last executing test programs:

3.948339416s ago: executing program 2 (id=1701):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r1 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="64723b9ff18da85c7f84761ca6e6eaf1a2cfe59c766d66d1a1bd4898b64e28368b34ed425b59594f48717c8c070c79a7c78a3aa3b487fcd9d70707c262ee0a36f746c3922f2cf269d3d4134b0e68f498d74fceff7becde66", 0x58}], 0x1}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64)
setsockopt$MRT_TABLE(r2, 0x0, 0xcf, 0x0, 0x0)
close(0x4)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r5, @ANYBLOB="08000200ac1414aab2c9"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_DATA={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004010}, 0x4040)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r8 = socket(0x10, 0x803, 0x4)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x5, 0x7, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4}}]}, 0x38}, 0x1, 0x7}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)

3.619891214s ago: executing program 2 (id=1703):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x8002, 0x6}, 0x10)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

3.538438283s ago: executing program 2 (id=1705):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b0000"], 0x28}}, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x80)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f0000000080), &(0x7f0000000140)=@tcp6, 0x1}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r9, 0x6, 0xd, &(0x7f0000000000)='O', 0x1)
setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x34, 0x0, "230e1020eac14c90279e939261bb62bbd14cbd2ff115a91093bf248f2ef833cafdcfc967d3aaa234cf1d47f2b5e7df3f3926eb5492918df4e31896b6eb70da94e9522855eaf48e43f2aba9c6319f9294"}, 0xd8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})

1.356391369s ago: executing program 1 (id=1733):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x311000, 0x0) (async)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x311000, 0x0)
ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000180)=0x9)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x2d, &(0x7f0000000040), 0x4)
write$6lowpan_control(0xffffffffffffffff, &(0x7f00000001c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a31000000001400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a31000000001400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6tnl0\x00', <r8=>r4, 0x4, 0x2, 0x7, 0x400, 0x1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x20, 0x7, 0x1, 0x1000}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', <r9=>0x0})
sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)}], 0x1, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc6}}, @ip_retopts={{0x98, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0xe5, 0x0, 0xb, [0x2, 0x8, 0x7, 0x5, 0x6, 0x7fffffff, 0x5]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xd, 0x0, 0x5, [0x9]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xd8, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x83, 0xe, "3f69a10a01e7fb5fa0072e1b"}, @cipso={0x86, 0x2c, 0x3, [{0x6, 0x5, "feb462"}, {0x5, 0x6, "96818885"}, {0x0, 0xb, "8a9b03c19f89858456"}, {0x1, 0x5, "d61989"}, {0x1, 0x3, "a7"}, {0x7, 0x8, "899204b68414"}]}, @ssrr={0x89, 0x7, 0xf2, [@remote]}, @generic={0x82, 0x5, "8a0d5e"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5301}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @rand_addr=0x64010102}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x6c, [@local, @rand_addr=0x64010102, @loopback, @remote, @multicast2, @rand_addr=0x64010100]}, @generic={0x94, 0x10, "b5c4fb1bf5e17c695f0880a10b5f"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xa7, [@dev={0xac, 0x14, 0x14, 0x3a}]}, @end, @lsrr={0x83, 0x23, 0x39, [@loopback, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback, @remote, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @lsrr={0x83, 0x1b, 0x4f, [@local, @dev={0xac, 0x14, 0x14, 0x22}, @multicast2, @multicast2, @empty, @local]}, @ssrr={0x89, 0xb, 0xa1, [@local, @multicast1]}]}}}], 0x1d0}}, {{&(0x7f0000000740)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000840)="5d7eae1df283c0526cea75fed40badf723b3274cd099eff61b0e2efbf5b93b89429613c91d6be64b2f7e39560beccc9f53fdde02087833def56ee04b82fea1e270bc2bdd191b84935d68ce6dcb7a50d45168c0e6a41b255edbc89922e8882871e1e0cf2490752e76e20ef9cd42717278f8ce2828118fa4424bc1f02651c22cf9ecf7243f10f1fe9ade413f278525af6de85bba8b2114b68b2d6c3f31aa27dbd2", 0xa0}], 0x1}}, {{&(0x7f0000000940)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000980)="409ac6f5b85c31491c728d4d5aa5da299d94ff9596564b6afc49cca908c31118524d1414d887b81446b26ae710d9caf3c2f7b415d7ecd694c5ae09458cdef4bb7ea86c335be86a5e331e069715476136b20c2d3c49e3071125b4716df684469b504303fe62bbd3c8a0b5fece", 0x6c}, {&(0x7f0000000a00)="f0434fd1b78dfa6fbf9e5ef6f090d385a4fe08b9efbd529e21bded87ec", 0x1d}], 0x2, &(0x7f0000000a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x15}, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x98, 0x1, 0x7, [{@local, 0x8}, {@empty, 0xc}, {@multicast2, 0x1f}, {@rand_addr=0x64010101, 0x1}, {@multicast2, 0x10000}]}, @lsrr={0x83, 0x13, 0xaa, [@private=0xa010100, @multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}]}, @ssrr={0x89, 0x1f, 0x34, [@loopback, @remote, @dev={0xac, 0x14, 0x14, 0x20}, @local, @multicast2, @empty, @private=0xa010101]}, @timestamp_addr={0x44, 0xc, 0x50, 0x1, 0xd, [{@multicast1, 0x991d}]}, @lsrr={0x83, 0x13, 0xb2, [@rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local]}, @generic={0x89, 0xb, "6fd46a1e9cbd4afc99"}, @end, @generic={0x89, 0xd, "3ebb92ec208204cbafb693"}]}}}], 0x120}}], 0x3, 0x4000)
close(r7)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c00000010003904faffffff0000000000000000", @ANYRES32=r4, @ANYBLOB="40180200002000003c001280080001006772650030000280050013000000000004001200050017001c000000060010004e0200000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', r4, 0xe3720fa4da23dd91, 0x10, 0x1, 0x807ff, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x29}, 0x10, 0x0, 0x80000001, 0x1}}) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', <r10=>r4, 0xe3720fa4da23dd91, 0x10, 0x1, 0x807ff, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x29}, 0x10, 0x0, 0x80000001, 0x1}})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0)

1.238262463s ago: executing program 0 (id=1734):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x200000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x200000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000100)={'gretap0\x00', <r2=>0x0, 0x8000, 0x40, 0x9, 0x3, {{0x2f, 0x4, 0x2, 0x1e, 0xbc, 0x68, 0x0, 0x9, 0x4, 0x0, @multicast1, @remote, {[@rr={0x7, 0x2b, 0x5, [@multicast2, @empty, @multicast1, @local, @remote, @rand_addr=0x64010101, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty]}, @ssrr={0x89, 0xb, 0x9f, [@multicast2, @multicast1]}, @lsrr={0x83, 0x27, 0x85, [@remote, @local, @rand_addr=0x64010101, @rand_addr=0x64010101, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x6c, 0x3, 0x6, [{@private=0xa010102, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}]}, @rr={0x7, 0xf, 0xe0, [@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x14}]}, @ssrr={0x89, 0x23, 0xbc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @noop, @end]}}}}})
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x20, 0xc, 0x4, 0x7ff, 0x0, r1, 0x7, '\x00', r2, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50)
socket$can_bcm(0x1d, 0x2, 0x2)

1.237048413s ago: executing program 0 (id=1735):
r0 = socket$inet(0x2, 0x2, 0x5)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001f40)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff3}, {0xffe0, 0xfff3}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x2000094}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c00"], 0x48}}, 0x4084)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r4, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

1.119244704s ago: executing program 1 (id=1736):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (rerun: 32)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r1}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'gre0\x00', &(0x7f0000000140)={'gretap0\x00', <r3=>r1, 0x40, 0x40, 0xfffffff7, 0x800, {{0x33, 0x4, 0x2, 0x6, 0xcc, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast2, @loopback, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x54, 0x96, 0x3, 0x5, [{@multicast2, 0x3}, {@multicast2, 0x9a}, {@multicast2, 0x80000001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd74}, {@rand_addr=0x64010101, 0x8}, {@multicast2}, {@local, 0x9}, {@empty, 0x2}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xfffffff7}]}, @rr={0x7, 0x1b, 0x3d, [@multicast2, @empty, @local, @rand_addr=0x64010101, @remote, @loopback]}, @lsrr={0x83, 0xf, 0x45, [@rand_addr=0x64010102, @broadcast, @rand_addr=0x64010101]}, @timestamp={0x44, 0x8, 0x72, 0x0, 0x5, [0x1]}, @generic={0x7, 0x3, "9a"}, @timestamp={0x44, 0x18, 0x81, 0x0, 0x3, [0x7, 0x2, 0xa60a, 0x5, 0x9]}, @generic={0x82, 0x10, "84b3ebab26dd28243387aa2713c1"}]}}}}}) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x15, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x84)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x154, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0xd116a66e15f35b5e) (async, rerun: 32)
r4 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f00000001c0)=0x3, 0x4)
r5 = socket$kcm(0x2b, 0x1, 0x0)
close(r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async, rerun: 64)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) (rerun: 64)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
close(r5) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="06022dbd7000ff0c00990009000000404850b69176cdf6a4c2129caa40114a00000000000000000000a05015acdf4e6a21689f7c"], 0x20}, 0x1, 0x0, 0x0, 0x20004804}, 0x0)

1.114796347s ago: executing program 1 (id=1737):
socket$kcm(0xa, 0x1, 0x106)
r0 = socket$inet6(0xa, 0x4, 0x2001)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0)

999.570444ms ago: executing program 0 (id=1738):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x39}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r3, 0x89f5, &(0x7f0000000000))
bind$bt_hci(r2, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f00000006c0)="38000000010006", 0x7)
ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000c80)={&(0x7f0000000400)=0x1, 0x2, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000c40)})
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000003c0)=0x1e6, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c0099000b0000001f0000000800a0007609000008009f000c000000080026006c09"], 0x40}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$BTRFS_IOC_DEV_REPLACE(r7, 0xca289435, &(0x7f0000000e40)={0x0, 0x6, @status={[0xf, 0x8000, 0x6, 0x3, 0x7f, 0x6]}, [0x6, 0x4, 0xc3c, 0x9, 0xfffc000000000000, 0x9, 0x1985, 0x100000001, 0x1, 0xd, 0x6, 0x1, 0x2, 0x10, 0x9, 0x1000, 0x4, 0x7, 0x3, 0xfffffffffffffffb, 0xfffffffffffffff7, 0x2, 0x3, 0x12f56e2e, 0x7, 0x6, 0x6, 0x4, 0x0, 0x2, 0xffffffffffffffff, 0x5, 0xff, 0x7, 0x1d9, 0x23, 0x232, 0xc, 0x7ff, 0x7, 0x1ff, 0x9, 0x0, 0x7, 0x8000, 0x8000, 0xd3c, 0x2, 0xffffffffffffffff, 0x7, 0x9, 0xcb, 0x7, 0x7f0c09a0, 0x6, 0x5, 0x43a, 0x80000001, 0x7fff, 0x3, 0x6, 0x3, 0x9, 0x7]})
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="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"], 0x14}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000cc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r8, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}}, 0x20048804)
ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f00000002c0)={&(0x7f0000000000)=0x3, 0x8, &(0x7f00000001c0)=[{}], &(0x7f0000000280)})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = getuid()
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@can_newroute={0x1c, 0x18, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@CGW_MOD_UID={0x8, 0xe, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x40088c5)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x480c0}, 0x0)
sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000d00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r6, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x25}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4804}, 0x4044001)

998.960754ms ago: executing program 1 (id=1739):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) (async, rerun: 64)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r0) (rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x408c0}, 0x0) (async)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$cgroup_pid(r2, &(0x7f0000002380), 0x12) (async)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r5=>0x0}) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, 0x25, 0x101, 0x70bd22, 0xfffffffc, {0xa}, [@typed={0x16, 0x10d, 0x0, 0x0, @str='\x00\xaf\xec#6m\xb2\xb9J,C\xcbh\x06\x8d\x98e$'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0)
r7 = socket(0x8, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@local, @empty}, &(0x7f0000000340)=0xc) (async)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000325bd7000fedbdf25040000080000000000000000270000000500030006000000"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x40081) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3800000010003b15fdffffffffdbdf2500000023", @ANYRES32=0x0], 0x38}}, 0x2400c080)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009e492a626a68033b16732db03e94f9f5692794296197ee5ec6be3d2562e271f31fb0ee0d81d0e9dc24df7108a001171c4415dc8f9a11436a9005da29fcd7a09602c78415b5864bf8051b9625d013cafc6935fe3c08e10ba15f9685f02e6f05ae883f15a0a3b02a26149dd50a52ffd6591c966bf7a8ed19c1ae2be066fa553a00a4c7607e12c2e1b8352d44302f346a10cc67cf3316ad8dfd7568130eb02f9d1a1941d13dbf491347112b2fe8275c95a7b6bc75a7deb2f3b23d1305f4f651ea9de1324ce9d84caffd3bbda96062716bbdd595d1", @ANYRESDEC=r5, @ANYRES32=r9, @ANYRESHEX=r3], 0x50)
r11 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10, 0x80000)
setsockopt$inet_opts(r11, 0x0, 0x0, &(0x7f0000000140), 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) (async)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) (async)
bind$inet6(r12, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) (async)
setsockopt$inet_sctp6_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10)

985.216418ms ago: executing program 0 (id=1740):
socket$netlink(0x10, 0x3, 0x8000000004)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000004a00030000200000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000140001"], 0x30}, 0x1, 0x0, 0x0, 0x44090}, 0x900)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xb8f, 0xa9, 0xe93b}, &(0x7f00000001c0)=0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001e000100fdffffff006be9c30000000200000001000007000000000800070002000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x42816}, 0x1)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r8 = socket(0x10, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x43a0b2072100a883)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x3}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
r10 = socket(0x6, 0x800, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0})
recvmsg(r10, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0)
sendmmsg$unix(r10, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xa888, r11, 0x2e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

889.809359ms ago: executing program 1 (id=1741):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0xffffffffffffffff, 0x9, 0x6, 0xfffffffffffffff9, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x3, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8881}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newsa={0x210, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0xa0, 0x0, 0x4}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0xca, 0x2, {{'salsa20-generic\x00'}, 0x410, "c8cf29ea454884cd09b513adcde246f1b71da6339926afa870fdd9502b968652891e74c6923f9abd4e2ab25e49aca686291ca9bca1e1776998a71ac3d60c504c7f25525872453e602809f6d033ace55029fd1775d63a4e22cb43730bd2483efd4f83bc252220a0ef8667b957e8ce8e9bc123bc6f530326b9254e18fb279d34b92856"}}, @lastused={0xc, 0xf, 0x4}]}, 0x210}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x1, 0x80, 0x8, 0x9, {{0xe, 0x4, 0x0, 0x12, 0x38, 0x68, 0x0, 0x3, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1f, 0xc2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @multicast2, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000200)={'tunl0\x00', <r3=>0x0, 0x1, 0x80, 0x8, 0x9, {{0xe, 0x4, 0x0, 0x12, 0x38, 0x68, 0x0, 0x3, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1f, 0xc2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @multicast2, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}}})
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f00000001c0)={0x0, 0x0, 0xc, r3, 0x4}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3f, r6, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000008638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000000008638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_icmp(0x2, 0x2, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000002000101d89a03d9040000000000000000020000002400018014e5268005000100e0000001ab45871595edb96e2e73b208000200e00000010c000280050001000043c2afecf48e9f889ac9fd6a5a76ab358de46702a0bc99e4a08f935e73fb8d6a7e6a2567d78af093bb1193e4f45071bc"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="24000000360007010300000000000002017c000010"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=ANY=[@ANYBLOB="24000000360007010300000000000002017c000010"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r13, &(0x7f0000000200), 0x806000)

888.945851ms ago: executing program 0 (id=1742):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r0=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x30, 0x0, 0x1, 0x200000, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}]}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002900)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="08000000127cd4", @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf257f00000008000300", @ANYRES32=r0, @ANYBLOB="0c009900030000003a00000014005500f7e0516fda56d1e6179f9f259b6ec71406004800550000000a00f500ffffffffffff000014005500374bcb5391c3dd0fcdf71cb66502c42d140055008c638a49ad622839c7ba1b91dfc00023"], 0x78}}, 0xc000)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x88}, [@generic={0x91, 0x1, 0x1, 0x76}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @initdev}, &(0x7f0000000180)=0xc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000027c0)={&(0x7f0000000540)={0x84, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x200080c0}, 0x1011)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6tnl0\x00', <r3=>0x0, 0x4, 0xff, 0x8, 0x4, 0x6, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x1, 0x2, 0x7}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@private0, <r4=>0x0}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@RTM_DELMDB={0x38, 0x55, 0x200, 0x70bd2c, 0x25dfdbff, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x5, 0x4, {@ip4=@multicast2, 0x8edd}}}]}, 0x38}}, 0xc080)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x4)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001680)={r5, &(0x7f00000002c0), &(0x7f0000000680)=""/4096, 0x4}, 0x20)
ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f00000002c0)={0x4, 0x6, 0x1, 0x6, 0x9, 0x10, 0x13, "a6f145da8f3cc139a83a02346a8b7618ff567470", "738f53110dbfdc9a542b63af2dbe841bbb60a4f4"})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4d, 0xbd, 0x1, 0x80000001}, {0x35}, {0x6, 0x0, 0x0, 0x1}]}, 0x10)
r6 = socket$kcm(0x2, 0xa, 0x73)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
recvmmsg$unix(r6, &(0x7f00000032c0)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000007c0)=""/183, 0xb7}, {&(0x7f0000000880)=""/110, 0x6e}, {&(0x7f0000000900)=""/1, 0x1}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/162, 0xa2}, {&(0x7f0000000a80)=""/170, 0xaa}, {&(0x7f0000000b40)=""/255, 0xff}], 0x8}}, {{&(0x7f0000000e00)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000e80)=""/117, 0x75}, {&(0x7f0000000f00)=""/237, 0xed}], 0x2}}, {{&(0x7f0000001040)=@abs, 0x6e, &(0x7f00000011c0)=[{&(0x7f00000010c0)=""/29, 0x1d}, {&(0x7f0000001100)=""/130, 0x82}], 0x2, &(0x7f0000001200)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000012c0)=@abs, 0x6e, &(0x7f0000002680)=[{&(0x7f0000001340)=""/42, 0x2a}, {&(0x7f0000001380)=""/196, 0xc4}, {&(0x7f0000001480)=""/12, 0xc}, {&(0x7f00000014c0)=""/178, 0xb2}, {&(0x7f0000001580)}, {&(0x7f00000015c0)=""/50, 0x32}, {0x0}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x8, &(0x7f0000002700)=[@rights={{0x10}}], 0x10}}, {{&(0x7f0000002740), 0x6e, &(0x7f0000002900), 0x0, &(0x7f0000002940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000002980), 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002a00)=""/32, 0x20}], 0x1, &(0x7f0000002a80)}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/4, 0x4}, {&(0x7f0000000280)}, {0x0}, {&(0x7f0000002c00)=""/244, 0xf4}, {&(0x7f0000002d00)=""/63, 0x3f}, {&(0x7f0000002d40)=""/151, 0x97}], 0x6, &(0x7f0000002e80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x110}}, {{&(0x7f0000002fc0), 0x6e, &(0x7f0000003200)=[{&(0x7f0000003040)=""/200, 0xc8}, {&(0x7f0000003140)=""/31, 0x1f}, {&(0x7f0000003180)=""/102, 0x66}], 0x3, &(0x7f0000003240)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x10000, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3b071, 0xffffffffffffffff, 0x4000)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r7, 0x29, 0x7, 0x0, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10)
r9 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r9, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
socket$inet(0x2, 0xa, 0x400)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x1f4, 0xe, 0x0, &(0x7f00000001c0)="ffffffff7f833e9762a536c801d7", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50)

