last executing test programs:

4.590187602s ago: executing program 0 (id=2547):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
getpid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0)
r10 = openat$cgroup_ro(r8, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)
sendfile(r9, r10, 0x0, 0x38)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x570, 0x298, 0x298, 0xd0, 0x1c8, 0x388, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0x0, 0xffffffff, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x820, 0x7}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x388}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, @ipv6=@remote, 0x3a, 0x8, 0x6}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff000000], [0x0, 0x0, 0xffffff00], 'tunl0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x0, 0x4a, 0x7}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x3, 0x1, 0x0, [0x9, 0xfff2, 0x4, 0x2, 0x5, 0xe, 0x2, 0xc7b, 0x5, 0x1ff, 0x3, 0x8, 0xf25, 0x7, 0x0, 0xff6b], 0x5}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)
recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r14 = socket$inet_smc(0x2b, 0x1, 0x0)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r15)
sendmsg$NLBL_CALIPSO_C_LIST(r15, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, r16, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x10000) (async)
sendmsg$NLBL_CALIPSO_C_LIST(r15, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x14, r16, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x10000)
setsockopt$inet_tcp_TCP_MD5SIG(r14, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @private=0xa010100}}, 0x0, 0x0, 0x26, 0x0, "06c42f92c544b686d6757073b900dee3e89e1b26ad20a24c41a3ab4d33c950221d8016768c40b74de5ef76296b7e287609dc32163641ecd7cfd634838d09efd43cb09446460744e8ced41a9447d6f275"}, 0xd8)

3.691985292s ago: executing program 1 (id=2562):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c00002410400000100001000000000000000000", @ANYRES32=0x0, @ANYBLOB="03050000000000005400128009000100766c616e00000000440002800400048006000100030000000c000200020000000e0000001c0003800c000100faffffff000000000c000100020000009b0400000c000200080000000f00000008000500", @ANYRES32=r1, @ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)

3.685602416s ago: executing program 0 (id=2564):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x40, r3, 0x101, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040044}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @private1, 0x4}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={<r6=>r5, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r6, 0x2, 0x40, 0x7}, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r8=>0x0})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000005c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r11, r10, 0x4, r10}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r10, 0x0, 0xd6, 0xfd, &(0x7f00000000c0)="e1e3d3930e67b9f8bf993a85ede38df6ea301c941e3e5721018e84313d45eaa367194a9e4c03d52c3f717127404f783f4b3564d5afd3a5cccf2fe644b467066fb04c6d87b85c4b373cd4b4e33789696e3c670c4436412d2289abc7bb3074e94c51f90d50738ed12bcae7d06812be04ea483fdc7deaf45c7f8956c9c4ea3178bc8153371bac304627522213f29426f7e6555dfae83abf172d56dddb2d52dc3d9bd2afc6970992c98a17223ee2abbb95d9b8cc6a4099ee747fa9f875f7225d2b5906d9ffdaf7e58bcd3edde1cc35330039cd8938990ed2", &(0x7f0000000280)=""/253, 0x7, 0x0, 0xf3, 0xbc, &(0x7f0000000380)="303e8e3606e86f2c247ca0083916487e3b01ac5b55106a971753ce123f5ee8d1834e2234b5cdf3cd492a7204b92784ac846ab1193a71bd497f71ab94ce3ef86502e700947702797fe5f491c90667b411c615cb58583a14a6b6859d2cbba23c2fda704e5b753a1305b7c0bad5dd0d1147d7d0b26fc7a7ccc851b54db065017bb50417a281e6063b9dab7c6bc98bb3494ba9a80bba68c0d2c488674f30c57e7b172ec3cd3dec95e09cdd884faaccc6089fc590fcbd7ad7f2d3e6dd79eafed1272678610aebc2d6781d72e7c25e4bb850da9756de25f04266bd07ed4e01f4f2cb6984f9ee738d77b3fa0817db3045a23b04dc082b", &(0x7f0000000480)="c43d365bcd7a9f1ae49dcc596da0b3f78ab198f1a5d4a5bfe807a4fd98e37c4b912dbb37a545b26d577610c3b7a54ad831af3a66cd8f986524632dc3668aa5361476e7b465d20842f6f1dcbd173c63b6ea0b65ae5b7b9d8155643788b1b2d5aeb88a8201de7e8edb56cd97b54f1e8521d6b9db9701eaa13f205c4f428349c12c29c45f2ceceae5ebe4f22aab64c1d681a08b618c3b3b94f3f766e621acc1bf3d273d2b2fada90e7556b064f34758bd3eec1236f98e907f3dbdc64d92", 0x4, 0x0, 0x9}, 0x50)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000080)="fa", 0x1)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0)

3.632354498s ago: executing program 1 (id=2565):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) (async)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000240)="c021", 0x2}], 0x1, 0x7, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x27, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x23, 0x1, 0x0, 0x4, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0xc, "064d291a00000000d05c"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x2000}}}}}}, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair(0x1f, 0x6, 0x0, &(0x7f0000000080))
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x2}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]})
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6)

3.573040426s ago: executing program 2 (id=2567):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x7, 0x0, 0xf6, 0xaf}, {0x259, 0x3, 0x4, 0x2}, {0x3, 0x9, 0xff, 0x7}, {0x2, 0x2, 0x7, 0x9e}, {0x2, 0x81, 0x1, 0x5}, {0x10, 0x20, 0x2, 0x5}]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e", @ANYBLOB="a5e6"], 0x35c}, 0x1, 0x0, 0x0, 0x400a800}, 0x4010)

3.571919378s ago: executing program 0 (id=2568):
r0 = socket$inet6(0xa, 0x2, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8) (async)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) (async)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000300)={r2, 0x1}, 0x8) (async)
r4 = socket(0x1a, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) (async)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005bc0)={0x0, 0x0, &(0x7f0000005b80)={&(0x7f00000000c0)=@delchain={0x34, 0x65, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x10}, {0x2, 0x10}, {0x5, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf2523090000", @ANYRES32, @ANYBLOB="140002"], 0x34}}, 0x0) (async)
setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000080)=0x5, 0x4) (async)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@bridge_delvlan={0x68, 0x71, 0x400, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x0, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xfffffeed, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xd}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x7f7c3f3dfeeb59e7}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8891}, 0x40000) (async)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_pressure(r9, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0)
unshare(0x20000400) (async)
preadv(r10, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/58, 0x3a}], 0x1, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)})
bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) (async)
getpeername$packet(r6, &(0x7f0000000280)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, r12, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x80}}, 0x80) (async)
write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6)
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

3.492424463s ago: executing program 1 (id=2569):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d6, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x32}, @call={0x85, 0x0, 0x0, 0x7e}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffc}, 0x94)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f00000105c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056070000000000008500000000000000b70000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x200, 0x800, 0x6}}}}]}, 0x44}}, 0x40080)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r6, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000048f18c61d8a8250a00d000", @ANYRES32=0x0, @ANYBLOB="06000000"], 0x1c}}, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0x8, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x200400c0}, 0x20008082)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x15, 0x2, 0x8, 0x1, 0x20008, r8, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$inet(0x2, 0xa, 0x4)
sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000048000480100001800c0001006e6f747261636b00340001800c0001007061796c6f616400240002800800024000000000080001400000000a080003400000000508000440000000020900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x24, r13, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0xfffffffc, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

3.492065168s ago: executing program 0 (id=2570):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003"], 0x10c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c0002800800024000000002080003400000000a08"], 0x80}}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='V?'], 0xfe33)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000640)={r2, 0xd}, &(0x7f0000000600)=0x7a)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
clock_gettime(0x0, &(0x7f00000003c0)={<r4=>0x0, <r5=>0x0})
pselect6(0x40, &(0x7f0000000180)={0x1000, 0x200, 0x3, 0x3, 0x8, 0xa89, 0x9, 0x3}, &(0x7f00000002c0)={0xffffffff, 0x4, 0x3, 0xfffffffffffffffe, 0x8, 0xffffffffffffffff, 0xa, 0x7}, &(0x7f0000000300)={0x3, 0x9, 0x1, 0x0, 0x2, 0xc, 0xffffffff}, &(0x7f0000000400)={r4, r5+60000000}, &(0x7f0000000480)={&(0x7f0000000440)={[0xeb60]}, 0x8})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e30000000080001"], 0x40}}, 0x8084)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="1801000020000115053f88bafcdbdf2504", @ANYRES8=r0], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)
r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r7)
sendmsg$NLBL_CALIPSO_C_LISTALL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="b308d332", @ANYRES16=r9, @ANYBLOB="65572abd700075dbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000380)=<r11=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054)
write$nci(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="610307000101021fbb1d4034a66c957e865daa5f30a0b233c739c20dd7d400"/40], 0x28)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r12, 0x0, 0x8000)
readv(r3, &(0x7f0000000500), 0x0)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000000a0601010000000000000000070000090900020073797a310000000005000100070000000800094000000005040008804e2bd37b7481447017d1e2970db1f525256eb224855c4e98286541b043e72c2e2c4e8736e0944e95fe54d06179479a139ce930df84061bf5fc63c345e38d4be89bd54967500a209bcf8360a5bd07cc839e79001e97"], 0x34}, 0x1, 0x0, 0x0, 0x4850}, 0x48080)

3.491044391s ago: executing program 2 (id=2571):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a0000000000000000070100000e7932a072af1cf363317675d711befa46ea0c06be6ac32aa4b7204f6d35863d8b6101437e1b57fda7afc3e650bbe7e0475ff1afc0bd71b56d6e11deb602", @ANYRES32=r3, @ANYBLOB="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"], 0x270}}, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000003280)=""/76, &(0x7f00000002c0)=0x4c)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = socket(0x1e, 0x1, 0x0)
listen(r5, 0x0)
setsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10)
accept4$x25(r5, 0x0, 0x0, 0x0)
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x4071}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0)

3.383810758s ago: executing program 2 (id=2572):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000001850000000000000000000000000000018400000f8ffffff400000000000000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2}, 0x90)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x5, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000480)={0x0, 0x26000, 0x800, 0xfffffffe, 0x1}, 0x20)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

410.922893ms ago: executing program 1 (id=2573):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000020800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000004001"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000020e0000a00c481500000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x80}}, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r3, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r6=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={r6, 0xfffffc48}, 0x8)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000005a00010000000000fbdbdf250a00000008000100", @ANYRES32, @ANYBLOB="450cc4f3dc7676f7fcc2b5e404baf205357cadeb434604d7461dba27d373357590801e3ba7c67b7a5c212824fb64dface891a10327a9734991796e58fe79e992aba766949fe67403c4bae3d3c7b59ce338d92b9751c978a7831c7e8b4100984ec6e610cba2a99531dd4a7ac5745d8e422e6bff32d0c24e89da3a96e0ac97595eba98d4dee820da632f3bae4c8c"], 0x1c}}, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r10=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r10, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r10], 0x7c}}, 0x20000000)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r10, 0x80089418, &(0x7f0000000340))
r11 = socket(0x10, 0x803, 0x0)
sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/8, 0x8}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0x4000000}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000003a0096eef56015fc0701002000000000e6ffff0a00000008"], 0x1c}, 0x1, 0x0, 0x0, 0xd1}, 0x10)

408.694708ms ago: executing program 0 (id=2574):
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0xf, 0x1ff, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x81, 0x2, 0x80000001, 0x4b, 0x9}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xff22)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x776}, 0x50)
r2 = socket$kcm(0x10, 0x2, 0x10) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000004c0)='memory.oom.group\x00', 0x2, 0x0) (async)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x3d, 0x0, 0x7}, 0xc)
close(r5) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x3dc, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0x10}, {0x5, 0xb}, {0x4, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_RATE={0x6, 0x5, {0x78, 0x1}}, @qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x400}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4}, @TCA_GRED_MAX_P={0x8, 0x4, 0x3}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0xa, 0xe, 0x1}}, @TCA_GRED_MAX_P={0x8, 0x4, 0x6}, @TCA_GRED_LIMIT={0x8, 0x5, 0x116}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xb, 0x0, 0x2}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x7, 0xc, 0x7, 0x1, 0x3, 0x4, 0x3}}, {0xa, 0x2, [0x9, 0x401, 0xa]}}, {{0x1c, 0x1, {0x5, 0x1, 0x4, 0x7ff, 0x2, 0x7, 0x5, 0x9}}, {0x16, 0x2, [0xb7, 0x90, 0x5, 0x0, 0x8, 0x81, 0x5, 0x1000, 0xe7e]}}, {{0x1c, 0x1, {0xfa, 0x4, 0x2, 0x7, 0x1, 0x40, 0xffffff7f, 0x3}}, {0xa, 0x2, [0xb, 0x9, 0x444]}}, {{0x1c, 0x1, {0xf, 0x40, 0x6, 0x41ef, 0x0, 0x4, 0x0, 0x3}}, {0xa, 0x2, [0x6, 0x4, 0x6]}}]}, @TCA_STAB={0x184, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x0, 0x4, 0xd3d, 0x1, 0x8, 0xf67, 0xa}}, {0x18, 0x2, [0x6, 0x2, 0xe3, 0x2, 0x5, 0x8000, 0x8, 0x0, 0x4, 0x7]}}, {{0x1c, 0x1, {0x5, 0x1, 0x800, 0x1, 0x0, 0x1, 0xffff7fff, 0x2}}, {0x8, 0x2, [0x200, 0x4108]}}, {{0x1c, 0x1, {0x3, 0x9, 0xfffa, 0x546c214b, 0x1, 0x9, 0x5, 0x5}}, {0xe, 0x2, [0x7, 0x2, 0x1, 0x6, 0x7]}}, {{0x1c, 0x1, {0x7, 0x10, 0x1, 0x8, 0x1, 0x9, 0x8, 0x1}}, {0x6, 0x2, [0x410f]}}, {{0x1c, 0x1, {0xdb, 0x4, 0xfffa, 0x5, 0x2, 0x2, 0x3, 0x5}}, {0xe, 0x2, [0xc, 0x80, 0x9a, 0x1ff, 0x7ff]}}, {{0x1c, 0x1, {0x6, 0x8, 0x9d, 0x7, 0x0, 0x2, 0x8, 0x5}}, {0xe, 0x2, [0xffff, 0xfffb, 0x5, 0x7fff, 0x5ed]}}, {{0x1c, 0x1, {0xf, 0x9, 0x1, 0x8, 0x0, 0x2, 0x6, 0x4}}, {0xc, 0x2, [0x36, 0x4, 0x9, 0xa0bb]}}, {{0x1c, 0x1, {0x8, 0x8, 0x1, 0x4, 0x1, 0xf, 0x4, 0x5}}, {0xe, 0x2, [0x57, 0xf2, 0x8, 0x3, 0x8280]}}, {{0x1c, 0x1, {0x8, 0xb, 0x0, 0x1e85, 0x1, 0x3ff, 0x5, 0x5}}, {0xe, 0x2, [0x6, 0x9, 0x3, 0x0, 0x4]}}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x20004070}, 0x6008090) (async)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$kcm(0x11, 0x3, 0x0) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9) (async)
socket$unix(0x1, 0x2, 0x0) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) (async)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

378.588173ms ago: executing program 2 (id=2575):
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000007000000000000001f000000911188fffd00000095000000000000009eff1d04f2b8c8c12eb333fc646a71e53b80ccb54115d55fa39eac53e920e585a31cd4e8925ac79a915047a04f2b2afa37ef46fffff46280f266b4895126c4d7d6a44f03fe4bf2ed"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

313.029486ms ago: executing program 2 (id=2576):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xfffff801}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '>'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
socket$netlink(0x10, 0x3, 0x9) (async)
r8 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ed}, [], {0x14, 0x3f5}}, 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0x5, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3513, 0x6, 0x5, 0xb6b9, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000140003050100800000dcdf25021851ff", @ANYRES32=r2, @ANYBLOB="080002008668dacd"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0)

312.683303ms ago: executing program 0 (id=2577):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) (async)
bind$inet(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = socket$packet(0x11, 0xa, 0x300) (async)
r2 = socket$alg(0x26, 0x5, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x20}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ae"}]}], {0x14}}, 0xb8}}, 0x0) (async)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000029000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000428000001400128009000100766c616e000000000400028008000500", @ANYRES32=0x0, @ANYBLOB="b52d15df3980cd57c46b02743281f409798bf03e02043af874b0200ad5632e7060b177eb590d241e5025ffe803b78e90af4e25ac9af83d5b222bb025606c25358e8db1e808d5cc121d5bfd5b87ffad0b8fbf13bb8f51c2bca61da9fd3cbfaef07267c74c40c87745e485935046da955791ee0b1f759b5257a75bd9391c110549cf"], 0x3c}}, 0x0) (async)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0) (async)
r6 = accept4(r2, 0x0, 0x0, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, 0x0) (async)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0)
sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r8, 0x100, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x8044) (async)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000100)=0x3, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
socket(0x400000000010, 0x3, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

80.091381ms ago: executing program 1 (id=2578):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0)

