last executing test programs:

1.821649509s ago: executing program 2 (id=2404):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0xfc}, 0x1, 0x0, 0x0, 0x20040810}, 0x4048801)
socket(0x23, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)
close(r3)
socket$inet6_icmp(0xa, 0x2, 0x3a)
shutdown(r3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
socket$netlink(0x10, 0x3, 0x1)
socket(0x29, 0x2, 0xfffffff9)
socket$inet_udp(0x2, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$rds(0x15, 0x5, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r6, @ANYBLOB="c0c33d34912b9e910893bb923db150db33350d4e6c1132b1cd98ff14fe76a2f4829a785e86d7fc2ada4b0c1a94b19ecdbe4b39a72d5320b972e47b495cedcb28c0ff2c0078a19ab5dc1305581eb841752bb6e42249"], 0x1c}}, 0xea2b33a8b4036484)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0)
recvmmsg(r3, &(0x7f00000055c0), 0x3fffffffffffea0, 0x300, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x802, 0x0)

790.102976ms ago: executing program 1 (id=2412):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT], 0x50) (async)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT], 0x50)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40891)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) (async)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054)
write$nci(r1, &(0x7f0000000240)=ANY=[], 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0)
write$nci(r1, &(0x7f0000000040)=ANY=[], 0x14)
write$nci(r1, &(0x7f0000000100)=@NCI_OP_CORE_RESET_RSP={0x0, 0x1, 0x2, 0x0, 0x1, {0x1, 0x0, 0x8}}, 0x6)
syz_emit_ethernet(0x26, 0x0, 0x0) (async)
syz_emit_ethernet(0x26, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002480)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xe11}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="b40500000100000071109b000001009500000000000000009b3286733b3f8f16948d5e879f5c2c012b8dc08fcb2c647e933528ae79275737be15805cbdf5db15924eec59d47309f73f6681e0f54bbf21ee79593c12ce9cdb79abe2501c8f3eea75c5cb4165040c9697a2d1c4d212111a7e0f7c7939f9b7ac16e4feb8b1760ebebd47b5105d65241c78a3cd3c6674a7b863bc4a85916c280c7080ba5fcf2e486daf92387f12"], 0x0, 0x17dc, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0xa}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="b40500000100000071109b000001009500000000000000009b3286733b3f8f16948d5e879f5c2c012b8dc08fcb2c647e933528ae79275737be15805cbdf5db15924eec59d47309f73f6681e0f54bbf21ee79593c12ce9cdb79abe2501c8f3eea75c5cb4165040c9697a2d1c4d212111a7e0f7c7939f9b7ac16e4feb8b1760ebebd47b5105d65241c78a3cd3c6674a7b863bc4a85916c280c7080ba5fcf2e486daf92387f12"], 0x0, 0x17dc, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0xa}, 0x94)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async)
setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) (async)
setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x11, &(0x7f0000000600)=ANY=[@ANYBLOB="180000008b00000000000000f7ffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf092000000000005509010000000080950000000000000018320000010000000000000000000000bf91000000000000b702000003000000850000002a000000b7000000000502009500000000000000f5162e5b09bea824fec90c6d7e973881e28c20994b76a48a591c39da3573baf2d33f473db94cc82d89607276b2d8eb7f6592ab16d293ae1e05f1d9b2"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x5dcd0a26dd3f61c6, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000180100002020692500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c001980080002002e"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) (async)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c001980080002002e"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0)

639.482484ms ago: executing program 1 (id=2413):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'tunl0\x00', <r1=>0x0, 0x7800, 0x10, 0x3af, 0xc6, {{0x1a, 0x4, 0x2, 0x9, 0x68, 0x65, 0x0, 0x5d, 0x29, 0x0, @local, @empty, {[@end, @cipso={0x86, 0x4b, 0x2, [{0x1, 0xa, "20eb4bffe31dd07a"}, {0x5, 0x2}, {0x0, 0x7, "a421ee9b0b"}, {0x2, 0xf, "23f6bfc2f3e2f18999192762c9"}, {0x2, 0x3, '3'}, {0x1, 0xd, "5e96a77aa070d209c56e32"}, {0x5, 0x9, "7bdc8814d37e81"}, {0x1, 0xa, "8bcbfdbd714c214e"}]}, @ra={0x94, 0x4}, @end]}}}}})
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xe4, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x60}, 0x24044804) (async)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xe4, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x60}, 0x24044804)
socket$key(0xf, 0x3, 0x2) (async)
r2 = socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendmsg$key(r2, &(0x7f0000000240)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000023c0)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_lifetime={0x4, 0x4, 0xf5, 0x7, 0x22c, 0x3}]}, 0x78}, 0x1, 0x7}, 0x440c0)

563.189859ms ago: executing program 1 (id=2414):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[], 0x38}}, 0x2000a080)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x8080)