829.281641ms ago: executing program 1 (id=1743):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80)
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000a00)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c09c03305df32bf337cdd0e550dff4a1ea8854a216b12f4a11b85a1b6ecb9ad8a50588e", 0x13b}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d", 0x5a}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r2 = socket(0x22, 0x803, 0xffffffff)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8891}, 0x4008801)
sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "1e8b4bf65c232577", "1bd9852e62ac9ec1b0e703f9a00f8b03", "b1c40cf5", "7ed0b5319625fa37"}, 0x28)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB=';\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0001000000"], 0x28}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0x24, &(0x7f0000000040), 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3)
r6 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r6, 0x29, 0x35, 0x0, &(0x7f0000000540))
recvmmsg(r3, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/15, 0xf}], 0x1}, 0x1800000}], 0x2, 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

499.580672ms ago: executing program 2 (id=1744):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a000040000000000000000005001600001b000008001700", @ANYRES16=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004894}, 0x20000080)

498.766895ms ago: executing program 2 (id=1745):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@ifindex, 0x2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffe25, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x20000898)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000190a0141000000000000000002000029"], 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0)
close(r1)
r2 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r3 = socket$inet6(0xa, 0x3, 0x8001)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3, 0x0, 0x2, 0x5, 0xd, 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000180)="5f64040300008a039f78b4c3")
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f00002a3000/0x4000)=nil, 0x4000, 0x0, 0x20010, r4, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$xdp(0x2c, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETLINK(r6, 0x400454cc, 0x7)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x20000, @remote, 0x9}, 0x9)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000098c169f8b5a10f4b69e823965a3ec8eb00ee62a2a60395a6afb3ec6d08f98244", @ANYRES16=0x0, @ANYBLOB="080025bd7000fcdbdf256600000008000300", @ANYRES32=0x0, @ANYBLOB="0400b8000400b8001400b9800e00bb000200012608000000e4d00000"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x8001)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000), 0x20000328)

209.922424ms ago: executing program 2 (id=1746):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffff}]}, 0x2c}}, 0x24000084)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r8}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffe0}, {0x0, 0xb}, {0x10, 0xffe2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r12)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r13 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r13, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r13, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c)
r14 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00'})

0s ago: executing program 0 (id=1747):
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0)
recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0xfffffebb, &(0x7f0000000280), 0x48}, 0x0) (async)
recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0xfffffebb, &(0x7f0000000280), 0x48}, 0x0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) (async)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_VNI={0x8, 0x7, 0x4}]}, 0x24}}, 0x0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), 0x4)

kernel console output (not intermixed with test programs):