1.931921ms ago: executing program 2 (id=2579):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$packet(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18)
write$cgroup_devices(r2, 0x0, 0x9)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x4, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff49, 0x0, 0x0, 0x0, 0x4}, [@generic={0x56, 0x6, 0xd, 0x4}]}, &(0x7f00000008c0)='GPL\x00', 0x7f98, 0xdf, &(0x7f0000000900)=""/223, 0x40f00, 0x2a, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0xc, 0x1194, 0x34}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94)
sendmsg$nl_route(r3, &(0x7f0000000c40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)=@bridge_dellink={0x70, 0x11, 0x800, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x10004}, [@IFLA_PHYS_SWITCH_ID={0x1a, 0x24, "49e99c360d3b18888e9d48067c6a68fc7fa286bc3abc"}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}]}, @IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xb}, @IFLA_PHYS_PORT_ID={0x5, 0x22, "cc"}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040001}, 0x80)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYRESHEX=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYRESHEX=0x0], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r5, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/229, 0xe5}, {&(0x7f0000000580)=""/218, 0xda}, {&(0x7f0000000740)=""/153, 0x99}, {&(0x7f0000001840)=""/4104, 0x1008}, {&(0x7f0000000100)=""/40, 0x28}, {&(0x7f00000001c0)=""/82, 0x52}, {&(0x7f0000000240)=""/120, 0xa9}, {&(0x7f0000000680)=""/141, 0x87}, {&(0x7f0000000380)=""/240, 0xf0}], 0x9}, 0x70003}, {{0x0, 0x0, 0x0}, 0xfefffffe}, {{0x0, 0x0, 0x0}, 0x75}, {{0x0, 0x0, 0x0}, 0xfb}], 0x4, 0x102, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94)
syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c020000000000000502000905"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
write(r0, &(0x7f0000000340)="0a000300010000", 0x7) (async)
write(r0, &(0x7f0000000340)="0a000300010000", 0x7)
recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) (async)
recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)

0s ago: executing program 1 (id=2580):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000bd500020050000009500000000000000fd46b8bf205bdf98befdb91c2d4c692a71d2986fab4a5c7a86797603a63345279b399d0a05854dd249fb29c5733a5da15635eb4a4bc54f0ec8416a312410958d29835ce6ee71a46d38e7ea78133aa5cac3047b50f028ded627a14b36b4a5f185ca15076bad27577cda8bcf7d5e068648c82c9bd6ec5f92c2b54c09718a12b3749b1ada6f05a20427070b6a34416197391b1c63ecfc50266aaaa5559a1cd81c5a756e163e583636246381c41110b9b298f0306ed2de54e1a89a79a8ae068f4eb6e55dd6a71ea7b468f6a62c25a02d7952b930f65b9327db37108a9fda"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000108fdffffff00000008000000003e3496d323aa9baa2314777775d1f52042035bc13c3e561078887c24901583887525b3cad3eccb49d2999f75d8a6b4bdc9744dc3f5e60e1bf7545019d87961df66afb019f8ea98b85cb03549c9765f49a48ce0db14ba8b59c81b2416156d7e124e20", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
socket(0x80000000000000a, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=@newqdisc={0x104, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_STAB={0xb8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x53, 0x6, 0xe, 0xbf, 0x0, 0x0, 0xfff, 0x2}}, {0x8, 0x2, [0x8000, 0x400]}}, {{0x1c, 0x1, {0x7, 0xa, 0xee30, 0x3, 0x1, 0x9, 0x8, 0x2}}, {0x8, 0x2, [0xffff, 0x1]}}, {{0x1c, 0x1, {0x81, 0x3, 0x2, 0x9, 0x2, 0xfffff9d1, 0x5a0, 0x2}}, {0x8, 0x2, [0x204, 0xa92f]}}, {{0x1c, 0x1, {0x8, 0x2, 0x3821, 0xa116, 0x0, 0x3, 0xa3cd}}, {0x4}}, {{0x1c, 0x1, {0xdb, 0x6, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x4}}, {0xc, 0x2, [0xe4, 0x2, 0x7, 0x7]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x2000, 0x0, 0x2, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x104}}, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(0xffffffffffffffff, &(0x7f0000000580), 0x1000000000000272)
sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[], 0x80}}, 0x0)
r5 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r1, @ANYRESOCT=r4, @ANYRES64=r3], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r8, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4d2f02, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0x9}}}, 0x24}}, 0x0)
r9 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0xf00, 0x0, 0x80}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x0)

kernel console output (not intermixed with test programs):

