2: entered promiscuous mode
[  541.146177][T19964] geneve1: entered promiscuous mode
[  541.148821][T19964] vlan2: entered allmulticast mode
[  541.150595][T19964] geneve1: entered allmulticast mode
[  541.353249][T19973] netlink: 'syz.0.4386': attribute type 4 has an invalid length.
[  541.688345][T19998] macvlan0: entered allmulticast mode
[  541.690378][T19998] veth1_vlan: entered allmulticast mode
[  541.910819][T20003] wg1 speed is unknown, defaulting to 1000
[  542.028858][T20003] wg1 speed is unknown, defaulting to 1000
[  542.287228][T20016] netem: change failed
[  542.458467][T20027] netlink: 'syz.1.4401': attribute type 12 has an invalid length.
[  542.678157][T20031] netlink: 'syz.0.4403': attribute type 1 has an invalid length.
[  543.330220][T20043] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  543.755230][  T772] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  543.922329][  T772] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  544.042431][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  544.141941][T20110] netlink: 'syz.0.4425': attribute type 3 has an invalid length.
[  544.172673][  T772] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  544.383735][T20134] syzkaller0: entered promiscuous mode
[  544.385751][T20134] syzkaller0: entered allmulticast mode
[  545.394981][T20149] xt_ecn: cannot match TCP bits for non-tcp packets
[  545.437620][T20153] __nla_validate_parse: 15 callbacks suppressed
[  545.437715][T20153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4441'.
[  545.588163][T20165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4445'.
[  546.228315][T20220] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  546.325374][T20229] netlink: 'syz.0.4461': attribute type 1 has an invalid length.
[  546.373254][T20237] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4459'.
[  546.447965][T20246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4464'.
[  546.691086][T20256] 8021q: VLANs not supported on wg2
[  546.920954][T20265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4472'.
[  546.926154][T20265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4472'.
[  547.061629][T20280] syzkaller1: entered promiscuous mode
[  547.065132][T20280] syzkaller1: entered allmulticast mode
[  547.544217][T20317] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  547.557834][T20317] mac80211_hwsim hwsim2 wlan0: Caught tx_queue_len zero misconfig
[  547.616010][T20317] batadv_slave_0: entered promiscuous mode
[  547.620467][T20317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4488'.
[  547.849119][T20343] netlink: 'syz.1.4499': attribute type 63 has an invalid length.
[  547.901978][T20344] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4499'.
[  547.904909][T20344] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4499'.
[  548.829678][T20359] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  548.829914][T20358] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  548.855261][T20361] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4505'.
[  548.902545][T20358] bond0: (slave rose0): Enslaving as an active interface with an up link
[  549.072072][T20381] tipc: New replicast peer: 255.255.255.255
[  549.074814][T20381] tipc: Enabled bearer <udp:syz2>, priority 26
[  549.077776][T20381] netlink: 'syz.1.4511': attribute type 11 has an invalid length.
[  549.080235][T20381] netlink: 'syz.1.4511': attribute type 11 has an invalid length.
[  549.109420][T20381] bridge10: entered promiscuous mode
[  549.112902][T20381] bridge10: entered allmulticast mode
[  549.335266][T20401] syzkaller0: entered promiscuous mode
[  549.337000][T20401] syzkaller0: entered allmulticast mode
[  550.033692][T20407] xt_TCPMSS: Only works on TCP SYN packets
[  550.560457][T20470] geneve1: Caught tx_queue_len zero misconfig
[  550.691329][T20479] __nla_validate_parse: 4 callbacks suppressed
[  550.691338][T20479] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4544'.
[  550.696771][T20478] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4544'.
[  550.769667][T20487] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4547'.
[  550.775914][T20487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4547'.
[  551.247178][T20504] netlink: 'syz.1.4553': attribute type 41 has an invalid length.
[  551.334822][T20519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4557'.
[  551.596292][T20557] netlink: 'syz.1.4574': attribute type 1 has an invalid length.
[  551.598780][T20557] netlink: 'syz.1.4574': attribute type 6 has an invalid length.
[  551.601656][T20557] netlink: 'syz.1.4574': attribute type 3 has an invalid length.
[  551.642053][T20566] syzkaller1: entered promiscuous mode
[  551.644597][T20566] syzkaller1: entered allmulticast mode
[  551.683950][T20572] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4575'.
[  551.781391][T20580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4579'.
[  551.887569][T20590] bond5: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  551.902436][T20589] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  552.111579][T20630] xt_limit: Overflow, try lower: 271964/0
[  552.122473][T20630] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4593'.
[  552.523695][T20673] netlink: 'syz.1.4600': attribute type 19 has an invalid length.
[  552.526176][T20673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4600'.
[  552.529329][T20673] netlink: 'syz.1.4600': attribute type 19 has an invalid length.
[  552.533656][T20673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4600'.
[  553.385993][T20735] wg1 speed is unknown, defaulting to 1000
[  553.463704][T20735] wg1 speed is unknown, defaulting to 1000
[  553.518409][T20739] nftables ruleset with unbound chain
[  553.827755][T20754] delete_channel: no stack
[  554.126951][T20784] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  554.541747][T20807] netlink: 'syz.2.4634': attribute type 12 has an invalid length.
[  554.673093][T20811] mac80211_hwsim hwsim3 wlan1: Caught tx_queue_len zero misconfig
[  554.688925][T20813] netlink: 'syz.2.4636': attribute type 3 has an invalid length.
[  554.736632][T20818] RDS: rds_bind could not find a transport for ::ffff:172.20.20.57, load rds_tcp or rds_rdma?
[  555.218448][T20856] ip6gre0: left promiscuous mode
[  555.224914][T20856] 8021q: adding VLAN 0 to HW filter on device bond0
[  555.227372][T20856] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  555.984797][T20868] __nla_validate_parse: 10 callbacks suppressed
[  555.984813][T20868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4656'.
[  556.162009][T20887] syzkaller0: entered promiscuous mode
[  556.164664][T20887] syzkaller0: entered allmulticast mode
[  556.181281][T20887] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  556.192075][T20886] tipc: Resetting bearer <eth:syzkaller0>
[  556.214268][T20886] tipc: Disabling bearer <eth:syzkaller0>
[  556.231867][T20889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4664'.
[  556.291337][T20891] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4665'.
[  556.306160][T20891] block nbd0: not configured, cannot reconfigure
[  556.468379][T20914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4671'.
[  556.475310][T20914] tap0: tun_chr_ioctl cmd 1074025677
[  556.477200][T20914] tap0: linktype set to 776
[  556.628990][  T772] wg1 speed is unknown, defaulting to 1000
[  556.633164][T20927] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4676'.
[  556.750432][T20932] team0 (unregistering): Port device ip6tnl3 removed
[  556.795413][T20930] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  556.956414][T20946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4681'.
[  556.961358][T20947] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4681'.
[  557.101795][T20964] netlink: 'syz.2.4686': attribute type 22 has an invalid length.
[  557.106203][T20964] Set syz0 is full, maxelem 0 reached
[  557.170693][T20973] openvswitch: netlink: VXLAN extension message has 8 unknown bytes.
[  557.251140][T20976] wg1 speed is unknown, defaulting to 1000
[  557.292460][T20977] veth0: entered promiscuous mode
[  557.321339][T20977] netlink: 'syz.0.4690': attribute type 16 has an invalid length.
[  557.324629][T20977] netlink: 264 bytes leftover after parsing attributes in process `syz.0.4690'.
[  557.346612][T20976] wg1 speed is unknown, defaulting to 1000
[  557.410874][T20977] veth0: left promiscuous mode
[  557.617474][  T772] IPVS: starting estimator thread 0...
[  557.645782][T20993] netlink: 324 bytes leftover after parsing attributes in process `syz.1.4695'.
[  557.702346][T20991] IPVS: using max 81 ests per chain, 194400 per kthread
[  557.806200][T21003] wg1 speed is unknown, defaulting to 1000
[  557.852023][T21006] veth0: entered promiscuous mode
[  557.859933][T21006] netlink: 'syz.1.4700': attribute type 16 has an invalid length.