0
[  114.307054][ T6279] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.310456][ T6279] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.313721][ T6279] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  114.436317][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'.
[  114.449048][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'.
[  114.461535][ T6279] ip_tunnel_core: Dead loop on virtual device gretap2 (net 27), fix it urgently!
[  114.571125][ T7684] netlink: 'syz.1.505': attribute type 1 has an invalid length.
[  114.636589][ T7684] 8021q: adding VLAN 0 to HW filter on device bond7
[  114.644247][ T7687] vlan2: entered allmulticast mode
[  114.646016][ T7687] bond7: entered allmulticast mode
[  114.663041][ T7684] bond7: (slave geneve3): making interface the new active one
[  114.665724][ T7684] geneve3: entered allmulticast mode
[  114.670317][ T7684] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  114.677448][ T7684] syz.1.505 (7684) used greatest stack depth: 18592 bytes left
[  114.756565][ T7692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.508'.
[  115.208653][ T5613] tipc: Node number set to 784464270
[  115.260732][ T7728] workqueue: name exceeds WQ_NAME_LEN. Truncating to: πx)%	].>n6#
[  115.586962][ T5651] net_ratelimit: 2 callbacks suppressed
[  115.586980][ T5651] ip_tunnel_core: Dead loop on virtual device gretap2 (net 27), fix it urgently!
[  115.633679][ T7750] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.655215][ T7751] netlink: 'syz.1.522': attribute type 13 has an invalid length.
[  115.665256][ T7751] netlink: 'syz.1.522': attribute type 17 has an invalid length.
[  115.727500][ T7750] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.732626][ T7750] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.829772][ T7751] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.832730][ T7751] 8021q: adding VLAN 0 to HW filter on device team0
[  115.838765][ T7751] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.855690][ T7751] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.858018][ T7751] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.864034][ T7751] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.866859][ T7751] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.875835][ T7751] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.879989][ T7751] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.889317][ T7751] veth1_vlan: left promiscuous mode
[  115.891531][ T7751] veth0_vlan: left promiscuous mode
[  115.894174][ T7751] veth0_vlan: entered promiscuous mode
[  115.900111][ T7751] veth1_vlan: entered promiscuous mode
[  115.904347][ T7751] veth1_macvtap: left promiscuous mode
[  115.907299][ T7751] veth0_macvtap: left promiscuous mode
[  115.910020][ T7751] veth0_macvtap: entered promiscuous mode
[  115.913387][ T7751] veth1_macvtap: entered promiscuous mode
[  115.922128][ T7751] 8021q: adding VLAN 0 to HW filter on device eth0
[  115.925031][ T7751] 8021q: adding VLAN 0 to HW filter on device eth1
[  115.928530][ T7751] 8021q: adding VLAN 0 to HW filter on device eth2
[  115.931423][ T7751] 8021q: adding VLAN 0 to HW filter on device eth3
[  115.934207][ T7751] 8021q: adding VLAN 0 to HW filter on device bond1
[  115.939025][ T7751] 8021q: adding VLAN 0 to HW filter on device bond2
[  115.944566][ T7751] 8021q: adding VLAN 0 to HW filter on device bond3
[  115.947763][ T7751] 8021q: adding VLAN 0 to HW filter on device bond4
[  115.951361][ T7751] 8021q: adding VLAN 0 to HW filter on device bond5
[  115.954152][ T7751] 8021q: adding VLAN 0 to HW filter on device bond6
[  115.958849][ T7751] 8021q: adding VLAN 0 to HW filter on device bond7
[  115.962895][ T7751] vlan2: left allmulticast mode
[  115.964564][ T7751] bond7: left allmulticast mode
[  115.966136][ T7751] geneve3: left allmulticast mode
[  116.062400][ T6279] ip_tunnel_core: Dead loop on virtual device gretap2 (net 27), fix it urgently!
[  116.610659][ T7773] ipvlan2: entered promiscuous mode
[  116.826764][ T5651] ip_tunnel_core: Dead loop on virtual device gretap2 (net 27), fix it urgently!
[  116.912073][ T7858] netlink: 'syz.2.534': attribute type 1 has an invalid length.
[  116.952033][ T7858] bond5: entered promiscuous mode
[  116.953887][ T7858] 8021q: adding VLAN 0 to HW filter on device bond5
[  116.994042][ T7858] vlan0: entered allmulticast mode
[  117.004089][ T7858] bond5: entered allmulticast mode
[  117.023334][ T7867] netlink: 'syz.0.536': attribute type 1 has an invalid length.
[  117.027069][ T7858] bond5: (slave bridge4): making interface the new active one
[  117.029498][ T7858] bridge4: entered promiscuous mode
[  117.031289][ T7858] bridge4: entered allmulticast mode
[  117.034169][ T7858] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  117.114119][ T7872] geneve2: entered promiscuous mode
[  117.119573][ T5651] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 35811 - 0
[  117.123670][ T5651] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 35811 - 0
[  117.129145][ T5651] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 35811 - 0
[  117.133029][ T5651] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 35811 - 0
[  117.237446][ T7887] netlink: 'syz.2.540': attribute type 1 has an invalid length.
[  117.250917][ T7887] netlink: 'syz.2.540': attribute type 1 has an invalid length.
[  117.254862][ T7887] netlink: 'syz.2.540': attribute type 8 has an invalid length.
[  117.429799][ T7906] bond6: entered allmulticast mode
[  117.780021][ T5651] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 35811 - 0
[  117.785309][ T5651] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 35811 - 0
[  117.789789][ T5651] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 35811 - 0
[  117.792998][ T5651] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 35811 - 0
[  117.949579][ T5651] ip_tunnel_core: Dead loop on virtual device gretap2 (net 27), fix it urgently!
[  118.075870][ T7944] netlink: 'syz.2.557': attribute type 1 has an invalid length.
[  118.091003][ T7944] 8021q: adding VLAN 0 to HW filter on device bond7
[  118.189185][ T7950] gretap0: left allmulticast mode
[  118.205931][ T7950] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.213373][ T7950] 8021q: adding VLAN 0 to HW filter on device team0
[  118.265452][ T7950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  118.269480][ T7950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  118.276099][ T7950] veth1_macvtap: left promiscuous mode
[  118.280481][ T7950] veth0_macvtap: left promiscuous mode
[  118.283018][ T7950] veth0_macvtap: entered promiscuous mode
[  118.285635][ T7950] veth1_macvtap: entered promiscuous mode
[  118.294744][ T7950] gretap2: left promiscuous mode
[  118.298061][ T7950] 8021q: adding VLAN 0 to HW filter on device bond1
[  118.303272][ T7950] 8021q: adding VLAN 0 to HW filter on device bond2
[  118.308643][ T7950] 8021q: adding VLAN 0 to HW filter on device eth0
[  118.311677][ T7950] 8021q: adding VLAN 0 to HW filter on device eth1
[  118.315103][ T7950] 8021q: adding VLAN 0 to HW filter on device eth2
[  118.319556][ T7950] 8021q: adding VLAN 0 to HW filter on device eth3
[  118.322100][ T7950] veth0_to_team: entered promiscuous mode
[  118.330111][ T7950] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  118.335569][ T7950] bond3: left promiscuous mode
[  118.337392][ T7950] bond3: left allmulticast mode
[  118.339159][ T7950] 8021q: adding VLAN 0 to HW filter on device bond3
[  118.342051][ T7950] 8021q: adding VLAN 0 to HW filter on device bond4
[  118.346064][ T7950] bond5: left promiscuous mode
[  118.347674][ T7950] bridge4: left promiscuous mode
[  118.349805][ T7950] 8021q: adding VLAN 0 to HW filter on device bond5
[  118.352723][ T7950] vlan0: left allmulticast mode
[  118.354675][ T7950] bond5: left allmulticast mode
[  118.357123][ T7950] bridge4: left allmulticast mode
[  118.360786][ T7950] geneve2: left promiscuous mode
[  118.367257][ T7950] bond6: left allmulticast mode
[  118.372592][ T7950] 8021q: adding VLAN 0 to HW filter on device bond6
[  118.393605][  T162] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.396416][  T162] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.418052][  T162] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.420992][  T162] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.470030][ T5651] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  118.474212][ T5651] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.479031][ T5651] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 42915 - 0
[  118.482234][ T5651] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  118.485424][ T5651] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.491181][ T5651] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 42915 - 0
[  118.495623][ T5651] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  118.500805][ T5651] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.504031][ T5651] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 42915 - 0
[  118.507562][ T5651] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  118.509437][ T7959] netlink: 'syz.2.560': attribute type 9 has an invalid length.
[  118.510231][ T5651] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.515206][ T5651] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 42915 - 0
[  118.518658][ T7959] __nla_validate_parse: 150 callbacks suppressed
[  118.518667][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.560'.
[  118.547267][ T5651] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  118.554355][ T5651] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  118.576959][ T5613] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  118.999052][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'.
[  119.087088][ T5651] ip_tunnel_core: Dead loop on virtual device gretap2 (net 27), fix it urgently!
[  119.111741][ T8009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.572'.
[  119.115808][ T8009] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  119.121192][ T8009] syzkaller1: entered promiscuous mode
[  119.123397][ T8009] syzkaller1: entered allmulticast mode
[  119.128890][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'.
[  119.227087][   T32] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  119.270436][ T8005] nbd2: detected capacity change from 0 to 63
[  119.276909][ T6653] block nbd2: Receive control failed (result -104)
[  119.280436][ T7330] block nbd2: Receive control failed (result -32)
[  119.340890][   T32] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  119.440170][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'.
[  119.444572][ T8025] netlink: 72 bytes leftover after parsing attributes in process `syz.2.576'.
[  119.459925][ T8025] vlan1: entered allmulticast mode
[  119.462070][ T8025] veth0_to_bond: entered allmulticast mode
[  119.605859][ T8032] validate_nla: 1 callbacks suppressed
[  119.606183][ T8032] netlink: 'syz.2.578': attribute type 1 has an invalid length.
[  119.661761][ T8030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.578'.
[  119.762195][ T8032] ip6gretap1: entered promiscuous mode
[  119.764464][ T8032] ip6gretap1: entered allmulticast mode
[  119.869079][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'.
[  119.875172][ T8037] netlink: 'syz.2.579': attribute type 1 has an invalid length.
[  119.882285][ T8037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.579'.
[  119.925586][ T8037] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  119.932155][ T8037] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.936953][ T8037] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 42915 - 0
[  119.982439][    C1] ip_tunnel_core: Dead loop on virtual device gretap2 (net 27), fix it urgently!
[  120.177205][ T8037] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.180957][ T8037] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.184741][ T8037] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 42915 - 0
[  120.189120][ T5651] ip_tunnel_core: Dead loop on virtual device gretap2 (net 27), fix it urgently!
[  120.441297][ T8044] netlink: 'syz.0.580': attribute type 2 has an invalid length.
[  120.446439][ T8044] netlink: 'syz.0.580': attribute type 2 has an invalid length.
[  120.494068][ T8037] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.498579][ T8037] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.502594][ T8037] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 42915 - 0
[  120.710068][ T8037] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  120.718486][ T8037] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.722920][ T8037] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 42915 - 0
[  120.725343][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.581'.
[  120.850566][ T5670] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  120.856080][ T5670] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 42915 - 0
[  120.866402][ T5670] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  120.891794][ T5670] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  120.901985][ T5670] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 42915 - 0
[  120.908980][ T5670] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  120.954233][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  120.961153][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 42915 - 0
[  120.964489][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  120.978125][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  120.981962][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 42915 - 0
[  120.984563][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  121.043329][ T8066] netlink: 'syz.1.586': attribute type 5 has an invalid length.
[  121.063795][ T8070] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  121.084078][ T8066] syzkaller0: entered promiscuous mode
[  121.091425][ T8066] syzkaller0: entered allmulticast mode
[  121.306887][ T5651] ip_tunnel_core: Dead loop on virtual device gretap2 (net 27), fix it urgently!
[  122.417084][   T13] ip_tunnel_core: Dead loop on virtual device gretap2 (net 27), fix it urgently!
[  122.706389][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  123.045483][ T8106] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.529348][   T13] ip_tunnel_core: Dead loop on virtual device gretap2 (net 27), fix it urgently!
[  123.553174][ T8098] vlan3: entered allmulticast mode
[  123.557810][ T8098] bridge0: port 3(vlan3) entered blocking state
[  123.564386][ T8098] bridge0: port 3(vlan3) entered disabled state
[  123.571826][ T8098] vlan3: entered promiscuous mode
[  123.576581][ T8104] __nla_validate_parse: 34 callbacks suppressed
[  123.576592][ T8104] netlink: 52 bytes leftover after parsing attributes in process `syz.2.595'.
[  123.678362][ T8116] syzkaller0: entered promiscuous mode
[  123.681264][ T8116] syzkaller0: entered allmulticast mode
[  123.688248][ T8116] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.599'.
[  123.698302][ T8123] netlink: 'syz.0.600': attribute type 6 has an invalid length.
[  123.892715][ T8130] nbd: must specify a device to reconfigure
[  123.900098][ T8131] netlink: 36 bytes leftover after parsing attributes in process `syz.0.601'.
[  123.903932][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'.
[  123.951183][ T8144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'.
[  124.120970][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.608'.
[  124.124561][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.608'.
[  124.128294][ T8158] netlink: 58 bytes leftover after parsing attributes in process `syz.1.608'.
[  124.385631][ T8158] team0 (unregistering): Port device team_slave_0 removed
[  124.393400][ T8158] team0 (unregistering): Port device team_slave_1 removed
[  124.646983][   T13] ip_tunnel_core: Dead loop on virtual device gretap2 (net 27), fix it urgently!
[  124.683195][ T8180] netlink: 'syz.1.613': attribute type 1 has an invalid length.
[  124.686055][ T8180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.838745][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.618'.
[  124.841893][ T8199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.618'.
[  124.863320][ T8199] team0 (unregistering): Port device team_slave_0 removed
[  124.872940][ T8199] team0 (unregistering): Port device team_slave_1 removed
[  125.040789][ T8204] netlink: 'syz.0.620': attribute type 1 has an invalid length.
[  125.083335][ T8204] 8021q: adding VLAN 0 to HW filter on device bond8
[  125.116160][ T8215] bond8: (slave veth9): Enslaving as an active interface with a down link
[  125.265479][ T8224] bridge0: entered allmulticast mode
[  125.275670][ T8222] bridge0: left allmulticast mode
[  125.464447][ T8230] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  125.469298][ T8230] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  125.596015][ T8234] netlink: 'syz.0.630': attribute type 29 has an invalid length.
[  125.642221][ T8239] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.655178][ T8241] x_tables: duplicate underflow at hook 1
[  125.708643][ T8241] veth1_macvtap: left promiscuous mode
[  125.713455][ T8241] bond8: (slave macsec0): Error -34 calling dev_set_mtu
[  125.776837][ T5651] ip_tunnel_core: Dead loop on virtual device gretap2 (net 27), fix it urgently!
[  126.350977][ T8287] netlink: 'syz.2.638': attribute type 6 has an invalid length.
[  126.355770][ T8287] IPv6: NLM_F_CREATE should be specified when creating new route
[  126.539502][ T8304] netlink: 'syz.2.640': attribute type 1 has an invalid length.
[  126.580313][ T8306] syzkaller0: entered promiscuous mode
[  126.582145][ T8306] syzkaller0: entered allmulticast mode
[  126.899489][   T13] ip_tunnel_core: Dead loop on virtual device gretap2 (net 27), fix it urgently!
[  127.083292][ T8361] netlink: 'syz.1.647': attribute type 1 has an invalid length.
[  127.837154][ T8416] netlink: 'syz.1.664': attribute type 1 has an invalid length.
[  127.901300][    C1] ip_tunnel_core: Dead loop on virtual device gretap2 (net 27), fix it urgently!
[  127.948023][ T8426] netlink: 'syz.1.669': attribute type 11 has an invalid length.
[  128.000496][   T13] ip_tunnel_core: Dead loop on virtual device gretap2 (net 27), fix it urgently!
[  128.290454][ T8449] netlink: 'syz.2.676': attribute type 1 has an invalid length.
[  128.305970][ T8449] bond9: entered promiscuous mode
[  128.308330][ T8449] 8021q: adding VLAN 0 to HW filter on device bond9
[  128.322502][ T8454] netlink: 'syz.1.675': attribute type 1 has an invalid length.
[  128.324987][ T8454] netlink: 'syz.1.675': attribute type 1 has an invalid length.
[  128.330615][ T8453] 8021q: adding VLAN 0 to HW filter on device bond9
[  128.334786][ T8453] bond9: (slave vti0): The slave device specified does not support setting the MAC address
[  128.341765][ T8453] bond9: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  128.349054][ T8453] bond9: (slave vti0): making interface the new active one
[  128.351301][ T8453] vti0: entered promiscuous mode
[  128.353936][ T8453] bond9: (slave vti0): Enslaving as an active interface with an up link
[  128.669514][ T8469] __nla_validate_parse: 20 callbacks suppressed
[  128.669528][ T8469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.681'.
[  128.792179][ T8471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.682'.
[  128.909813][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'.
[  129.005761][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'.
[  129.107466][   T13] ip_tunnel_core: Dead loop on virtual device gretap2 (net 27), fix it urgently!
[  129.271118][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'.
[  129.276192][ T8501] netlink: 80 bytes leftover after parsing attributes in process `syz.2.689'.
[  129.349805][ T8508] netlink: 27 bytes leftover after parsing attributes in process `syz.1.691'.
[  129.739809][ T8543] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.742322][ T8543] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.776915][ T8543] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.783418][ T8543] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.897149][ T6279] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.905861][ T6279] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.914976][ T6279] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.920203][ T6279] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  129.943328][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'.
[  129.952823][ T5690] IPVS: starting estimator thread 0...
[  130.048159][ T8558] IPVS: using max 65 ests per chain, 156000 per kthread
[  130.139626][ T8576] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  130.201391][ T8583] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.699'.
[  130.304730][ T8587] ip6gretap1: entered promiscuous mode
[  130.623969][ T8608] netlink: 'syz.2.706': attribute type 3 has an invalid length.
[  130.755123][ T8620] netlink: 44 bytes leftover after parsing attributes in process `syz.0.709'.
[  130.787314][ T8620] netlink: 'syz.0.709': attribute type 1 has an invalid length.
[  130.846059][ T8620] 8021q: adding VLAN 0 to HW filter on device bond9
[  130.913654][ T8635] gre1: entered promiscuous mode
[  130.946774][ T8639] nbd: nbd0 already in use
[  130.948675][ T8640] netlink: 'syz.2.713': attribute type 3 has an invalid length.
[  130.956614][ T8640] netlink: 'syz.2.713': attribute type 1 has an invalid length.
[  131.090384][ T8644] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.093824][ T8644] 8021q: adding VLAN 0 to HW filter on device team0
[  131.111813][ T8644] 8021q: adding VLAN 0 to HW filter on device 60X
[  131.170851][ T8644] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  131.524781][ T8699] netlink: 'syz.1.726': attribute type 4 has an invalid length.
[  131.682727][ T8708] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  131.719813][ T8708] netlink: 'syz.2.730': attribute type 1 has an invalid length.