t_CT: No such helper "syz1"
[  150.560332][ T9189] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  150.565905][ T9189] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  150.571731][ T9189] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  150.584181][ T9189] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  150.939479][ T9214]  speed is unknown, defaulting to 1000
[  150.977637][ T9221] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  151.347887][ T9235] netlink: 'syz.2.885': attribute type 1 has an invalid length.
[  154.315041][ T9242] __nla_validate_parse: 5 callbacks suppressed
[  154.315058][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.886'.
[  154.458870][ T9257] xt_recent: hitcount (33554435) is larger than allowed maximum (65535)
[  154.466416][ T9257] validate_nla: 1 callbacks suppressed
[  154.466426][ T9257] netlink: 'syz.0.890': attribute type 1 has an invalid length.
[  154.508824][ T9257] 8021q: adding VLAN 0 to HW filter on device bond8
[  154.541982][ T9261] bond8: (slave geneve2): making interface the new active one
[  154.542374][ T9262] block nbd0: NBD_DISCONNECT
[  154.546143][ T9262] block nbd0: Send disconnect failed -32
[  154.548908][ T9262] block nbd0: shutting down sockets
[  154.548929][ T9261] bond8: (slave geneve2): Enslaving as an active interface with an up link
[  154.567623][ T9261] syz.0.890 (9261) used greatest stack depth: 19776 bytes left
[  154.657225][ T9266] syzkaller0: entered promiscuous mode
[  154.664127][ T9266] syzkaller0: entered allmulticast mode
[  154.752025][ T9276] netlink: 'syz.1.896': attribute type 1 has an invalid length.
[  154.782692][ T9276] 8021q: adding VLAN 0 to HW filter on device bond13
[  154.972694][ T9276] veth13: entered allmulticast mode
[  154.974723][ T9291] netlink: 32 bytes leftover after parsing attributes in process `syz.0.900'.
[  154.986351][ T9276] bond13: (slave veth13): Enslaving as an active interface with an up link
[  155.090212][ T9299] netlink: 56 bytes leftover after parsing attributes in process `syz.1.902'.
[  155.162125][ T9293] netlink: 14 bytes leftover after parsing attributes in process `syz.2.901'.
[  155.298469][ T9318] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  155.326196][ T9319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.907'.
[  155.876791][ T9368] netlink: 'syz.0.917': attribute type 1 has an invalid length.
[  155.879337][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'.
[  156.254017][ T9383] netlink: 52 bytes leftover after parsing attributes in process `syz.2.922'.
[  156.257293][ T9383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  156.313535][ T9385] syzkaller1: entered promiscuous mode
[  156.315451][ T9385] syzkaller1: entered allmulticast mode
[  156.632188][ T9403] netlink: 80 bytes leftover after parsing attributes in process `syz.2.929'.
[  156.635570][ T9403] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  156.695177][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'.
[  156.696401][ T9407] netlink: 'syz.2.931': attribute type 1 has an invalid length.
[  156.720220][ T9407] 8021q: adding VLAN 0 to HW filter on device bond9
[  156.762437][ T9407] bond9: (slave veth7): Enslaving as an active interface with a down link
[  156.817096][ T9407] bond9: (slave veth9): Enslaving as an active interface with a down link
[  156.825630][ T9407] bond9: entered allmulticast mode
[  156.866232][ T9412] netlink: 36 bytes leftover after parsing attributes in process `syz.0.934'.
[  157.051811][ T9425] netlink: 'syz.2.938': attribute type 1 has an invalid length.
[  157.645284][ T9457] netlink: 'syz.2.946': attribute type 30 has an invalid length.
[  157.661438][ T9457] netlink: 'syz.2.946': attribute type 30 has an invalid length.
[  157.662946][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  157.668521][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  157.678250][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  157.684531][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  157.798138][ T9464] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  157.805484][ T9464] bond11 (unregistering): Released all slaves
[  157.959243][ T9470]  speed is unknown, defaulting to 1000
[  158.133446][ T9485] syzkaller1: entered promiscuous mode
[  158.138209][ T9485] syzkaller1: entered allmulticast mode
[  158.252817][ T9491] SET target dimension over the limit!
[  158.288828][ T9493] netlink: 'syz.0.955': attribute type 1 has an invalid length.
[  158.365218][ T9493] 8021q: adding VLAN 0 to HW filter on device bond9
[  158.415432][ T9498] bond9: (slave veth9): Enslaving as an active interface with a down link
[  158.450307][ T9493] 8021q: adding VLAN 0 to HW filter on device batadv1
[  158.479406][ T9493] bond9: (slave batadv1): making interface the new active one
[  158.490074][ T9493] batadv1: entered promiscuous mode
[  158.499732][ T9493] bond9: (slave batadv1): Enslaving as an active interface with an up link
[  158.864342][ T9509] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  158.873894][ T9509] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  158.901217][ T9509] tc_dump_action: action bad kind
[  158.955929][ T9513] syzkaller1: entered promiscuous mode
[  158.958251][ T9513] syzkaller1: entered allmulticast mode
[  158.998090][ T9517] netlink: 'syz.1.964': attribute type 1 has an invalid length.
[  159.007510][ T9517] bridge0: port 3(team0) entered disabled state
[  159.012722][ T9517] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.015340][ T9517] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.124623][ T9528] xt_limit: Overflow, try lower: 324382443/0
[  159.130199][ T9526] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  159.153275][ T9526] bond14: option min_links: invalid value (18446744073709551612)
[  159.156393][ T9526] bond14: option min_links: allowed values 0 - 2147483647
[  159.161042][ T9526] bond14 (unregistering): Released all slaves
[  159.241926][ T9533] netlink: 'syz.0.968': attribute type 2 has an invalid length.
[  159.381880][ T9547] syzkaller1: entered promiscuous mode
[  159.384219][ T9547] syzkaller1: entered allmulticast mode
[  159.447970][ T9550] syzkaller1: entered promiscuous mode
[  159.450006][ T9550] syzkaller1: entered allmulticast mode
[  159.455656][ T9550] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96
[  159.472403][ T9548] netlink: 'syz.1.970': attribute type 16 has an invalid length.
[  159.478311][ T9550] __nla_validate_parse: 10 callbacks suppressed
[  159.478321][ T9550] netlink: 32 bytes leftover after parsing attributes in process `syz.0.974'.
[  159.486836][ T9548] netlink: 'syz.1.970': attribute type 17 has an invalid length.
[  159.523007][ T9548] bridge0: port 3(team0) entered blocking state
[  159.525164][ T9548] bridge0: port 3(team0) entered forwarding state
[  159.527497][ T9548] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.530312][ T9548] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.533242][ T9548] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.536044][ T9548] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.568992][ T9548] 0X: left allmulticast mode
[  159.596165][ T9553] siw: device registration error -23
[  159.608542][ T9548] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  159.908379][ T9569] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (32769) !
[  159.913909][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'.
[  160.005135][ T9571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.982'.
[  160.041025][ T9571] 8021q: adding VLAN 0 to HW filter on device bond11
[  160.486190][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'.
[  160.800205][ T9579] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.806546][ T9586] netem: change failed
[  160.840901][ T9589] tipc: Resetting bearer <eth:syzkaller0>
[  160.968213][ T9596] netlink: 68 bytes leftover after parsing attributes in process `syz.0.987'.
[  160.973831][ T9594] syzkaller1: entered promiscuous mode
[  160.977038][ T9594] syzkaller1: entered allmulticast mode
[  161.057359][ T9602] raw_sendmsg: syz.1.989 forgot to set AF_INET. Fix it!
[  161.319183][ T9618] netlink: 'syz.1.992': attribute type 1 has an invalid length.
[  161.323771][ T9618] netlink: 224 bytes leftover after parsing attributes in process `syz.1.992'.
[  161.355081][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.993'.
[  161.410070][ T9622] syzkaller1: entered promiscuous mode
[  161.413766][ T9622] syzkaller1: entered allmulticast mode
[  161.601950][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.997'.
[  161.604792][ T9634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.997'.
[  161.607521][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.997'.
[  161.610333][ T9634] netlink: 'syz.1.997': attribute type 6 has an invalid length.
[  161.654222][ T9636] netlink: 'syz.1.998': attribute type 1 has an invalid length.
[  161.678998][ T9636] bond14: (slave geneve3): Opening slave failed
[  161.821863][ T5797] tipc: Node number set to 1100420778
[  162.007672][ T9653] netlink: 'syz.1.1004': attribute type 1 has an invalid length.
[  162.044043][ T9653] 8021q: adding VLAN 0 to HW filter on device bond15
[  162.074664][ T9653] bond15: (slave gretap1): making interface the new active one
[  162.080407][ T9653] bond15: (slave gretap1): Enslaving as an active interface with an up link
[  162.102195][ T9653] bond15 (unregistering): (slave gretap1): Releasing active interface
[  162.109216][ T9653] bond15 (unregistering): Released all slaves
[  162.217428][ T9653] syz.1.1004 (9653) used greatest stack depth: 19168 bytes left
[  162.388053][ T9671] syzkaller1: entered promiscuous mode
[  162.390280][ T9671] syzkaller1: entered allmulticast mode
[  162.436800][ T9672]  speed is unknown, defaulting to 1000
[  163.302203][ T9692] smc: removing ib device sqz0
[  163.376235][ T9704] syzkaller1: entered allmulticast mode
[  163.465737][ T9692] smbdirect: ib_dev[sqz0] removed
[  163.640899][ T9708] GUP no longer grows the stack in syz.2.1019 (9708): 200000002000-20000000a000 (200000001000)
[  163.650968][ T9708] CPU: 1 UID: 0 PID: 9708 Comm: syz.2.1019 Not tainted syzkaller #0 PREEMPT(full) 
[  163.650983][ T9708] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.650990][ T9708] Call Trace:
[  163.650994][ T9708]  <TASK>
[  163.650999][ T9708]  dump_stack_lvl+0xe8/0x150
[  163.651017][ T9708]  __get_user_pages+0x2378/0x2720
[  163.651038][ T9708]  ? __gup_longterm_locked+0xc4e/0x1630
[  163.651068][ T9708]  ? __gup_longterm_locked+0xc4e/0x1630
[  163.651088][ T9708]  ? down_read_killable+0x1bb/0x340
[  163.651112][ T9708]  __gup_longterm_locked+0xdcf/0x1630
[  163.651128][ T9708]  ? lock_acquire+0x106/0x350
[  163.651147][ T9708]  gup_fast_fallback+0x1d84/0x20d0
[  163.651173][ T9708]  ? __pfx_gup_fast_fallback+0x10/0x10
[  163.651181][ T9708]  ? futex_unqueue+0x22/0x240
[  163.651192][ T9708]  ? futex_unqueue+0x22/0x240
[  163.651201][ T9708]  ? futex_unqueue+0x22/0x240
[  163.651210][ T9708]  ? is_valid_gup_args+0x11f/0x200
[  163.651222][ T9708]  ? get_user_pages_fast+0x4d/0xb0
[  163.651232][ T9708]  __iov_iter_get_pages_alloc+0x370/0xa10
[  163.651251][ T9708]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  163.651265][ T9708]  iov_iter_get_pages2+0x5e/0xa0
[  163.651278][ T9708]  __se_sys_vmsplice+0x7c7/0x1620
[  163.651296][ T9708]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  163.651307][ T9708]  ? __pfx_futex_wait+0x10/0x10
[  163.651323][ T9708]  ? __pfx_generic_map_lookup_batch+0x10/0x10
[  163.651349][ T9708]  ? put_files_struct+0x256/0x350
[  163.651360][ T9708]  ? 0xffffffffff600000
[  163.651383][ T9708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.651419][ T9708]  do_syscall_64+0x15f/0xf80
[  163.651433][ T9708]  ? trace_irq_disable+0x3b/0x140
[  163.651456][ T9708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.651469][ T9708] RIP: 0033:0x7fbbd419cdd9
[  163.651481][ T9708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.651495][ T9708] RSP: 002b:00007fbbd4fbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  163.651510][ T9708] RAX: ffffffffffffffda RBX: 00007fbbd4415fa0 RCX: 00007fbbd419cdd9
[  163.651520][ T9708] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a
[  163.651529][ T9708] RBP: 00007fbbd4232d69 R08: 0000000000000000 R09: 0000000000000000
[  163.651538][ T9708] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  163.651547][ T9708] R13: 00007fbbd4416038 R14: 00007fbbd4415fa0 R15: 00007fff6559fb58
[  163.651563][ T9708]  </TASK>
[  167.115208][ T9730] openvswitch: netlink: IPv4 tun info is not correct
[  167.168609][ T9738] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  167.243191][ T9740] __nla_validate_parse: 6 callbacks suppressed
[  167.243202][ T9740] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1027'.
[  167.243685][ T9744] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1028'.
[  167.347860][ T9752] x_tables: duplicate underflow at hook 1
[  167.351264][ T9751] x_tables: duplicate underflow at hook 1
[  167.415984][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'.
[  167.816719][ T9783] netlink: 'syz.1.1038': attribute type 11 has an invalid length.
[  168.075682][ T9799] netlink: 'syz.1.1043': attribute type 12 has an invalid length.
[  168.233793][ T9802] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1045'.
[  168.236728][ T9802] netlink: Unknown conntrack attr (0)
[  168.271727][ T9806] nbd: socks must be embedded in a SOCK_ITEM attr
[  168.277723][ T9806] block nbd0: shutting down sockets
[  168.933813][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'.
[  168.945144][ T9817] netem: change failed
[  169.004035][ T9821] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1051'.
[  169.150475][ T9828] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1053'.
[  169.156624][ T9829] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  169.562030][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1060'.
[  169.600880][ T9715] batadv1: left promiscuous mode
[  169.665202][ T9850] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  169.704734][ T9857] nft_compat: unsupported protocol 5
[  170.027820][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1067'.
[  170.040635][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1067'.
[  170.331307][ T9880] xt_TCPMSS: Only works on TCP SYN packets
[  170.407836][ T9892] syzkaller1: entered promiscuous mode
[  170.412223][ T9892] syzkaller1: entered allmulticast mode
[  170.423937][ T9889] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  170.887177][ T9923] tipc: Enabling of bearer <eth:syzkaller09> rejected, failed to enable media
[  171.012045][ T9931] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  171.014520][ T9931] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  171.125192][ T9934] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  171.134646][ T9934] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  171.227139][ T9936] netlink: 'syz.0.1089': attribute type 2 has an invalid length.
[  171.346305][ T9952] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  171.465178][ T9958] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2)
[  171.787711][ T9971] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  171.791409][ T9971] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  172.088532][ T9977] tipc: Resetting bearer <eth:syzkaller0>
[  172.407948][ T9980] __nla_validate_parse: 13 callbacks suppressed
[  172.407961][ T9980] netlink: 456 bytes leftover after parsing attributes in process `syz.0.1103'.
[  172.414960][ T9981] netlink: 456 bytes leftover after parsing attributes in process `syz.0.1103'.
[  172.579259][ T9990] netlink: zone id is out of range
[  172.581667][ T9990] netlink: zone id is out of range
[  172.583524][ T9990] netlink: zone id is out of range
[  172.585698][ T9990] netlink: zone id is out of range
[  172.587441][ T9990] netlink: zone id is out of range
[  172.589279][ T9990] netlink: zone id is out of range
[  172.592124][ T9990] netlink: zone id is out of range
[  172.594910][ T9990] netlink: zone id is out of range
[  172.597026][ T9990] netlink: zone id is out of range
[  172.598997][ T9990] netlink: zone id is out of range
[  172.917091][T10011] syzkaller1: entered promiscuous mode
[  172.923225][T10011] syzkaller1: entered allmulticast mode
[  172.928025][T10010] syzkaller1: entered promiscuous mode
[  172.935957][T10010] syzkaller1: entered allmulticast mode
[  173.121284][T10025] netlink: 'syz.2.1112': attribute type 1 has an invalid length.
[  173.123783][T10025] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1112'.
[  173.159237][T10027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1111'.
[  173.223385][T10034] vlan7: entered promiscuous mode
[  173.225214][T10034] bridge0: entered promiscuous mode
[  173.265852][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'.
[  173.270863][T10022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1111'.
[  173.353948][T10035] netlink: 'syz.1.1114': attribute type 4 has an invalid length.
[  173.357108][T10034] netlink: 'syz.1.1114': attribute type 4 has an invalid length.
[  173.410060][T10042] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1115'.
[  175.637154][T10061] syzkaller1: entered promiscuous mode
[  175.648077][T10061] syzkaller1: entered allmulticast mode
[  175.858327][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1125'.
[  175.920944][T10085] xt_TPROXY: Can be used only with -p tcp or -p udp
[  175.925335][T10085] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1127'.
[  175.928339][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1127'.
[  175.931565][T10085] netlink: 'syz.1.1127': attribute type 2 has an invalid length.
[  175.988322][T10088] netlink: 'syz.1.1128': attribute type 13 has an invalid length.
[  176.033893][T10088] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  176.114000][T10094] syzkaller1: entered promiscuous mode
[  176.116216][T10094] syzkaller1: entered allmulticast mode
[  176.323860][T10104] bond12: (slave bond_slave_1): Device is not bonding slave
[  176.326151][T10104] bond12: option active_slave: invalid value (bond_slave_1)
[  176.329645][T10104] bond12 (unregistering): Released all slaves
[  176.489799][T10112] block nbd2: not configured, cannot reconfigure
[  176.961341][T10130] infiniband syz0: set active
[  176.962959][T10130] infiniband syz0: added ipvlan1
[  176.976897][T10130] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  176.984400][T10130] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  176.989864][T10130] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  177.007324][T10130] RDS/IB: syz0: added
[  177.008696][T10130] smc: adding ib device syz0 with port count 1
[  177.011202][T10130] smc:    ib device syz0 port 1 has no pnetid
[  177.192758][T10147] tunl0: Caught tx_queue_len zero misconfig
[  177.294623][T10155] ipt_rpfilter: unknown options
[  177.474444][T10165] netlink: 'syz.1.1151': attribute type 13 has an invalid length.
[  177.933161][T10186] __nla_validate_parse: 4 callbacks suppressed
[  177.933175][T10186] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1157'.
[  178.815854][T10193] netlink: 'syz.2.1159': attribute type 3 has an invalid length.
[  179.209604][  T799] IPVS: starting estimator thread 0...
[  179.219754][T10212] netlink: 'syz.0.1166': attribute type 2 has an invalid length.
[  179.279808][T10217] netlink: 'syz.0.1168': attribute type 1 has an invalid length.
[  179.292046][T10221] net_ratelimit: 43 callbacks suppressed
[  179.292058][T10221] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  179.330894][T10213] IPVS: using max 65 ests per chain, 156000 per kthread
[  179.475570][T10232] veth0_vlan: entered allmulticast mode
[  179.484434][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1173'.
[  179.499293][T10229] bond10: option miimon: invalid value (18446744073709551607)
[  179.502443][T10229] bond10: option miimon: allowed values 0 - 2147483647
[  179.508311][T10229] bond10 (unregistering): Released all slaves
[  179.565271][   T55] block nbd0: Receive control failed (result -32)
[  179.588638][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1171'.
[  179.612702][T10243] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  179.663169][T10247] 8021q: adding VLAN 0 to HW filter on device bond10
[  179.672816][T10249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1178'.
[  179.677002][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'.
[  179.737806][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'.
[  179.913761][T10262] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1184'.
[  179.967444][T10264] netlink: 'syz.2.1185': attribute type 12 has an invalid length.
[  179.970144][T10264] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1185'.
[  180.064135][T10271] xt_hashlimit: size too large, truncated to 1048576
[  181.043666][T10289] xt_hashlimit: size too large, truncated to 1048576
[  181.162287][T10295] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig
[  181.168941][T10289] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  181.187369][T10289] bond11: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  181.195593][T10289] bond11 (unregistering): Released all slaves
[  181.215754][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'.
[  181.334020][T10308] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1199'.
[  181.414399][T10317] team_slave_1: entered promiscuous mode
[  182.178315][T10358] netlink: 'syz.0.1212': attribute type 1 has an invalid length.
[  182.201517][T10360] gretap2: entered allmulticast mode
[  182.208080][T10360] bond11: (slave gretap2): making interface the new active one
[  182.213367][T10360] bond11: (slave gretap2): Enslaving as an active interface with an up link
[  182.929640][T10384] netlink: 'syz.0.1218': attribute type 39 has an invalid length.
[  182.999986][T10312] Set syz1 is full, maxelem 65536 reached
[  183.220510][T10395] ipt_rpfilter: unknown options
[  183.303106][T10400] netlink: 'syz.2.1224': attribute type 25 has an invalid length.
[  183.305865][T10400] netlink: 'syz.2.1224': attribute type 3 has an invalid length.