[  557.863207][T21006] netlink: 'syz.1.4700': attribute type 17 has an invalid length.
[  557.886933][T21006] 8021q: adding VLAN 0 to HW filter on device team0
[  557.891593][T21006] batman_adv: batadv0: Interface activated: dummy0
[  557.894559][T21006] batadv0: mtu less than device minimum
[  557.897561][T21006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  557.903232][T21006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  557.908505][T21006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  557.914024][T21006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  557.919078][T21006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  557.979165][T21009] veth18: entered allmulticast mode
[  557.994926][T21003] wg1 speed is unknown, defaulting to 1000
[  558.106289][T21006] veth0: left promiscuous mode
[  558.575535][T21041] netlink: 'syz.2.4711': attribute type 8 has an invalid length.
[  558.620530][T21043] syzkaller1: entered promiscuous mode
[  558.628797][T21043] syzkaller1: entered allmulticast mode
[  558.636549][T21043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4712'.
[  558.986399][T21082] netlink: 'syz.2.4723': attribute type 7 has an invalid length.
[  558.992356][T21082] netlink: 'syz.2.4723': attribute type 8 has an invalid length.
[  559.000527][T21082] ip6gretap0: entered promiscuous mode
[  559.005858][T21082] ip6gretap0: left promiscuous mode
[  559.146582][T21094] net_ratelimit: 16 callbacks suppressed
[  559.146600][T21094] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  559.285528][T21111] netlink: 'syz.2.4733': attribute type 33 has an invalid length.
[  559.290208][T21111] `: renamed from team0
[  559.514766][T21133] syzkaller0: entered promiscuous mode
[  559.516910][T21133] syzkaller0: entered allmulticast mode
[  559.545474][T21141] netlink: 'syz.0.4742': attribute type 11 has an invalid length.
[  559.548534][T21141] netlink: 'syz.0.4742': attribute type 11 has an invalid length.
[  576.682460][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  578.200197][T21145] syzkaller0: entered promiscuous mode
[  578.201950][T21145] syzkaller0: entered allmulticast mode
[  578.213521][T21145] __nla_validate_parse: 6 callbacks suppressed
[  578.213533][T21145] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4746'.
[  578.235006][T21156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4748'.
[  578.241447][T21154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4749'.
[  578.248046][T21154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4749'.
[  578.251348][T21154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4749'.
[  578.255041][T21154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4749'.
[  578.288781][T21160] x_tables: duplicate underflow at hook 2
[  578.408335][T21166] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4753'.
[  578.444947][T21181] nbd: must specify an index to disconnect
[  578.452283][T21181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4758'.
[  578.581777][T21191] gre0: entered promiscuous mode
[  578.583929][T21191] gre0: entered allmulticast mode
[  578.768969][T21207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  578.785412][T21207] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  578.790053][T21207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4768'.
[  578.790221][T21209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4768'.
[  579.896085][T21266] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  579.898854][T21266] batadv_slave_0: entered promiscuous mode
[  579.900892][T21266] batadv_slave_0: left promiscuous mode
[  579.905551][T21266] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  580.221080][T21296] bridge0: entered promiscuous mode
[  580.226785][T21296] bridge0: port 1(macvtap1) entered blocking state
[  580.228902][T21296] bridge0: port 1(macvtap1) entered disabled state
[  580.230994][T21296] macvtap1: entered allmulticast mode
[  580.232843][T21296] bridge0: entered allmulticast mode
[  580.235519][T21296] macvtap1: left allmulticast mode
[  580.237447][T21296] bridge0: left allmulticast mode
[  580.240243][T21296] bridge0: left promiscuous mode
[  581.159773][T21367] netlink: 'syz.1.4815': attribute type 13 has an invalid length.
[  581.239293][T21374] bond12: option arp_validate: invalid value (18446744073491447809)
[  581.249185][T21374] bond12 (unregistering): Released all slaves
[  581.277939][T21383] netlink: 'syz.0.4817': attribute type 13 has an invalid length.
[  581.866242][T21447] xt_CT: You must specify a L4 protocol and not use inversions on it
[  582.271907][T21482] sctp: [Deprecated]: syz.1.4848 (pid 21482) Use of struct sctp_assoc_value in delayed_ack socket option.
[  582.271907][T21482] Use struct sctp_sack_info instead
[  582.367639][T21491] bridge10: port 1(ip6gretap4) entered blocking state
[  582.370126][T21491] bridge10: port 1(ip6gretap4) entered disabled state
[  582.373169][T21491] ip6gretap4: entered allmulticast mode
[  582.375973][T21491] ip6gretap4: entered promiscuous mode
[  582.389165][T21491] bridge10: port 2(veth19) entered blocking state
[  582.391432][T21491] bridge10: port 2(veth19) entered disabled state
[  582.394343][T21491] veth19: entered allmulticast mode
[  582.396946][T21491] veth19: entered promiscuous mode
[  582.399046][T21491] bridge10: port 2(veth19) entered blocking state
[  582.401462][T21491] bridge10: port 2(veth19) entered forwarding state
[  582.444531][ T8578] bridge10: port 2(veth19) entered disabled state
[  583.248352][T21531] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  583.400844][T21536] __nla_validate_parse: 61 callbacks suppressed
[  583.400860][T21536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4867'.
[  583.753326][T21578] openvswitch: netlink: Unknown key attributes 2
[  583.757325][T21575] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4880'.
[  583.814436][T21586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  583.883277][T21584] wg1 speed is unknown, defaulting to 1000
[  584.028604][   T33] audit: type=1107 audit(1765967398.503:4): pid=21600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  584.069490][T21584] wg1 speed is unknown, defaulting to 1000
[  584.191307][T21593] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4882'.
[  584.404993][T21618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4893'.
[  584.483919][T21624] ip6t_srh: unknown srh match flags  4000
[  584.608684][T21629] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4897'.
[  584.617890][T21625] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4895'.
[  585.066454][T21635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4898'.
[  585.148386][T21646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4901'.
[  585.223858][T21646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4901'.
[  585.230489][T21646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4901'.
[  607.928643][T21680] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  608.005801][T21680] __nla_validate_parse: 7 callbacks suppressed
[  608.005811][T21680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4909'.
[  608.081800][T21697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4915'.
[  608.109761][T21697] batman_adv: batadv0: Removing interface: batadv_slave_1
[  608.146842][T21701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4916'.
[  608.390848][T21729] xt_ecn: cannot match TCP bits for non-tcp packets
[  608.403860][T21726] ip6gre1: entered promiscuous mode
[  608.406497][T21726] ip6gre1: entered allmulticast mode
[  608.493148][T21745] x_tables: duplicate underflow at hook 4
[  608.593758][T21756] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  608.675043][T21770] netlink: 'syz.1.4935': attribute type 2 has an invalid length.
[  608.677425][T21770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4935'.
[  608.807566][T21774] netlink: 'syz.1.4937': attribute type 4 has an invalid length.
[  609.056857][T21816] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4946'.
[  609.081658][T21825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4947'.
[  609.141114][ T5222] Bluetooth: hci2: link tx timeout
[  609.151955][ T5222] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  609.451911][T21849] netlink: 'syz.2.4953': attribute type 2 has an invalid length.
[  609.456542][T21849] netlink: 'syz.2.4953': attribute type 1 has an invalid length.
[  610.156358][T21866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4959'.
[  610.180690][T21864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4958'.
[  610.264360][T21874] SET target dimension over the limit!
[  611.118788][T21891] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  611.162366][   T56] Bluetooth: hci2: command 0x0405 tx timeout
[  611.272324][T21902] wg1 speed is unknown, defaulting to 1000
[  611.424663][T21902] wg1 speed is unknown, defaulting to 1000
[  611.519506][T21934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  611.706124][T21958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4988'.
[  611.729575][T21961] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  612.611583][T21979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4992'.