[  131.747004][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  131.789010][ T8708] 8021q: adding VLAN 0 to HW filter on device bond10
[  131.911701][ T8728] ipt_rpfilter: unknown options
[  132.110075][ T8749] netlink: 'syz.0.741': attribute type 4 has an invalid length.
[  132.131012][ T8749] netlink: 'syz.0.741': attribute type 4 has an invalid length.
[  132.249453][ T8760] netlink: 'syz.2.745': attribute type 1 has an invalid length.
[  133.020362][ T8810] tipc: Resetting bearer <eth:syzkaller0>
[  133.199145][ T8818] netlink: 'syz.2.760': attribute type 1 has an invalid length.
[  134.943795][   T53] block nbd1: Connection timed out, retrying (0/2 alive)
[  134.948023][   T53] block nbd1: Connection timed out, retrying (0/2 alive)
[  134.950909][   T53] block nbd1: Connection timed out, retrying (0/2 alive)
[  134.953724][   T53] block nbd1: Connection timed out, retrying (0/2 alive)
[  134.961367][   T53] block nbd1: Dead connection, failed to find a fallback
[  134.967779][   T53] block nbd1: shutting down sockets
[  134.971544][   T53] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  134.978858][   T53] Buffer I/O error on dev nbd1, logical block 3, async page read
[  134.983999][   T53] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  134.987805][   T53] Buffer I/O error on dev nbd1, logical block 2, async page read
[  134.990940][   T53] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  134.994430][   T53] Buffer I/O error on dev nbd1, logical block 1, async page read
[  134.997698][   T53] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  135.001262][   T53] Buffer I/O error on dev nbd1, logical block 0, async page read
[  135.007390][ T5614] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  135.013546][ T8845] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  135.021189][ T5614] Buffer I/O error on dev nbd1, logical block 0, async page read
[  135.038039][ T5614] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  135.041766][ T5614] Buffer I/O error on dev nbd1, logical block 1, async page read
[  135.048915][ T5614] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  135.057100][ T5614] Buffer I/O error on dev nbd1, logical block 2, async page read
[  135.065540][ T5614] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  135.072472][ T5614] Buffer I/O error on dev nbd1, logical block 3, async page read
[  135.080781][ T5614] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  135.084502][ T5614] Buffer I/O error on dev nbd1, logical block 0, async page read
[  135.093365][ T8850] __nla_validate_parse: 10 callbacks suppressed
[  135.093375][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.763'.
[  135.103117][ T5614] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  135.109239][ T5614] Buffer I/O error on dev nbd1, logical block 1, async page read
[  135.115065][ T5614] ldm_validate_partition_table(): Disk read failed.
[  135.120873][ T5614] Dev nbd1: unable to read RDB block 0
[  135.124698][ T5614]  nbd1: unable to read partition table
[  135.136563][ T5614] ldm_validate_partition_table(): Disk read failed.
[  135.140749][ T5614] Dev nbd1: unable to read RDB block 0
[  135.150547][ T5614]  nbd1: unable to read partition table
[  135.237560][ T8857] netlink: 204 bytes leftover after parsing attributes in process `syz.0.765'.
[  135.247726][ T8855] bridge: RTM_NEWNEIGH with invalid state 0x8
[  135.274298][ T8862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.767'.
[  135.279880][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'.
[  135.283002][ T8860] sctp: [Deprecated]: syz.1.766 (pid 8860) Use of struct sctp_assoc_value in delayed_ack socket option.
[  135.283002][ T8860] Use struct sctp_sack_info instead
[  135.283057][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'.
[  135.345943][ T8866] syzkaller1: entered promiscuous mode
[  135.349303][ T8866] syzkaller1: entered allmulticast mode
[  135.380142][ T8862] bond11 (unregistering): Released all slaves
[  135.717991][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.773'.
[  135.819249][ T8888] openvswitch: netlink: IP tunnel dst address not specified
[  136.108960][ T8895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.776'.
[  136.596687][ T6653] block nbd3: Receive control failed (result -32)
[  136.600191][ T7330] block nbd3: Receive control failed (result -32)
[  136.732588][ T8908] netlink: 3 bytes leftover after parsing attributes in process `syz.0.779'.
[  136.735754][ T8908] 1X: renamed from 60X
[  136.743390][ T8908] 1X: entered allmulticast mode
[  136.747842][ T8908] 8021q: adding VLAN 0 to HW filter on device 61X
[  136.750755][ T8908] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  136.972555][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.786'.
[  136.991159][ T8928] bond12: entered promiscuous mode
[  136.993322][ T8928] 8021q: adding VLAN 0 to HW filter on device bond12
[  137.012217][ T8928] validate_nla: 1 callbacks suppressed
[  137.012234][ T8928] netlink: 'syz.2.786': attribute type 1 has an invalid length.
[  137.027890][ T8931] netlink: 'syz.2.786': attribute type 1 has an invalid length.
[  137.470790][ T8955] netlink: 32 bytes leftover after parsing attributes in process `syz.0.791'.
[  137.532541][ T8959] netlink: 'syz.0.792': attribute type 1 has an invalid length.
[  137.535811][ T8959] netlink: 'syz.0.792': attribute type 1 has an invalid length.
[  137.549996][ T8959] syzkaller1: entered promiscuous mode
[  137.551821][ T8959] syzkaller1: entered allmulticast mode
[  137.664032][ T8961] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  137.667788][ T8961] syzkaller0: mtu less than device minimum
[  137.730306][ T8968] netlink: 'syz.0.795': attribute type 1 has an invalid length.
[  137.836221][ T8970] netlink: 'syz.1.796': attribute type 1 has an invalid length.
[  137.884705][ T8970] 8021q: adding VLAN 0 to HW filter on device bond9
[  137.905005][ T8980] netlink: 'syz.0.798': attribute type 13 has an invalid length.
[  137.911877][ T8980] netlink: 'syz.0.798': attribute type 17 has an invalid length.
[  137.919228][ T8980] gre0: left promiscuous mode
[  137.921229][ T8980] gre0: left allmulticast mode
[  137.948076][ T8980] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.952181][ T8980] 8021q: adding VLAN 0 to HW filter on device team0
[  137.963695][ T8980] 1X: left allmulticast mode
[  138.023603][ T8980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  138.036715][ T8980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  138.045325][ T8980] veth1_vlan: left promiscuous mode
[  138.054948][ T8980] veth0_vlan: left promiscuous mode
[  138.058509][ T8980] veth0_vlan: left allmulticast mode
[  138.062810][ T8980] veth0_vlan: entered promiscuous mode
[  138.071570][ T8980] veth1_vlan: entered promiscuous mode
[  138.085827][ T8980] veth1_macvtap: left promiscuous mode
[  138.088861][ T8980] veth0_macvtap: left promiscuous mode
[  138.091237][ T8980] veth0_macvtap: entered promiscuous mode
[  138.093502][ T8980] veth1_macvtap: entered promiscuous mode
[  138.105624][ T8980] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  138.111715][ T8980] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  138.114615][ T8980] tipc: Resetting bearer <eth:syzkaller0>
[  138.117311][ T8980] tipc: Resetting bearer <eth:syzkaller0>
[  138.127848][ T8980] 8021q: adding VLAN 0 to HW filter on device bond1
[  138.135242][ T8980] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  138.148601][ T8980] bond2: left promiscuous mode
[  138.156740][ T8980] 8021q: adding VLAN 0 to HW filter on device bond2
[  138.164454][ T8980] 8021q: adding VLAN 0 to HW filter on device eth0
[  138.181184][ T8980] 8021q: adding VLAN 0 to HW filter on device eth1
[  138.182979][ T8997] netlink: 'syz.1.802': attribute type 1 has an invalid length.
[  138.191610][ T8980] 8021q: adding VLAN 0 to HW filter on device eth2
[  138.201315][ T8980] 8021q: adding VLAN 0 to HW filter on device eth3
[  138.210910][ T8980] 8021q: adding VLAN 0 to HW filter on device bond3
[  138.215145][ T8980] 8021q: adding VLAN 0 to HW filter on device batadv0
[  138.223672][ T8980] 8021q: adding VLAN 0 to HW filter on device bond4
[  138.228506][ T8980] 8021q: adding VLAN 0 to HW filter on device bond5
[  138.239999][ T8980] ip6erspan0: left allmulticast mode
[  138.246183][ T8998] netlink: 'syz.1.802': attribute type 3 has an invalid length.
[  138.252480][ T8980] 8021q: adding VLAN 0 to HW filter on device bond6
[  138.258389][ T8980] 8021q: adding VLAN 0 to HW filter on device bond7
[  138.266057][ T8980] gretap2: left promiscuous mode
[  138.278692][ T8980] ipvlan2: left promiscuous mode
[  138.289282][ T8980] 8021q: adding VLAN 0 to HW filter on device bond8
[  138.300949][ T8980] 8021q: adding VLAN 0 to HW filter on device bond9
[  138.308539][ T8980] 8021q: adding VLAN 0 to HW filter on device bond10
[  138.371085][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.375186][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.445382][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.450631][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.507596][ T6279] bond8: (slave veth9): link status definitely up, 10000 Mbps full duplex
[  138.513587][ T6279] bond8: (slave veth9): making interface the new active one
[  138.521034][ T6279] bond8: active interface up!
[  138.832034][ T9033] 8021q: adding VLAN 0 to HW filter on device bond11
[  138.857281][ T9033] bond11: (slave veth11): Enslaving as an active interface with a down link
[  138.882783][ T9037] can: request_module (can-proto-0) failed.
[  138.885128][ T9033] bond11: (slave dummy0): making interface the new active one
[  138.889155][ T9033] dummy0: entered promiscuous mode
[  138.893200][ T9033] bond11: (slave dummy0): Enslaving as an active interface with an up link
[  138.904749][ T9033] bond11: (slave dummy0): Releasing active interface
[  140.100649][ T9082] __nla_validate_parse: 75 callbacks suppressed
[  140.100667][ T9082] netlink: 132 bytes leftover after parsing attributes in process `syz.2.829'.
[  140.157559][ T9085] netlink: 25 bytes leftover after parsing attributes in process `syz.1.828'.
[  140.170012][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'.
[  140.182647][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.828'.
[  140.259398][ T9089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.831'.
[  140.284139][ T9094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.830'.
[  140.398929][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'.
[  140.491325][ T9107] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  140.500555][ T9107] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  140.605968][ T9117] IPv6: sit2: Disabled Multicast RS
[  140.721059][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'.
[  140.834862][ T9123] syzkaller0: entered promiscuous mode
[  140.837404][ T9123] syzkaller0: entered allmulticast mode
[  141.682525][ T9134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.841'.
[  141.690607][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.841'.
[  142.810050][ T9181] veth0_virt_wifi: entered allmulticast mode
[  142.873748][ T9184] validate_nla: 9 callbacks suppressed
[  142.873765][ T9184] netlink: 'syz.0.855': attribute type 7 has an invalid length.
[  142.892990][ T9186] netlink: 'syz.2.853': attribute type 3 has an invalid length.
[  143.101355][ T9193] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.196146][ T9193] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.243499][ T9206] netlink: 'syz.1.859': attribute type 1 has an invalid length.
[  143.248445][ T9205] netlink: 'syz.1.859': attribute type 1 has an invalid length.
[  143.928521][ T9193] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.061685][ T9193] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.186850][ T5670] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.207705][ T5651] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.220617][ T5651] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.241685][ T5651] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.289480][ T9225] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  144.292887][ T9225] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  144.314988][ T9235] syzkaller1: entered promiscuous mode
[  144.327790][ T9235] syzkaller1: entered allmulticast mode
[  144.392081][ T9235] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.394768][ T9235] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.611432][ T9235] vlan1: left allmulticast mode
[  144.613496][ T9235] veth0_to_bond: left allmulticast mode
[  144.617304][ T9235] bond9: left promiscuous mode
[  144.619174][ T9235] vti0: left promiscuous mode
[  144.624024][ T9235] ip6gretap1: left promiscuous mode
[  144.647408][ T9235] bond12: left promiscuous mode
[  144.659729][ T9235] syzkaller1: left promiscuous mode
[  144.663075][ T9235] syzkaller1: left allmulticast mode
[  144.665994][ T9240] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  144.690293][ T5651] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.693471][ T5651] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 42915 - 0
[  144.697021][ T5651] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  144.699748][ T5651] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.702493][ T5651] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 42915 - 0
[  144.705246][ T5651] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  144.710476][ T5651] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.713699][ T5651] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 42915 - 0
[  144.716653][ T5651] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  144.736625][ T5651] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.739343][ T5651] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 42915 - 0
[  144.741989][ T5651] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  144.910331][ T9258] xt_l2tp: v2 sid > 0xffff: 8388608
[  145.033643][ T9260] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  145.039685][ T9260] tipc: Enabling of bearer <eth:ipvlan0> rejected, failed to enable media
[  145.117368][ T9272] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  145.175626][ T9276] netlink: 'syz.0.879': attribute type 13 has an invalid length.
[  145.179980][ T9276] netlink: 'syz.0.879': attribute type 17 has an invalid length.
[  145.229713][ T9276] dummy0: left promiscuous mode
[  145.237044][ T9276] veth0_virt_wifi: left allmulticast mode
[  145.240602][ T9276] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  145.243066][ T9276] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  145.263205][ T9276] 8021q: adding VLAN 0 to HW filter on device eth0
[  145.274074][ T9276] 8021q: adding VLAN 0 to HW filter on device eth1
[  145.292466][ T9276] 8021q: adding VLAN 0 to HW filter on device eth2
[  145.301833][ T9276] 8021q: adding VLAN 0 to HW filter on device eth3
[  145.363131][ T9285] __nla_validate_parse: 11 callbacks suppressed
[  145.363149][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'.
[  145.427695][ T6279] bond11: (slave veth11): link status definitely up, 10000 Mbps full duplex
[  145.431845][ T6279] bond11: (slave veth11): making interface the new active one
[  145.437708][ T6279] bond11: active interface up!
[  146.212264][ T9294] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.286254][ T9298] tipc: New replicast peer: 172.20.20.170
[  146.289716][ T9298] tipc: Enabled bearer <udp:syz2>, priority 10
[  146.399724][ T9303] : renamed from virt_wifi0
[  146.433802][ T9306] netlink: 64 bytes leftover after parsing attributes in process `syz.1.888'.
[  146.637384][ T9309] syzkaller1: entered promiscuous mode
[  146.639698][ T9309] syzkaller1: entered allmulticast mode
[  146.751113][ T9314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.890'.
[  146.837149][ T9318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.891'.
[  146.841843][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'.
[  147.060851][ T9326] Driver unsupported XDP return value 0 on prog  (id 228) dev N/A, expect packet loss!
[  147.200849][ T9332] netlink: 44 bytes leftover after parsing attributes in process `syz.1.896'.
[  147.350249][ T9294] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.438181][ T9294] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.500906][ T9294] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.551190][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.567361][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.582550][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.597814][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.781238][ T9350] bond0: Error: Cannot enslave bond to itself.
[  147.783519][ T9349] bond0: Error: Cannot enslave bond to itself.
[  147.900487][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'.
[  147.963309][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'.
[  147.970015][ T9361] vlan2: entered promiscuous mode
[  147.971058][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.906'.
[  147.974527][ T9361] bridge0: entered promiscuous mode
[  148.040525][ T9367] netlink: 'syz.0.908': attribute type 21 has an invalid length.
[  148.040563][ T9368] netlink: 'syz.0.908': attribute type 21 has an invalid length.
[  148.042932][ T9367] netlink: 128 bytes leftover after parsing attributes in process `syz.0.908'.
[  148.042995][ T9367] netlink: 'syz.0.908': attribute type 4 has an invalid length.
[  148.052381][ T9367] netlink: 'syz.0.908': attribute type 5 has an invalid length.
[  148.057161][ T9368] netlink: 'syz.0.908': attribute type 4 has an invalid length.
[  148.060045][ T9368] netlink: 'syz.0.908': attribute type 5 has an invalid length.
[  148.071124][ T9361] netlink: 'syz.2.907': attribute type 4 has an invalid length.
[  148.286737][ T9381] netlink: 'syz.0.911': attribute type 11 has an invalid length.
[  148.450347][ T9395] bridge_slave_1: left allmulticast mode
[  148.469227][ T9395] bridge_slave_1: left promiscuous mode
[  148.473556][ T9395] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.519722][ T9395] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  148.668563][ T9410] vlan1: entered allmulticast mode
[  148.670255][ T9410] veth0_to_bond: entered allmulticast mode
[  148.846313][ T9413] netlink: 'syz.2.919': attribute type 15 has an invalid length.
[  149.184244][ T9451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.265417][ T9456] tipc: Failed to remove unknown binding: 66,1,1/0:4133469197/4133469199
[  149.273123][ T9456] tipc: Failed to remove unknown binding: 66,1,1/0:4133469197/4133469199
[  149.277931][ T9456] tipc: Failed to remove unknown binding: 66,1,1/0:4133469197/4133469199
[  149.435506][ T9468] netlink: 'syz.1.933': attribute type 6 has an invalid length.
[  149.470014][ T9470] netlink: 'syz.1.934': attribute type 13 has an invalid length.
[  149.555459][ T9472] bond13: (slave geneve3): making interface the new active one
[  149.558876][ T9472] bond13: (slave geneve3): Enslaving as an active interface with an up link
[  149.561649][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  149.571269][ T9472] 8021q: adding VLAN 0 to HW filter on device bond13
[  149.575277][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  149.580283][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  149.583741][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  149.666965][   T53] block nbd2: Connection timed out, retrying (0/2 alive)
[  149.671074][   T53] block nbd2: Connection timed out, retrying (0/2 alive)
[  149.673232][   T53] block nbd2: Connection timed out, retrying (0/2 alive)
[  149.677847][   T53] block nbd2: Connection timed out, retrying (0/2 alive)
[  149.680563][   T53] block nbd2: Dead connection, failed to find a fallback
[  149.684118][   T53] block nbd2: shutting down sockets
[  149.686141][   T53] blk_print_req_error: 138 callbacks suppressed
[  149.686155][   T53] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.697347][   T53] buffer_io_error: 138 callbacks suppressed
[  149.697361][   T53] Buffer I/O error on dev nbd2, logical block 3, async page read
[  149.702641][   T53] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.706400][   T53] Buffer I/O error on dev nbd2, logical block 2, async page read
[  149.710028][   T53] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.713597][   T53] Buffer I/O error on dev nbd2, logical block 1, async page read
[  149.716932][   T53] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.720732][   T53] Buffer I/O error on dev nbd2, logical block 0, async page read
[  149.727422][ T7672] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.730403][ T7672] Buffer I/O error on dev nbd2, logical block 0, async page read
[  149.733124][ T7672] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.736146][ T7672] Buffer I/O error on dev nbd2, logical block 1, async page read
[  149.739532][ T7672] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.742327][ T7672] Buffer I/O error on dev nbd2, logical block 2, async page read
[  149.745154][ T7672] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.748765][ T7672] Buffer I/O error on dev nbd2, logical block 3, async page read
[  149.751639][ T7672] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.754754][ T7672] Buffer I/O error on dev nbd2, logical block 0, async page read
[  149.757971][ T7672] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  149.761023][ T7672] Buffer I/O error on dev nbd2, logical block 1, async page read
[  149.765115][ T7672] ldm_validate_partition_table(): Disk read failed.
[  149.770778][ T7672] Dev nbd2: unable to read RDB block 0
[  149.776136][ T7672]  nbd2: unable to read partition table
[  149.795246][ T7672] ldm_validate_partition_table(): Disk read failed.
[  149.803807][ T7672] Dev nbd2: unable to read RDB block 0
[  149.812727][ T7672]  nbd2: unable to read partition table
[  150.478462][ T9515] __nla_validate_parse: 21 callbacks suppressed