[  183.308370][T10400] __nla_validate_parse: 3 callbacks suppressed
[  183.308377][T10400] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1224'.
[  183.317468][T10400] netem: change failed
[  183.533339][T10403] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  183.957078][T10422] netlink: 316 bytes leftover after parsing attributes in process `syz.0.1230'.
[  183.968342][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1232'.
[  184.015457][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'.
[  184.113356][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1235'.
[  184.116946][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1235'.
[  184.129650][T10436] netlink: 'syz.0.1235': attribute type 4 has an invalid length.
[  184.142167][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1235'.
[  184.229717][T10440] : renamed from lo (while UP)
[  184.251939][T10443] netlink: 'syz.0.1238': attribute type 1 has an invalid length.
[  184.255686][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1238'.
[  184.271967][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.332075][T10448] netlink: 460 bytes leftover after parsing attributes in process `syz.0.1240'.
[  184.340141][T10449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1239'.
[  184.661096][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.681231][ T5671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  184.718874][T10476] syz_tun: entered allmulticast mode
[  184.736668][T10475] syz_tun: left allmulticast mode
[  184.839737][T10481] bond15: option resend_igmp: invalid value (2878)
[  184.844335][T10481] bond15: option resend_igmp: allowed values 0 - 255
[  184.847985][T10481] bond15 (unregistering): Released all slaves
[  184.929030][T10489] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  184.973678][T10491] syzkaller1: entered promiscuous mode
[  184.975603][T10491] syzkaller1: entered allmulticast mode
[  184.982679][ T5791] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.301347][  T799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.540987][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  185.552194][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  185.740391][T10518] netlink: 'syz.1.1257': attribute type 1 has an invalid length.
[  185.791209][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  186.042193][T10535] netlink: 'syz.1.1263': attribute type 2 has an invalid length.
[  186.044947][T10535] netlink: 'syz.1.1263': attribute type 11 has an invalid length.
[  186.278451][T10552] ip6tnl2: entered allmulticast mode
[  186.283898][ T5671] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  186.340992][ T5000] Bluetooth: hci0: command 0x0406 tx timeout
[  186.351459][ T5000] Bluetooth: hci1: command 0x0406 tx timeout
[  186.353558][  T799] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  186.381465][T10448] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  186.484765][T10567] netlink: 'syz.0.1273': attribute type 1 has an invalid length.
[  186.509926][T10571] syz_tun: entered allmulticast mode
[  186.553994][T10571] syz_tun (unregistering): left allmulticast mode
[  186.650559][T10581] IPVS: set_ctl: invalid protocol: 115 10.1.0.254:20004
[  186.656977][T10581] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  186.820956][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.130800][T10602] netlink: 'syz.0.1281': attribute type 22 has an invalid length.
[  187.148867][T10599] dvmrp6: entered allmulticast mode
[  187.176772][T10600] syzkaller0: entered promiscuous mode
[  187.178785][T10600] syzkaller0: entered allmulticast mode
[  187.231203][T10602] netlink: 'syz.0.1281': attribute type 22 has an invalid length.
[  187.421588][T10615] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  187.431393][T10615] batman_adv: batadv0: Removing interface: ip6gretap1
[  187.440091][T10615] batman_adv: batadv0: Interface deactivated: gretap1
[  187.446868][T10615] batman_adv: batadv0: Removing interface: gretap1
[  187.482500][T10615] batadv0 (unregistering): left promiscuous mode
[  187.539965][T10624] 8021q: VLANs not supported on tunl0
[  187.788749][T10646] veth0_macvtap: Caught tx_queue_len zero misconfig
[  187.955900][T10650] xt_hashlimit: size too large, truncated to 1048576
[  188.420775][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  188.480226][T10630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  188.832960][T10665] netlink: 'syz.2.1295': attribute type 16 has an invalid length.
[  188.835681][T10665] netlink: 'syz.2.1295': attribute type 17 has an invalid length.
[  188.942486][T10669] __nla_validate_parse: 92 callbacks suppressed
[  188.942501][T10669] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1298'.
[  189.311068][T10677] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1300'.
[  189.836588][T10687] xt_hashlimit: size too large, truncated to 1048576
[  190.522317][T10702] team_slave_1: left promiscuous mode
[  190.660840][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  190.732416][T10702] bond1: left promiscuous mode
[  190.848931][T10702] bridge2: left promiscuous mode
[  190.852035][T10702] bridge2: left allmulticast mode
[  190.889016][T10702] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  190.894772][T10702] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  190.897543][T10702] vlan0: left promiscuous mode
[  190.905623][T10702] ip6erspan1: left allmulticast mode
[  190.912481][T10702] bond7: left allmulticast mode
[  190.966608][T10702] gretap2: left allmulticast mode
[  190.978550][ T9715] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  190.986729][ T9715] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.989942][ T9715] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  190.994361][ T9715] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  190.995273][   T10] syz1: Port: 1 Link DOWN
[  191.003345][ T9715] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.013308][ T9715] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.018418][ T9715] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  191.030469][ T9715] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  191.164152][T10712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  191.171222][T10717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  191.531408][T10731] validate_nla: 1 callbacks suppressed
[  191.531428][T10731] netlink: 'syz.1.1317': attribute type 21 has an invalid length.
[  191.537008][T10731] netlink: 'syz.1.1317': attribute type 1 has an invalid length.
[  191.540108][T10731] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1317'.
[  191.844598][T10750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1320'.
[  192.208275][T10762] netlink: 'syz.0.1325': attribute type 1 has an invalid length.
[  192.299630][T10762] bond12: (slave gretap3): making interface the new active one
[  192.309923][T10762] bond12: (slave gretap3): Enslaving as an active interface with an up link
[  192.318554][T10762] macvlan1: entered promiscuous mode
[  192.320448][T10762] macvlan1: entered allmulticast mode
[  192.323783][T10762] bond12: entered promiscuous mode
[  192.325457][T10762] gretap3: entered promiscuous mode
[  192.331182][T10762] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  192.333867][T10762] bond12: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  192.339223][T10762] bond12: left promiscuous mode
[  192.341527][T10762] gretap3: left promiscuous mode
[  192.378828][T10764] netlink: 'syz.2.1324': attribute type 13 has an invalid length.
[  192.381475][T10764] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1324'.
[  193.008955][T10790] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  193.020419][T10790] net_ratelimit: 12 callbacks suppressed
[  193.020437][T10790] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  193.029057][T10790] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1333'.
[  193.043058][T10790] bond0 (unregistering): Released all slaves
[  193.195657][T10794] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1334'.
[  193.199610][T10794] unsupported nlmsg_type 40
[  193.232949][T10794] syzkaller0: entered promiscuous mode
[  193.235284][T10794] syzkaller0: entered allmulticast mode
[  193.245588][T10792] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1335'.
[  193.369968][T10796] netlink: 'syz.2.1337': attribute type 1 has an invalid length.
[  193.606618][T10811] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  193.694227][T10817] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  193.697581][T10817] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  194.173870][T10838] netlink: 'syz.2.1346': attribute type 12 has an invalid length.
[  194.336678][T10847] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  194.943168][T10859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1353'.
[  195.010062][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1353'.
[  195.016901][T10856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1352'.
[  195.019742][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1353'.
[  195.026774][T10859] netlink: 'syz.0.1353': attribute type 14 has an invalid length.
[  195.029542][T10859] netlink: 'syz.0.1353': attribute type 13 has an invalid length.
[  195.057771][   T55] block nbd1: Receive control failed (result -32)
[  195.194831][T10869] xt_hashlimit: size too large, truncated to 1048576
[  195.614781][T10882] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1360'.
[  195.619564][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'.
[  195.624463][T10882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1360'.
[  195.629772][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'.
[  195.632752][T10882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1360'.
[  195.772727][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'.
[  196.400095][T10906] ipip1: entered promiscuous mode
[  196.754973][T10914] netlink: 'syz.2.1373': attribute type 4 has an invalid length.
[  196.863642][T10925] tap0: tun_chr_ioctl cmd 1074025680
[  196.879569][T10924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  196.900095][T10925] bond0: entered promiscuous mode
[  196.903652][T10925] bond0: entered allmulticast mode
[  196.908066][T10925] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.241986][T10937] netem: change failed
[  198.346955][T10974] hsr0: entered promiscuous mode
[  198.413683][T10973] hsr0: left promiscuous mode
[  199.189472][T11004] bond0: Unable to set down delay as MII monitoring is disabled
[  199.621301][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  199.777017][T11019] syzkaller1: entered promiscuous mode
[  199.782401][T11019] syzkaller1: entered allmulticast mode
[  201.128109][T11058] __nla_validate_parse: 9 callbacks suppressed
[  201.128244][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1402'.
[  201.176373][T11058] block nbd3: Unsupported socket: should be TCP or UNIX.
[  201.177576][T11061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1403'.
[  201.235801][T11066] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  201.455311][T11061] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  201.716457][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1405'.
[  201.776312][T11078] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1405'.
[  202.034634][T11087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'.
[  202.088591][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'.
[  202.096967][T11088] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  202.626134][T11096] IPVS: length: 250 != 24
[  202.955794][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1414'.
[  202.977964][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'.
[  203.030759][T11114] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[  203.439281][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'.
[  203.446709][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'.
[  203.474033][T11135] bond13: entered promiscuous mode
[  203.476411][T11135] 8021q: adding VLAN 0 to HW filter on device bond13
[  203.802781][T11148] tc_dump_action: action bad kind
[  204.156201][T11162] pimreg0: tun_chr_ioctl cmd 1074025673
[  204.161640][T11161] pimreg0: tun_chr_ioctl cmd 1074025681
[  207.070267][T11167] x_tables: duplicate underflow at hook 2
[  207.137509][T11174] __nla_validate_parse: 4 callbacks suppressed
[  207.137521][T11174] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1432'.
[  207.197374][T11179] team0: entered promiscuous mode
[  207.200161][T11179] netlink: 'syz.0.1433': attribute type 11 has an invalid length.
[  207.642876][T11195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1438'.
[  207.831357][T11206] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1440'.
[  207.969860][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1441'.
[  208.017398][T11213] netlink: 'syz.1.1443': attribute type 1 has an invalid length.
[  208.050860][T11213] 8021q: adding VLAN 0 to HW filter on device bond15
[  208.107223][T11215] netlink: 'syz.0.1442': attribute type 1 has an invalid length.
[  208.177147][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1446'.
[  208.181757][T11222] openvswitch: netlink: Message has 4 unknown bytes.
[  208.214207][T11223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1445'.
[  208.288471][   T55] block nbd3: Receive control failed (result -1)
[  208.550179][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1449'.
[  208.556681][T11236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1449'.
[  208.563221][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1449'.
[  208.569596][T11236] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1449'.
[  208.592921][ T9715] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  209.098232][T11235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  209.503660][T11281] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993
[  209.820369][T11293] netlink: 'syz.1.1461': attribute type 4 has an invalid length.
[  210.318377][T11316] xt_CT: You must specify a L4 protocol and not use inversions on it
[  210.355419][T11316] xt_limit: Overflow, try lower: 28676/2147483648
[  210.828691][T11344] vlan3: entered allmulticast mode
[  211.837903][T11405] IPv6: sit1: Disabled Multicast RS
[  212.146725][T11432] __nla_validate_parse: 8 callbacks suppressed
[  212.146738][T11432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1499'.
[  212.152420][T11432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1499'.
[  212.288250][T11442] netlink: 'syz.0.1502': attribute type 1 has an invalid length.
[  212.335864][T11442] 8021q: adding VLAN 0 to HW filter on device bond14
[  212.366604][T11442] bond14: (slave ip6gretap2): making interface the new active one
[  212.371231][T11442] bond14: (slave ip6gretap2): Enslaving as an active interface with an up link
[  212.615687][T11449] gtp0: entered promiscuous mode
[  212.617849][T11449] gtp0: entered allmulticast mode
[  212.633995][T11455] xt_l2tp: unknown flags: 51
[  212.646395][T11458] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1508'.
[  212.760430][T11466] gretap0: entered promiscuous mode
[  212.765662][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1509'.
[  212.777579][T11466] gretap0: left promiscuous mode
[  212.817115][T11472] netlink: 'syz.0.1511': attribute type 1 has an invalid length.
[  212.866089][T11472] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address
[  212.869853][T11472] bond15: (slave vxcan1): Error -95 calling set_mac_address
[  212.909816][T11475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1511'.
[  212.970816][T11475] bond15: (slave bridge8): Enslaving as an active interface with a down link
[  212.997402][T11472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1511'.
[  213.012357][T11472] 8021q: adding VLAN 0 to HW filter on device bond15
[  213.024018][T11472] macvlan1: entered promiscuous mode
[  213.026210][T11472] macvlan1: entered allmulticast mode
[  213.029333][T11472] bond15: entered promiscuous mode
[  213.032999][T11472] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  213.043479][T11472] bond15: left promiscuous mode
[  213.432204][T11494] syzkaller1: entered promiscuous mode
[  213.434041][T11494] syzkaller1: entered allmulticast mode
[  213.649182][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1520'.
[  214.608096][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1523'.
[  214.643282][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1523'.
[  214.689831][T11513] bond12: option miimon: invalid value (18446744073709551607)
[  214.692393][T11513] bond12: option miimon: allowed values 0 - 2147483647
[  214.695861][T11513] bond12 (unregistering): Released all slaves
[  214.788821][T11530] netlink: 'syz.2.1526': attribute type 1 has an invalid length.
[  214.831873][T11530] bond12: (slave geneve3): making interface the new active one
[  214.839113][T11530] bond12: (slave geneve3): Enslaving as an active interface with an up link
[  214.842259][ T5671] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  214.847408][ T5671] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  214.851405][ T5671] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  214.854296][ T5671] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  214.955523][T11540] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1528'.
[  214.961156][T11540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  215.097503][T11543] syzkaller1: entered promiscuous mode
[  215.099559][T11543] syzkaller1: entered allmulticast mode
[  215.817159][T11575] netlink: 'syz.0.1536': attribute type 10 has an invalid length.
[  216.219675][T11593] netlink: 'syz.0.1540': attribute type 7 has an invalid length.
[  216.260766][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  216.476861][T11604] syzkaller1: entered promiscuous mode
[  216.479301][T11604] syzkaller1: entered allmulticast mode
[  216.489360][T11604] team0: left promiscuous mode
[  216.502920][T11604] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  216.506158][T11604] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  216.517765][T11604] bond13: left promiscuous mode
[  216.555595][T11604] syzkaller1: left promiscuous mode
[  216.557843][T11604] syzkaller1: left allmulticast mode
[  216.701551][T11606] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  216.706241][T11606] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  216.709665][T11606] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  216.733258][T11611] netlink: 'syz.0.1546': attribute type 1 has an invalid length.
[  216.792505][T11611] 8021q: adding VLAN 0 to HW filter on device bond17
[  216.800049][T11611] bond16: (slave bond17): making interface the new active one
[  216.803397][T11611] bond16: (slave bond17): Enslaving as an active interface with an up link
[  216.877321][T11606] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  216.881914][T11606] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  216.885326][T11606] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  216.997652][T11606] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.001544][T11606] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.005800][T11606] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  217.074946][T11606] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.078225][T11606] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.082731][T11606] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  217.251240][ T5671] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  217.254515][ T5671] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  217.258717][ T5671] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  217.280074][ T5671] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  217.283791][ T5671] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  217.287236][ T5671] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  217.309509][ T5671] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  217.313575][ T5671] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  217.317262][ T5671] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  217.328814][ T5671] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  217.332810][ T5671] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  217.335446][ T5671] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  217.544174][T11624] netlink: 'syz.2.1550': attribute type 1 has an invalid length.
[  217.547576][T11624] __nla_validate_parse: 4 callbacks suppressed
[  217.547591][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1550'.
[  217.939563][T11642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1556'.
[  218.721585][T11655] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1562'.
[  218.786374][T11655] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  219.168255][T11672] netlink: 'syz.0.1565': attribute type 13 has an invalid length.
[  219.250142][T11674] netlink: 'syz.0.1566': attribute type 1 has an invalid length.
[  219.297774][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'.
[  219.352037][T11674] 8021q: adding VLAN 0 to HW filter on device bond18
[  219.407043][T11678] vlan2: entered allmulticast mode
[  219.409904][T11678] bond18: entered allmulticast mode
[  219.568736][T11682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1568'.
[  220.071820][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1572'.
[  220.146268][T11696] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  220.479088][T11723] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1576'.
[  220.503729][T11724] bond13: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  220.509840][T11724] bond13 (unregistering): Released all slaves
[  220.598062][T11727] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1579'.
[  220.707964][T11737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'.
[  220.828965][T11737] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.831660][T11737] syzkaller0: entered promiscuous mode
[  220.833480][T11737] syzkaller0: entered allmulticast mode
[  220.855373][T11737] tipc: Resetting bearer <eth:syzkaller0>
[  220.859424][T11734] tipc: Resetting bearer <eth:syzkaller0>