[  612.684668][T21984] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  612.850656][T22003] bridge11: port 1(ip6gretap2) entered blocking state
[  612.853728][T22003] bridge11: port 1(ip6gretap2) entered disabled state
[  612.856630][T22003] ip6gretap2: entered allmulticast mode
[  612.861898][T22003] ip6gretap2: entered promiscuous mode
[  612.882974][T22003] bridge11: port 2(veth15) entered blocking state
[  612.885378][T22003] bridge11: port 2(veth15) entered disabled state
[  612.888230][T22003] veth15: entered allmulticast mode
[  612.891753][T22003] veth15: entered promiscuous mode
[  612.895130][T22003] bridge11: port 2(veth15) entered blocking state
[  612.897141][T22003] bridge11: port 2(veth15) entered forwarding state
[  612.918588][T22005] : entered promiscuous mode
[  612.928694][T22005] netlink: 'syz.0.5003': attribute type 1 has an invalid length.
[  612.949098][T22005] bond12: entered promiscuous mode
[  612.951072][T22005] 8021q: adding VLAN 0 to HW filter on device bond12
[  612.963827][T22005] 8021q: adding VLAN 0 to HW filter on device bond12
[  612.966354][T22005] bond12: (slave gre1): The slave device specified does not support setting the MAC address
[  612.970134][T22005] bond12: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  612.974223][T22005] bond12: (slave gre1): Opening slave failed
[  613.044328][T22011] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  613.046894][T22011] syzkaller0: entered promiscuous mode
[  613.048616][T22011] syzkaller0: entered allmulticast mode
[  613.054903][T22011] tipc: Resetting bearer <eth:syzkaller0>
[  613.059019][T22010] tipc: Resetting bearer <eth:syzkaller0>
[  613.072573][T22010] tipc: Disabling bearer <eth:syzkaller0>
[  613.139339][T22020] __nla_validate_parse: 7 callbacks suppressed
[  613.139350][T22020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5008'.
[  613.295362][ T8579] bridge11: port 2(veth15) entered disabled state
[  613.438757][T22034] netlink: 4316 bytes leftover after parsing attributes in process `syz.1.5013'.
[  613.556432][T22050] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5019'.
[  613.742433][T22073] wg1 speed is unknown, defaulting to 1000
[  613.765184][T22075] veth0_to_bridge: entered promiscuous mode
[  613.841259][T22079] veth0_to_bridge: left promiscuous mode
[  613.907152][T22088] netlink: 'syz.1.5029': attribute type 62 has an invalid length.
[  613.928510][T22073] wg1 speed is unknown, defaulting to 1000
[  614.469407][T22130] netlink: 'syz.1.5040': attribute type 83 has an invalid length.
[  614.566947][T22138] netlink: 'syz.2.5044': attribute type 4 has an invalid length.
[  614.602592][ T5866] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  614.699420][T22140] 8021q: adding VLAN 0 to HW filter on device bond6
[  614.945521][T22157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5052'.
[  614.948300][T22157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5052'.
[  614.951014][T22157] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5052'.
[  614.956564][T22157] netlink: 'syz.0.5052': attribute type 3 has an invalid length.
[  614.959122][T22157] netlink: 'syz.0.5052': attribute type 2 has an invalid length.
[  614.961578][T22157] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5052'.
[  614.964672][T22157] netlink: 'syz.0.5052': attribute type 2 has an invalid length.
[  615.205142][T22184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5057'.
[  615.208914][T22184] openvswitch: netlink: Flow key attr not present in new flow.
[  616.070832][T22200] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  616.453815][T22217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5065'.
[  616.457321][T22217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5065'.
[  617.089540][T22239] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  617.737056][T22294] nbd: must specify a size in bytes for the device
[  618.050421][T22324] netlink: 'syz.0.5096': attribute type 5 has an invalid length.
[  618.111281][T22338] block nbd0: not configured, cannot reconfigure
[  618.153321][T22345] netlink: 'syz.0.5103': attribute type 2 has an invalid length.
[  618.210270][T22352] __nla_validate_parse: 14 callbacks suppressed
[  618.210280][T22352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5106'.
[  619.054967][T22374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5112'.
[  619.114178][T22377] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  619.120712][T22377] syzkaller0: entered promiscuous mode
[  619.125846][T22377] syzkaller0: entered allmulticast mode
[  619.146904][T22377] tipc: Resetting bearer <eth:syzkaller0>
[  619.154589][T22375] tipc: Resetting bearer <eth:syzkaller0>
[  619.165091][T22375] tipc: Disabling bearer <eth:syzkaller0>
[  619.273397][T22398] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  619.278116][T22398] bond9 (unregistering): Released all slaves
[  619.752491][T22427] tap0: tun_chr_ioctl cmd 2148553947
[  619.754543][T22427] tap0: tun_chr_ioctl cmd 2147767521
[  619.757599][T22427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5127'.
[  619.757695][T22428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5127'.
[  620.110761][T22449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5132'.
[  620.182009][T22455] xt_policy: output policy not valid in PREROUTING and INPUT
[  620.221058][T22457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5137'.
[  620.231502][T22457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5137'.
[  620.337413][T22467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5141'.
[  620.390230][T22477] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5143'.
[  620.394283][T22477] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5143'.
[  620.666612][T22507] netlink: 'syz.1.5152': attribute type 1 has an invalid length.
[  621.077672][T22519] netlink: 'syz.0.5156': attribute type 21 has an invalid length.
[  622.056031][T22591] netlink: 'syz.1.5177': attribute type 32 has an invalid length.
[  622.058679][T22591] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  622.079511][   T12] bond0: (slave 32): link status definitely down, disabling slave
[  622.085883][   T12] bond0: now running without any active interface!
[  622.107999][T22598] ip6gre4: entered promiscuous mode
[  622.109645][T22598] ip6gre4: entered allmulticast mode
[  622.112579][   T12] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  622.112769][T22598] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  622.117828][   T12] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  622.134015][  T772] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  622.167449][T22605] netlink: 'syz.2.5182': attribute type 6 has an invalid length.
[  622.202897][  T772] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  622.398692][T22637] sctp: [Deprecated]: syz.0.5191 (pid 22637) Use of struct sctp_assoc_value in delayed_ack socket option.
[  622.398692][T22637] Use struct sctp_sack_info instead
[  622.460283][T22646] netlink: 'syz.0.5195': attribute type 3 has an invalid length.
[  622.463641][T22646] netlink: 'syz.0.5195': attribute type 2 has an invalid length.
[  622.468247][T22646] netlink: 'syz.0.5195': attribute type 2 has an invalid length.
[  622.727372][T22672] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  622.955276][T22682] syzkaller0: entered promiscuous mode
[  622.957233][T22682] syzkaller0: entered allmulticast mode
[  623.003092][  T772] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  623.598794][T22701] __nla_validate_parse: 77 callbacks suppressed
[  623.598889][T22701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5210'.
[  624.219381][T22737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5219'.
[  624.514618][T22753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5226'.
[  624.631570][T22760] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5228'.
[  624.695095][T22776] netlink: 428 bytes leftover after parsing attributes in process `syz.2.5231'.
[  624.764426][T22782] netlink: 284 bytes leftover after parsing attributes in process `syz.0.5235'.
[  624.922004][T22801] netlink: 'syz.0.5235': attribute type 3 has an invalid length.
[  624.924933][T22801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5235'.
[  624.934290][T22793] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  626.002681][ T5866] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  626.006761][ T5866] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  626.042418][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  626.321794][T22868] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5260'.
[  626.452759][ T5866] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  626.925117][T22889] IPv6: NLM_F_CREATE should be specified when creating new route
[  626.931366][T22889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5267'.
[  627.150159][T22912] netlink: 312 bytes leftover after parsing attributes in process `syz.0.5272'.
[  627.403867][T22939] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  627.403881][T22939] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  627.436416][T22941] netlink: 'syz.2.5285': attribute type 8 has an invalid length.
[  627.725627][T22954] netlink: 'syz.2.5290': attribute type 21 has an invalid length.