[  150.478476][ T9515] netlink: 48 bytes leftover after parsing attributes in process `syz.0.950'.
[  150.489791][ T9515] netlink: 48 bytes leftover after parsing attributes in process `syz.0.950'.
[  150.621535][ T9527] 8021q: adding VLAN 0 to HW filter on device bond12
[  150.733812][ T9531] netlink: 140 bytes leftover after parsing attributes in process `syz.0.953'.
[  150.808207][ T9534] netlink: 196 bytes leftover after parsing attributes in process `syz.2.954'.
[  150.934572][ T9539] netlink: 104 bytes leftover after parsing attributes in process `syz.2.955'.
[  151.488646][ T9572] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4
[  151.559011][ T9579] netlink: 124 bytes leftover after parsing attributes in process `syz.0.966'.
[  151.628448][ T9584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.967'.
[  151.634721][ T9583] netlink: 96 bytes leftover after parsing attributes in process `syz.2.967'.
[  151.640587][ T9583] netlink: 606 bytes leftover after parsing attributes in process `syz.2.967'.
[  151.644281][ T9583] netlink: 1 bytes leftover after parsing attributes in process `syz.2.967'.
[  151.875699][ T9604] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  151.901983][ T9601] pimreg0: tun_chr_ioctl cmd 1074025681
[  151.936058][ T9608] NCSI netlink: No device for ifindex 1073545264
[  152.125087][ T9611] bond0: option arp_validate: invalid value (55553)
[  152.397519][ T9630] syzkaller0: entered promiscuous mode
[  152.399819][ T9630] syzkaller0: entered allmulticast mode
[  152.723563][ T9642] block nbd4: Unsupported socket: should be TCP or UNIX.
[  152.750379][ T9642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.870260][ T9648] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  153.433870][ T9680] batadv0: entered promiscuous mode
[  153.438789][ T9680] batadv0: left promiscuous mode
[  153.458729][ T9679] batadv0: entered promiscuous mode
[  153.460658][ T9679] batadv0: left promiscuous mode
[  153.786029][ T9705] syzkaller1: entered promiscuous mode
[  153.788046][ T9705] syzkaller1: entered allmulticast mode
[  153.887758][ T9708] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  153.941063][ T9713] validate_nla: 15 callbacks suppressed
[  153.941075][ T9713] netlink: 'syz.2.1000': attribute type 1 has an invalid length.
[  153.962620][ T9713] 8021q: adding VLAN 0 to HW filter on device bond14
[  153.979564][ T9713] bond14: (slave veth5): Enslaving as an active interface with a down link
[  153.989893][ T9713] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.993416][ T9713] bond14: (slave batadv0): making interface the new active one
[  153.998394][ T9713] batadv0: entered promiscuous mode
[  154.000794][ T9713] bond14: (slave batadv0): Enslaving as an active interface with an up link
[  154.129972][ T9718] netlink: 'syz.2.1002': attribute type 2 has an invalid length.
[  154.140981][ T9718] netlink: 'syz.2.1002': attribute type 2 has an invalid length.
[  154.859360][ T9772] netlink: 'syz.1.1012': attribute type 7 has an invalid length.
[  154.859401][ T9759] netlink: 'syz.1.1012': attribute type 7 has an invalid length.
[  155.209448][ T9791] tipc: Failed to remove unknown binding: 66,1,1/0:2641029127/2641029129
[  155.213294][ T9791] tipc: Failed to remove unknown binding: 66,1,1/0:2641029127/2641029129
[  155.228080][ T9793] netlink: 'syz.0.1023': attribute type 1 has an invalid length.
[  155.303869][ T9807] sock: sock_timestamping_bind_phc: sock not bind to device
[  155.347738][ T9805] tc action pedit 'at' offset 6 out of bounds
[  158.214324][ T9812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  158.324092][ T9829] __nla_validate_parse: 19 callbacks suppressed
[  158.324106][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1032'.
[  158.560243][ T9845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1037'.
[  158.650280][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'.
[  158.724247][ T9845] syzkaller0: entered promiscuous mode
[  158.729335][ T9845] syzkaller0: entered allmulticast mode
[  158.822754][ T9857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1038'.
[  158.836734][ T9849] netlink: 'syz.0.1038': attribute type 10 has an invalid length.
[  158.873173][ T9859] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1039'.
[  158.969069][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'.
[  158.972809][ T9867] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1041'.
[  159.060227][ T9874] netlink: 'syz.2.1043': attribute type 1 has an invalid length.
[  159.078123][ T9874] 8021q: adding VLAN 0 to HW filter on device bond15
[  159.087297][ T9874] vlan2: entered allmulticast mode
[  159.089043][ T9874] bond15: entered allmulticast mode
[  159.102415][ T9874] bond15: (slave geneve4): making interface the new active one
[  159.105173][ T9874] geneve4: entered allmulticast mode
[  159.110601][ T9874] bond15: (slave geneve4): Enslaving as an active interface with an up link
[  159.114595][ T9131] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  159.121314][ T9131] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  159.132378][ T9131] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  159.141458][ T9131] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  159.233148][ T9881] bond12: entered allmulticast mode
[  159.275711][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1044'.
[  159.429514][ T9889] netlink: 'syz.0.1045': attribute type 13 has an invalid length.
[  159.435167][ T9889] netlink: 'syz.0.1045': attribute type 17 has an invalid length.
[  159.461958][ T9886] tipc: Resetting bearer <eth:syzkaller0>
[  159.664359][ T9889] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.667498][ T9889] 8021q: adding VLAN 0 to HW filter on device team0
[  159.672492][ T9889] 8021q: adding VLAN 0 to HW filter on device 61X
[  159.717711][ T9889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  159.721699][ T9889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  159.731028][ T9889] veth1_macvtap: left promiscuous mode
[  159.734226][ T9889] veth0_macvtap: left promiscuous mode
[  159.738461][ T9889] veth0_macvtap: entered promiscuous mode
[  159.741742][ T9889] veth1_macvtap: entered promiscuous mode
[  159.749180][ T9889] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  159.755463][ T9889] tipc: Resetting bearer <eth:syzkaller0>
[  159.765588][ T9889] 8021q: adding VLAN 0 to HW filter on device bond1
[  159.769613][ T9889] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  159.777440][ T9889] 8021q: adding VLAN 0 to HW filter on device bond2
[  159.781788][ T9889] 8021q: adding VLAN 0 to HW filter on device bond3
[  159.785513][ T9889] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.792269][ T9889] 8021q: adding VLAN 0 to HW filter on device bond4
[  159.795863][ T9889] 8021q: adding VLAN 0 to HW filter on device bond5
[  159.802930][ T9889] 8021q: adding VLAN 0 to HW filter on device bond6
[  159.807518][ T9889] 8021q: adding VLAN 0 to HW filter on device bond7
[  159.824142][ T9889] 8021q: adding VLAN 0 to HW filter on device bond8
[  159.830005][ T9889] 8021q: adding VLAN 0 to HW filter on device bond9
[  159.833521][ T9889] 8021q: adding VLAN 0 to HW filter on device bond10
[  159.861683][ T9889] 8021q: adding VLAN 0 to HW filter on device bond11
[  159.871383][ T9889] 8021q: adding VLAN 0 to HW filter on device eth0
[  159.889262][ T9889] 8021q: adding VLAN 0 to HW filter on device eth1
[  159.909087][ T9889] 8021q: adding VLAN 0 to HW filter on device eth2
[  159.922615][ T9889] 8021q: adding VLAN 0 to HW filter on device eth3
[  159.934278][ T9889] 8021q: adding VLAN 0 to HW filter on device bond12
[  160.087114][ T9920] netlink: 'syz.1.1051': attribute type 2 has an invalid length.
[  160.111563][ T9925] sctp: [Deprecated]: syz.0.1049 (pid 9925) Use of struct sctp_assoc_value in delayed_ack socket option.
[  160.111563][ T9925] Use struct sctp_sack_info instead
[  160.117394][ T9925] sctp: [Deprecated]: syz.0.1049 (pid 9925) Use of struct sctp_assoc_value in delayed_ack socket option.
[  160.117394][ T9925] Use struct sctp_sack_info instead
[  160.188346][ T9910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  160.190833][ T9904] syzkaller1: entered promiscuous mode
[  160.195048][ T9904] syzkaller1: entered allmulticast mode
[  160.344650][ T9941] netlink: 'syz.1.1054': attribute type 1 has an invalid length.
[  160.383271][ T9941] bond11: entered allmulticast mode
[  160.441903][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'.
[  160.452353][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'.
[  160.460204][ T9944] netlink: 'syz.2.1055': attribute type 1 has an invalid length.
[  160.491229][ T9944] 8021q: adding VLAN 0 to HW filter on device bond16
[  160.497526][ T9946] bond16: option tlb_dynamic_lb: unable to set because the bond device is up
[  160.500426][ T9944] bond16: option tlb_dynamic_lb: unable to set because the bond device is up
[  161.618299][ T9954] bridge0: port 2(vlan3) entered blocking state
[  161.620970][ T9954] bridge0: port 2(vlan3) entered disabled state
[  161.623285][ T9954] vlan3: entered allmulticast mode
[  161.625061][ T9954] geneve0: entered allmulticast mode
[  161.630260][ T9954] vlan3: entered promiscuous mode
[  161.631945][ T9954] geneve0: entered promiscuous mode
[  161.772709][ T9970] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  161.804275][ T9976] Bluetooth: MGMT ver 1.23
[  162.042046][ T9998] xt_CT: You must specify a L4 protocol and not use inversions on it
[  162.338420][T10014] ip6erspan1: entered allmulticast mode
[  162.551665][T10027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.560685][T10027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.574862][T10027] bond0 (unregistering): Released all slaves
[  162.995732][T10057] netlink: 'syz.2.1084': attribute type 13 has an invalid length.
[  163.005884][T10057] netlink: 'syz.2.1084': attribute type 17 has an invalid length.
[  163.011446][T10062] netlink: 'syz.1.1085': attribute type 10 has an invalid length.
[  163.117022][T10057] veth0_to_team: left promiscuous mode
[  163.130741][T10057] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  163.134368][T10057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  163.154008][T10057] veth1_macvtap: left promiscuous mode
[  163.158647][T10057] veth0_macvtap: left promiscuous mode
[  163.171515][T10057] veth0_macvtap: entered promiscuous mode
[  163.190594][T10057] veth1_macvtap: entered promiscuous mode
[  163.195092][T10057] bridge0: port 2(vlan3) entered blocking state
[  163.197276][T10057] bridge0: port 2(vlan3) entered forwarding state
[  163.204366][T10057] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  163.224091][T10057] 8021q: adding VLAN 0 to HW filter on device bond1
[  163.229212][T10057] 8021q: adding VLAN 0 to HW filter on device bond2
[  163.233042][T10057] veth0_to_team: entered promiscuous mode
[  163.242884][T10057] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  163.249750][T10057] 8021q: adding VLAN 0 to HW filter on device bond3
[  163.253602][T10057] 8021q: adding VLAN 0 to HW filter on device bond4
[  163.261659][T10057] 8021q: adding VLAN 0 to HW filter on device bond5
[  163.270165][T10057] 8021q: adding VLAN 0 to HW filter on device bond6
[  163.274174][T10057] 8021q: adding VLAN 0 to HW filter on device bond7
[  163.283505][T10057] 8021q: adding VLAN 0 to HW filter on device bond8
[  163.289545][T10057] 8021q: adding VLAN 0 to HW filter on device eth0
[  163.299080][T10057] 8021q: adding VLAN 0 to HW filter on device eth1
[  163.310784][T10057] 8021q: adding VLAN 0 to HW filter on device eth2
[  163.322996][T10057] 8021q: adding VLAN 0 to HW filter on device eth3
[  163.333006][T10057] 8021q: adding VLAN 0 to HW filter on device bond9
[  163.357243][T10057] 8021q: adding VLAN 0 to HW filter on device bond10
[  163.371188][T10057] 8021q: adding VLAN 0 to HW filter on device bond11
[  163.379432][T10057] 8021q: adding VLAN 0 to HW filter on device bond12
[  163.392917][T10057] vlan2: left allmulticast mode
[  163.394613][T10057] bond15: left allmulticast mode
[  163.397350][T10057] geneve4: left allmulticast mode
[  163.409468][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.414204][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.464651][ T5670] bond14: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  163.474276][   T56] Bluetooth: hci2: link tx timeout
[  163.483526][   T56] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  163.490890][   T56] Bluetooth: hci2: link tx timeout
[  163.492951][   T56] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  163.511884][ T9903] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  163.523862][ T9903] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 55914 - 0
[  163.538999][ T9903] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  163.548385][ T9903] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 55914 - 0
[  163.560043][ T9903] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  163.563038][ T9903] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 55914 - 0
[  163.570006][ T9903] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  163.573751][ T9903] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 55914 - 0
[  163.597574][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  163.611487][T10073] vlan3: left promiscuous mode
[  163.613970][T10073] bridge0: port 3(vlan3) entered disabled state
[  163.621218][T10073] bridge_slave_1: left allmulticast mode
[  163.623468][T10073] bridge_slave_1: left promiscuous mode
[  163.626008][T10073] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.660459][T10073] bridge_slave_0: left promiscuous mode
[  163.665646][T10073] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.783403][   T56] Bluetooth: hci2: link tx timeout
[  163.787511][   T56] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  163.791369][T10075] syzkaller1: entered promiscuous mode
[  163.793649][T10075] syzkaller1: entered allmulticast mode
[  163.808271][   T56] Bluetooth: hci2: link tx timeout
[  163.810336][   T56] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  163.816720][   T56] Bluetooth: hci2: command 0x0401 tx timeout
[  163.820158][ T5001] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  163.867600][T10081] __nla_validate_parse: 12 callbacks suppressed
[  163.867621][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'.
[  163.882729][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'.
[  163.931344][T10084] syzkaller1: entered promiscuous mode
[  163.933972][T10084] syzkaller1: entered allmulticast mode
[  164.046151][T10084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1091'.
[  164.118438][T10089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1091'.
[  164.416059][T10101] netlink: 'syz.0.1095': attribute type 32 has an invalid length.
[  164.420412][T10101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1095'.
[  164.424267][T10102] xt_SECMARK: invalid mode: 4
[  164.436888][   T56] Bluetooth: hci2: link tx timeout
[  164.438994][   T56] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.477447][T10105] netlink: 'syz.0.1096': attribute type 10 has an invalid length.
[  164.480151][T10105] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1096'.
[  164.507516][   T56] Bluetooth: hci2: link tx timeout
[  164.509683][   T56] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.598631][   T56] Bluetooth: hci2: link tx timeout
[  164.602026][   T56] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.911220][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'.
[  164.918424][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'.
[  164.942894][T10126] netlink: 'syz.1.1099': attribute type 3 has an invalid length.
[  164.948667][T10126] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1099'.
[  165.034866][T10133] syzkaller0: entered promiscuous mode
[  165.040365][T10133] syzkaller0: entered allmulticast mode
[  165.219288][   T12] batadv0: left promiscuous mode
[  165.301944][T10156] netlink: 'syz.2.1105': attribute type 1 has an invalid length.
[  165.304981][T10156] netlink: 'syz.2.1105': attribute type 4 has an invalid length.
[  165.308304][T10156] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1105'.
[  165.465615][T10170] syzkaller1: entered promiscuous mode
[  165.473687][T10170] syzkaller1: entered allmulticast mode
[  165.495051][T10169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.623542][T10176] netlink: 'syz.2.1109': attribute type 1 has an invalid length.
[  165.668484][T10176] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.678249][   T56] Bluetooth: hci2: link tx timeout
[  165.680549][   T56] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  165.691526][   T56] Bluetooth: hci2: link tx timeout
[  165.693668][   T56] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  165.693750][T10176] bond0: (slave bridge10): making interface the new active one
[  165.700534][T10176] bond0: (slave bridge10): Enslaving as an active interface with an up link
[  165.828429][T10184] syzkaller0: entered promiscuous mode
[  165.834038][T10184] syzkaller0: entered allmulticast mode
[  165.896692][   T56] Bluetooth: hci2: command 0x0401 tx timeout
[  166.444782][T10195] netlink: 'syz.2.1115': attribute type 2 has an invalid length.
[  166.452491][T10195] netlink: 'syz.2.1115': attribute type 2 has an invalid length.
[  166.805262][T10206] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  166.837529][T10206] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  166.841510][T10206] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  167.104186][T10218] syzkaller1: entered promiscuous mode
[  167.105971][T10218] syzkaller1: entered allmulticast mode
[  167.256442][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  167.405852][T10234] netlink: 'syz.2.1126': attribute type 1 has an invalid length.
[  167.422978][T10234] sit0: entered promiscuous mode
[  167.545646][T10237] bond17: option min_links: invalid value (18446744073709551612)
[  167.551022][T10237] bond17: option min_links: allowed values 0 - 2147483647
[  167.555658][T10237] bond17 (unregistering): Released all slaves
[  167.569654][T10245] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  167.631081][T10248] netlink: 'syz.1.1130': attribute type 6 has an invalid length.
[  167.644433][ T9131] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  167.648371][ T9131] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  167.652075][ T9131] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  167.655120][ T9131] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  167.713368][T10252] IPv6: Can't replace route, no match found
[  167.719863][T10252] IPv6: Can't replace route, no match found
[  168.074770][T10279] syzkaller1: entered promiscuous mode
[  168.077132][T10279] syzkaller1: entered allmulticast mode
[  168.158164][T10277] syzkaller1: entered promiscuous mode
[  168.160650][T10277] syzkaller1: entered allmulticast mode
[  168.265792][T10288] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  168.269123][T10288] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  168.382267][T10296] netlink: zone id is out of range
[  168.385384][T10296] netlink: zone id is out of range
[  168.396353][T10296] netlink: zone id is out of range
[  168.399046][T10296] netlink: zone id is out of range
[  168.401945][T10296] netlink: zone id is out of range
[  168.404041][T10296] netlink: zone id is out of range
[  168.406156][T10296] netlink: zone id is out of range
[  168.410122][T10296] netlink: zone id is out of range
[  168.412327][T10296] netlink: zone id is out of range
[  168.414428][T10296] netlink: zone id is out of range
[  168.544689][T10304] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  168.682573][T10313] bond12: Unable to set down delay as MII monitoring is disabled
[  168.687328][T10313] bond12 (unregistering): Released all slaves
[  168.938695][T10330] erspan0: entered promiscuous mode
[  168.940588][T10330] __nla_validate_parse: 47 callbacks suppressed
[  168.940598][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'.
[  168.992318][T10337] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  168.995647][T10337] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  169.172501][T10346] gretap3: entered allmulticast mode
[  169.188928][T10346] bond17: (slave gretap3): making interface the new active one
[  169.200232][T10346] bond17: (slave gretap3): Enslaving as an active interface with an up link
[  169.252547][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'.
[  169.255602][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'.
[  169.690237][T10360] validate_nla: 35 callbacks suppressed
[  169.690252][T10360] netlink: 'syz.2.1163': attribute type 2 has an invalid length.
[  169.695342][T10360] netlink: 'syz.2.1163': attribute type 2 has an invalid length.
[  169.699939][T10360] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1163'.
[  169.712644][T10360] macsec1: entered promiscuous mode
[  169.845286][T10363] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1164'.
[  169.851915][T10363] netlink: 296 bytes leftover after parsing attributes in process `syz.1.1164'.
[  169.923128][T10367] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002
[  170.180024][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'.
[  170.204254][T10370] : entered promiscuous mode
[  170.211989][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1165'.
[  170.220354][T10370] openvswitch: : Dropping previously announced user features
[  171.426517][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  171.737267][T10378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1167'.
[  172.844593][T10363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  172.949011][T10382] syzkaller0: entered promiscuous mode
[  172.951204][T10382] syzkaller0: entered allmulticast mode
[  173.028727][   T33] audit: type=1804 audit(1778663082.529:2): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1170" name="/newroot/357/memory.events" dev="tmpfs" ino=1848 res=1 errno=0