[  220.882289][T11734] tipc: Disabling bearer <eth:syzkaller0>
[  221.228392][T11759] bond13: Unable to set up delay as MII monitoring is disabled
[  221.233692][T11759] bond13 (unregistering): Released all slaves
[  221.361968][T11765] xt_hashlimit: size too large, truncated to 1048576
[  221.483065][T11772] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1590'.
[  221.638317][T11789] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  221.643545][T11789] batman_adv: batadv0: Adding interface: gretap2
[  221.645606][T11789] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  221.654252][T11789] batman_adv: batadv0: Interface activated: gretap2
[  222.184127][T11813] syzkaller1: entered promiscuous mode
[  222.185969][T11813] syzkaller1: entered allmulticast mode
[  222.599903][T11829] block nbd0: NBD_DISCONNECT
[  222.604103][T11829] block nbd0: Send disconnect failed -32
[  222.605875][T11829] block nbd0: shutting down sockets
[  222.624883][T11829] dvmrp1: left allmulticast mode
[  222.893576][T11838] __nla_validate_parse: 2 callbacks suppressed
[  222.893593][T11838] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1611'.
[  222.913231][T11846] tunl0: Caught tx_queue_len zero misconfig
[  223.148900][T11862] block nbd0: Unsupported socket: should be TCP or UNIX.
[  223.229369][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1620'.
[  223.239351][T11865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1620'.
[  223.273419][T11867] netem: change failed
[  223.341398][T11870] syzkaller1: entered promiscuous mode
[  223.345030][T11870] syzkaller1: entered allmulticast mode
[  223.442858][T11872] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  223.445192][T11872] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  224.060178][T11907] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1632'.
[  224.609431][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1636'.
[  224.625709][T11914] smbdirect: ib_dev[syz1] renamed to [syz2]
[  224.766176][T11929] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1638'.
[  224.781283][T11929] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1638'.
[  225.279264][T11948] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1643'.
[  225.443551][T11958] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1646'.
[  225.528367][T11956] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.544887][T11956] syzkaller0: mtu less than device minimum
[  225.986441][T11980] netlink: 'syz.1.1653': attribute type 1 has an invalid length.
[  226.053874][T11980] tc_dump_action: action bad kind
[  226.097968][T11980] SET target dimension over the limit!
[  226.117603][T11984] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1654'.
[  226.190402][T11984] netlink: 'syz.2.1654': attribute type 61 has an invalid length.
[  226.344106][T11992] sctp: [Deprecated]: syz.0.1658 (pid 11992) Use of int in max_burst socket option.
[  226.344106][T11992] Use struct sctp_assoc_value instead
[  226.506110][T11993] bridge0: port 3(team0) entered disabled state
[  226.508464][T11993] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.510891][T11993] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.601784][T11997] netlink: 'syz.2.1656': attribute type 2 has an invalid length.
[  226.612062][T11997] netlink: 'syz.2.1656': attribute type 2 has an invalid length.
[  226.704109][T11993] batman_adv: 60X: Interface deactivated: batadv_slave_0
[  227.429065][T12028] block nbd0: not configured, cannot reconfigure
[  228.278164][T12054] __nla_validate_parse: 4 callbacks suppressed
[  228.278208][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1666'.
[  228.467305][T12059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1667'.
[  228.639825][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1668'.
[  228.660128][T12059] 8021q: adding VLAN 0 to HW filter on device bond14
[  228.676408][T12059] bond14 (unregistering): Released all slaves
[  228.736764][T12063] veth0_vlan: left allmulticast mode
[  228.751847][T12063] veth9: left allmulticast mode
[  228.755938][T12063] bond8: left allmulticast mode
[  228.757740][T12063] bond9: left promiscuous mode
[  228.759709][T12063] bond10: left promiscuous mode
[  228.763459][T12063] bridge8: left promiscuous mode
[  228.765280][T12063] vlan5: left allmulticast mode
[  228.766920][T12063] bond10: left allmulticast mode
[  228.768456][T12063] bridge8: left allmulticast mode
[  228.770232][T12063] bond12: left promiscuous mode
[  228.774088][T12063] bond12: left allmulticast mode
[  228.775839][T12063] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  228.778428][T12063] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  228.781484][T12063] veth13: left allmulticast mode
[  228.783791][T12063] vlan7: left promiscuous mode
[  228.785678][T12063] bridge0: left promiscuous mode
[  228.787727][T12063] ip6tnl2: left allmulticast mode
[  228.789917][T12063] ipip1: left promiscuous mode
[  228.834361][T12068] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1669'.
[  229.100456][T12076] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  229.104778][T12076] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  229.168069][T12081] netlink: 'syz.1.1672': attribute type 1 has an invalid length.
[  229.191878][T12081] 8021q: adding VLAN 0 to HW filter on device bond17
[  229.215698][T12081] bond17: (slave veth17): Enslaving as an active interface with a down link
[  229.220344][T12081] netlink: 'syz.1.1672': attribute type 10 has an invalid length.
[  229.223455][T12081] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1672'.
[  229.769454][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'.
[  229.773144][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1673'.
[  229.776678][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1673'.
[  229.788872][ T5671] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  229.793166][ T5671] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  229.803106][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'.
[  229.806696][ T5671] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  229.809991][T12085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1673'.
[  229.814096][ T5671] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  229.933269][T12092] netlink: 'syz.2.1674': attribute type 1 has an invalid length.
[  230.060118][T12092] bond14: entered promiscuous mode
[  230.064353][T12092] 8021q: adding VLAN 0 to HW filter on device bond14
[  230.085670][T12100] smc: net device lo applied user defined pnetid SYZ2
[  230.088848][T12100] smc: net device lo erased user defined pnetid SYZ2
[  230.139070][T12101] bond14: (slave bridge5): making interface the new active one
[  230.142374][T12101] bridge5: entered promiscuous mode
[  230.166363][T12101] bridge5: left promiscuous mode
[  230.518137][T12115] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  231.007567][T12136] syzkaller0: entered promiscuous mode
[  231.011646][T12136] syzkaller0: entered allmulticast mode
[  231.774974][T12154] syzkaller0: entered promiscuous mode
[  231.782117][T12154] syzkaller0: entered allmulticast mode
[  231.795398][T12162] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  234.794886][T12203] syzkaller0: entered promiscuous mode
[  234.796961][T12203] syzkaller0: entered allmulticast mode
[  235.327187][T12218] __nla_validate_parse: 8 callbacks suppressed
[  235.327204][T12218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1707'.
[  236.823780][T12221] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[  236.940144][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1711'.
[  237.024572][T12236] tap0: tun_chr_ioctl cmd 1074025677
[  237.027130][T12236] tap0: linktype set to 773
[  237.046821][T12236] : entered promiscuous mode
[  237.078781][T12238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1714'.
[  237.086216][T12238] syzkaller0: entered promiscuous mode
[  237.088152][T12238] syzkaller0: entered allmulticast mode
[  237.273252][T12242] syzkaller0: entered promiscuous mode
[  237.276087][T12242] syzkaller0: entered allmulticast mode
[  237.404377][T12254] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1720'.
[  237.407294][T12254] veth0: Caught tx_queue_len zero misconfig
[  237.666679][T12276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1724'.
[  237.691495][T12278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1726'.
[  237.728593][T12281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  237.733939][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'.
[  237.734773][T12281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.105518][T12287] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  238.112118][T12287] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.729788][T12297] bond7: left promiscuous mode
[  238.738677][T12297] geneve2: left promiscuous mode
[  238.741575][T12297] bond8: left promiscuous mode
[  238.743506][T12297] bridge4: left promiscuous mode
[  238.745789][T12297] bond9: left allmulticast mode
[  238.764055][T12297] bond0: left promiscuous mode
[  238.768680][T12297] vlan3: left allmulticast mode
[  238.772366][T12297] bond0: left allmulticast mode
[  238.778634][T12297] batman_adv: batadv0: Interface deactivated: gretap2
[  238.786471][T12297] bond14: left promiscuous mode
[  238.793640][ T5671] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  238.796241][T10707] syz0: Port: 1 Link DOWN
[  238.801107][ T5671] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  238.805387][ T5671] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  238.808369][ T5671] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  238.811364][ T5671] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  238.814030][ T5671] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  238.820123][ T5671] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  238.826911][ T5671] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  238.831661][ T5671] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  238.841226][ T5671] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  238.850729][ T5671] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  238.853774][ T5671] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  238.902603][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  238.908969][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  238.924566][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  238.938351][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  238.946389][T12310] IPVS: sh: FWM 3 0x00000003 - no destination available
[  238.958845][T12310] IPVS: sh: FWM 3 0x00000003 - no destination available
[  239.141284][   T33] audit: type=1107 audit(1778661534.282:3): pid=12328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  239.163453][   T33] audit: type=1107 audit(1778661534.312:4): pid=12328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  239.227593][T12335] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1741'.
[  239.600326][T12349] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.608403][T12347] syzkaller0: entered promiscuous mode
[  239.615935][T12347] syzkaller0: entered allmulticast mode
[  239.692991][T12347] tipc: Resetting bearer <eth:syzkaller0>
[  239.728495][T12347] tipc: Disabling bearer <eth:syzkaller0>
[  239.748930][T12354] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1745'.
[  239.777727][T12354] gretap0: entered promiscuous mode
[  239.996339][T12365] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1748'.
[  240.337167][T12374] __nla_validate_parse: 2 callbacks suppressed
[  240.337187][T12374] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1751'.
[  240.348964][T12374] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1751'.
[  240.525249][T12384] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  240.644989][T12387] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1755'.
[  240.648644][T12387] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1755'.
[  240.705739][T12389] netlink: 'syz.1.1756': attribute type 29 has an invalid length.
[  240.712824][T12390] netlink: 'syz.1.1756': attribute type 28 has an invalid length.
[  240.718827][T12389] netlink: 'syz.1.1756': attribute type 29 has an invalid length.
[  240.724720][T12390] netlink: 548 bytes leftover after parsing attributes in process `syz.1.1756'.
[  240.884444][T12400] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1759'.
[  240.891502][T12400] IPVS: length: 24 != 12884902872
[  240.902064][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1759'.
[  240.961968][T12402] IPVS: length: 31 != 24
[  241.051349][T12407] syzkaller1: entered promiscuous mode
[  241.053607][T12407] syzkaller1: entered allmulticast mode
[  241.351740][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1764'.
[  241.457418][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1765'.
[  241.554184][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1765'.
[  241.710000][ T5671] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.713380][ T5671] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.717507][T12433] netlink: 'syz.2.1771': attribute type 13 has an invalid length.
[  241.726227][ T5671] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.729060][T12433] netlink: 'syz.2.1771': attribute type 17 has an invalid length.
[  241.734003][ T5671] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  241.765163][T12433] 8021q: adding VLAN 0 to HW filter on device team0
[  241.769116][T12433] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.771142][T12436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.795581][T12433] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  241.798724][T12433] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  241.804501][T12433] veth1_vlan: left promiscuous mode
[  241.806885][T12433] veth0_vlan: left promiscuous mode
[  241.809032][T12433] veth0_vlan: entered promiscuous mode
[  241.814090][T12433] veth1_vlan: entered promiscuous mode
[  241.818518][T12433] veth1_macvtap: left promiscuous mode
[  241.822192][T12433] veth1_macvtap: entered promiscuous mode
[  241.850246][T12433] 8021q: adding VLAN 0 to HW filter on device bond1
[  241.856796][T12433] 8021q: adding VLAN 0 to HW filter on device bond2
[  241.860498][T12433] 8021q: adding VLAN 0 to HW filter on device bond3
[  241.872540][T12433] 8021q: adding VLAN 0 to HW filter on device bond4
[  241.875670][T12433] 8021q: adding VLAN 0 to HW filter on device bond5
[  241.886131][T12433] 8021q: adding VLAN 0 to HW filter on device bond6
[  241.894754][T12433] 8021q: adding VLAN 0 to HW filter on device bond7
[  241.898505][T12433] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  241.907633][T12433] batman_adv: batadv0: Interface activated: ip6gretap1
[  243.126379][T12433] 8021q: adding VLAN 0 to HW filter on device bond8
[  243.132247][T12433] 8021q: adding VLAN 0 to HW filter on device bond9
[  243.139645][T12433] 8021q: adding VLAN 0 to HW filter on device bond10
[  243.143759][T12433] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  243.164430][ T5818] bridge0: entered promiscuous mode
[  243.188294][ T5792] syz0: Port: 1 Link ACTIVE
[  243.189847][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  243.194497][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.197099][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 35365 - 0
[  243.224331][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  243.230712][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.233755][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 35365 - 0
[  243.237004][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  243.240124][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.244001][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 35365 - 0
[  243.288913][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  243.294215][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.297024][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 35365 - 0
[  243.331235][ T5671] bond9: (slave veth7): link status definitely up, 10000 Mbps full duplex
[  243.342749][ T5671] bond9: (slave veth9): link status definitely up, 10000 Mbps full duplex
[  243.348791][ T5671] bond9: (slave veth7): making interface the new active one
[  243.403785][ T5671] bond9: active interface up!
[  243.426004][T12455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.561847][   T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  243.639625][T12469] x_tables: duplicate underflow at hook 2
[  243.900257][T12490] netlink: 'syz.2.1787': attribute type 10 has an invalid length.
[  244.166909][T12509] netlink: 'syz.2.1789': attribute type 7 has an invalid length.
[  244.170273][T12509] netlink: 'syz.2.1789': attribute type 8 has an invalid length.
[  244.267903][T12512] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  244.372275][T12526] syzkaller1: entered promiscuous mode
[  244.377328][T12526] syzkaller1: entered allmulticast mode
[  244.511834][T12535] ip6_vti0: entered promiscuous mode
[  244.514192][T12535] ip6_vti0: entered allmulticast mode
[  244.579339][T12534] netlink: 'syz.1.1798': attribute type 50 has an invalid length.
[  244.658265][T12551] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.947497][T12592] syzkaller1: entered promiscuous mode
[  244.949766][T12592] syzkaller1: entered allmulticast mode
[  245.007455][T12594] wireguard0: entered promiscuous mode
[  245.063757][T12599] tipc: Resetting bearer <eth:syzkaller0>
[  245.128293][ T5505] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  245.135099][ T5505] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  245.138590][ T5505] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  245.143652][ T5505] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  245.166436][T12601] netlink: 'syz.1.1817': attribute type 1 has an invalid length.
[  245.249057][T12614] bond0: entered promiscuous mode
[  245.251399][T12614] bond_slave_0: entered promiscuous mode
[  245.253932][T12614] bond_slave_1: entered promiscuous mode
[  245.257727][T12614] bond0: left promiscuous mode
[  245.259769][T12614] bond_slave_0: left promiscuous mode
[  245.263224][T12614] bond_slave_1: left promiscuous mode
[  245.343828][T12619] sctp: [Deprecated]: syz.2.1821 (pid 12619) Use of int in max_burst socket option deprecated.
[  245.343828][T12619] Use struct sctp_assoc_value instead
[  245.564999][T12631] __nla_validate_parse: 91 callbacks suppressed
[  245.565010][T12631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1823'.
[  245.573512][T12631] team0: left allmulticast mode
[  245.575020][T12631] team_slave_0: left allmulticast mode
[  245.576712][T12631] team_slave_1: left allmulticast mode
[  245.578437][T12631] bridge3: left allmulticast mode
[  245.580238][T12631] bridge4: left allmulticast mode
[  245.582457][T12631] team0: left promiscuous mode
[  245.584430][T12631] team_slave_0: left promiscuous mode
[  245.586378][T12631] team_slave_1: left promiscuous mode
[  245.588104][T12631] bridge3: left promiscuous mode
[  245.589773][T12631] bridge4: left promiscuous mode
[  245.591816][T12631] bridge0: port 3(team0) entered disabled state
[  245.595379][T12631] bridge_slave_1: left allmulticast mode
[  245.597101][T12631] bridge_slave_1: left promiscuous mode
[  245.599141][T12631] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.605455][T12631] bridge_slave_0: left allmulticast mode
[  245.607233][T12631] bridge_slave_0: left promiscuous mode
[  245.609037][T12631] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.909437][T12633] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  245.987377][T12637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1826'.
[  246.019401][T12639] validate_nla: 3 callbacks suppressed
[  246.019412][T12639] netlink: 'syz.0.1827': attribute type 12 has an invalid length.
[  246.086024][T12643] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1829'.
[  246.089710][T12643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1829'.
[  246.191858][T12652] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.1832'.
[  246.195423][T12652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1832'.
[  246.198934][T12652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1832'.
[  246.207923][T12653] IPv6: Can't replace route, no match found
[  246.323110][T12666] netlink: 'syz.0.1835': attribute type 21 has an invalid length.
[  246.332603][T12666] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1835'.
[  246.345348][T12666] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1835'.
[  246.365788][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'.
[  246.381890][T12668] netlink: 'syz.1.1838': attribute type 21 has an invalid length.
[  246.384502][T12668] netlink: 'syz.1.1838': attribute type 5 has an invalid length.
[  246.525406][T12688] openvswitch: netlink: Missing key (keys=40, expected=80)
[  247.300920][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  247.467140][T12714] netlink: 'syz.1.1851': attribute type 21 has an invalid length.
[  250.467394][T12716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  250.571137][T12744] bridge0: left promiscuous mode
[  250.584227][T12746] __nla_validate_parse: 13 callbacks suppressed
[  250.584240][T12746] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1860'.
[  250.648215][T12758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1861'.
[  250.665865][T12761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1864'.
[  250.675309][T12758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1861'.
[  250.721775][T12758] block nbd0: server does not support multiple connections per device.
[  250.725920][T12758] block nbd0: shutting down sockets
[  250.860700][T12766] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1865'.
[  251.025840][T12775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1867'.
[  251.603778][T12786] syzkaller1: entered promiscuous mode
[  251.608620][T12786] syzkaller1: entered allmulticast mode
[  251.665267][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1868'.
[  251.680133][T12786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1868'.
[  251.686575][T12786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1868'.