[  627.778574][T22957] x_tables: ip_tables: osf match: only valid for protocol 6
[  627.961817][T17755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  627.968990][T17755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  628.101462][T22987] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  628.105336][T22987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  628.233516][ T5866] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  628.276102][T23011] netlink: 'syz.1.5308': attribute type 21 has an invalid length.
[  628.278598][T23011] netlink: 'syz.1.5308': attribute type 4 has an invalid length.
[  628.373344][ T5866] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  628.461110][T23044] netlink: 'syz.1.5319': attribute type 1 has an invalid length.
[  628.473434][T23044] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  628.627323][T23065] __nla_validate_parse: 12 callbacks suppressed
[  628.627336][T23065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5320'.
[  628.631988][T23067] lo: entered allmulticast mode
[  628.635479][T23067] lo: left allmulticast mode
[  628.689896][T23070] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20001
[  628.693890][T23070] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20001
[  628.710753][T23072] netlink: 'syz.0.5326': attribute type 1 has an invalid length.
[  628.724516][T23072] bond13: entered promiscuous mode
[  628.726768][T23072] 8021q: adding VLAN 0 to HW filter on device bond13
[  628.736123][T23072] bond13: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  628.740229][T23072] bond13: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  628.744976][T23072] bond13: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  629.109039][T23092] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  629.451008][T23120] netlink: 'syz.1.5339': attribute type 21 has an invalid length.
[  629.458479][T23120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5339'.
[  629.469670][T23120] netlink: 'syz.1.5339': attribute type 21 has an invalid length.
[  629.473052][T23120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5339'.
[  629.923062][T23167] netlink: 'syz.1.5352': attribute type 1 has an invalid length.
[  629.926318][T23167] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  629.965201][T23168] bond9 (unregistering): Released all slaves
[  629.981741][T23175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5353'.
[  630.155701][T23197] netlink: 'syz.0.5358': attribute type 8 has an invalid length.
[  630.183616][T23197] bond14: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  630.192071][T23197] bond14 (unregistering): Released all slaves
[  630.631721][T23245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5363'.
[  630.648637][T23245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5363'.
[  630.653530][T23245] 8021q: adding VLAN 0 to HW filter on device bond9
[  630.713648][T23248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5364'.
[  630.953836][T23269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5368'.
[  630.972611][T23260] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5367'.
[  631.028502][T23275] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  631.185880][T23296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5378'.
[  631.447125][T23315] tipc: Enabled bearer <ib:caif0>, priority 1
[  631.557704][T23332] xt_CT: You must specify a L4 protocol and not use inversions on it
[  631.978991][T23372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  631.982322][T23374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  632.050260][T23384] x_tables: duplicate underflow at hook 1
[  632.698883][T23401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  633.848420][T23454] __nla_validate_parse: 7 callbacks suppressed
[  633.848433][T23454] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5433'.
[  634.282518][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  634.295447][T23465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5436'.
[  634.298861][T23465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5436'.
[  634.510811][T23476] validate_nla: 3 callbacks suppressed
[  634.510822][T23476] netlink: 'syz.0.5440': attribute type 1 has an invalid length.
[  634.545769][T23476] 8021q: adding VLAN 0 to HW filter on device bond14
[  634.555800][T23476] bond14: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  634.560266][T23476] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  634.671788][T23489] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  634.937405][T23524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5459'.
[  635.152425][T23542] syzkaller1: entered promiscuous mode
[  635.157746][T23542] syzkaller1: entered allmulticast mode
[  636.346415][T23573] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  636.423989][T23588] openvswitch: netlink: Message has 572 unknown bytes.
[  636.426251][T23588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  636.429075][T23573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5476'.
[  636.434855][T23588] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  636.437508][T23588] syzkaller0: entered promiscuous mode
[  636.439376][T23588] syzkaller0: entered allmulticast mode
[  636.457555][T23588] tipc: Resetting bearer <eth:syzkaller0>
[  636.461303][T23587] tipc: Resetting bearer <eth:syzkaller0>
[  636.471991][T23587] tipc: Disabling bearer <eth:syzkaller0>
[  636.607942][T23606] wg1 speed is unknown, defaulting to 1000
[  636.622713][T23603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5485'.
[  636.708446][T23616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5489'.
[  636.710884][T23606] wg1 speed is unknown, defaulting to 1000
[  636.719560][T23616] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  636.776003][T23620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5489'.
[  636.920216][T23632] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5494'.
[  637.059817][T23639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5496'.
[  640.042402][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  650.282452][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  660.254072][T23666] xt_policy: too many policy elements
[  660.257156][T23666] netlink: 'syz.1.5505': attribute type 2 has an invalid length.
[  660.297912][T23668] wg1 speed is unknown, defaulting to 1000
[  660.463099][T23668] wg1 speed is unknown, defaulting to 1000
[  660.632090][T23692] syzkaller0: entered promiscuous mode
[  660.635121][T23692] syzkaller0: entered allmulticast mode
[  660.654949][T23668] netlink: 'syz.2.5503': attribute type 28 has an invalid length.
[  660.657610][T23668] netlink: 'syz.2.5503': attribute type 3 has an invalid length.
[  660.660220][T23668] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5503'.
[  661.540633][T23724] xt_TCPMSS: Only works on TCP SYN packets
[  661.699030][T23734] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5526'.
[  661.805404][T23747] netlink: 35 bytes leftover after parsing attributes in process `syz.1.5530'.
[  662.006533][T23762] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  662.210370][T23793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5540'.
[  662.248543][T23791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5539'.
[  662.461475][T23811] syzkaller1: entered promiscuous mode
[  662.463731][T23811] syzkaller1: entered allmulticast mode
[  662.560007][T23820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5546'.
[  662.563038][T23819] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5546'.
[  662.734901][T23835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5550'.
[  663.087043][T23860] netlink: 'syz.2.5556': attribute type 3 has an invalid length.
[  663.112968][T23863] sock: sock_timestamping_bind_phc: sock not bind to device
[  663.116668][T23863] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5558'.
[  663.139974][T23867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5560'.
[  664.491830][T23943] netlink: 'syz.0.5584': attribute type 4 has an invalid length.
[  665.122033][T24000] .71: renamed from .70 (while UP)
[  665.136419][T24000] A link change request failed with some changes committed already. Interface .71 may have been left with an inconsistent configuration, please check.
[  665.142550][T24000] netlink: 'syz.0.5601': attribute type 1 has an invalid length.
[  665.678997][T24028] __nla_validate_parse: 9 callbacks suppressed
[  665.679011][T24028] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5610'.
[  665.685762][T24025] wg1 speed is unknown, defaulting to 1000
[  665.791323][T24025] wg1 speed is unknown, defaulting to 1000
[  665.877304][T24040] syzkaller0: entered promiscuous mode
[  665.884269][T24040] syzkaller0: entered allmulticast mode
[  666.013712][T24050] netlink: 536 bytes leftover after parsing attributes in process `syz.2.5616'.
[  666.056012][T24052] xt_NFQUEUE: number of total queues is 0
[  666.077089][T24054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5618'.
[  666.090810][T24054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5618'.
[  666.149839][T24062] netlink: 'syz.2.5621': attribute type 1 has an invalid length.
[  666.469387][T24088] netlink: 'syz.2.5625': attribute type 83 has an invalid length.
[  666.752066][T24094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5628'.
[  666.757674][T24094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5628'.
[  666.761235][T24094] delete_channel: no stack
[  666.796895][T24096] syzkaller1: entered promiscuous mode
[  666.798726][T24096] syzkaller1: entered allmulticast mode
[  666.991603][T24102] syzkaller1: entered promiscuous mode
[  666.996835][T24102] syzkaller1: entered allmulticast mode
[  667.091502][T24112] syzkaller1: entered promiscuous mode
[  667.094753][T24112] syzkaller1: entered allmulticast mode
[  667.107313][T24102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5632'.
[  667.270369][T24117] !yz!: rxe_newlink: already configured on team_slave_0
[  667.335759][T24127] 8021q: adding VLAN 0 to HW filter on device bond11
[  667.355822][T24127] netlink: 'syz.2.5641': attribute type 15 has an invalid length.