[  173.071331][   T33] audit: type=1800 audit(1778663082.529:3): pid=10388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1170" name="memory.events" dev="tmpfs" ino=1848 res=0 errno=0
[  173.121146][T10388] bond12: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  173.125829][T10388] bond12 (unregistering): Released all slaves
[  174.115903][T10416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1179'.
[  174.120829][T10416] netlink: 'syz.2.1179': attribute type 7 has an invalid length.
[  174.123931][T10416] netlink: 'syz.2.1179': attribute type 8 has an invalid length.
[  174.128534][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'.
[  174.316434][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'.
[  174.370956][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1183'.
[  174.374570][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1183'.
[  174.425218][T10436] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1184'.
[  174.618625][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  174.699415][T10448] syzkaller0: entered promiscuous mode
[  174.701870][T10448] syzkaller0: entered allmulticast mode
[  174.712933][T10456] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  174.735566][T10456] netlink: 'syz.1.1189': attribute type 1 has an invalid length.
[  174.780101][T10456] bond12: entered promiscuous mode
[  174.789140][T10456] 8021q: adding VLAN 0 to HW filter on device bond12
[  174.815218][T10460] 8021q: adding VLAN 0 to HW filter on device bond12
[  174.822273][T10460] bond12: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  174.827289][T10460] bond12: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  174.841759][T10460] bond12: (slave ip6gre1): making interface the new active one
[  174.845107][T10460] ip6gre1: entered promiscuous mode
[  174.849320][T10460] bond12: (slave ip6gre1): Enslaving as an active interface with an up link
[  174.856208][T10462] netlink: 'syz.2.1190': attribute type 1 has an invalid length.
[  174.865412][T10462] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1190'.
[  175.043915][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'.
[  175.103861][T10482] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  175.109869][T10482] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  175.153348][T10480] vlan4: entered promiscuous mode
[  175.164535][T10480] geneve1: entered promiscuous mode
[  175.178024][T10480] vlan4: entered allmulticast mode
[  175.185467][T10480] geneve1: entered allmulticast mode
[  175.235995][T10492] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode
[  175.247596][T10492] mac80211_hwsim hwsim10 wlan1: left allmulticast mode
[  175.656029][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'.
[  175.911040][T10511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1201'.
[  176.100293][T10522] netlink: 'syz.1.1203': attribute type 4 has an invalid length.
[  176.140877][T10524] net_ratelimit: 102 callbacks suppressed
[  176.140886][T10524] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  176.412027][T10541] netlink: 'syz.1.1209': attribute type 1 has an invalid length.
[  176.488616][T10546] netlink: 'syz.2.1211': attribute type 1 has an invalid length.
[  176.491472][T10545] netlink: 'syz.2.1211': attribute type 1 has an invalid length.
[  176.544126][T10545] 8021q: adding VLAN 0 to HW filter on device bond18
[  176.948388][T10572] netlink: 'syz.2.1217': attribute type 29 has an invalid length.
[  176.952187][T10573] netlink: 'syz.2.1217': attribute type 29 has an invalid length.
[  176.966657][T10573] netlink: 'syz.2.1217': attribute type 29 has an invalid length.
[  176.971452][T10573] netlink: 'syz.2.1217': attribute type 29 has an invalid length.
[  177.099177][T10579] 8021q: adding VLAN 0 to HW filter on device bond19
[  177.120157][T10579] bond19: (slave gretap4): making interface the new active one
[  177.124862][T10579] bond19: (slave gretap4): Enslaving as an active interface with an up link
[  177.188367][T10582] openvswitch: netlink: Message has 3 unknown bytes.
[  177.699924][T10613] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  178.673294][T10648] IPv6: NLM_F_CREATE should be specified when creating new route
[  179.058123][T10665] bond13: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  179.065662][T10665] bond13 (unregistering): Released all slaves
[  179.152032][T10673] 8021q: adding VLAN 0 to HW filter on device bond20
[  179.183116][T10673] bond20: (slave veth11): Enslaving as an active interface with a down link
[  179.190417][T10679] __nla_validate_parse: 21 callbacks suppressed
[  179.190434][T10679] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1246'.
[  179.199751][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'.
[  179.207559][T10673] bond20: (slave veth13): Enslaving as an active interface with a down link
[  179.213054][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1245'.
[  179.226846][T10673] bond20: (slave bridge11): Enslaving as an active interface with a down link
[  179.268523][T10680] nbd: socks must be embedded in a SOCK_ITEM attr
[  179.430966][T10694] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1251'.
[  179.433931][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'.
[  179.447801][T10694] vlan0: entered allmulticast mode
[  179.482693][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1252'.
[  179.508155][T10697] 8021q: adding VLAN 0 to HW filter on device bond13
[  179.528042][T10697] bond13: (slave geneve3): Enslaving as an active interface with an up link
[  179.531395][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  179.535598][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  179.554531][T10697] bond13 (unregistering): (slave geneve3): Releasing backup interface
[  179.561918][T10697] bond13 (unregistering): Released all slaves
[  179.578974][   T13] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  179.582141][   T13] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  179.600849][T10702] hm3): entered promiscuous mode
[  180.097853][T10729] validate_nla: 62 callbacks suppressed
[  180.097865][T10729] netlink: 'syz.1.1262': attribute type 1 has an invalid length.
[  180.136769][T10729] 8021q: adding VLAN 0 to HW filter on device bond13
[  180.143050][T10729] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1262'.
[  180.146682][T10729] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1262'.
[  180.151635][T10732] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1262'.
[  180.155726][T10732] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1262'.
[  180.180295][T10729] veth5: entered allmulticast mode
[  180.182303][   T33] audit: type=1804 audit(1778663089.689:4): pid=10733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1263" name="/newroot/447/memory.events" dev="tmpfs" ino=2304 res=1 errno=0
[  180.192394][T10729] bond13: (slave veth5): Enslaving as an active interface with an up link
[  180.203093][T10729] bond13 (unregistering): (slave veth5): Releasing backup interface
[  180.209581][T10729] bond13 (unregistering): Released all slaves
[  180.529885][T10749] tipc: New replicast peer: 255.255.255.255
[  180.532411][T10749] tipc: Enabled bearer <udp:syz2>, priority 10
[  180.620846][T10751] netlink: 'syz.1.1268': attribute type 11 has an invalid length.
[  180.773473][T10757] netlink: 'syz.0.1270': attribute type 13 has an invalid length.
[  181.048733][T10768] netlink: 'syz.0.1274': attribute type 1 has an invalid length.
[  181.292044][T10788] syzkaller1: entered promiscuous mode
[  181.294110][T10788] syzkaller1: entered allmulticast mode
[  181.498984][T10776] block nbd5: server does not support multiple connections per device.
[  181.518139][T10776] block nbd5: shutting down sockets
[  181.527144][ T5866] tipc: Node number set to 1471582964
[  181.646156][T10796] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.724177][T10796] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.809489][T10796] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.827376][T10808] batadv_slave_1: entered allmulticast mode
[  181.834112][T10808] tunl0: Caught tx_queue_len zero misconfig
[  181.842059][T10807] batadv_slave_1: left allmulticast mode
[  181.889666][T10796] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  181.912149][T10812] blkio.reset_stats is deprecated
[  182.021915][   T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  182.023705][T10817] netlink: 'syz.0.1290': attribute type 1 has an invalid length.
[  182.084519][T10820] sctp: [Deprecated]: syz.2.1291 (pid 10820) Use of int in max_burst socket option deprecated.
[  182.084519][T10820] Use struct sctp_assoc_value instead
[  182.089384][T10817] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address
[  182.095130][T10817] bond13: (slave vxcan1): Error -95 calling set_mac_address
[  182.119489][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  182.158680][T10821] 8021q: adding VLAN 0 to HW filter on device bond13
[  182.165689][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  182.184464][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  182.192738][T10817] macvlan0: entered promiscuous mode
[  182.196063][T10817] macvlan0: entered allmulticast mode
[  182.199736][T10817] bond13: entered promiscuous mode
[  182.206034][T10817] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  182.212557][T10817] bond13: left promiscuous mode
[  182.345201][   T12] netdevsim netdevsim2 eth0: set [1, 3] type 2 family 0 port 20004 - 0
[  182.349870][   T12] netdevsim netdevsim2 eth1: set [1, 3] type 2 family 0 port 20004 - 0
[  182.352869][   T12] netdevsim netdevsim2 eth2: set [1, 3] type 2 family 0 port 20004 - 0
[  182.359571][   T12] netdevsim netdevsim2 eth3: set [1, 3] type 2 family 0 port 20004 - 0
[  182.565624][T10858] netlink: 'syz.1.1300': attribute type 1 has an invalid length.
[  182.668051][T10868] netlink: 'syz.1.1302': attribute type 1 has an invalid length.
[  182.739904][T10868] 8021q: adding VLAN 0 to HW filter on device bond14
[  182.749143][T10868] bond13: (slave bond14): making interface the new active one
[  182.757909][T10868] bond13: (slave bond14): Enslaving as an active interface with an up link
[  182.858898][T10880] : renamed from bond0
[  182.992074][T10889] nbd: must specify a device to reconfigure
[  183.059772][T10889] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  183.351459][T10914] netlink: 'syz.1.1314': attribute type 1 has an invalid length.
[  183.372786][T10914] bond0: entered promiscuous mode
[  183.375198][T10914] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.389393][T10914] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.392396][T10914] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address
[  183.397248][T10914] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  183.405951][T10914] bond0: (slave wireguard0): making interface the new active one
[  183.408722][T10914] wireguard0: entered promiscuous mode
[  183.411433][T10914] bond0: (slave wireguard0): Enslaving as an active interface with an up link
[  183.445882][T10918] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.450000][T10918] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.525016][T10928] ip6gre2: entered promiscuous mode
[  183.529229][T10928] ip6gre2: entered allmulticast mode
[  183.532786][ T9131] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  183.535556][ T9131] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  183.556542][ T5866] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  183.727157][T10940] hmac(sha2: entered promiscuous mode
[  183.801521][T10950] xt_nat: multiple ranges no longer supported
[  184.006889][ T5866] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  184.049897][ T5866] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  184.053183][T10967] netlink: 'syz.1.1326': attribute type 1 has an invalid length.
[  184.192430][T10980] netlink: 'syz.1.1329': attribute type 11 has an invalid length.
[  184.294445][T10985] __nla_validate_parse: 16 callbacks suppressed
[  184.294465][T10985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1331'.
[  184.303988][T10985] openvswitch: netlink: Multiple metadata blocks provided
[  184.533757][T10997] batman_adv: batadv0: Adding interface: dummy0
[  184.540447][T10997] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  184.551533][T10997] batman_adv: batadv0: Interface activated: dummy0
[  184.567482][T10997] batadv0: mtu less than device minimum
[  184.570073][T10997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  184.577115][T10997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  184.581244][T10997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  184.585946][T10997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  184.590306][T10997] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  184.862498][T11011] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  184.869179][T11011] hsr0: entered promiscuous mode
[  185.088043][T11027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1342'.
[  185.145978][T11031] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1341'.
[  185.161701][T11031] netlink: 'syz.0.1341': attribute type 21 has an invalid length.
[  185.212407][T11029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'.
[  185.269854][T11029] bond15: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  185.274898][T11029] bond15 (unregistering): Released all slaves
[  185.894557][T11046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1347'.
[  185.977480][T11048] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20001
[  185.989211][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'.
[  186.009038][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'.
[  186.158723][T11063] netlink: 'syz.1.1353': attribute type 10 has an invalid length.
[  186.163306][T11063] : (slave dummy0): Releasing backup interface
[  186.163640][T11061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1352'.
[  186.177677][T11063] netlink: 'syz.1.1353': attribute type 10 has an invalid length.
[  186.197450][T11063] : (slave dummy0): Enslaving as an active interface with an up link
[  186.216395][ T5620] Bluetooth: hci2: command 0x0401 tx timeout
[  186.272388][T11069] netlink: 'syz.2.1355': attribute type 11 has an invalid length.
[  186.277086][T11068] netlink: 'syz.2.1355': attribute type 11 has an invalid length.
[  186.297017][ T5001] Bluetooth: hci1: command 0x0406 tx timeout
[  186.323544][T11074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1357'.
[  186.388406][T11078] vlan5: entered promiscuous mode
[  186.448712][T11082] netlink: 'syz.2.1360': attribute type 21 has an invalid length.
[  186.457615][T11082] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1360'.
[  186.618117][T11090] netlink: 'syz.2.1362': attribute type 13 has an invalid length.
[  186.626979][T11090] netlink: 'syz.2.1362': attribute type 17 has an invalid length.
[  186.752342][T11088] bridge0: port 2(vlan3) entered disabled state
[  186.754576][T11088] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.786670][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  187.847225][T11090] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.849540][T11090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.860956][T11090] veth0_to_team: left promiscuous mode
[  187.877950][T11090] veth1_macvtap: left promiscuous mode
[  187.880371][T11090] veth0_macvtap: left promiscuous mode
[  187.883070][T11090] veth0_macvtap: entered promiscuous mode
[  187.887242][T11090] veth1_macvtap: entered promiscuous mode
[  187.894066][T11090] bridge0: port 2(vlan3) entered blocking state
[  187.896569][T11090] bridge0: port 2(vlan3) entered forwarding state
[  187.899540][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  187.908647][T11090] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  187.916449][T11090] 8021q: adding VLAN 0 to HW filter on device bond1
[  187.920914][T11090] 8021q: adding VLAN 0 to HW filter on device bond2
[  187.924501][T11090] veth0_to_team: entered promiscuous mode
[  187.928292][T11090] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  187.932185][T11090] 8021q: adding VLAN 0 to HW filter on device bond3
[  187.935019][T11090] 8021q: adding VLAN 0 to HW filter on device bond4
[  187.941212][T11090] 8021q: adding VLAN 0 to HW filter on device bond5
[  187.947120][T11090] 8021q: adding VLAN 0 to HW filter on device bond6
[  187.950074][T11090] 8021q: adding VLAN 0 to HW filter on device bond7
[  187.954323][T11090] 8021q: adding VLAN 0 to HW filter on device bond8
[  187.958940][T11090] 8021q: adding VLAN 0 to HW filter on device eth0
[  187.962215][T11090] 8021q: adding VLAN 0 to HW filter on device eth1
[  187.965356][T11090] 8021q: adding VLAN 0 to HW filter on device eth2
[  187.970195][T11090] 8021q: adding VLAN 0 to HW filter on device eth3
[  187.973917][T11090] 8021q: adding VLAN 0 to HW filter on device bond9
[  187.981946][T11090] 8021q: adding VLAN 0 to HW filter on device bond10
[  187.987857][T11090] 8021q: adding VLAN 0 to HW filter on device bond11
[  187.992790][T11090] 8021q: adding VLAN 0 to HW filter on device bond12
[  187.998925][T11090] 8021q: adding VLAN 0 to HW filter on device bond13
[  188.004682][T11090] 8021q: adding VLAN 0 to HW filter on device bond14
[  188.008828][T11090] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.013151][T11090] 8021q: adding VLAN 0 to HW filter on device bond15
[  188.018937][T11090] 8021q: adding VLAN 0 to HW filter on device bond16
[  188.022440][T11090] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.028670][T11090] sit0: left promiscuous mode
[  188.040164][T11090] 8021q: adding VLAN 0 to HW filter on device bond17
[  188.046019][T11090] gretap3: left allmulticast mode
[  188.057585][T11090] vlan4: left promiscuous mode
[  188.059264][T11090] geneve1: left promiscuous mode
[  188.060993][T11090] vlan4: left allmulticast mode
[  188.062603][T11090] geneve1: left allmulticast mode
[  188.068711][T11090] 8021q: adding VLAN 0 to HW filter on device bond18
[  188.073948][T11090] 8021q: adding VLAN 0 to HW filter on device bond19
[  188.091202][T11090] 8021q: adding VLAN 0 to HW filter on device bond20
[  188.109427][T11090] vlan5: left promiscuous mode
[  188.167648][   T13] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 55914 - 0
[  188.178618][   T13] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 55914 - 0
[  188.191909][   T13] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 55914 - 0
[  188.230523][   T13] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 55914 - 0
[  188.239678][   T13] bond20: (slave veth11): link status definitely up, 10000 Mbps full duplex
[  188.242796][   T13] bond20: (slave veth13): link status definitely up, 10000 Mbps full duplex
[  188.260945][   T13] bond20: (slave veth11): making interface the new active one
[  188.279510][   T13] bond20: active interface up!
[  188.284793][ T5670] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 35469 - 0
[  188.293561][ T5670] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 35469 - 0
[  188.303698][T11102] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.317091][ T5670] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 35469 - 0
[  188.322929][ T5670] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 35469 - 0
[  188.339147][T11096] syzkaller0: entered promiscuous mode
[  188.342353][T11096] syzkaller0: entered allmulticast mode
[  188.366131][ T6279] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  188.399280][T11096] veth1_to_batadv: entered allmulticast mode
[  188.457028][T11095] tipc: Resetting bearer <eth:syzkaller0>
[  188.497146][T11095] tipc: Disabling bearer <eth:syzkaller0>
[  188.703530][T11121] netlink: 'syz.1.1372': attribute type 1 has an invalid length.
[  188.789412][T11121] 8021q: adding VLAN 0 to HW filter on device bond15
[  188.829827][T11123] bond15: (slave veth7): Enslaving as an active interface with a down link
[  188.925605][T11129] netlink: 'syz.1.1374': attribute type 11 has an invalid length.
[  188.989908][T11132] gtp2: entered promiscuous mode
[  188.991487][T11132] gtp2: entered allmulticast mode
[  189.053935][T11134] netlink: 'syz.1.1376': attribute type 1 has an invalid length.
[  189.099269][T11134] bond16: entered promiscuous mode
[  189.101870][T11134] 8021q: adding VLAN 0 to HW filter on device bond16
[  189.157693][T11138] netlink: 'syz.1.1377': attribute type 9 has an invalid length.
[  189.476784][T11156] netlink: 'syz.0.1382': attribute type 21 has an invalid length.
[  189.483157][T11153] xt_CT: You must specify a L4 protocol and not use inversions on it
[  189.622836][T11164] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[  189.652113][T11158] __nla_validate_parse: 12 callbacks suppressed
[  189.652139][T11158] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1383'.
[  189.739005][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1385'.
[  189.760451][T11166] ipvlan0: entered promiscuous mode
[  189.763176][T11166] bridge0: port 1(ipvlan0) entered blocking state
[  189.765893][T11166] bridge0: port 1(ipvlan0) entered disabled state
[  189.773053][T11166] ipvlan0: entered allmulticast mode
[  189.775851][T11166] bridge0: entered allmulticast mode
[  189.784840][T11166] ipvlan0: left allmulticast mode
[  189.788075][T11166] bridge0: left allmulticast mode
[  189.890627][T11173] net_ratelimit: 14 callbacks suppressed
[  189.890639][T11173] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  189.895709][T11173] syzkaller0: entered promiscuous mode
[  189.905395][T11173] syzkaller0: entered allmulticast mode
[  189.911516][T11175] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1388'.
[  190.369499][T11201] hsr0: left promiscuous mode
[  190.381679][T11201] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  190.384694][T11201] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  190.424726][T11201] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  190.428824][T11201] vlan0: left allmulticast mode