[  251.853066][T12792] netlink: 'syz.1.1871': attribute type 3 has an invalid length.
[  252.024747][T12797] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1873'.
[  252.404305][T12815] netlink: 'syz.2.1877': attribute type 29 has an invalid length.
[  252.415369][T12815] netlink: 'syz.2.1877': attribute type 29 has an invalid length.
[  252.425466][T12815] netlink: 'syz.2.1877': attribute type 11 has an invalid length.
[  252.431013][T12815] netlink: 'syz.2.1877': attribute type 5 has an invalid length.
[  252.594110][   T56] block nbd0: Receive control failed (result -32)
[  253.303461][T12868] syzkaller1: entered promiscuous mode
[  253.305605][T12868] syzkaller1: entered allmulticast mode
[  253.537595][ T5904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.541317][ T5904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.632629][T12877] bond16: option lacp_active: invalid value (8)
[  253.637853][T12877] bond16 (unregistering): Released all slaves
[  253.678513][T12883] x_tables: duplicate underflow at hook 2
[  253.857376][T12890] ipt_rpfilter: unknown options
[  253.871563][T12892] netem: change failed
[  253.884431][T12892] tipc: Resetting bearer <eth:syzkaller0>
[  254.294306][T12933] tipc: Resetting bearer <eth:syzkaller0>
[  254.661251][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  254.952960][T12964] netlink: 'syz.0.1919': attribute type 1 has an invalid length.
[  255.188185][T12979] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  256.139239][T12982] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  256.267224][T12987] netlink: 'syz.1.1928': attribute type 12 has an invalid length.
[  256.272990][ T5792] syz0: Port: 1 Link DOWN
[  256.273036][ T5671] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  256.280098][ T5671] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.291076][ T5671] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 35365 - 0
[  256.294578][ T5671] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  256.297760][ T5671] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.308752][ T5671] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 35365 - 0
[  256.332869][T12991] 8021q: adding VLAN 0 to HW filter on device bond19
[  256.348731][ T5671] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  256.355627][ T5671] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.362110][ T5671] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 35365 - 0
[  256.369060][ T5671] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  256.382379][ T5671] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.391010][ T5671] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 35365 - 0
[  256.421242][T12999] __nla_validate_parse: 12 callbacks suppressed
[  256.421260][T12999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1932'.
[  256.427457][T13000] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1930'.
[  256.445403][T12997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1931'.
[  256.524603][T13011] bond0: Caught tx_queue_len zero misconfig
[  256.526937][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'.
[  256.573212][T13011] batadv_slave_0: entered promiscuous mode
[  256.662981][T13010] batadv_slave_0: left promiscuous mode
[  256.667592][T13024] netlink: 'syz.0.1937': attribute type 1 has an invalid length.
[  256.711958][T13024] bond20: entered promiscuous mode
[  256.714557][T13024] 8021q: adding VLAN 0 to HW filter on device bond20
[  256.726563][T13024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1937'.
[  256.738374][T13024] bond20: entered allmulticast mode
[  256.754293][T13024] bond20: (slave bridge11): making interface the new active one
[  256.757314][T13024] bridge11: entered promiscuous mode
[  256.759621][T13024] bridge11: entered allmulticast mode
[  256.766086][T13024] bond20: (slave bridge11): Enslaving as an active interface with an up link
[  256.869104][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1940'.
[  256.944345][T13035] vlan3: entered promiscuous mode
[  256.946436][T13035] geneve1: entered promiscuous mode
[  256.948778][T13035] vlan3: entered allmulticast mode
[  256.951028][T13035] geneve1: entered allmulticast mode
[  257.014770][T13043] syzkaller1: entered promiscuous mode
[  257.017430][T13043] syzkaller1: entered allmulticast mode
[  257.217868][T13052] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1942'.
[  257.803117][T13063] netlink: 'syz.1.1947': attribute type 4 has an invalid length.
[  257.809161][T13063] netlink: 'syz.1.1947': attribute type 4 has an invalid length.
[  257.818227][T13063] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  258.012329][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1950'.
[  258.237594][T13083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1952'.
[  258.362701][T13089] can: request_module (can-proto-0) failed.
[  258.473432][T13093] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.1954'.
[  258.718180][T13101] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  258.722329][T13101] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  258.976717][T13118] IPVS: length: 81 != 24
[  259.172926][T13125] 8021q: adding VLAN 0 to HW filter on device bond21
[  259.303469][T13135] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  259.305996][T13135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.413582][T13139] syzkaller1: entered promiscuous mode
[  259.422392][T13139] syzkaller1: entered allmulticast mode
[  259.482540][T13142] netlink: 'syz.0.1968': attribute type 1 has an invalid length.
[  259.638809][T13164] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.818925][T13178] sctp: [Deprecated]: syz.2.1978 (pid 13178) Use of struct sctp_assoc_value in delayed_ack socket option.
[  259.818925][T13178] Use struct sctp_sack_info instead
[  259.826823][T13178] sctp: [Deprecated]: syz.2.1978 (pid 13178) Use of struct sctp_assoc_value in delayed_ack socket option.
[  259.826823][T13178] Use struct sctp_sack_info instead
[  259.845653][T13178] syzkaller1: entered promiscuous mode
[  259.847840][T13178] syzkaller1: entered allmulticast mode
[  260.685715][T13219] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  260.747658][T13225] ip6tnl5: entered promiscuous mode
[  260.892470][T13233] syzkaller0: entered promiscuous mode
[  260.894435][T13233] syzkaller0: entered allmulticast mode
[  261.052895][T13240] netlink: 'syz.2.1994': attribute type 61 has an invalid length.
[  261.066715][T13240] netlink: 'syz.2.1994': attribute type 8 has an invalid length.
[  261.876618][T13267] team0: No ports can be present during mode change
[  261.916015][T13269] netlink: 'syz.1.2004': attribute type 2 has an invalid length.
[  261.952449][T13271] xt_CT: You must specify a L4 protocol and not use inversions on it
[  261.989406][T13273] __nla_validate_parse: 7 callbacks suppressed
[  261.989419][T13273] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2006'.
[  262.075258][T13276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2007'.
[  262.253408][T13287] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.2009'.
[  262.499957][T13300] bond18 (unregistering): Released all slaves
[  262.529948][T13301] bond18 (unregistering): Released all slaves
[  262.645825][T13317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2017'.
[  262.675909][T13317] bond18: entered promiscuous mode
[  262.678414][T13317] 8021q: adding VLAN 0 to HW filter on device bond18
[  262.758271][T13327] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  262.763107][T13327] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  262.822161][ T5904] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  262.829943][T13328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  263.542768][T13340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2022'.
[  263.597094][T13343] bond16: (slave macsec0): Error -34 calling dev_set_mtu
[  263.723279][T13349] bond17: option lp_interval: invalid value (0)
[  263.725749][T13349] bond17: option lp_interval: allowed values 1 - 2147483647
[  263.729156][T13349] bond17 (unregistering): Released all slaves
[  263.819599][T13365] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2028'.
[  263.836961][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2029'.
[  263.922509][T13373] bond23 (unregistering): Released all slaves
[  264.306379][T13398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2037'.
[  264.320369][T13400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2038'.
[  264.321570][T13398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2037'.
[  264.401642][T13400] veth17: entered allmulticast mode
[  264.408709][T13400] bond17: (slave veth17): Enslaving as an active interface with an up link
[  264.477741][T13405] bridge12: port 1(veth19) entered blocking state
[  264.479911][T13405] bridge12: port 1(veth19) entered disabled state
[  264.483884][T13405] veth19: entered allmulticast mode
[  264.486655][T13405] veth19: entered promiscuous mode
[  264.492536][T13405] bridge12: port 2(veth0_to_bond) entered blocking state
[  264.494925][T13405] bridge12: port 2(veth0_to_bond) entered disabled state
[  264.497236][T13405] veth0_to_bond: entered allmulticast mode
[  264.500031][T13405] veth0_to_bond: entered promiscuous mode
[  264.523538][T13405] bridge12: port 3(veth21) entered blocking state
[  264.526445][T13405] bridge12: port 3(veth21) entered disabled state
[  264.529243][T13405] veth21: entered allmulticast mode
[  264.533757][T13405] veth21: entered promiscuous mode
[  264.543270][T13407] bond17 (unregistering): (slave veth17): Releasing backup interface
[  264.550216][T13407] bond17 (unregistering): Released all slaves
[  265.339178][T13438] netlink: 'syz.1.2046': attribute type 1 has an invalid length.
[  265.357101][T13439] netlink: 'syz.1.2046': attribute type 10 has an invalid length.
[  265.371755][T13438] bond19: (slave veth19): Enslaving as an active interface with a down link
[  265.417698][T13444] netlink: 'syz.2.2048': attribute type 1 has an invalid length.
[  265.434905][T13444] 8021q: adding VLAN 0 to HW filter on device bond17
[  265.497163][T13451] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  265.500962][T13451] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  265.606332][T13460] netlink: 'syz.1.2053': attribute type 11 has an invalid length.
[  265.609536][T13460] netlink: 'syz.1.2053': attribute type 5 has an invalid length.
[  265.768978][T13476] tipc: Resetting bearer <eth:syzkaller0>
[  266.775361][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.780410][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.856128][T13551] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  266.928360][T13551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  267.273644][T13559] __nla_validate_parse: 15 callbacks suppressed
[  267.273663][T13559] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2077'.
[  267.413120][T13567] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2080'.
[  267.443696][T13569] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2081'.
[  267.749853][T13575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2083'.
[  267.752967][T13575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2083'.
[  267.757996][T13575] netlink: 'syz.1.2083': attribute type 3 has an invalid length.
[  267.825481][T13579] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2085'.
[  267.831363][T13579] netlink: 'syz.1.2085': attribute type 1 has an invalid length.
[  267.834516][T13579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2085'.
[  267.954407][T13584] syzkaller1: entered promiscuous mode
[  267.956281][T13584] syzkaller1: entered allmulticast mode
[  268.078858][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2088'.
[  268.082015][T13586] openvswitch: netlink: Invalid VLAN frame
[  268.169512][T13600] dvmrp0: entered allmulticast mode
[  268.340135][T13612] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2094'.
[  268.361806][T13616] netlink: 87 bytes leftover after parsing attributes in process `syz.1.2095'.
[  268.863427][T13656] tipc: Resetting bearer <eth:syzkaller0>
[  268.873014][T13656] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  268.875195][T13656] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  268.881261][T13656] vlan2: left allmulticast mode
[  268.883736][T13656] bond18: left allmulticast mode
[  268.901281][T13656] bond20: left promiscuous mode
[  268.903115][T13656] bridge11: left promiscuous mode
[  268.904853][T13656] bond20: left allmulticast mode
[  268.906389][T13656] bridge11: left allmulticast mode
[  268.924271][T13656] vlan3: left promiscuous mode
[  268.928216][T13656] geneve1: left promiscuous mode
[  268.931092][T13656] vlan3: left allmulticast mode
[  268.932690][T13656] geneve1: left allmulticast mode
[  268.981327][T13664] netlink: 'syz.0.2106': attribute type 2 has an invalid length.
[  268.981521][T13665] netlink: 'syz.0.2106': attribute type 2 has an invalid length.
[  268.983773][T13664] netlink: 'syz.0.2106': attribute type 8 has an invalid length.
[  268.986205][T13665] netlink: 'syz.0.2106': attribute type 8 has an invalid length.
[  269.039416][T13667] bond23: option ad_user_port_key: invalid value (65535)
[  269.041828][T13667] bond23: option ad_user_port_key: allowed values 0 - 1023
[  269.045317][T13667] bond23 (unregistering): Released all slaves
[  269.228452][T13673] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  269.230787][T13673] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  270.156057][T13705] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  270.287620][T13715] bond23: option mode: invalid value (254)
[  270.294751][T13715] bond23 (unregistering): Released all slaves
[  270.323602][T13713] vti0: entered promiscuous mode
[  270.376489][T13718] validate_nla: 3 callbacks suppressed
[  270.376544][T13718] netlink: 'syz.2.2119': attribute type 4 has an invalid length.
[  270.448119][T13727] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  270.458313][T13727] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  270.462448][T13727] tipc: Resetting bearer <eth:syzkaller0>
[  270.491716][T13732] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  270.498619][T13732] pim6reg1: entered promiscuous mode
[  270.501932][T13732] pim6reg1: entered allmulticast mode
[  270.503917][T13735] openvswitch: netlink: nsh attr 14384 is out of range max 3
[  270.507176][T13735] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.665250][T13748] netlink: 'syz.0.2130': attribute type 1 has an invalid length.
[  270.691339][T13748] 8021q: adding VLAN 0 to HW filter on device bond23
[  270.926279][T13766] netlink: 'syz.0.2136': attribute type 11 has an invalid length.
[  271.017639][T13775] syzkaller1: entered promiscuous mode
[  271.019752][T13775] syzkaller1: entered allmulticast mode
[  271.106048][T13780] bond0: (slave vlan4): Opening slave failed
[  271.139366][T13775] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  271.498255][T13801] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  271.505053][T13801] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  271.764902][T13824] TCP: TCP_TX_DELAY enabled
[  271.843625][T13828] bridge17: entered promiscuous mode
[  271.845584][T13828] bridge17: entered allmulticast mode
[  271.850323][T13828] team0: Port device bridge17 added
[  271.859233][   T54] Bluetooth: hci2: link tx timeout
[  271.866557][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  271.882235][T13828] bridge18: entered promiscuous mode
[  271.884094][T13828] bridge18: entered allmulticast mode
[  271.946729][   T54] Bluetooth: hci2: link tx timeout
[  271.950349][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  271.982707][   T54] Bluetooth: hci2: link tx timeout
[  271.987022][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  272.028219][T13843] syzkaller0: entered promiscuous mode
[  272.039422][T13843] syzkaller0: entered allmulticast mode
[  272.344513][   T54] Bluetooth: hci2: link tx timeout
[  272.346707][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  272.460910][   T54] Bluetooth: hci2: link tx timeout
[  272.463032][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  272.540455][T13871] netlink: 'syz.2.2166': attribute type 1 has an invalid length.
[  272.559479][T13871] __nla_validate_parse: 29 callbacks suppressed
[  272.559492][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2166'.
[  272.561954][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2173'.
[  272.567356][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2173'.
[  272.693283][T13900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2175'.
[  272.701298][T13900] netlink: 'syz.1.2175': attribute type 1 has an invalid length.
[  272.897468][   T54] Bluetooth: hci2: link tx timeout
[  272.899612][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  273.019775][T13927] batadv_slave_1: entered allmulticast mode
[  273.054078][T13929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2183'.
[  273.054099][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2183'.
[  273.385703][   T54] Bluetooth: hci2: link tx timeout
[  273.387400][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  273.389982][   T54] Bluetooth: hci2: link tx timeout
[  273.391794][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  273.503555][   T54] Bluetooth: hci2: link tx timeout
[  273.505700][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  273.940975][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  275.853842][T13916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  276.010178][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2186'.
[  276.018970][T13954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2187'.
[  276.073945][T13959] netlink: 'syz.1.2188': attribute type 3 has an invalid length.
[  276.080889][T13959] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2188'.
[  276.082784][T13961] syzkaller0: entered promiscuous mode
[  276.086231][T13961] syzkaller0: entered allmulticast mode
[  276.350045][T13981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2191'.
[  276.515408][T13981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  276.612026][T14017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  276.652339][T14017] syzkaller0: entered promiscuous mode
[  276.654678][T14017] syzkaller0: entered allmulticast mode
[  276.658535][T14017] tipc: Resetting bearer <eth:syzkaller0>
[  276.669376][T14017] netlink: 'syz.2.2202': attribute type 1 has an invalid length.
[  276.694691][T14017] bond18: entered promiscuous mode
[  276.697362][T14017] 8021q: adding VLAN 0 to HW filter on device bond18
[  276.709281][T14016] tipc: Resetting bearer <eth:syzkaller0>
[  276.757395][T14024] netlink: 'syz.0.2205': attribute type 1 has an invalid length.
[  279.141456][ T5904] wlan1: Trigger new scan to find an IBSS to join
[  279.729094][T14016] tipc: Disabling bearer <eth:syzkaller0>
[  279.734635][T14024] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR
[  279.749302][T14025] veth23: entered allmulticast mode
[  279.820395][T14037] netlink: 'syz.2.2208': attribute type 1 has an invalid length.
[  279.862949][T14042] __nla_validate_parse: 1 callbacks suppressed
[  279.862963][T14042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2211'.
[  279.867993][T14042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2211'.
[  279.876904][T14044] netlink: 'syz.1.2209': attribute type 2 has an invalid length.
[  279.879930][T14044] netlink: 'syz.1.2209': attribute type 1 has an invalid length.
[  279.883239][T14045] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2210'.
[  279.888541][T14044] syzkaller1: entered promiscuous mode
[  279.890515][T14044] syzkaller1: entered allmulticast mode
[  279.896300][T14044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2209'.
[  279.956247][T14048] netlink: 'syz.0.2212': attribute type 1 has an invalid length.
[  279.959134][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2212'.
[  279.966236][T14050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  279.972422][T14050] syzkaller0: entered promiscuous mode
[  279.974232][T14050] syzkaller0: entered allmulticast mode
[  279.981091][T14049] tipc: Resetting bearer <eth:syzkaller0>
[  280.011629][T14049] tipc: Disabling bearer <eth:syzkaller0>
[  280.033368][T14052] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2214'.
[  280.065018][T14054] syzkaller1: entered promiscuous mode
[  280.066749][T14054] syzkaller1: entered allmulticast mode
[  280.398801][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2221'.
[  280.468299][T14080] netlink: 'syz.0.2222': attribute type 3 has an invalid length.
[  280.472360][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'.
[  280.618066][T14087] netlink: 'syz.1.2224': attribute type 1 has an invalid length.
[  280.639631][T14088] netlink: 'syz.1.2224': attribute type 1 has an invalid length.
[  280.660726][T14080] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  280.691029][T14087] bond20: (slave vxcan2): The slave device specified does not support setting the MAC address
[  280.694594][T14087] bond20: (slave vxcan2): Error -95 calling set_mac_address
[  280.772362][T14087] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2224'.
[  280.790913][T14088] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.2224'.
[  280.843028][T14087] bond20: (slave gretap3): making interface the new active one
[  280.852848][T14087] bond20: (slave gretap3): Enslaving as an active interface with an up link
[  281.301954][T14123] ip6erspan1: entered allmulticast mode
[  281.468946][T14126] bond21: entered allmulticast mode
[  281.478995][T14132] bond0: entered promiscuous mode
[  281.487329][T14132] bond0: left promiscuous mode
[  281.608806][T14139] syzkaller0: entered promiscuous mode
[  281.613499][T14139] syzkaller0: entered allmulticast mode
[  282.105050][ T5904] wlan1: Trigger new scan to find an IBSS to join
[  282.273532][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  283.460091][T14164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  283.464640][T14164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  283.468610][T14164] bond0 (unregistering): Released all slaves