[  667.715425][T24142] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5645'.
[  667.819758][T24149] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  667.927421][T24159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5649'.
[  667.990391][T24168] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5651'.
[  668.174778][   T12] syzkaller0: tun_net_xmit 76
[  668.176594][   T12] syzkaller0: tun_net_xmit 48
[  668.178464][T24177] syzkaller0: create flow: hash 2159904253 index 1
[  668.203070][  T772] syzkaller0: tun_net_xmit 76
[  668.210200][T24176] syzkaller0: delete flow: hash 2159904253 index 1
[  668.263567][T24187] netlink: 'syz.1.5656': attribute type 32 has an invalid length.
[  669.193826][T24187] bond7 (unregistering): Released all slaves
[  669.436626][T24231] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[  669.898559][T24271] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004
[  669.904608][T24273] x_tables: ip_tables: dccp match: only valid for protocol 33
[  669.908924][T24273] xt_addrtype: ipv6 does not support BROADCAST matching
[  670.222764][T24303] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  670.238930][T24303] syzkaller0: entered promiscuous mode
[  670.241320][T24303] syzkaller0: entered allmulticast mode
[  670.832580][T24330] wg1 speed is unknown, defaulting to 1000
[  670.928564][T24330] wg1 speed is unknown, defaulting to 1000
[  671.189050][T24345] __nla_validate_parse: 9 callbacks suppressed
[  671.189061][T24345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5701'.
[  671.539477][T24367] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5708'.
[  671.968024][T24411] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  671.970559][T24411] syzkaller0: entered promiscuous mode
[  671.972371][T24411] syzkaller0: entered allmulticast mode
[  671.976648][T24411] tipc: Resetting bearer <eth:syzkaller0>
[  671.982710][T24410] tipc: Resetting bearer <eth:syzkaller0>
[  671.990955][T24410] tipc: Disabling bearer <eth:syzkaller0>
[  672.162924][T24420] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  672.630171][T24440] sctp: [Deprecated]: syz.0.5731 (pid 24440) Use of int in maxseg socket option.
[  672.630171][T24440] Use struct sctp_assoc_value instead
[  673.674019][T24475] tipc: New replicast peer: 255.255.255.255
[  673.676814][T24475] tipc: Enabled bearer <udp:syz2>, priority 26
[  673.679088][T24475] netlink: 'syz.0.5743': attribute type 4 has an invalid length.
[  674.725658][T24515] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5753'.
[  674.998929][T24551] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2
[  675.735723][T24571] can: request_module (can-proto-3) failed.
[  675.738928][T24567] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  675.839551][T24583] wg1 speed is unknown, defaulting to 1000
[  675.976791][T24583] wg1 speed is unknown, defaulting to 1000
[  676.057551][   T33] audit: type=1107 audit(1765967490.533:5): pid=24600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='FD6۴'
[  676.074158][T24599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5778'.
[  676.088122][T24599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5778'.
[  676.373649][T24627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5789'.
[  676.379227][T24627] openvswitch: netlink: Flow key attr not present in new flow.
[  676.414617][T24633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5794'.
[  676.485068][T24649] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  676.609008][T24669] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  676.840986][T24688] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5807'.
[  676.845217][T24688] netlink: 'syz.1.5807': attribute type 9 has an invalid length.
[  677.626474][T24719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5819'.
[  677.669344][T24722] netlink: 'syz.2.5820': attribute type 3 has an invalid length.
[  677.673239][T24722] netlink: 'syz.2.5820': attribute type 3 has an invalid length.
[  677.678156][T24722] netlink: 'syz.2.5820': attribute type 16 has an invalid length.
[  677.680924][T24722] netlink: 'syz.2.5820': attribute type 3 has an invalid length.
[  677.686082][T24722] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.5820'.
[  678.911035][T24768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5837'.
[  678.922657][T24768] netlink: 'syz.0.5837': attribute type 4 has an invalid length.
[  678.925873][T24766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5836'.
[  678.948812][T24768] syzkaller0: entered promiscuous mode
[  678.950598][T24768] syzkaller0: entered allmulticast mode
[  680.147140][T24792] netlink: 'syz.1.5844': attribute type 13 has an invalid length.
[  680.244787][T24792] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  680.247645][T24792] syzkaller0: entered promiscuous mode
[  680.249333][T24792] syzkaller0: entered allmulticast mode
[  680.280655][T24792] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  680.285775][T24791] tipc: Resetting bearer <eth:syzkaller0>
[  680.313324][T24791] tipc: Disabling bearer <eth:syzkaller0>
[  680.360950][T24811] netlink: 'syz.2.5850': attribute type 1 has an invalid length.
[  680.381676][T24811] 8021q: adding VLAN 0 to HW filter on device bond12
[  680.415866][T24823] Cannot find map_set index 135 as target
[  680.420013][T24823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5852'.
[  680.437747][T24824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5853'.
[  680.486382][T24832] syzkaller0: entered promiscuous mode
[  680.488095][T24832] syzkaller0: entered allmulticast mode
[  680.582086][T24837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5857'.
[  680.666922][T24848] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  681.086790][T24891] tap0: tun_chr_ioctl cmd 1074025681
[  681.099466][T24893] netlink: 'syz.0.5877': attribute type 1 has an invalid length.
[  681.141903][T24893] bond16: (slave bridge13): making interface the new active one
[  681.144832][T24893] bond16: (slave bridge13): Enslaving as an active interface with an up link
[  681.237659][T24907] pim6reg99999999: entered allmulticast mode
[  681.347113][T24916] 8021q: adding VLAN 0 to HW filter on device bond17
[  681.350694][T24916] netlink: 'syz.0.5884': attribute type 30 has an invalid length.
[  681.358011][T24919] netlink: 'syz.0.5884': attribute type 30 has an invalid length.
[  681.391345][T24922] __nla_validate_parse: 6 callbacks suppressed
[  681.391359][T24922] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5886'.
[  681.498616][T24927] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  681.502057][T24927] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.553900][T24927] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  681.557856][T24927] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.643451][    C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  681.650226][T24927] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  681.656306][T24927] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.673382][T24950] syzkaller0: entered promiscuous mode
[  681.675415][T24950] syzkaller0: entered allmulticast mode
[  681.713431][T24927] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  681.722717][T24927] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  681.786807][T24334] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  681.793998][T24334] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  681.828708][T24334] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  681.831950][T24334] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  681.845570][T17649] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  681.848626][T17649] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  681.860777][T17649] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  681.863692][T17649] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  681.902840][T24960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5896'.
[  681.906532][T24960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5896'.
[  681.910224][T24960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5896'.
[  681.919702][T24960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5896'.
[  681.925985][T24960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5896'.
[  681.931006][T24960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5896'.
[  681.936668][T24960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5896'.
[  681.940367][T24960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5896'.
[  681.944289][T24960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5896'.
[  682.234679][T24979] bond13: (slave ip_vti0): Device is not bonding slave
[  682.237573][T24979] bond13: option active_slave: invalid value (ip_vti0)
[  682.243517][T24979] bond13 (unregistering): Released all slaves
[  683.097323][T25015] wg1 speed is unknown, defaulting to 1000
[  683.199457][T25015] wg1 speed is unknown, defaulting to 1000
[  683.540769][T25038] ip6erspan1: entered allmulticast mode
[  683.692911][T25056] pim6reg1: tun_chr_ioctl cmd 21731
[  683.703842][T25056] pim6reg1: tun_chr_ioctl cmd 3227532559
[  683.712094][T25058] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  684.117526][T25087] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  684.658937][T25130] netlink: 'syz.2.5947': attribute type 1 has an invalid length.
[  684.661799][T25129] netlink: 'syz.2.5947': attribute type 1 has an invalid length.
[  684.667758][T25130] netlink: 'syz.2.5947': attribute type 2 has an invalid length.
[  684.671436][T25129] netlink: 'syz.2.5947': attribute type 2 has an invalid length.