[  190.447282][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  190.455322][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  190.462473][T11201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1393'.
[  190.466481][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  190.470669][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  190.639147][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'.
[  190.661886][ T5670] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  190.667239][ T5670] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  190.686907][ T5853] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  190.812312][T11216] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  190.946553][ T5853] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  191.420975][T11238] netlink: 'syz.0.1401': attribute type 10 has an invalid length.
[  191.423456][T11238] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1401'.
[  191.680655][T11252] erspan0: left promiscuous mode
[  191.697497][T11252] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.725691][T11252] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.729430][T11252] veth1_to_batadv: left allmulticast mode
[  191.733150][T11252] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.738033][ T5870] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  191.743834][T11252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  191.747561][T11252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  191.755044][T11252] veth0_macvtap: left promiscuous mode
[  191.758176][T11252] veth0_macvtap: entered promiscuous mode
[  191.763500][T11252] veth1_macvtap: entered promiscuous mode
[  191.775712][T11252] 8021q: adding VLAN 0 to HW filter on device bond1
[  191.780143][T11252] 8021q: adding VLAN 0 to HW filter on device bond2
[  191.785366][T11252] 8021q: adding VLAN 0 to HW filter on device bond3
[  191.789410][T11252] 8021q: adding VLAN 0 to HW filter on device bond4
[  191.794979][T11252] 8021q: adding VLAN 0 to HW filter on device bond5
[  191.804845][T11252] 8021q: adding VLAN 0 to HW filter on device bond6
[  191.820580][T11252] 8021q: adding VLAN 0 to HW filter on device bond7
[  191.829871][T11252] vlan3: left allmulticast mode
[  191.832026][T11252] bridge_slave_0: left allmulticast mode
[  191.841061][T11252] 8021q: adding VLAN 0 to HW filter on device bond8
[  191.859948][T11252] gre1: left promiscuous mode
[  191.864635][T11252] 8021q: adding VLAN 0 to HW filter on device bond10
[  191.869993][T11252] vlan1: left allmulticast mode
[  191.871637][T11252] veth0_to_bond: left allmulticast mode
[  191.875259][T11252] bond11: left allmulticast mode
[  191.878441][T11252] 8021q: adding VLAN 0 to HW filter on device bond11
[  191.881730][T11252] ip6erspan1: left allmulticast mode
[  191.888162][T11252] bond12: left promiscuous mode
[  191.890190][T11252] ip6gre1: left promiscuous mode
[  191.894801][T11252] veth5: left allmulticast mode
[  191.901041][T11252] 8021q: adding VLAN 0 to HW filter on device eth0
[  191.905952][T11252] 8021q: adding VLAN 0 to HW filter on device eth1
[  191.913200][T11252] 8021q: adding VLAN 0 to HW filter on device eth2
[  191.919096][T11252] 8021q: adding VLAN 0 to HW filter on device eth3
[  191.928960][T11252] 8021q: adding VLAN 0 to HW filter on device bond13
[  191.937739][T11252] bond0: left promiscuous mode
[  191.943249][T11252] wireguard0: left promiscuous mode
[  191.950861][T11252] ip6gre2: left promiscuous mode
[  191.953411][T11252] ip6gre2: left allmulticast mode
[  191.962160][T11252] gtp2: left promiscuous mode
[  191.964282][T11252] gtp2: left allmulticast mode
[  191.967919][T11252] bond16: left promiscuous mode
[  191.987522][ T5853] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  192.047757][ T5670] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.053316][ T5670] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.074116][ T5670] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.083789][ T5670] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.113728][T11270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1409'.
[  192.137738][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  192.181049][ T5670] bond15: (slave veth7): link status definitely up, 10000 Mbps full duplex
[  192.186827][ T5853] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  192.198088][ T5670] bond15: (slave veth7): making interface the new active one
[  192.231684][ T5670] bond15: active interface up!
[  192.328671][ T5853] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  192.532667][T11298] netlink: 'syz.2.1416': attribute type 1 has an invalid length.
[  192.540983][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1416'.
[  192.546176][T11298] netlink: 'syz.2.1416': attribute type 1 has an invalid length.
[  192.556948][T11298] syzkaller1: entered promiscuous mode
[  192.559283][T11298] syzkaller1: entered allmulticast mode
[  192.612463][T11303] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  192.723151][T11308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.753689][T11308] syzkaller0: entered promiscuous mode
[  192.755631][T11308] syzkaller0: entered allmulticast mode
[  192.758150][T11308] tipc: Resetting bearer <eth:syzkaller0>
[  192.920820][T11307] tipc: Resetting bearer <eth:syzkaller0>
[  193.133458][T11315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'.
[  193.263290][ T5853] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  195.441883][T11307] tipc: Disabling bearer <eth:syzkaller0>
[  195.467423][T11324] netlink: 'syz.0.1421': attribute type 1 has an invalid length.
[  195.471828][T11325] gre0: entered promiscuous mode
[  195.474069][T11325] gre0: entered allmulticast mode
[  195.567988][T11338] wireguard: wg1: Could not create IPv4 socket
[  195.609167][T11340] netlink: 'syz.2.1425': attribute type 4 has an invalid length.
[  195.665619][T11344] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1427'.
[  195.677690][T11342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1426'.
[  195.791481][T11356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1430'.
[  195.878403][T11364] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1433'.
[  196.017258][T11369] tc_dump_action: action bad kind
[  196.089461][T11382] tipc: Failed to remove unknown binding: 66,0,0/784464270:2466125633/2466125635
[  196.092890][T11382] tipc: Failed to remove unknown binding: 66,0,0/784464270:2466125633/2466125634
[  196.096210][T11382] tipc: Failed to remove unknown binding: 66,0,0/784464270:2466125633/2466125635
[  196.105052][T11382] tipc: Failed to remove unknown binding: 66,0,0/784464270:2466125633/2466125634
[  196.114120][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1435'.
[  196.118000][T11382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1435'.
[  196.120843][T11382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1435'.
[  196.123915][T11382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1435'.
[  196.131961][T11382] netlink: 'syz.2.1435': attribute type 6 has an invalid length.
[  196.178755][T11388] openvswitch: netlink: Flow actions attr not present in new flow.
[  196.181777][T11388] netlink: 'syz.0.1437': attribute type 8 has an invalid length.
[  196.250476][T11392] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1438'.
[  196.253545][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1438'.
[  196.314338][T11397] tipc: Can't bind to reserved service type 2
[  196.922872][T11399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  197.000334][T11436] tipc: Disabling bearer <udp:syz2>
[  197.032114][    C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  197.032159][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  197.123028][T11449] netlink: 'syz.0.1445': attribute type 1 has an invalid length.
[  197.227299][T11456] bond14: (slave bridge8): Enslaving as a backup interface with an up link
[  197.382302][T11472] netlink: 'syz.1.1450': attribute type 5 has an invalid length.
[  197.602512][T11478] bridge13: the hash_elasticity option has been deprecated and is always 16
[  197.993924][T11479] tipc: Resetting bearer <eth:syzkaller0>
[  198.340610][T11494] bridge0: port 2(vlan3) entered disabled state
[  198.342958][T11494] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.381380][ T9903] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.385566][ T9903] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  199.389701][ T9903] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  199.392940][ T9903] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 35469 - 0
[  199.396850][ T9903] netdevsim netdevsim2 eth0: unset [1, 3] type 2 family 0 port 20004 - 0
[  199.417534][ T9903] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.421190][ T9903] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  199.424918][ T9903] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  199.431154][ T9903] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 35469 - 0
[  199.435419][ T9903] netdevsim netdevsim2 eth1: unset [1, 3] type 2 family 0 port 20004 - 0
[  199.439505][ T9903] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.442668][ T9903] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  199.445975][ T9903] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  199.450129][ T9903] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 35469 - 0
[  199.453361][ T9903] netdevsim netdevsim2 eth2: unset [1, 3] type 2 family 0 port 20004 - 0
[  199.464048][ T9903] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  199.476074][ T9903] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  199.479998][ T9903] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  199.483230][ T9903] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 35469 - 0
[  199.486932][ T9903] netdevsim netdevsim2 eth3: unset [1, 3] type 2 family 0 port 20004 - 0
[  200.320964][T11467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  200.437463][T11521] netlink: 'syz.2.1454': attribute type 1 has an invalid length.
[  200.510300][T11526] dvmrp6: entered allmulticast mode
[  200.549645][T11526] gre0: left promiscuous mode
[  200.551922][T11526] gre0: left allmulticast mode
[  200.592870][T11526] tipc: Resetting bearer <eth:syzkaller0>
[  200.594932][T11526] tipc: Resetting bearer <eth:syzkaller0>
[  200.605132][T11523] xt_l2tp: v2 doesn't support IP mode
[  200.613231][T11534] xt_connbytes: Forcing CT accounting to be enabled
[  200.647942][T11526] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  200.853865][T11551] __nla_validate_parse: 5 callbacks suppressed
[  200.853886][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1459'.
[  201.429572][T11574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1467'.
[  201.564878][T11582] syzkaller0: entered promiscuous mode
[  201.567433][T11582] syzkaller0: entered allmulticast mode
[  201.573002][ T5670] 0: reclassify loop, rule prio 0, protocol 800
[  201.951159][T11588] bond17: entered allmulticast mode
[  202.000920][T11591] netlink: 'syz.1.1474': attribute type 3 has an invalid length.
[  202.061038][T11594] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1473'.
[  202.263824][T11604] netlink: 'syz.0.1477': attribute type 1 has an invalid length.
[  202.392861][T11611] lo: Caught tx_queue_len zero misconfig
[  202.394823][T11611] netem: change failed
[  202.549022][T11613] xt_hashlimit: size too large, truncated to 1048576
[  202.680808][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1481'.
[  202.784227][T11624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1483'.
[  202.792909][T11629] netlink: 'syz.2.1485': attribute type 1 has an invalid length.
[  202.796773][T11624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1483'.
[  202.803349][T11628] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1484'.
[  202.831984][T11629] bond22: entered promiscuous mode
[  202.834061][T11629] 8021q: adding VLAN 0 to HW filter on device bond22
[  202.840757][T11624] pimreg: entered allmulticast mode
[  202.852400][T11623] pimreg: left allmulticast mode
[  202.893708][T11634] netlink: 'syz.0.1486': attribute type 1 has an invalid length.
[  202.897710][T11634] netlink: 'syz.0.1486': attribute type 3 has an invalid length.
[  202.900395][T11634] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1486'.
[  203.416872][    C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  203.645081][T11638] bond22: (slave bridge14): making interface the new active one
[  203.649162][T11638] bridge14: entered promiscuous mode
[  203.652939][T11638] bond22: (slave bridge14): Enslaving as an active interface with an up link
[  203.712610][T11643] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  203.715390][T11644] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  203.718821][T11644] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  203.778795][T11649] netlink: 'syz.0.1489': attribute type 1 has an invalid length.
[  203.798972][T11649] 8021q: adding VLAN 0 to HW filter on device bond15
[  203.829401][T11651] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  203.837522][T11651] syzkaller0: entered promiscuous mode
[  203.842403][T11651] syzkaller0: entered allmulticast mode
[  203.901675][T11651] tipc: Resetting bearer <eth:syzkaller0>
[  203.990585][T11650] tipc: Resetting bearer <eth:syzkaller0>
[  204.015838][T11657] nbd: must specify a size in bytes for the device
[  204.019370][T11650] tipc: Disabling bearer <eth:syzkaller0>
[  204.034108][T11657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1492'.
[  204.050431][T11657] bond23: option miimon: invalid value (18446744073709551607)
[  204.052936][T11657] bond23: option miimon: allowed values 0 - 2147483647
[  204.056185][T11657] bond23 (unregistering): Released all slaves
[  204.114795][T11660] syzkaller0: entered promiscuous mode
[  204.119219][T11660] syzkaller0: entered allmulticast mode
[  204.281967][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1495'.
[  204.304653][ T5860] IPVS: starting estimator thread 0...
[  204.394288][T11683] netlink: 'syz.2.1497': attribute type 13 has an invalid length.
[  204.397232][T11673] IPVS: using max 65 ests per chain, 156000 per kthread
[  204.397556][T11682] netlink: 'syz.2.1497': attribute type 13 has an invalid length.
[  204.496043][T11675] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  204.500420][T11676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  204.590692][ T5651] IPVS: stop unused estimator thread 0...
[  204.630329][ T5001] Bluetooth: hci2: command 0x0401 tx timeout
[  204.752638][T11689] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  204.986524][T11722] vlan1: entered promiscuous mode
[  204.991971][T11722] geneve1: entered promiscuous mode
[  204.993786][T11722] vlan1: entered allmulticast mode
[  204.995649][T11722] geneve1: entered allmulticast mode
[  205.109450][T11741] syzkaller0: entered promiscuous mode
[  205.120026][T11741] syzkaller0: entered allmulticast mode
[  205.217747][T11748] xt_CT: You must specify a L4 protocol and not use inversions on it
[  205.224122][T11745] netlink: 'syz.0.1510': attribute type 21 has an invalid length.
[  205.310112][T11755] netlink: 'syz.0.1512': attribute type 1 has an invalid length.
[  205.326081][T11755] 8021q: adding VLAN 0 to HW filter on device bond16
[  206.110959][T11774] netlink: 'syz.2.1517': attribute type 83 has an invalid length.
[  206.117031][T11774] __nla_validate_parse: 6 callbacks suppressed
[  206.117042][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1517'.
[  206.204253][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1518'.
[  206.220437][T11778] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4
[  206.241304][T11778] bond23: option packets_per_slave: invalid value (18446744073709551615)
[  206.244593][T11778] bond23: option packets_per_slave: allowed values 0 - 65535
[  206.251105][T11778] bond23 (unregistering): Released all slaves
[  206.368859][T11790] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1521'.
[  206.376109][T11792] netlink: 'syz.0.1523': attribute type 11 has an invalid length.
[  206.381247][T11792] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.1523'.
[  206.390997][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1523'.
[  206.395306][T11792] team0: Cannot enslave team device to itself
[  206.457680][T11799] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1525'.
[  206.462561][T11799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1525'.
[  206.465551][T11799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1525'.
[  206.480205][T11801] IPv6: sit2: Disabled Multicast RS
[  206.482865][T11805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1524'.
[  206.610536][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.614011][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.724852][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'.
[  206.906062][T11848] bond23: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  206.915208][T11848] bond23 (unregistering): Released all slaves
[  206.965241][T11854] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003
[  207.067092][T11859] IPVS: Unknown mcast interface: nr0
[  207.332168][T11866] validate_nla: 4 callbacks suppressed
[  207.332183][T11866] netlink: 'syz.2.1541': attribute type 1 has an invalid length.
[  207.546621][T11882] netlink: 'syz.1.1546': attribute type 12 has an invalid length.
[  207.816027][T11901] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  208.301395][T11931] IPVS: set_ctl: invalid protocol: 58 172.20.20.66:0
[  208.318647][T11931] ipt_rpfilter: unknown options
[  208.670646][T11944] SET target dimension over the limit!
[  208.925763][T11960] lo: Caught tx_queue_len zero misconfig
[  209.084699][T11968] netlink: 'syz.0.1572': attribute type 7 has an invalid length.
[  209.277757][T11986] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004
[  209.342417][T11990] bond0: Caught tx_queue_len zero misconfig
[  209.480749][T11997] batadv_slave_1: entered allmulticast mode
[  209.879030][T12012] sctp: [Deprecated]: syz.0.1582 (pid 12012) Use of struct sctp_assoc_value in delayed_ack socket option.
[  209.879030][T12012] Use struct sctp_sack_info instead
[  209.902294][T12012] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  209.911571][T12012] netlink: 'syz.0.1582': attribute type 1 has an invalid length.
[  209.943676][T12012] 8021q: adding VLAN 0 to HW filter on device bond17
[  210.090919][T12021] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  210.170311][T12028] netlink: zone id is out of range
[  210.172492][T12028] netlink: zone id is out of range
[  210.174567][T12028] netlink: zone id is out of range
[  210.178143][T12028] netlink: zone id is out of range
[  210.180466][T12028] netlink: zone id is out of range
[  210.182561][T12028] netlink: zone id is out of range
[  210.184667][T12028] netlink: zone id is out of range
[  210.187022][T12028] netlink: zone id is out of range
[  210.189203][T12028] netlink: zone id is out of range
[  210.191342][T12028] netlink: zone id is out of range
[  210.657643][T12065] vlan0: entered promiscuous mode
[  210.665573][T12065] team0: Port device vlan0 added
[  211.041767][T12082] netlink: 'syz.0.1601': attribute type 2 has an invalid length.
[  211.044509][T12082] netlink: 'syz.0.1601': attribute type 8 has an invalid length.
[  211.055742][T12082] netlink: 'syz.0.1601': attribute type 2 has an invalid length.
[  211.058677][T12082] netlink: 'syz.0.1601': attribute type 8 has an invalid length.
[  211.065506][T12082] netlink: 'syz.0.1601': attribute type 1 has an invalid length.
[  211.112974][T12084] syzkaller0: entered promiscuous mode
[  211.117199][T12084] syzkaller0: entered allmulticast mode
[  211.126127][T12084] tc action pedit offset must be on 32 bit boundaries
[  211.127322][T12086] __nla_validate_parse: 24 callbacks suppressed
[  211.127339][T12086] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1603'.
[  211.131578][T12087] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1603'.
[  211.189832][T12086] netlink: 41 bytes leftover after parsing attributes in process `syz.0.1603'.
[  211.196781][T12086] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1603'.
[  211.210566][T12086] netlink: 41 bytes leftover after parsing attributes in process `syz.0.1603'.
[  211.215631][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'.
[  211.500315][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1605'.
[  211.576719][T12110] veth0_macvtap: Caught tx_queue_len zero misconfig
[  211.758372][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1609'.
[  211.964839][T12132] netlink: 'syz.2.1616': attribute type 1 has an invalid length.
[  212.038357][T12120] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1613'.
[  214.675937][T12148] syzkaller0: entered promiscuous mode
[  214.679791][T12148] syzkaller0: entered allmulticast mode
[  214.820715][T12153] macsec1: entered promiscuous mode
[  214.872954][T12157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1622'.
[  214.936425][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  214.978255][T12157] batadv_slave_0: Caught tx_queue_len zero misconfig
[  215.079131][T12168] tipc: Resetting bearer <eth:syzkaller0>
[  215.181783][T12171] block nbd0: reconnected socket
[  215.199820][   T57] block nbd0: Receive control failed (result -32)
[  215.292769][T12176] netlink: 'syz.0.1627': attribute type 1 has an invalid length.
[  215.320970][T12182] gretap3: entered allmulticast mode
[  215.379860][T12185] netlink: 'syz.2.1629': attribute type 11 has an invalid length.
[  215.385848][T12186] netlink: 'syz.1.1630': attribute type 1 has an invalid length.
[  215.432492][T12186] bond18: (slave bridge2): Enslaving as a backup interface with an up link
[  215.444673][T12186] macvlan0: entered promiscuous mode
[  215.447020][T12186] macvlan0: entered allmulticast mode
[  215.449631][T12186] bond18: entered promiscuous mode
[  215.451692][T12186] bridge2: entered promiscuous mode