[  283.474708][T14163] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  283.547152][T14179] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check.
[  283.777654][T14167] validate_nla: 5 callbacks suppressed
[  283.777665][T14167] netlink: 'syz.2.2246': attribute type 1 has an invalid length.
[  283.902733][T14205] openvswitch: netlink: Duplicate or invalid key (type 0).
[  283.905567][T14205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.128828][T14208] openvswitch: netlink: IP tunnel dst address not specified
[  284.135115][T14208] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.161673][T14210] netlink: 'syz.1.2255': attribute type 1 has an invalid length.
[  284.556350][T14238] netlink: 'syz.0.2263': attribute type 1 has an invalid length.
[  284.659058][T14247] bridge0: left promiscuous mode
[  284.667836][T14247] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.729937][T14247] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  285.140952][ T5904] wlan1: Trigger new scan to find an IBSS to join
[  285.555930][T14290] bond20: invalid ARP target 0.0.0.0 specified for addition
[  285.569635][T14290] bond20: option arp_ip_target: invalid value (0)
[  285.599978][T14290] bond20 (unregistering): Released all slaves
[  286.734016][   T52] wlan1: Creating new IBSS network, BSSID 92:b9:7a:7d:64:17
[  286.753370][T14337] __nla_validate_parse: 22 callbacks suppressed
[  286.753391][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2277'.
[  286.882956][T14351] netlink: 'syz.1.2283': attribute type 1 has an invalid length.
[  286.888381][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2283'.
[  286.897080][T14351] netlink: 'syz.1.2283': attribute type 1 has an invalid length.
[  286.953496][T14353] syzkaller1: entered promiscuous mode
[  286.955657][T14353] syzkaller1: entered allmulticast mode
[  287.046592][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'.
[  287.251529][T14372] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  287.264359][T14372] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  287.289109][T14377] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  287.318132][T14382] xt_limit: Overflow, try lower: 324382443/0
[  287.547605][T14401] netlink: 'syz.0.2295': attribute type 10 has an invalid length.
[  287.587465][T14403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2296'.
[  287.708860][T14414] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2298'.
[  290.637477][T14408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  290.695167][T14426] netlink: 'syz.0.2302': attribute type 1 has an invalid length.
[  290.699666][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'.
[  290.765563][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2303'.
[  290.831208][T14438] netlink: 'syz.0.2306': attribute type 29 has an invalid length.
[  290.840314][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'.
[  290.846556][T14438] netlink: 'syz.0.2306': attribute type 29 has an invalid length.
[  290.850081][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2306'.
[  290.853394][T14444] netlink: 'syz.2.2305': attribute type 29 has an invalid length.
[  290.855774][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2305'.
[  290.861137][T14438] netlink: 'syz.0.2306': attribute type 29 has an invalid length.
[  290.864192][T14438] netlink: 'syz.0.2306': attribute type 29 has an invalid length.
[  290.867171][T14438] netlink: 'syz.0.2306': attribute type 29 has an invalid length.
[  290.869770][T14438] netlink: 'syz.0.2306': attribute type 29 has an invalid length.
[  290.872963][T14436] netlink: 'syz.2.2305': attribute type 29 has an invalid length.
[  290.876484][T14438] netlink: 'syz.0.2306': attribute type 29 has an invalid length.
[  290.911004][T14438] hsr0: entered promiscuous mode
[  290.916939][T14437] hsr0: left promiscuous mode
[  291.189909][T14469] IPv6: Can't replace route, no match found
[  291.194412][T14469] IPv6: Can't replace route, no match found
[  291.240163][T14472] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  291.240163][T14472] Please contact the netfilter-devel mailing list or update your nftables rules.
[  291.563128][T14489] syzkaller0: entered promiscuous mode
[  291.564973][T14489] syzkaller0: entered allmulticast mode
[  291.932281][T14504] __nla_validate_parse: 86 callbacks suppressed
[  291.932295][T14504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2328'.
[  291.974091][T14510] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.976623][T14510] syzkaller0: entered promiscuous mode
[  291.978390][T14510] syzkaller0: entered allmulticast mode
[  292.001208][T14510] tipc: Resetting bearer <eth:syzkaller0>
[  292.007768][T14509] tipc: Resetting bearer <eth:syzkaller0>
[  292.033865][T14509] tipc: Disabling bearer <eth:syzkaller0>
[  292.197742][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2333'.
[  292.442987][T14536] syzkaller1: entered promiscuous mode
[  292.444819][T14536] syzkaller1: entered allmulticast mode
[  292.489090][T14538] netlink: 'syz.2.2339': attribute type 11 has an invalid length.
[  292.493671][T14538] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.2339'.
[  292.620165][T14543] bond0: (slave vxcan2): The slave device specified does not support setting the MAC address
[  292.624752][T14543] bond0: (slave vxcan2): Error -95 calling set_mac_address
[  292.655774][T14544] bond0: (slave vxcan2): The slave device specified does not support setting the MAC address
[  292.660355][T14544] bond0: (slave vxcan2): Error -95 calling set_mac_address
[  292.873421][T14556] 8021q: adding VLAN 0 to HW filter on device team0
[  292.883777][T14556] 8021q: adding VLAN 0 to HW filter on device 60X
[  292.901644][T14556] batman_adv: 60X: Interface activated: batadv_slave_0
[  292.907008][T14556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  292.911425][T14556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  292.916671][T14556] veth1_vlan: left promiscuous mode
[  292.919679][T14556] veth0_vlan: left promiscuous mode
[  292.922763][T14556] veth0_vlan: entered promiscuous mode
[  292.928899][T14556] veth1_vlan: entered promiscuous mode
[  292.935138][T14556] veth1_macvtap: left promiscuous mode
[  292.937578][T14556] veth0_macvtap: left promiscuous mode
[  292.940513][T14556] veth0_macvtap: entered promiscuous mode
[  292.944462][T14556] veth1_macvtap: entered promiscuous mode
[  292.959623][T14556] 8021q: adding VLAN 0 to HW filter on device bond1
[  292.962655][T14556] 8021q: adding VLAN 0 to HW filter on device bond2
[  292.965525][T14556] 8021q: adding VLAN 0 to HW filter on device bond3
[  292.972197][T14556] 8021q: adding VLAN 0 to HW filter on device bond4
[  292.976422][T14556] 8021q: adding VLAN 0 to HW filter on device bond5
[  292.988394][T14556] 8021q: adding VLAN 0 to HW filter on device bond6
[  293.010260][T14556] 8021q: adding VLAN 0 to HW filter on device bond7
[  293.016395][T14556] 8021q: adding VLAN 0 to HW filter on device bond8
[  293.020188][T14556] 8021q: adding VLAN 0 to HW filter on device bond9
[  293.026967][T14556] 8021q: adding VLAN 0 to HW filter on device bond10
[  293.034119][T14556] 8021q: adding VLAN 0 to HW filter on device bond11
[  293.037678][T14556] 8021q: adding VLAN 0 to HW filter on device bond12
[  293.045739][T14556] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  293.095506][ T5671] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.098720][ T5671] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  293.102364][T14559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2344'.
[  293.106126][ T5671] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.109378][ T5671] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  293.160092][T14565] bond24: (slave vxcan1): The slave device specified does not support setting the MAC address
[  293.172364][T14565] bond24: (slave vxcan1): Error -95 calling set_mac_address
[  293.222544][T14559] bond24: (slave bridge13): Enslaving as an active interface with a down link
[  293.226597][ T5671] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.230303][ T5671] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  293.235428][ T5671] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.239222][ T5671] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  293.249123][T14562] ip6gretap4: entered promiscuous mode
[  293.254958][T14562] ip6gretap4: entered allmulticast mode
[  293.260420][T14562] bond24: (slave ip6gretap4): making interface the new active one
[  293.264642][T14562] bond24: (slave ip6gretap4): Enslaving as an active interface with an up link
[  293.296449][T14571] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  293.299500][T14571] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  293.339646][T14571] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) !
[  293.377627][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'.
[  293.856262][T14605] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2355'.
[  293.889861][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'.
[  293.893325][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'.
[  293.896311][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'.
[  293.899648][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2356'.
[  295.058246][T14677] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.387384][T14695] block nbd0: reconnected socket
[  295.389676][T14695] nbd: socks must be embedded in a SOCK_ITEM attr
[  295.433633][T14697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  295.455475][   T55] block nbd0: Receive control failed (result -32)
[  295.567086][T14706] veth0_vlan: entered allmulticast mode
[  296.414467][T14712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  297.114182][T14744] syzkaller1: entered promiscuous mode
[  297.116326][T14744] syzkaller1: entered allmulticast mode
[  297.274472][T14750] validate_nla: 80 callbacks suppressed
[  297.274484][T14750] netlink: 'syz.0.2398': attribute type 1 has an invalid length.
[  297.301077][T14750] bond25: entered promiscuous mode
[  297.306451][T14750] 8021q: adding VLAN 0 to HW filter on device bond25
[  297.338849][T14752] bond25: (slave bridge14): making interface the new active one
[  297.341966][T14752] bridge14: entered promiscuous mode
[  297.344634][T14752] bond25: (slave bridge14): Enslaving as an active interface with an up link
[  297.368606][T14752] bond25: (slave bridge15): Enslaving as a backup interface with an up link
[  297.379466][T14752] bond25: (slave bridge16): Enslaving as a backup interface with an up link
[  297.404999][T14752] bond25: (slave bridge17): Enslaving as a backup interface with an up link
[  297.417045][T14752] bond25: (slave bridge18): Enslaving as a backup interface with an up link
[  297.438247][T14752] bond25: (slave bridge19): Enslaving as a backup interface with an up link
[  297.459000][T14752] bond25: (slave bridge20): Enslaving as a backup interface with an up link
[  297.471087][T14752] bond25: (slave bridge21): Enslaving as a backup interface with an up link
[  297.482591][T14752] bond25: (slave bridge22): Enslaving as a backup interface with an up link
[  297.509618][T14752] bond25: (slave bridge23): Enslaving as a backup interface with an up link
[  297.528214][T14752] bond25: (slave bridge24): Enslaving as a backup interface with an up link
[  297.546223][T14752] bond25: (slave bridge25): Enslaving as a backup interface with an up link
[  297.563973][T14752] bond25: (slave bridge26): Enslaving as a backup interface with an up link
[  297.578958][T14752] bond25: (slave bridge27): Enslaving as a backup interface with an up link
[  297.605974][T14752] bond25: (slave bridge28): Enslaving as a backup interface with an up link
[  297.617534][T14752] bond25: (slave bridge29): Enslaving as a backup interface with an up link
[  297.629678][T14752] bond25: (slave bridge30): Enslaving as a backup interface with an up link
[  297.641737][T14752] bond25: (slave bridge31): Enslaving as a backup interface with an up link
[  297.655095][T14752] bond25: (slave bridge32): Enslaving as a backup interface with an up link
[  297.667073][T14752] bond25: (slave bridge33): Enslaving as a backup interface with an up link
[  297.677754][T14752] bond25: (slave bridge34): Enslaving as a backup interface with an up link
[  297.689002][T14752] bond25: (slave bridge35): Enslaving as a backup interface with an up link
[  297.712905][T14752] bond25: (slave bridge36): Enslaving as a backup interface with an up link
[  297.731613][T14752] bond25: (slave bridge37): Enslaving as a backup interface with an up link
[  297.744133][T14752] bond25: (slave bridge38): Enslaving as a backup interface with an up link
[  297.765722][T14752] bond25: (slave bridge39): Enslaving as a backup interface with an up link
[  297.778398][T14752] bond25: (slave bridge40): Enslaving as a backup interface with an up link
[  297.801856][T14752] bond25: (slave bridge41): Enslaving as a backup interface with an up link
[  297.827203][T14752] bond25: (slave bridge42): Enslaving as a backup interface with an up link
[  297.843031][T14752] bond25: (slave bridge43): Enslaving as a backup interface with an up link
[  297.854814][T14752] bond25: (slave bridge44): Enslaving as a backup interface with an up link
[  297.867594][T14752] bond25: (slave bridge45): Enslaving as a backup interface with an up link
[  297.891353][T14752] bond25: (slave bridge46): Enslaving as a backup interface with an up link
[  297.911213][T14752] bond25: (slave bridge47): Enslaving as a backup interface with an up link
[  297.931997][T14752] bond25: (slave bridge48): Enslaving as a backup interface with an up link
[  297.947543][T14752] bond25: (slave bridge49): Enslaving as a backup interface with an up link
[  297.952063][T14765] netlink: 'syz.2.2400': attribute type 1 has an invalid length.
[  297.960633][T14765] __nla_validate_parse: 18 callbacks suppressed
[  297.960793][T14765] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2400'.
[  297.966335][T14752] bond25: (slave bridge50): Enslaving as a backup interface with an up link
[  297.979001][T14752] bond25: (slave bridge51): Enslaving as a backup interface with an up link
[  297.990037][T14752] bond25: (slave bridge52): Enslaving as a backup interface with an up link
[  298.072013][T14752] bond25: (slave bridge53): Enslaving as a backup interface with an up link
[  298.144526][T14752] bond25: (slave bridge54): Enslaving as a backup interface with an up link
[  298.382939][T14782] syzkaller1: entered promiscuous mode
[  298.384815][T14782] syzkaller1: entered allmulticast mode
[  298.386799][T14783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2404'.
[  298.508152][T14785] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  298.554557][T14787] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2407'.
[  298.744252][T14797] netlink: 'syz.0.2409': attribute type 1 has an invalid length.
[  298.747879][T14797] netlink: 'syz.0.2409': attribute type 2 has an invalid length.
[  298.758390][T14797] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2409'.
[  298.890899][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'.
[  298.908700][T14801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'.
[  298.998171][T14806] netlink: 'syz.0.2412': attribute type 1 has an invalid length.
[  299.069835][T14810] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2413'.
[  299.449613][T14823] IPVS: set_ctl: invalid protocol: 0 172.30.1.2:20002
[  299.487641][T14826] netlink: 'syz.1.2420': attribute type 1 has an invalid length.
[  299.503556][T14826] bond22: entered promiscuous mode
[  299.505559][T14826] bond22: entered allmulticast mode
[  299.507496][T14826] 8021q: adding VLAN 0 to HW filter on device bond22
[  299.518041][T14826] macvlan0: entered promiscuous mode
[  299.519768][T14826] macvlan0: entered allmulticast mode
[  299.524458][T14826] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  299.540488][T14827] syzkaller1: entered promiscuous mode
[  299.542917][T14827] syzkaller1: entered allmulticast mode
[  299.682704][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2423'.
[  299.725643][T14843] hm3): entered promiscuous mode
[  299.762959][T14850] netlink: 'syz.0.2426': attribute type 29 has an invalid length.
[  299.819434][T14853] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2427'.
[  300.154863][T14863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2432'.
[  300.178030][T14869] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  300.243409][T14878] siw: device registration error -23
[  300.532894][T14889] syzkaller1: entered promiscuous mode
[  300.535217][T14889] syzkaller1: entered allmulticast mode
[  301.197318][T14904] tipc: Resetting bearer <eth:syzkaller0>
[  301.329074][T14913] : Caught tx_queue_len zero misconfig
[  301.512865][T14917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  301.615956][T14929] sctp: [Deprecated]: syz.0.2449 (pid 14929) Use of int in max_burst socket option deprecated.
[  301.615956][T14929] Use struct sctp_assoc_value instead
[  301.692883][T14936] netlink: 'syz.1.2450': attribute type 8 has an invalid length.
[  301.744349][T14938] openvswitch: netlink: Flow actions attr not present in new flow.
[  302.104998][T14952] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  302.108187][T14952] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  302.276823][T14965] bridge0: port 1(erspan0) entered blocking state
[  302.279800][T14965] bridge0: port 1(erspan0) entered disabled state
[  302.282534][T14965] erspan0: entered allmulticast mode
[  302.285329][T14965] erspan0: entered promiscuous mode
[  302.287283][T14965] bridge0: port 1(erspan0) entered blocking state
[  302.289640][T14965] bridge0: port 1(erspan0) entered forwarding state
[  302.340477][T14968] tipc: Resetting bearer <eth:syzkaller0>
[  302.427535][T14969] syzkaller1: entered promiscuous mode
[  302.429945][T14969] syzkaller1: entered allmulticast mode
[  302.798778][T15005] netlink: 'syz.1.2468': attribute type 1 has an invalid length.
[  302.812388][T15012] 8021q: VLANs not supported on ip6tnl0
[  302.859602][T15015] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  302.919766][T15017] IPVS: length: 35 != 12583800
[  302.930849][T15017] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0
[  302.934431][T15017] ip6gretap0: entered allmulticast mode
[  303.059682][T15021] __nla_validate_parse: 12 callbacks suppressed
[  303.059699][T15021] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2472'.
[  303.117660][T15032] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  303.614972][T15043] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2477'.
[  306.442008][T15035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  306.506595][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2480'.
[  306.554387][T15073] netlink: 'syz.1.2483': attribute type 1 has an invalid length.
[  306.557458][T15072] netlink: 'syz.1.2483': attribute type 1 has an invalid length.
[  306.578211][T15072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2483'.
[  306.611540][T15078] netlink: 'syz.1.2484': attribute type 1 has an invalid length.
[  306.614172][T15078] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2484'.
[  306.630190][T15080] netlink: 'syz.2.2485': attribute type 2 has an invalid length.
[  306.634104][T15080] netlink: 'syz.2.2485': attribute type 2 has an invalid length.
[  306.671101][T15085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2487'.
[  306.863842][T15103] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2490'.
[  308.791488][T15115] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2493'.
[  308.834826][T15117] nbd: nbd1 already in use
[  308.836565][T15117] block nbd0: NBD_DISCONNECT
[  308.838190][T15117] block nbd0: Send disconnect failed -32
[  308.840026][T15117] block nbd0: shutting down sockets
[  308.857086][T15117] dvmrp6: left allmulticast mode
[  309.028964][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2501'.
[  309.034711][T15142] block nbd0: Unsupported socket: should be TCP or UNIX.
[  309.064946][T15144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2502'.
[  309.073876][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2503'.
[  309.106585][T15146] ipvlan0: entered allmulticast mode
[  309.110326][T15146] gretap0: entered allmulticast mode
[  309.263689][T15162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'.
[  309.272810][T15162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2507'.
[  309.311484][ T5505] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  309.314998][T15162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2507'.
[  309.318056][ T5505] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  309.326758][T15162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2507'.
[  309.329745][ T5505] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  309.332715][ T5505] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  309.341523][T15166] syzkaller1: entered promiscuous mode
[  309.343310][T15166] syzkaller1: entered allmulticast mode
[  309.346294][T15162] tipc: New replicast peer: 255.255.255.255
[  309.348731][T15162] tipc: Enabled bearer <udp:syz2>, priority 10
[  309.449162][T15168] tipc: Resetting bearer <eth:syzkaller0>
[  309.468329][T15171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2510'.
[  309.474132][T15171] netlink: 'syz.0.2510': attribute type 2 has an invalid length.
[  309.477240][T15171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2510'.
[  309.506308][T15168] netlink: 'syz.1.2509': attribute type 10 has an invalid length.
[  309.589257][T15177] bond27 (unregistering): Released all slaves
[  309.904134][T15197] bond24 (unregistering): Released all slaves
[  309.935157][T15199] netlink: 'syz.1.2518': attribute type 21 has an invalid length.
[  310.036260][T15205] netlink: 'syz.2.2521': attribute type 11 has an invalid length.
[  310.464201][T15240] bond24: Removing last ns target with arp_interval on
[  310.641265][T15254] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20001
[  310.715739][T15263] netlink: 'syz.2.2532': attribute type 12 has an invalid length.