[  684.911427][T25144] netlink: 'syz.1.5951': attribute type 1 has an invalid length.
[  685.151735][T25160] Unsupported ieee802154 address type: 0
[  685.254218][T25167] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  685.839859][T25178] lo: Caught tx_queue_len zero misconfig
[  686.066877][T25189] netlink: 'syz.1.5967': attribute type 4 has an invalid length.
[  686.136206][T25204] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  686.139080][T25204] syzkaller0: entered promiscuous mode
[  686.141317][T25204] syzkaller0: entered allmulticast mode
[  686.147257][T25204] tipc: Resetting bearer <eth:syzkaller0>
[  686.152024][T25203] tipc: Resetting bearer <eth:syzkaller0>
[  686.164485][T25203] tipc: Disabling bearer <eth:syzkaller0>
[  686.624205][T25261] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  686.701823][T25268] wg1 speed is unknown, defaulting to 1000
[  686.790924][T25268] wg1 speed is unknown, defaulting to 1000
[  686.811353][T25272] openvswitch: netlink: Key type 30 is not supported
[  686.897539][T25279] Cannot find set identified by id 65534 to match
[  686.930188][T25279] __nla_validate_parse: 56 callbacks suppressed
[  686.930199][T25279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5993'.
[  686.945765][T25279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5993'.
[  686.949895][T25279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5993'.
[  687.117797][T25294] netlink: 'syz.2.5997': attribute type 21 has an invalid length.
[  687.121090][T25294] netlink: 'syz.2.5997': attribute type 1 has an invalid length.
[  687.127113][T25294] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5997'.
[  687.199215][T25306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6000'.
[  687.326141][T25322] netlink: 'syz.0.6004': attribute type 3 has an invalid length.
[  687.328683][T25322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6004'.
[  687.372072][T25326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6007'.
[  709.813385][T25341] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  709.945005][T25357] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6017'.
[  710.324967][T25385] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6030'.
[  710.327716][T25385] netlink: 'syz.2.6030': attribute type 1 has an invalid length.
[  710.330045][T25385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6030'.
[  710.387278][T25406] netlink: 'syz.0.6035': attribute type 3 has an invalid length.
[  710.389819][T25406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6035'.
[  710.418651][T25408] netlink: 360 bytes leftover after parsing attributes in process `syz.2.6036'.
[  710.537793][T25429] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6044'.
[  710.840652][T25465] can: request_module (can-proto-0) failed.
[  710.889843][T25474] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6058'.
[  711.024709][T25484] bond18: option min_links: invalid value (18446744073709551612)
[  711.032353][T25484] bond18: option min_links: allowed values 0 - 2147483647
[  711.038233][T25484] bond18 (unregistering): Released all slaves
[  711.072085][T25495] netlink: 'syz.2.6061': attribute type 1 has an invalid length.
[  711.075098][T25495] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6061'.
[  711.078888][T25495] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6061'.
[  711.248659][T25505] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  711.725588][T25542] netlink: 'syz.1.6077': attribute type 1 has an invalid length.
[  711.728282][T25542] netlink: 'syz.1.6077': attribute type 2 has an invalid length.
[  711.805385][T25553] ip6t_rpfilter: unknown options
[  711.978222][T25562] sctp: [Deprecated]: syz.1.6086 (pid 25562) Use of struct sctp_assoc_value in delayed_ack socket option.
[  711.978222][T25562] Use struct sctp_sack_info instead
[  711.990704][T25564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6085'.
[  712.017847][T25569] netlink: 'syz.1.6087': attribute type 3 has an invalid length.
[  712.026977][T25569] netlink: 'syz.1.6087': attribute type 2 has an invalid length.
[  712.035781][T25569] netlink: 'syz.1.6087': attribute type 9 has an invalid length.
[  712.059962][T25569] bond7: entered promiscuous mode
[  712.061996][T25569] bond7: entered allmulticast mode
[  712.064693][T25569] 8021q: adding VLAN 0 to HW filter on device bond7
[  712.224730][T25586] bond18: Removing last ns target with arp_interval on
[  712.386070][T25594] openvswitch: netlink: Key type 199 is out of range max 32
[  712.390147][T25594] x_tables: duplicate underflow at hook 3
[  712.500886][T25605] netlink: 'syz.1.6101': attribute type 1 has an invalid length.
[  712.739700][T25631] tipc: Disabling bearer <eth:vlan0>
[  712.799413][T25633] bond13: option mode: invalid value (238)
[  712.804431][T25633] bond13 (unregistering): Released all slaves
[  712.964156][T25648] syzkaller1: entered promiscuous mode
[  712.966028][T25648] syzkaller1: entered allmulticast mode
[  714.124659][T25735] netlink: 'syz.0.6137': attribute type 1 has an invalid length.
[  715.036803][T25793] wg1 speed is unknown, defaulting to 1000
[  715.053069][T25797] __nla_validate_parse: 45 callbacks suppressed
[  715.053080][T25797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6154'.
[  715.149589][T25793] wg1 speed is unknown, defaulting to 1000
[  715.415861][T25829] netlink: 728 bytes leftover after parsing attributes in process `syz.0.6167'.
[  715.630282][T25845] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  716.352839][T25920] validate_nla: 1 callbacks suppressed
[  716.352848][T25920] netlink: 'syz.1.6199': attribute type 1 has an invalid length.
[  716.410710][T25920] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  716.414100][T25920] syzkaller0: entered promiscuous mode
[  716.416161][T25920] syzkaller0: entered allmulticast mode
[  716.421539][T25919] tipc: Resetting bearer <eth:syzkaller0>
[  716.437477][T25919] tipc: Disabling bearer <eth:syzkaller0>
[  716.525300][T25922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6200'.
[  716.773480][T25927] netlink: 'syz.0.6202': attribute type 1 has an invalid length.
[  716.776133][T25928] netlink: 'syz.0.6202': attribute type 1 has an invalid length.
[  716.778614][T25928] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  716.781640][T25927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  717.028732][T25946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6208'.
[  717.103276][T25948] xt_policy: neither incoming nor outgoing policy selected
[  717.141785][T25953] xt_CT: No such helper "snmp_trap"
[  717.178126][T25956] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6211'.
[  717.295056][T25968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6215'.
[  717.432603][T25979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6219'.
[  717.583906][T25995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6226'.
[  717.624715][T25998] wg1 speed is unknown, defaulting to 1000
[  717.714486][T26003] syzkaller1: tun_chr_ioctl cmd 1074025677
[  717.717119][T26003] syzkaller1: linktype set to 823
[  717.720504][T26003] netlink: 'syz.2.6229': attribute type 28 has an invalid length.
[  717.722616][T26006] netlink: 'syz.2.6229': attribute type 28 has an invalid length.
[  717.818104][T25998] wg1 speed is unknown, defaulting to 1000
[  717.938070][T26011] netlink: set zone limit has 4 unknown bytes
[  718.167377][T26030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6237'.
[  718.170421][T26030] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6237'.
[  718.231555][T26041] block nbd0: not configured, cannot reconfigure
[  718.301466][T26053] netlink: 'syz.0.6245': attribute type 1 has an invalid length.
[  718.308174][T26053] netlink: 'syz.0.6245': attribute type 6 has an invalid length.
[  718.311626][T26053] netlink: 'syz.0.6245': attribute type 3 has an invalid length.
[  718.381585][T26065] tap0: tun_chr_ioctl cmd 1074025677
[  718.383597][T26065] tap0: linktype set to 776
[  718.944373][T26102] xt_CT: No such helper "snmp_trap"
[  718.951162][T26102] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  718.955124][T26102] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  719.027554][T26113] syzkaller1: tun_chr_ioctl cmd 1074025677
[  719.030796][T26113] syzkaller1: linktype set to 260
[  719.101468][T26115] delete_channel: no stack
[  719.290118][T26138] netlink: 'syz.1.6274': attribute type 4 has an invalid length.
[  720.207101][T26157] __nla_validate_parse: 6 callbacks suppressed
[  720.207112][T26157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6278'.