[  215.455258][T12186] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  215.459207][T12186] bond18: left promiscuous mode
[  215.460864][T12186] bridge2: left promiscuous mode
[  215.565641][T12194] ipvlan0: entered promiscuous mode
[  215.570942][T12194] bridge0: port 3(ipvlan0) entered blocking state
[  215.573260][T12194] bridge0: port 3(ipvlan0) entered disabled state
[  215.578201][T12194] ipvlan0: entered allmulticast mode
[  215.581643][T12194] bridge0: entered allmulticast mode
[  215.585811][T12194] ipvlan0: left allmulticast mode
[  215.588116][T12194] bridge0: left allmulticast mode
[  215.664354][T12198] bridge9: port 1(veth19) entered blocking state
[  215.671131][T12198] bridge9: port 1(veth19) entered disabled state
[  215.673990][T12198] veth19: entered allmulticast mode
[  215.686902][T12198] veth19: entered promiscuous mode
[  215.713556][T12204] tc_dump_action: action bad kind
[  215.867446][T12215] netlink: 'syz.1.1640': attribute type 4 has an invalid length.
[  215.874076][T12213] net_ratelimit: 336 callbacks suppressed
[  215.874090][T12213] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  215.905779][T12215] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  215.930336][T12217] netlink: 'syz.2.1641': attribute type 11 has an invalid length.
[  216.063296][T12223] netlink: 'syz.2.1644': attribute type 1 has an invalid length.
[  216.074642][T12223] pim6reg1: entered promiscuous mode
[  216.080999][T12223] pim6reg1: entered allmulticast mode
[  216.195596][T12228] veth3: Caught tx_queue_len zero misconfig
[  216.450130][T12237] bridge3: entered promiscuous mode
[  216.565346][T12250] __nla_validate_parse: 8 callbacks suppressed
[  216.565361][T12250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1651'.
[  216.691529][T12261] netlink: 99 bytes leftover after parsing attributes in process `syz.2.1654'.
[  216.694585][T12261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1654'.
[  216.739665][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1656'.
[  216.827915][T12271] netlink: 'syz.2.1657': attribute type 1 has an invalid length.
[  216.831004][T12271] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1657'.
[  216.838396][T12271] veth0: Caught tx_queue_len zero misconfig
[  216.841654][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1658'.
[  216.877469][T12273] ipvlan0: entered allmulticast mode
[  218.833849][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1659'.
[  218.918641][T12286] netlink: 'syz.2.1662': attribute type 8 has an invalid length.
[  218.931009][T12289] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1664'.
[  218.999812][T12294] netlink: 460 bytes leftover after parsing attributes in process `syz.2.1665'.
[  219.011177][T12294] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  219.173533][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1669'.
[  219.181853][T12306] ip6tnl2: entered allmulticast mode
[  219.192892][T12309] netlink: 'syz.0.1670': attribute type 8 has an invalid length.
[  219.261667][T12316] netlink: 'syz.1.1672': attribute type 22 has an invalid length.
[  219.266020][T12316] netlink: 'syz.1.1672': attribute type 22 has an invalid length.
[  219.372644][T12325] netlink: 'syz.1.1674': attribute type 1 has an invalid length.
[  219.416535][    C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  219.589689][T12342] bond0: Master is either lo or non-ether device
[  219.778298][ T5853] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  219.871991][T12360] bond20: entered promiscuous mode
[  219.874009][T12360] 8021q: adding VLAN 0 to HW filter on device bond20
[  219.937916][T12360] 8021q: adding VLAN 0 to HW filter on device bond20
[  219.946580][T12360] bond20: (slave sit1): The slave device specified does not support setting the MAC address
[  219.951570][T12360] bond20: (slave sit1): Error -95 calling set_mac_address
[  220.109706][T12375] 8021q: adding VLAN 0 to HW filter on device bond23
[  220.128340][T12374] bond23: (slave gretap5): making interface the new active one
[  220.141071][T12374] bond23: (slave gretap5): Enslaving as an active interface with an up link
[  220.203126][T12383] batman_adv: batadv0: Adding interface: ipvlan0
[  220.205064][T12383] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  220.215382][T12383] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active
[  220.522642][T12395] openvswitch: netlink: IP tunnel TTL not specified.
[  220.537739][ T8817] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  220.792787][T12417] validate_nla: 3 callbacks suppressed
[  220.792805][T12417] netlink: 'syz.0.1699': attribute type 1 has an invalid length.
[  220.835827][T12417] 8021q: adding VLAN 0 to HW filter on device bond19
[  220.973989][T12419] netlink: 'syz.0.1699': attribute type 1 has an invalid length.
[  221.004353][T12419] bond19: (slave batadv2): Opening slave failed
[  221.529835][T12436] netlink: 'syz.1.1704': attribute type 21 has an invalid length.
[  221.533374][T12436] netlink: 'syz.1.1704': attribute type 1 has an invalid length.
[  222.140922][T12468] syzkaller0: entered promiscuous mode
[  222.142784][T12468] syzkaller0: entered allmulticast mode
[  222.264824][T12470] __nla_validate_parse: 17 callbacks suppressed
[  222.264845][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1714'.
[  222.285557][T12470] tun0: tun_chr_ioctl cmd 2147767507
[  222.523088][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'.
[  222.720399][   T33] audit: type=1804 audit(1778663132.229:5): pid=12484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1719" name="/newroot/552/memory.events" dev="tmpfs" ino=2852 res=1 errno=0
[  222.729294][   T33] audit: type=1800 audit(1778663132.229:6): pid=12484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1719" name="memory.events" dev="tmpfs" ino=2852 res=0 errno=0
[  222.793373][T12486] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1720'.
[  222.800686][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'.
[  222.880813][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1721'.
[  223.443847][T12518] tipc: Resetting bearer <eth:syzkaller0>
[  223.488021][ T5853] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  223.585857][T12520] xt_ecn: cannot match TCP bits for non-tcp packets
[  223.639380][T12522] openvswitch: netlink: IP tunnel dst address not specified
[  223.642509][T12522] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.676846][ T5853] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  223.798648][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'.
[  223.805484][T12524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1733'.
[  223.844348][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1735'.
[  223.875002][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  223.880275][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  223.883228][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  223.883441][T12535] netlink: 'syz.0.1735': attribute type 4 has an invalid length.
[  223.885975][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  223.914754][T12535] netlink: 'syz.0.1735': attribute type 4 has an invalid length.
[  224.049133][T12548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1739'.
[  224.113128][T12555] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1741'.
[  224.535572][T12571] xt_hashlimit: size too large, truncated to 1048576
[  224.637743][ T5001] Bluetooth: hci2: link tx timeout
[  224.640093][ T5001] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  224.845569][T12576] syzkaller0: entered promiscuous mode
[  224.847424][T12576] syzkaller0: entered allmulticast mode
[  226.700984][ T5001] Bluetooth: hci2: command 0x0401 tx timeout
[  226.705454][   T56] 
[  226.706307][   T56] ======================================================
[  226.708544][   T56] WARNING: possible circular locking dependency detected
[  226.710701][   T56] syzkaller #0 Not tainted
[  226.712269][   T56] ------------------------------------------------------
[  226.714489][   T56] kworker/u11:0/56 is trying to acquire lock:
[  226.716476][   T56] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0x9d/0x760
[  226.719589][   T56] 
[  226.719589][   T56] but task is already holding lock:
[  226.722074][   T56] ffffffff8f39f780 (dpm_list_mtx){+.+.}-{4:4}, at: device_move+0x3c/0x730
[  226.724532][   T56] 
[  226.724532][   T56] which lock already depends on the new lock.
[  226.724532][   T56] 
[  226.727595][   T56] 
[  226.727595][   T56] the existing dependency chain (in reverse order) is:
[  226.730291][   T56] 
[  226.730291][   T56] -> #8 (dpm_list_mtx){+.+.}-{4:4}:
[  226.732771][   T56]        __mutex_lock+0x1a3/0x1550
[  226.734545][   T56]        device_pm_add+0x7d/0x350
[  226.736088][   T56]        device_add+0x4fe/0xbb0
[  226.737606][   T56]        device_create+0x269/0x300
[  226.739173][   T56]        msr_device_create+0x33/0x50
[  226.740943][   T56]        cpuhp_invoke_callback+0x445/0x860
[  226.742901][   T56]        cpuhp_thread_fun+0x36b/0x780
[  226.744665][   T56]        smpboot_thread_fn+0x541/0xa50
[  226.746313][   T56]        kthread+0x388/0x470
[  226.747787][   T56]        ret_from_fork+0x514/0xb70
[  226.749560][   T56]        ret_from_fork_asm+0x1a/0x30
[  226.751510][   T56] 
[  226.751510][   T56] -> #7 (cpuhp_state-up){+.+.}-{0:0}:
[  226.753780][   T56]        cpuhp_thread_fun+0x127/0x780
[  226.755387][   T56]        smpboot_thread_fn+0x541/0xa50
[  226.756988][   T56]        kthread+0x388/0x470
[  226.758400][   T56]        ret_from_fork+0x514/0xb70
[  226.759900][   T56]        ret_from_fork_asm+0x1a/0x30
[  226.761715][   T56] 
[  226.761715][   T56] -> #6 (cpu_hotplug_lock){++++}-{0:0}:
[  226.764460][   T56]        cpus_read_lock+0x42/0x160
[  226.766096][   T56]        static_key_slow_inc+0x12/0x30
[  226.767693][   T56]        nbd_genl_reconfigure+0x132f/0x1ea0
[  226.769514][   T56]        genl_family_rcv_msg_doit+0x22a/0x330
[  226.771369][   T56]        genl_rcv_msg+0x61c/0x7a0
[  226.773111][   T56]        netlink_rcv_skb+0x232/0x4b0
[  226.775160][   T56]        genl_rcv+0x28/0x40
[  226.776933][   T56]        netlink_unicast+0x75c/0x8e0
[  226.779038][   T56]        netlink_sendmsg+0x813/0xb40
[  226.781124][   T56]        ____sys_sendmsg+0x972/0x9f0
[  226.783177][   T56]        ___sys_sendmsg+0x2a5/0x360
[  226.785179][   T56]        __x64_sys_sendmsg+0x1bd/0x2a0
[  226.787249][   T56]        do_syscall_64+0x15f/0xf80
[  226.789077][   T56]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.791541][   T56] 
[  226.791541][   T56] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  226.794471][   T56]        __mutex_lock+0x1a3/0x1550
[  226.796473][   T56]        nbd_queue_rq+0x37b/0x1100
[  226.798435][   T56]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  226.800777][   T56]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  226.803381][   T56]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  226.805855][   T56]        blk_mq_run_hw_queue+0x348/0x4f0
[  226.807672][   T56]        blk_mq_dispatch_list+0xd16/0xe10
[  226.809558][   T56]        blk_mq_flush_plug_list+0x48d/0x570
[  226.811789][   T56]        __blk_flush_plug+0x3ed/0x4d0
[  226.813827][   T56]        __submit_bio+0x28d/0x580
[  226.815766][   T56]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  226.818203][   T56]        block_read_full_folio+0x599/0x830
[  226.820411][   T56]        filemap_read_folio+0x137/0x3b0
[  226.822470][   T56]        do_read_cache_folio+0x358/0x590
[  226.824596][   T56]        read_part_sector+0xb6/0x2b0
[  226.826654][   T56]        adfspart_check_ICS+0xb1/0x960
[  226.828719][   T56]        bdev_disk_changed+0x817/0x1770
[  226.830832][   T56]        blkdev_get_whole+0x380/0x510
[  226.832936][   T56]        bdev_open+0x31e/0xd30
[  226.834773][   T56]        blkdev_open+0x470/0x610
[  226.836743][   T56]        do_dentry_open+0x785/0x14e0
[  226.838805][   T56]        vfs_open+0x3b/0x340
[  226.840668][   T56]        path_openat+0x2e08/0x3860
[  226.842586][   T56]        do_file_open+0x23e/0x4a0
[  226.844535][   T56]        do_sys_openat2+0x113/0x200
[  226.846466][   T56]        __x64_sys_openat+0x138/0x170
[  226.848492][   T56]        do_syscall_64+0x15f/0xf80
[  226.850211][   T56]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.852393][   T56] 
[  226.852393][   T56] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  226.854936][   T56]        __mutex_lock+0x1a3/0x1550
[  226.856854][   T56]        nbd_queue_rq+0xc6/0x1100
[  226.858747][   T56]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  226.861049][   T56]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  226.863519][   T56]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  226.865894][   T56]        blk_mq_run_hw_queue+0x348/0x4f0
[  226.867912][   T56]        blk_mq_dispatch_list+0xd16/0xe10
[  226.870189][   T56]        blk_mq_flush_plug_list+0x48d/0x570
[  226.872569][   T56]        __blk_flush_plug+0x3ed/0x4d0
[  226.874653][   T56]        __submit_bio+0x28d/0x580
[  226.876628][   T56]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  226.878931][   T56]        block_read_full_folio+0x599/0x830
[  226.881085][   T56]        filemap_read_folio+0x137/0x3b0
[  226.883200][   T56]        do_read_cache_folio+0x358/0x590
[  226.885388][   T56]        read_part_sector+0xb6/0x2b0
[  226.887431][   T56]        adfspart_check_ICS+0xb1/0x960
[  226.889581][   T56]        bdev_disk_changed+0x817/0x1770
[  226.891530][   T56]        blkdev_get_whole+0x380/0x510
[  226.893352][   T56]        bdev_open+0x31e/0xd30
[  226.894826][   T56]        blkdev_open+0x470/0x610
[  226.896333][   T56]        do_dentry_open+0x785/0x14e0
[  226.897871][   T56]        vfs_open+0x3b/0x340
[  226.899214][   T56]        path_openat+0x2e08/0x3860
[  226.900810][   T56]        do_file_open+0x23e/0x4a0
[  226.902671][   T56]        do_sys_openat2+0x113/0x200
[  226.904282][   T56]        __x64_sys_openat+0x138/0x170
[  226.905897][   T56]        do_syscall_64+0x15f/0xf80
[  226.907413][   T56]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.909293][   T56] 
[  226.909293][   T56] -> #3 (set->srcu){.+.+}-{0:0}:
[  226.911416][   T56]        __synchronize_srcu+0xca/0x300
[  226.913220][   T56]        elevator_switch+0x1e8/0x7a0
[  226.914895][   T56]        elevator_change+0x2cc/0x450
[  226.916451][   T56]        elevator_set_default+0x36c/0x430
[  226.918114][   T56]        blk_register_queue+0x3e9/0x4e0
[  226.919771][   T56]        __add_disk+0x677/0xd50
[  226.921364][   T56]        add_disk_fwnode+0xfb/0x480
[  226.923120][   T56]        nbd_dev_add+0x72c/0xb50
[  226.924609][   T56]        nbd_init+0x168/0x1f0
[  226.926092][   T56]        do_one_initcall+0x250/0x870
[  226.927680][   T56]        do_initcall_level+0x104/0x190
[  226.929333][   T56]        do_initcalls+0x59/0xa0
[  226.930845][   T56]        kernel_init_freeable+0x2a6/0x3e0
[  226.932638][   T56]        kernel_init+0x1d/0x1d0
[  226.934409][   T56]        ret_from_fork+0x514/0xb70
[  226.936341][   T56]        ret_from_fork_asm+0x1a/0x30
[  226.938407][   T56] 
[  226.938407][   T56] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  226.941170][   T56]        __mutex_lock+0x1a3/0x1550
[  226.942745][   T56]        elevator_change+0x1b3/0x450
[  226.944325][   T56]        elevator_set_none+0xb5/0x140
[  226.945920][   T56]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  226.947902][   T56]        nbd_start_device+0x17f/0xb10
[  226.949530][   T56]        nbd_genl_connect+0x165b/0x1cf0
[  226.951184][   T56]        genl_family_rcv_msg_doit+0x22a/0x330
[  226.953025][   T56]        genl_rcv_msg+0x61c/0x7a0
[  226.954680][   T56]        netlink_rcv_skb+0x232/0x4b0
[  226.956784][   T56]        genl_rcv+0x28/0x40
[  226.958566][   T56]        netlink_unicast+0x75c/0x8e0
[  226.960595][   T56]        netlink_sendmsg+0x813/0xb40
[  226.962603][   T56]        ____sys_sendmsg+0x972/0x9f0
[  226.964444][   T56]        ___sys_sendmsg+0x2a5/0x360
[  226.965993][   T56]        __x64_sys_sendmsg+0x1bd/0x2a0
[  226.967664][   T56]        do_syscall_64+0x15f/0xf80
[  226.969467][   T56]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.971599][   T56] 
[  226.971599][   T56] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  226.974495][   T56]        blk_alloc_queue+0x546/0x680
[  226.976157][   T56]        __blk_mq_alloc_disk+0x197/0x390
[  226.977877][   T56]        nbd_dev_add+0x499/0xb50
[  226.979539][   T56]        nbd_init+0x168/0x1f0
[  226.981006][   T56]        do_one_initcall+0x250/0x870
[  226.982541][   T56]        do_initcall_level+0x104/0x190
[  226.984326][   T56]        do_initcalls+0x59/0xa0
[  226.986017][   T56]        kernel_init_freeable+0x2a6/0x3e0
[  226.988089][   T56]        kernel_init+0x1d/0x1d0
[  226.989735][   T56]        ret_from_fork+0x514/0xb70
[  226.991415][   T56]        ret_from_fork_asm+0x1a/0x30
[  226.993027][   T56] 
[  226.993027][   T56] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  226.995510][   T56]        __lock_acquire+0x15a5/0x2cf0
[  226.997557][   T56]        lock_acquire+0x106/0x350
[  226.999429][   T56]        fs_reclaim_acquire+0x71/0x100
[  227.001388][   T56]        __kmalloc_noprof+0x9d/0x760
[  227.003270][   T56]        kobject_get_path+0xc5/0x2f0
[  227.004935][   T56]        kobject_move+0x2f3/0x720
[  227.006695][   T56]        device_move+0xe0/0x730
[  227.008560][   T56]        hci_conn_del_sysfs+0xb8/0x1a0
[  227.010541][   T56]        hci_conn_del+0xc36/0x1230
[  227.012497][   T56]        hci_abort_conn_sync+0xdd0/0x1190
[  227.014644][   T56]        hci_cmd_sync_work+0x213/0x400
[  227.016714][   T56]        process_scheduled_works+0xb5d/0x1860
[  227.019063][   T56]        worker_thread+0xa53/0xfc0
[  227.020735][   T56]        kthread+0x388/0x470
[  227.022525][   T56]        ret_from_fork+0x514/0xb70
[  227.024498][   T56]        ret_from_fork_asm+0x1a/0x30
[  227.026526][   T56] 
[  227.026526][   T56] other info that might help us debug this:
[  227.026526][   T56] 
[  227.030343][   T56] Chain exists of:
[  227.030343][   T56]   fs_reclaim --> cpuhp_state-up --> dpm_list_mtx
[  227.030343][   T56] 
[  227.034938][   T56]  Possible unsafe locking scenario:
[  227.034938][   T56] 
[  227.037710][   T56]        CPU0                    CPU1
[  227.039684][   T56]        ----                    ----
[  227.041729][   T56]   lock(dpm_list_mtx);
[  227.043326][   T56]                                lock(cpuhp_state-up);
[  227.045878][   T56]                                lock(dpm_list_mtx);
[  227.048408][   T56]   lock(fs_reclaim);
[  227.049999][   T56] 
[  227.049999][   T56]  *** DEADLOCK ***
[  227.049999][   T56] 
[  227.053126][   T56] 5 locks held by kworker/u11:0/56:
[  227.055162][   T56]  #0: ffff8881b9568140 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  227.059273][   T56]  #1: ffffc9000100fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  227.064063][   T56]  #2: ffff88816d1b0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[  227.067716][   T56]  #3: ffff88816d1b00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190
[  227.071392][   T56]  #4: ffffffff8f39f780 (dpm_list_mtx){+.+.}-{4:4}, at: device_move+0x3c/0x730
[  227.074751][   T56] 
[  227.074751][   T56] stack backtrace:
[  227.076961][   T56] CPU: 0 UID: 0 PID: 56 Comm: kworker/u11:0 Not tainted syzkaller #0 PREEMPT(full) 
[  227.076980][   T56] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  227.076992][   T56] Workqueue: hci2 hci_cmd_sync_work
[  227.077022][   T56] Call Trace:
[  227.077030][   T56]  <TASK>
[  227.077038][   T56]  dump_stack_lvl+0xe8/0x150
[  227.077058][   T56]  print_circular_bug+0x2e1/0x300
[  227.077079][   T56]  check_noncircular+0x12e/0x150
[  227.077099][   T56]  __lock_acquire+0x15a5/0x2cf0
[  227.077116][   T56]  ? __pfx_hlock_conflict+0x10/0x10
[  227.077133][   T56]  ? __bfs+0x153/0x290
[  227.077147][   T56]  ? __pfx_hlock_conflict+0x10/0x10
[  227.077165][   T56]  ? check_path+0x21/0x40
[  227.077181][   T56]  ? __kmalloc_noprof+0x9d/0x760
[  227.077200][   T56]  lock_acquire+0x106/0x350
[  227.077214][   T56]  ? __kmalloc_noprof+0x9d/0x760
[  227.077235][   T56]  fs_reclaim_acquire+0x71/0x100
[  227.077255][   T56]  ? __kmalloc_noprof+0x9d/0x760
[  227.077273][   T56]  __kmalloc_noprof+0x9d/0x760
[  227.077292][   T56]  ? kobject_get_path+0xc5/0x2f0
[  227.077313][   T56]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  227.077336][   T56]  kobject_get_path+0xc5/0x2f0
[  227.077358][   T56]  kobject_move+0x2f3/0x720
[  227.077372][   T56]  ? __pfx_kobject_move+0x10/0x10
[  227.077384][   T56]  ? do_raw_spin_unlock+0x4d/0x210
[  227.077404][   T56]  ? get_device_parent+0x366/0x3a0
[  227.077424][   T56]  device_move+0xe0/0x730
[  227.077440][   T56]  hci_conn_del_sysfs+0xb8/0x1a0
[  227.077461][   T56]  hci_conn_del+0xc36/0x1230
[  227.077480][   T56]  ? hci_abort_conn_sync+0xa7b/0x1190
[  227.077497][   T56]  hci_abort_conn_sync+0xdd0/0x1190
[  227.077515][   T56]  ? __pfx_hci_abort_conn_sync+0x10/0x10
[  227.077533][   T56]  ? abort_conn_sync+0x26/0x210
[  227.077560][   T56]  ? abort_conn_sync+0x26/0x210
[  227.077576][   T56]  ? abort_conn_sync+0x19c/0x210
[  227.077594][   T56]  ? __pfx_abort_conn_sync+0x10/0x10
[  227.077610][   T56]  hci_cmd_sync_work+0x213/0x400
[  227.077632][   T56]  ? process_scheduled_works+0xa70/0x1860
[  227.077648][   T56]  process_scheduled_works+0xb5d/0x1860
[  227.077672][   T56]  ? __pfx_process_scheduled_works+0x10/0x10
[  227.077689][   T56]  ? assign_work+0x3d5/0x5e0
[  227.077703][   T56]  worker_thread+0xa53/0xfc0
[  227.077725][   T56]  kthread+0x388/0x470
[  227.077745][   T56]  ? __pfx_worker_thread+0x10/0x10
[  227.077759][   T56]  ? __pfx_kthread+0x10/0x10
[  227.077776][   T56]  ret_from_fork+0x514/0xb70
[  227.077792][   T56]  ? __pfx_ret_from_fork+0x10/0x10
[  227.077806][   T56]  ? __switch_to+0xc79/0x1410
[  227.077827][   T56]  ? __pfx_kthread+0x10/0x10
[  227.077877][   T56]  ret_from_fork_asm+0x1a/0x30
[  227.077902][   T56]  </TASK>