[  310.719431][T15264] netlink: 'syz.2.2532': attribute type 12 has an invalid length.
[  311.054627][T15287] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  311.336446][T15306] batadv_slave_1: left allmulticast mode
[  311.370327][T15316] netlink: 'syz.1.2545': attribute type 1 has an invalid length.
[  311.408536][T15323] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  311.431297][T15323] netlink: 'syz.2.2546': attribute type 1 has an invalid length.
[  311.434415][T15323] netlink: 'syz.2.2546': attribute type 1 has an invalid length.
[  311.437746][T15323] netlink: 'syz.2.2546': attribute type 1 has an invalid length.
[  311.441602][T15323] netlink: 'syz.2.2546': attribute type 1 has an invalid length.
[  311.459618][T15321] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  311.609534][T15335] syzkaller0: entered promiscuous mode
[  311.618961][T15335] syzkaller0: entered allmulticast mode
[  311.688591][T15340] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  311.692211][T15340] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  311.716263][T15344] IPVS: sh: FWM 3 0x00000003 - no destination available
[  311.718750][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  311.722644][T15344] IPVS: sh: FWM 3 0x00000003 - no destination available
[  311.725121][    C1] IPVS: sh: FWM 3 0x00000003 - no destination available
[  312.096332][T15361] bond20: option resend_igmp: invalid value (2878)
[  312.099076][T15361] bond20: option resend_igmp: allowed values 0 - 255
[  312.103594][T15361] bond20 (unregistering): Released all slaves
[  312.127671][T15362] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  312.140801][T15362] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  315.477837][T15392] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  315.537927][T15408] validate_nla: 2 callbacks suppressed
[  315.537944][T15408] netlink: 'syz.1.2573': attribute type 10 has an invalid length.
[  315.606059][T15416] netlink: 'syz.1.2573': attribute type 10 has an invalid length.
[  315.749421][T15421] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.798087][T15421] veth1_macvtap: left promiscuous mode
[  315.801744][T15421] veth0_macvtap: left promiscuous mode
[  315.804333][T15421] veth0_macvtap: entered promiscuous mode
[  315.811431][T15408] nbd0: detected capacity change from 0 to 63
[  315.816990][   T56] block nbd0: Receive control failed (result -32)
[  315.819976][ T7523] block nbd0: Receive control failed (result -32)
[  315.829341][T12313] syz2: Port: 1 Link ACTIVE
[  315.844088][T14761] block nbd0: Dead connection, failed to find a fallback
[  315.852738][T14761] block nbd0: shutting down sockets
[  315.856848][T14761] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  315.863408][T14761] Buffer I/O error on dev nbd0, logical block 0, async page read
[  315.868836][T14761] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  315.872361][T14761] Buffer I/O error on dev nbd0, logical block 1, async page read
[  315.875604][T14761] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  315.879078][T14761] Buffer I/O error on dev nbd0, logical block 2, async page read
[  315.883552][T14761] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  315.887058][T14761] Buffer I/O error on dev nbd0, logical block 3, async page read
[  315.890349][T14761] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  315.897552][T14761] Buffer I/O error on dev nbd0, logical block 0, async page read
[  315.908768][T14761] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  315.919861][T14761] Buffer I/O error on dev nbd0, logical block 1, async page read
[  315.924324][T14761] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  315.927920][T14761] Buffer I/O error on dev nbd0, logical block 2, async page read
[  315.931376][T14761] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  315.935066][T14761] Buffer I/O error on dev nbd0, logical block 3, async page read
[  315.938272][T14761] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  315.943389][T14761] Buffer I/O error on dev nbd0, logical block 0, async page read
[  315.947406][T14761] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  315.950182][T14761] Buffer I/O error on dev nbd0, logical block 1, async page read
[  315.956580][T14761] ldm_validate_partition_table(): Disk read failed.
[  315.964551][T14761] Dev nbd0: unable to read RDB block 0
[  315.969636][T14761]  nbd0: unable to read partition table
[  315.972870][T15434] __nla_validate_parse: 24 callbacks suppressed
[  315.972881][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'.
[  315.992283][T15434] netlink: 'syz.1.2580': attribute type 13 has an invalid length.
[  315.995600][T14761] ldm_validate_partition_table(): Disk read failed.
[  315.996696][T15434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2580'.
[  315.998632][T14761] Dev nbd0: unable to read RDB block 0
[  316.003697][T14761]  nbd0: unable to read partition table
[  316.119887][T15435] 
[  316.120886][T15435] ======================================================
[  316.123578][T15435] WARNING: possible circular locking dependency detected
[  316.126215][T15435] syzkaller #0 Not tainted
[  316.128055][T15435] ------------------------------------------------------
[  316.130731][T15435] syz.2.2579/15435 is trying to acquire lock:
[  316.133068][T15435] ffff8881626f86c0 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x3d8/0x1510
[  316.136978][T15435] 
[  316.136978][T15435] but task is already holding lock:
[  316.139347][T15435] ffff888111caa7f8 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70
[  316.142506][T15435] 
[  316.142506][T15435] which lock already depends on the new lock.
[  316.142506][T15435] 
[  316.145777][T15435] 
[  316.145777][T15435] the existing dependency chain (in reverse order) is:
[  316.148494][T15435] 
[  316.148494][T15435] -> #8 (&mm->mmap_lock){++++}-{4:4}:
[  316.151007][T15435]        __might_fault+0xcb/0x130
[  316.152962][T15435]        _copy_from_user+0x28/0xb0
[  316.154945][T15435]        csum_and_copy_from_iter_full+0x1e7/0x1f00
[  316.157436][T15435]        ip_generic_getfrag+0x149/0x2d0
[  316.159563][T15435]        __ip6_append_data+0x39cd/0x3f60
[  316.161735][T15435]        ip6_append_data+0x10f/0x280
[  316.163805][T15435]        rawv6_sendmsg+0x12d3/0x18e0
[  316.165873][T15435]        ____sys_sendmsg+0x80a/0x9f0
[  316.167863][T15435]        ___sys_sendmsg+0x2a5/0x360
[  316.169802][T15435]        __x64_sys_sendmsg+0x1bd/0x2a0
[  316.171800][T15435]        do_syscall_64+0x15f/0xf80
[  316.173653][T15435]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.175968][T15435] 
[  316.175968][T15435] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  316.178974][T15435]        lock_sock_nested+0x41/0x100
[  316.180976][T15435]        inet_shutdown+0x6a/0x390
[  316.182886][T15435]        nbd_mark_nsock_dead+0x2e9/0x560
[  316.184970][T15435]        sock_shutdown+0x15e/0x260
[  316.186828][T15435]        nbd_clear_sock+0x24/0x170
[  316.190327][T15435]        nbd_config_put+0x2dd/0x580
[  316.192241][T15435]        nbd_genl_connect+0x19d5/0x1cf0
[  316.194243][T15435]        genl_family_rcv_msg_doit+0x22a/0x330
[  316.196513][T15435]        genl_rcv_msg+0x61c/0x7a0
[  316.198421][T15435]        netlink_rcv_skb+0x232/0x4b0
[  316.200360][T15435]        genl_rcv+0x28/0x40
[  316.201952][T15435]        netlink_unicast+0x75c/0x8e0
[  316.203700][T15435]        netlink_sendmsg+0x813/0xb40
[  316.205407][T15435]        ____sys_sendmsg+0x972/0x9f0
[  316.207259][T15435]        ___sys_sendmsg+0x2a5/0x360
[  316.208791][T15435]        __x64_sys_sendmsg+0x1bd/0x2a0
[  316.210419][T15435]        do_syscall_64+0x15f/0xf80
[  316.211929][T15435]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.213803][T15435] 
[  316.213803][T15435] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  316.216187][T15435]        __mutex_lock+0x1a3/0x1550
[  316.217832][T15435]        nbd_queue_rq+0x37b/0x1100
[  316.219489][T15435]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  316.221311][T15435]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  316.223339][T15435]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  316.225589][T15435]        blk_mq_run_hw_queue+0x348/0x4f0
[  316.227573][T15435]        blk_mq_dispatch_list+0xd16/0xe10
[  316.229453][T15435]        blk_mq_flush_plug_list+0x48d/0x570
[  316.231351][T15435]        __blk_flush_plug+0x3ed/0x4d0
[  316.233137][T15435]        __submit_bio+0x28d/0x580
[  316.234853][T15435]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  316.237063][T15435]        block_read_full_folio+0x599/0x830
[  316.239174][T15435]        filemap_read_folio+0x137/0x3b0
[  316.240867][T15435]        do_read_cache_folio+0x358/0x590
[  316.242600][T15435]        read_part_sector+0xb6/0x2b0
[  316.244286][T15435]        adfspart_check_ICS+0xb1/0x960
[  316.245929][T15435]        bdev_disk_changed+0x817/0x1770
[  316.247898][T15435]        blkdev_get_whole+0x380/0x510
[  316.249692][T15435]        bdev_open+0x31e/0xd30
[  316.251157][T15435]        blkdev_open+0x470/0x610
[  316.252669][T15435]        do_dentry_open+0x785/0x14e0
[  316.254269][T15435]        vfs_open+0x3b/0x340
[  316.255693][T15435]        path_openat+0x2e08/0x3860
[  316.257248][T15435]        do_file_open+0x23e/0x4a0
[  316.258770][T15435]        do_sys_openat2+0x113/0x200
[  316.260347][T15435]        __x64_sys_openat+0x138/0x170
[  316.261983][T15435]        do_syscall_64+0x15f/0xf80
[  316.263547][T15435]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.265474][T15435] 
[  316.265474][T15435] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  316.267596][T15435]        __mutex_lock+0x1a3/0x1550
[  316.269182][T15435]        nbd_queue_rq+0xc6/0x1100
[  316.270692][T15435]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  316.272554][T15435]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  316.274587][T15435]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  316.276533][T15435]        blk_mq_run_hw_queue+0x348/0x4f0
[  316.278220][T15435]        blk_mq_dispatch_list+0xd16/0xe10
[  316.279919][T15435]        blk_mq_flush_plug_list+0x48d/0x570
[  316.281707][T15435]        __blk_flush_plug+0x3ed/0x4d0
[  316.283270][T15435]        __submit_bio+0x28d/0x580
[  316.284747][T15435]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  316.286676][T15435]        block_read_full_folio+0x599/0x830
[  316.288440][T15435]        filemap_read_folio+0x137/0x3b0
[  316.290441][T15435]        do_read_cache_folio+0x358/0x590
[  316.292581][T15435]        read_part_sector+0xb6/0x2b0
[  316.294640][T15435]        adfspart_check_ICS+0xb1/0x960
[  316.296614][T15435]        bdev_disk_changed+0x817/0x1770
[  316.298771][T15435]        blkdev_get_whole+0x380/0x510
[  316.300793][T15435]        bdev_open+0x31e/0xd30
[  316.302392][T15435]        blkdev_open+0x470/0x610
[  316.304028][T15435]        do_dentry_open+0x785/0x14e0
[  316.305658][T15435]        vfs_open+0x3b/0x340
[  316.307117][T15435]        path_openat+0x2e08/0x3860
[  316.308677][T15435]        do_file_open+0x23e/0x4a0
[  316.310227][T15435]        do_sys_openat2+0x113/0x200
[  316.311818][T15435]        __x64_sys_openat+0x138/0x170
[  316.313482][T15435]        do_syscall_64+0x15f/0xf80
[  316.315055][T15435]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.317569][T15435] 
[  316.317569][T15435] -> #4 (set->srcu){.+.+}-{0:0}:
[  316.319723][T15435]        __synchronize_srcu+0xca/0x300
[  316.321372][T15435]        elevator_switch+0x1e8/0x7a0
[  316.322961][T15435]        elevator_change+0x2cc/0x450
[  316.324535][T15435]        elevator_set_default+0x36c/0x430
[  316.326607][T15435]        blk_register_queue+0x3e9/0x4e0
[  316.328775][T15435]        __add_disk+0x677/0xd50
[  316.330681][T15435]        add_disk_fwnode+0xfb/0x480
[  316.332691][T15435]        nbd_dev_add+0x72c/0xb50
[  316.334489][T15435]        nbd_init+0x168/0x1f0
[  316.336316][T15435]        do_one_initcall+0x250/0x870
[  316.338374][T15435]        do_initcall_level+0x104/0x190
[  316.340507][T15435]        do_initcalls+0x59/0xa0
[  316.342393][T15435]        kernel_init_freeable+0x2a6/0x3e0
[  316.344586][T15435]        kernel_init+0x1d/0x1d0
[  316.346450][T15435]        ret_from_fork+0x514/0xb70
[  316.348436][T15435]        ret_from_fork_asm+0x1a/0x30
[  316.350461][T15435] 
[  316.350461][T15435] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  316.353437][T15435]        __mutex_lock+0x1a3/0x1550
[  316.355403][T15435]        elevator_change+0x1b3/0x450
[  316.357385][T15435]        elevator_set_none+0xb5/0x140
[  316.359465][T15435]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  316.361898][T15435]        nbd_start_device+0x17f/0xb10
[  316.363992][T15435]        nbd_genl_connect+0x165b/0x1cf0
[  316.366085][T15435]        genl_family_rcv_msg_doit+0x22a/0x330
[  316.368447][T15435]        genl_rcv_msg+0x61c/0x7a0
[  316.370413][T15435]        netlink_rcv_skb+0x232/0x4b0
[  316.372469][T15435]        genl_rcv+0x28/0x40
[  316.374257][T15435]        netlink_unicast+0x75c/0x8e0
[  316.376315][T15435]        netlink_sendmsg+0x813/0xb40
[  316.378349][T15435]        ____sys_sendmsg+0x972/0x9f0
[  316.380392][T15435]        ___sys_sendmsg+0x2a5/0x360
[  316.382434][T15435]        __x64_sys_sendmsg+0x1bd/0x2a0
[  316.384551][T15435]        do_syscall_64+0x15f/0xf80
[  316.386194][T15435]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.388133][T15435] 
[  316.388133][T15435] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  316.390683][T15435]        blk_alloc_queue+0x546/0x680
[  316.392283][T15435]        __blk_mq_alloc_disk+0x197/0x390
[  316.394402][T15435]        nbd_dev_add+0x499/0xb50
[  316.396349][T15435]        nbd_init+0x168/0x1f0
[  316.398160][T15435]        do_one_initcall+0x250/0x870
[  316.400218][T15435]        do_initcall_level+0x104/0x190
[  316.402278][T15435]        do_initcalls+0x59/0xa0
[  316.404205][T15435]        kernel_init_freeable+0x2a6/0x3e0
[  316.406437][T15435]        kernel_init+0x1d/0x1d0
[  316.408340][T15435]        ret_from_fork+0x514/0xb70
[  316.410332][T15435]        ret_from_fork_asm+0x1a/0x30
[  316.412325][T15435] 
[  316.412325][T15435] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  316.414659][T15435]        fs_reclaim_acquire+0x71/0x100
[  316.416527][T15435]        kmem_cache_alloc_noprof+0x40/0x650
[  316.418567][T15435]        __anon_vma_prepare+0xcb/0x4a0
[  316.420240][T15435]        __vmf_anon_prepare+0xe1/0x1b0
[  316.421942][T15435]        hugetlb_no_page+0x399/0x2100
[  316.423636][T15435]        hugetlb_fault+0x747/0x1510
[  316.425142][T15435]        handle_mm_fault+0x2007/0x3170
[  316.426718][T15435]        __get_user_pages+0x1683/0x2720
[  316.428402][T15435]        populate_vma_page_range+0x2be/0x3c0
[  316.430191][T15435]        __mm_populate+0x25f/0x390
[  316.431766][T15435]        vm_mmap_pgoff+0x3aa/0x4f0
[  316.433408][T15435]        ksys_mmap_pgoff+0x586/0x760
[  316.435229][T15435]        do_syscall_64+0x15f/0xf80
[  316.436846][T15435]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.438700][T15435] 
[  316.438700][T15435] -> #0 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}:
[  316.441325][T15435]        __lock_acquire+0x15a5/0x2cf0
[  316.442999][T15435]        lock_acquire+0x106/0x350
[  316.444711][T15435]        __mutex_lock+0x1a3/0x1550
[  316.446299][T15435]        hugetlb_fault+0x3d8/0x1510
[  316.447881][T15435]        handle_mm_fault+0x2007/0x3170
[  316.449518][T15435]        do_user_addr_fault+0x75b/0x1340
[  316.451258][T15435]        exc_page_fault+0x6a/0xc0
[  316.452829][T15435]        asm_exc_page_fault+0x26/0x30
[  316.454518][T15435]        rep_movs_alternative+0x75/0x90
[  316.456234][T15435]        _copy_to_iter+0x255/0x17d0
[  316.457796][T15435]        __skb_datagram_iter+0xf8/0x980
[  316.459666][T15435]        skb_copy_datagram_iter+0xb5/0x240
[  316.461973][T15435]        tipc_recvstream+0x72d/0xe70
[  316.464000][T15435]        sock_recvmsg+0x172/0x1b0
[  316.465922][T15435]        ____sys_recvmsg+0x1e6/0x4a0
[  316.467957][T15435]        ___sys_recvmsg+0x215/0x590
[  316.469929][T15435]        __x64_sys_recvmsg+0x1ba/0x2a0
[  316.472079][T15435]        do_syscall_64+0x15f/0xf80
[  316.474161][T15435]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.476628][T15435] 
[  316.476628][T15435] other info that might help us debug this:
[  316.476628][T15435] 
[  316.480603][T15435] Chain exists of:
[  316.480603][T15435]   &hugetlb_fault_mutex_table[i] --> sk_lock-AF_INET6 --> &mm->mmap_lock
[  316.480603][T15435] 
[  316.486022][T15435]  Possible unsafe locking scenario:
[  316.486022][T15435] 
[  316.488934][T15435]        CPU0                    CPU1
[  316.490952][T15435]        ----                    ----
[  316.492947][T15435]   rlock(&mm->mmap_lock);
[  316.494567][T15435]                                lock(sk_lock-AF_INET6);
[  316.496804][T15435]                                lock(&mm->mmap_lock);
[  316.498796][T15435]   lock(&hugetlb_fault_mutex_table[i]);
[  316.500499][T15435] 
[  316.500499][T15435]  *** DEADLOCK ***
[  316.500499][T15435] 
[  316.502895][T15435] 2 locks held by syz.2.2579/15435:
[  316.504953][T15435]  #0: ffff88810430dc60 (sk_lock-AF_TIPC){+.+.}-{0:0}, at: tipc_wait_for_rcvmsg+0x345/0x640
[  316.508881][T15435]  #1: ffff888111caa7f8 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70
[  316.512794][T15435] 
[  316.512794][T15435] stack backtrace:
[  316.515024][T15435] CPU: 0 UID: 0 PID: 15435 Comm: syz.2.2579 Not tainted syzkaller #0 PREEMPT(full) 
[  316.515041][T15435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  316.515051][T15435] Call Trace:
[  316.515059][T15435]  <TASK>
[  316.515067][T15435]  dump_stack_lvl+0xe8/0x150
[  316.515117][T15435]  print_circular_bug+0x2e1/0x300
[  316.515138][T15435]  check_noncircular+0x12e/0x150
[  316.515157][T15435]  __lock_acquire+0x15a5/0x2cf0
[  316.515175][T15435]  ? __lock_acquire+0x6b5/0x2cf0
[  316.515199][T15435]  ? hugetlb_fault+0x3d8/0x1510
[  316.515211][T15435]  lock_acquire+0x106/0x350
[  316.515224][T15435]  ? hugetlb_fault+0x3d8/0x1510
[  316.515241][T15435]  __mutex_lock+0x1a3/0x1550
[  316.515261][T15435]  ? hugetlb_fault+0x3d8/0x1510
[  316.515272][T15435]  ? trace_hrtimer_start+0x82/0x200
[  316.515295][T15435]  ? hugetlb_fault+0x3d8/0x1510
[  316.515308][T15435]  ? __pfx___mutex_lock+0x10/0x10
[  316.515327][T15435]  ? trace_sched_exit_tp+0x3a/0x130
[  316.515341][T15435]  ? __schedule+0x17ca/0x5680
[  316.515359][T15435]  hugetlb_fault+0x3d8/0x1510
[  316.515373][T15435]  ? __schedule+0x17ca/0x5680
[  316.515390][T15435]  ? __pfx_hugetlb_fault+0x10/0x10
[  316.515409][T15435]  handle_mm_fault+0x2007/0x3170
[  316.515429][T15435]  ? __pfx_mt_find+0x10/0x10
[  316.515448][T15435]  ? handle_mm_fault+0xee/0x3170
[  316.515466][T15435]  ? __pfx_handle_mm_fault+0x10/0x10
[  316.515483][T15435]  ? find_vma+0xed/0x160
[  316.515497][T15435]  ? __pfx_find_vma+0x10/0x10
[  316.515513][T15435]  ? down_read_killable+0x1bb/0x340
[  316.515525][T15435]  ? __pfx___up_read+0x10/0x10
[  316.515545][T15435]  ? lock_mm_and_find_vma+0xa7/0x340
[  316.515563][T15435]  do_user_addr_fault+0x75b/0x1340
[  316.515583][T15435]  exc_page_fault+0x6a/0xc0
[  316.515602][T15435]  asm_exc_page_fault+0x26/0x30
[  316.515616][T15435] RIP: 0010:rep_movs_alternative+0x75/0x90
[  316.515633][T15435] Code: 05 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29 c1 48 89 c8 48 c1 e9 03 83 e0 07 <f3> 48 a5 89 c1 85 c9 75 91 e9 bd 53 04 00 48 8d 0c c8 eb 86 cc cc
[  316.515646][T15435] RSP: 0018:ffffc90006adf698 EFLAGS: 00010246
[  316.515658][T15435] RAX: 0000000000000000 RBX: ffff888203e600e8 RCX: 0000000000000ba4
[  316.515668][T15435] RDX: 0000000000000000 RSI: ffff888203e6a598 RDI: 00002000003a1000
[  316.515677][T15435] RBP: ffffc90006adf808 R08: ffff888203e702b7 R09: 1ffff110407ce056
[  316.515687][T15435] R10: dffffc0000000000 R11: ffffed10407ce057 R12: 1ffff92000d5bfbf
[  316.515697][T15435] R13: 0000200000396b50 R14: ffffc90006adfe08 R15: 00000000000101d0
[  316.515714][T15435]  _copy_to_iter+0x255/0x17d0
[  316.515735][T15435]  ? rcu_is_watching+0x15/0xb0
[  316.515753][T15435]  ? __pfx__copy_to_iter+0x10/0x10
[  316.515770][T15435]  ? tipc_wait_for_rcvmsg+0x4f6/0x640
[  316.515792][T15435]  __skb_datagram_iter+0xf8/0x980
[  316.515813][T15435]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  316.515832][T15435]  ? __pfx_woken_wake_function+0x10/0x10
[  316.515856][T15435]  skb_copy_datagram_iter+0xb5/0x240
[  316.515877][T15435]  tipc_recvstream+0x72d/0xe70
[  316.515900][T15435]  ? __pfx_tipc_recvstream+0x10/0x10
[  316.515925][T15435]  sock_recvmsg+0x172/0x1b0
[  316.515940][T15435]  ____sys_recvmsg+0x1e6/0x4a0
[  316.515958][T15435]  ? __sys_socketpair+0x386/0x560
[  316.515975][T15435]  ? __pfx_____sys_recvmsg+0x10/0x10
[  316.515998][T15435]  ? import_iovec+0x73/0xa0
[  316.516018][T15435]  ___sys_recvmsg+0x215/0x590
[  316.516038][T15435]  ? __pfx____sys_recvmsg+0x10/0x10
[  316.516057][T15435]  ? __fget_files+0x2a/0x420
[  316.516112][T15435]  ? __fget_files+0x3a0/0x420
[  316.516132][T15435]  __x64_sys_recvmsg+0x1ba/0x2a0
[  316.516152][T15435]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  316.516172][T15435]  ? rcu_is_watching+0x15/0xb0
[  316.516190][T15435]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.516204][T15435]  do_syscall_64+0x15f/0xf80
[  316.516223][T15435]  ? trace_irq_disable+0x3b/0x140
[  316.516244][T15435]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  316.516257][T15435] RIP: 0033:0x7fbbd419cdd9
[  316.516271][T15435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  316.516283][T15435] RSP: 002b:00007fbbd4fbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  316.516297][T15435] RAX: ffffffffffffffda RBX: 00007fbbd4415fa0 RCX: 00007fbbd419cdd9
[  316.516307][T15435] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000008
[  316.516315][T15435] RBP: 00007fbbd4232d69 R08: 0000000000000000 R09: 0000000000000000
[  316.516324][T15435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  316.516331][T15435] R13: 00007fbbd4416038 R14: 00007fbbd4415fa0 R15: 00007fff6559fb58
[  316.516344][T15435]  </TASK>