[  720.250612][T26166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6282'.
[  720.269468][T26166] bond0: Error: Cannot enslave bond to itself.
[  720.296815][T26169] openvswitch: netlink: IP tunnel dst address not specified
[  720.325777][T26171] netlink: 'syz.1.6284': attribute type 6 has an invalid length.
[  721.330381][T26195] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6293'.
[  721.444951][T26205] validate_nla: 1 callbacks suppressed
[  721.445002][T26205] netlink: 'syz.0.6295': attribute type 3 has an invalid length.
[  721.478264][T26211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6297'.
[  721.566099][T26221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  721.760370][T26231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6303'.
[  721.866538][T26240] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6307'.
[  721.869806][T26240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6307'.
[  722.028031][T26254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6310'.
[  722.095660][T26261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6312'.
[  722.195364][T26267] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6314'.
[  722.394837][T26281] netlink: 'syz.1.6317': attribute type 1 has an invalid length.
[  723.280943][T26304] netlink: 'syz.2.6326': attribute type 21 has an invalid length.
[  723.289255][T26304] netlink: 'syz.2.6326': attribute type 4 has an invalid length.
[  723.292810][T26304] netlink: 'syz.2.6326': attribute type 5 has an invalid length.
[  723.297786][T26304] syzkaller0: entered promiscuous mode
[  723.300245][T26304] syzkaller0: entered allmulticast mode
[  723.865405][T26378] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  724.264183][T26380] netlink: 'syz.1.6350': attribute type 19 has an invalid length.
[  724.267045][T26380] netlink: 'syz.1.6350': attribute type 20 has an invalid length.
[  724.325908][T26382] batman_adv: batadv0: Removing interface: batadv_slave_1
[  724.837731][T26426] bond19: invalid ARP target 0.0.0.0 specified for addition
[  724.841222][T26426] bond19: option arp_ip_target: invalid value (0)
[  724.846428][T26426] bond19 (unregistering): Released all slaves
[  725.123586][T26430] 
[  725.124587][T26430] ======================================================
[  725.127226][T26430] WARNING: possible circular locking dependency detected
[  725.129808][T26430] syzkaller #0 Not tainted
[  725.131621][T26430] ------------------------------------------------------
[  725.133979][T26430] syz.2.6368/26430 is trying to acquire lock:
[  725.135834][T26430] ffffffff8e02d188 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x25b/0x1750
[  725.139030][T26430] 
[  725.139030][T26430] but task is already holding lock:
[  725.141403][T26430] ffff88810a6958f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  725.144578][T26430] 
[  725.144578][T26430] which lock already depends on the new lock.
[  725.144578][T26430] 
[  725.147731][T26430] 
[  725.147731][T26430] the existing dependency chain (in reverse order) is:
[  725.150448][T26430] 
[  725.150448][T26430] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  725.153270][T26430]        blk_alloc_queue+0x538/0x620
[  725.154966][T26430]        __blk_mq_alloc_disk+0x15c/0x340
[  725.156723][T26430]        nbd_dev_add+0x46c/0xae0
[  725.158291][T26430]        nbd_init+0x168/0x1f0
[  725.159794][T26430]        do_one_initcall+0x1fb/0x7f0
[  725.161491][T26430]        do_initcall_level+0x104/0x190
[  725.163194][T26430]        do_initcalls+0x59/0xa0
[  725.164693][T26430]        kernel_init_freeable+0x334/0x4b0
[  725.166478][T26430]        kernel_init+0x1d/0x1d0
[  725.167989][T26430]        ret_from_fork+0x599/0xb30
[  725.169562][T26430]        ret_from_fork_asm+0x1a/0x30
[  725.171254][T26430] 
[  725.171254][T26430] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  725.173530][T26430]        fs_reclaim_acquire+0x72/0x100
[  725.175227][T26430]        prepare_alloc_pages+0x153/0x610
[  725.176974][T26430]        __alloc_frozen_pages_noprof+0x123/0x370
[  725.178915][T26430]        __alloc_pages_noprof+0xa/0x30
[  725.180613][T26430]        pcpu_populate_chunk+0x182/0xb30
[  725.182438][T26430]        pcpu_alloc_noprof+0xcb6/0x1750
[  725.184466][T26430]        xt_percpu_counter_alloc+0x161/0x220
[  725.186374][T26430]        translate_table+0x12e9/0x2000
[  725.188135][T26430]        ipt_register_table+0x106/0x7c0
[  725.189914][T26430]        iptable_security_table_init+0x41/0x70
[  725.192058][T26430]        xt_find_table_lock+0x30c/0x3e0
[  725.194220][T26430]        xt_request_find_table_lock+0x26/0x100
[  725.196225][T26430]        do_ipt_get_ctl+0x730/0x1180
[  725.198054][T26430]        nf_getsockopt+0x26e/0x290
[  725.199708][T26430]        ip_getsockopt+0x1c4/0x220
[  725.201600][T26430]        do_sock_getsockopt+0x2b4/0x3d0
[  725.203442][T26430]        __x64_sys_getsockopt+0x1a5/0x250
[  725.205317][T26430]        do_syscall_64+0xfa/0xf80
[  725.207064][T26430]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.209189][T26430] 
[  725.209189][T26430] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}:
[  725.211847][T26430]        __lock_acquire+0x15a6/0x2cf0
[  725.214035][T26430]        lock_acquire+0x117/0x340
[  725.216066][T26430]        __mutex_lock+0x187/0x1350
[  725.218096][T26430]        pcpu_alloc_noprof+0x25b/0x1750
[  725.219971][T26430]        sbitmap_init_node+0x1e1/0x640
[  725.221833][T26430]        sbitmap_queue_init_node+0x3e/0x4d0
[  725.223707][T26430]        blk_mq_init_tags+0x15c/0x2d0
[  725.225416][T26430]        blk_mq_alloc_map_and_rqs+0xbb/0x9c0
[  725.227263][T26430]        blk_mq_update_nr_hw_queues+0xa26/0x1ab0
[  725.229482][T26430]        nbd_start_device+0x17f/0xb10
[  725.231378][T26430]        nbd_genl_connect+0x135b/0x18f0
[  725.233312][T26430]        genl_family_rcv_msg_doit+0x215/0x300
[  725.235332][T26430]        genl_rcv_msg+0x60e/0x790
[  725.237081][T26430]        netlink_rcv_skb+0x208/0x470
[  725.238906][T26430]        genl_rcv+0x28/0x40
[  725.240348][T26430]        netlink_unicast+0x82f/0x9e0
[  725.242132][T26430]        netlink_sendmsg+0x805/0xb30
[  725.243764][T26430]        __sock_sendmsg+0x21c/0x270
[  725.245386][T26430]        ____sys_sendmsg+0x505/0x820
[  725.247012][T26430]        ___sys_sendmsg+0x21f/0x2a0
[  725.248597][T26430]        __x64_sys_sendmsg+0x19b/0x260
[  725.250250][T26430]        do_syscall_64+0xfa/0xf80
[  725.251862][T26430]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.253835][T26430] 
[  725.253835][T26430] other info that might help us debug this:
[  725.253835][T26430] 
[  725.257006][T26430] Chain exists of:
[  725.257006][T26430]   pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#49
[  725.257006][T26430] 
[  725.261293][T26430]  Possible unsafe locking scenario:
[  725.261293][T26430] 
[  725.263627][T26430]        CPU0                    CPU1
[  725.265281][T26430]        ----                    ----
[  725.267143][T26430]   lock(&q->q_usage_counter(io)#49);
[  725.269019][T26430]                                lock(fs_reclaim);
[  725.271366][T26430]                                lock(&q->q_usage_counter(io)#49);
[  725.274478][T26430]   lock(pcpu_alloc_mutex);
[  725.276346][T26430] 
[  725.276346][T26430]  *** DEADLOCK ***
[  725.276346][T26430] 
[  725.279560][T26430] 6 locks held by syz.2.6368/26430:
[  725.281648][T26430]  #0: ffffffff8f35d170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  725.284933][T26430]  #1: ffffffff8f35cf88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  725.288572][T26430]  #2: ffff88810a75e1d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1ab0
[  725.293176][T26430]  #3: ffff88810a75e0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1ab0
[  725.297594][T26430]  #4: ffff88810a6958f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  725.300935][T26430]  #5: ffff88810a695930 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  725.304567][T26430] 
[  725.304567][T26430] stack backtrace:
[  725.306408][T26430] CPU: 1 UID: 0 PID: 26430 Comm: syz.2.6368 Not tainted syzkaller #0 PREEMPT(full) 
[  725.306418][T26430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  725.306422][T26430] Call Trace:
[  725.306426][T26430]  <TASK>
[  725.306430][T26430]  dump_stack_lvl+0x189/0x250
[  725.306441][T26430]  ? __pfx_dump_stack_lvl+0x10/0x10
[  725.306448][T26430]  ? __pfx__printk+0x10/0x10
[  725.306458][T26430]  ? print_lock_name+0xde/0x100
[  725.306468][T26430]  print_circular_bug+0x2e2/0x300
[  725.306478][T26430]  check_noncircular+0x12e/0x150
[  725.306489][T26430]  __lock_acquire+0x15a6/0x2cf0
[  725.306500][T26430]  ? pcpu_alloc_noprof+0x25b/0x1750
[  725.306510][T26430]  lock_acquire+0x117/0x340
[  725.306516][T26430]  ? pcpu_alloc_noprof+0x25b/0x1750
[  725.306527][T26430]  __mutex_lock+0x187/0x1350
[  725.306536][T26430]  ? pcpu_alloc_noprof+0x25b/0x1750
[  725.306544][T26430]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  725.306552][T26430]  ? kasan_save_track+0x4f/0x80
[  725.306559][T26430]  ? kasan_save_track+0x3e/0x80
[  725.306566][T26430]  ? __kasan_kmalloc+0x93/0xb0
[  725.306574][T26430]  ? blk_mq_init_tags+0x83/0x2d0
[  725.306583][T26430]  ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0
[  725.306590][T26430]  ? blk_mq_update_nr_hw_queues+0xa26/0x1ab0
[  725.306597][T26430]  ? pcpu_alloc_noprof+0x25b/0x1750
[  725.306605][T26430]  ? nbd_genl_connect+0x135b/0x18f0
[  725.306613][T26430]  ? genl_family_rcv_msg_doit+0x215/0x300
[  725.306622][T26430]  ? genl_rcv_msg+0x60e/0x790
[  725.306629][T26430]  ? __pfx___mutex_lock+0x10/0x10
[  725.306637][T26430]  ? ____sys_sendmsg+0x505/0x820
[  725.306646][T26430]  ? do_syscall_64+0xfa/0xf80
[  725.306654][T26430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.306663][T26430]  pcpu_alloc_noprof+0x25b/0x1750
[  725.306674][T26430]  sbitmap_init_node+0x1e1/0x640
[  725.306685][T26430]  sbitmap_queue_init_node+0x3e/0x4d0
[  725.306696][T26430]  blk_mq_init_tags+0x15c/0x2d0
[  725.306706][T26430]  blk_mq_alloc_map_and_rqs+0xbb/0x9c0
[  725.306713][T26430]  ? blk_mq_update_nr_hw_queues+0x928/0x1ab0
[  725.306720][T26430]  ? kfree+0x1c0/0x660
[  725.306726][T26430]  ? blk_mq_update_nr_hw_queues+0x8d0/0x1ab0
[  725.306734][T26430]  blk_mq_update_nr_hw_queues+0xa26/0x1ab0
[  725.306744][T26430]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  725.306755][T26430]  ? sysfs_add_file_mode_ns+0x259/0x300
[  725.306764][T26430]  nbd_start_device+0x17f/0xb10
[  725.306772][T26430]  ? device_create_file+0xf4/0x1b0
[  725.306781][T26430]  nbd_genl_connect+0x135b/0x18f0
[  725.306790][T26430]  ? __pfx_nbd_genl_connect+0x10/0x10
[  725.306799][T26430]  ? rcu_is_watching+0x15/0xb0
[  725.306806][T26430]  ? __nla_parse+0x40/0x60
[  725.306815][T26430]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  725.306824][T26430]  genl_family_rcv_msg_doit+0x215/0x300
[  725.306833][T26430]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  725.306843][T26430]  ? __lock_acquire+0x6b6/0x2cf0
[  725.306850][T26430]  genl_rcv_msg+0x60e/0x790
[  725.306864][T26430]  ? __pfx_genl_rcv_msg+0x10/0x10
[  725.306871][T26430]  ? __pfx_nbd_genl_connect+0x10/0x10
[  725.306881][T26430]  netlink_rcv_skb+0x208/0x470
[  725.306887][T26430]  ? __pfx_genl_rcv_msg+0x10/0x10
[  725.306894][T26430]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  725.306903][T26430]  ? down_read+0x274/0x2e0
[  725.306912][T26430]  ? genl_rcv+0xd/0x40
[  725.306919][T26430]  genl_rcv+0x28/0x40
[  725.306926][T26430]  netlink_unicast+0x82f/0x9e0
[  725.306939][T26430]  ? __pfx_netlink_unicast+0x10/0x10
[  725.306973][T26430]  ? netlink_sendmsg+0x642/0xb30
[  725.306980][T26430]  ? skb_put+0x11b/0x210
[  725.306990][T26430]  netlink_sendmsg+0x805/0xb30
[  725.306998][T26430]  ? __pfx_netlink_sendmsg+0x10/0x10
[  725.307006][T26430]  ? aa_sock_msg_perm+0xf1/0x1b0
[  725.307013][T26430]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  725.307023][T26430]  ? __pfx_netlink_sendmsg+0x10/0x10
[  725.307029][T26430]  __sock_sendmsg+0x21c/0x270
[  725.307037][T26430]  ____sys_sendmsg+0x505/0x820
[  725.307048][T26430]  ? __pfx_____sys_sendmsg+0x10/0x10
[  725.307059][T26430]  ? import_iovec+0x74/0xa0
[  725.307068][T26430]  ___sys_sendmsg+0x21f/0x2a0
[  725.307077][T26430]  ? __pfx____sys_sendmsg+0x10/0x10
[  725.307087][T26430]  ? futex_wait+0x285/0x360
[  725.307098][T26430]  ? __fget_files+0x2a/0x420
[  725.307103][T26430]  ? __fget_files+0x3a0/0x420
[  725.307110][T26430]  __x64_sys_sendmsg+0x19b/0x260
[  725.307120][T26430]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  725.307131][T26430]  ? do_syscall_64+0xbe/0xf80
[  725.307140][T26430]  do_syscall_64+0xfa/0xf80
[  725.307147][T26430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.307153][T26430]  ? exc_page_fault+0xab/0x100
[  725.307161][T26430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.307167][T26430] RIP: 0033:0x7f692858f7c9
[  725.307175][T26430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  725.307181][T26430] RSP: 002b:00007f6929427038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  725.307189][T26430] RAX: ffffffffffffffda RBX: 00007f69287e5fa0 RCX: 00007f692858f7c9
[  725.307195][T26430] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000007
[  725.307200][T26430] RBP: 00007f69285f297f R08: 0000000000000000 R09: 0000000000000000
[  725.307204][T26430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  725.307208][T26430] R13: 00007f69287e6038 R14: 00007f69287e5fa0 R15: 00007fff35e061a8
[  725.307216][T26430]  </TASK>
[  725.542255][T26430] nbd0: detected capacity change from 0 to 127
[  725.602877][T26456] block nbd0: Receive control failed (result -32)
[  725.605043][T26455] block nbd0: Receive control failed (result -32)
[  725.607138][T26454] block nbd0: Receive control failed (result -32)
[  725.609202][T26453] block nbd0: Receive control failed (result -32)
[  725.611477][T26457] block nbd0: Receive control failed (result -32)
[  725.613633][T26452] block nbd0: Receive control failed (result -32)