474.720274ms ago: executing program 0 (id=2417):
r0 = socket(0x10, 0x803, 0x0)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), r0)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40e95604}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5, 0x8, 0x1]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xd, 0x10001, 0x7, 0x8, 0x5f7]}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000}]}, 0x80}}, 0x4000001)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl0\x00', <r4=>0x0, 0x10, 0x7, 0x2, 0x7, {{0x12, 0x4, 0x2, 0x15, 0x48, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast2, @rand_addr=0x64010102, {[@timestamp={0x44, 0x8, 0x9, 0x0, 0x8, [0x800]}, @end, @cipso={0x86, 0x2a, 0x1, [{0x0, 0xa, "bb04e075839a5bc7"}, {0x7, 0x8, "615dca8d1bf1"}, {0x5, 0xe, "3f3add6778c210ebfba845e5"}, {0x1, 0x4, "62a0"}]}]}}}}})
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000300)={@local, 0x73, r4})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c)

474.265557ms ago: executing program 2 (id=2418):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2712, 0x0, &(0x7f0000000040))
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a0000020800"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa1}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x40007)
sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000002c0)={0x424, 0x3f3, 0x4, 0x70bd28, 0x25dfdbfc, {0x3, 0x2, 0xf, [0x5, 0x8, 0x1, 0xffffffff, 0x1, 0x1055, 0x200, 0x81, 0x9, 0xfffffff9, 0x200, 0x9, 0x2, 0x6, 0x1, 0x600, 0xd, 0x7fffffff, 0x15, 0xa, 0x1, 0x8000, 0xd2, 0x605c2c40, 0x217, 0x3, 0x0, 0x5, 0xcece, 0xf, 0x5, 0xffffff11, 0xffffffff, 0x6, 0x104d0062, 0x8, 0x3, 0x9, 0xf27, 0x0, 0x80, 0x401, 0x80000000, 0xed23, 0x0, 0x7fff, 0x7, 0x1ff, 0x9, 0xfffffffd, 0x9, 0x22146e94, 0xffff, 0x10000, 0xfffffff8, 0x8, 0xee9, 0x9, 0x100, 0x80000, 0xedab, 0x0, 0x2, 0x1], [0xc568, 0x9, 0x81, 0x2, 0x4, 0x0, 0x3, 0xc810, 0xe0, 0xd72, 0xb, 0x10, 0x4, 0x7, 0x3, 0x3ff, 0x5, 0x0, 0x10, 0x8, 0x800, 0x3, 0x3, 0x6, 0x2, 0x0, 0x2, 0x8, 0x6, 0x7, 0x4, 0x5, 0x7, 0xf08, 0x200, 0xe9, 0x5, 0x1, 0x8, 0x738, 0xffffff7f, 0x16b, 0x48d69d5c, 0x3, 0xd, 0x100, 0x4a, 0x3, 0xb80a, 0x1, 0x1, 0xe, 0x3, 0x9, 0x4, 0x8, 0xffff, 0x9, 0x7fff, 0x9, 0x5, 0x8, 0x100, 0x4], [0x2, 0xff, 0x2, 0xf, 0xff, 0x7f, 0x5, 0xfffffffc, 0x4, 0xd118cbe, 0x6, 0x4, 0x1, 0x0, 0x6, 0x9, 0xe, 0x0, 0x8, 0x2, 0x9, 0xa, 0x1d8, 0x8, 0xffffffff, 0x1, 0x3, 0xffff58c8, 0x0, 0x3, 0x2, 0x8, 0x10, 0x1, 0x3, 0x7, 0x10, 0x6, 0x9, 0xfffffffe, 0x7, 0x40, 0xffffffff, 0xa3, 0x5, 0x9, 0xffffffff, 0x141, 0x7, 0x8, 0x1000, 0x0, 0x9, 0x40, 0x6, 0x6, 0x6, 0xde, 0x4, 0x5, 0x0, 0x7fffffff, 0x80000001, 0x7ff], [0x7, 0x0, 0x100, 0x1, 0x2, 0x7, 0x1, 0x9, 0x7, 0x1, 0x5, 0x9, 0x0, 0xfffff66e, 0xffff, 0x9, 0x5, 0xffff, 0x400, 0x2, 0x3, 0x55, 0xa, 0x9, 0x3, 0xd10e, 0xb, 0x401, 0x0, 0x6, 0x3ff, 0x1, 0x200, 0x5, 0x0, 0x40, 0x7, 0x4, 0xffff8001, 0xfff, 0xfff, 0x0, 0x6, 0x7fffffff, 0x7, 0x95, 0x4, 0x7, 0xa, 0x9, 0x5, 0x3e, 0x4ab7, 0xfffffffb, 0x40, 0x7, 0x8000, 0x101, 0x8, 0x80, 0x7ff, 0x1, 0x80000000, 0x1ff], 0x2, ['\xba\x00']}, ["", "", "", "", "", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x44}, 0x14)
ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x7f, 0x8, 0x0, 0x400, 0x0, 0x7e, 0xe7, 0x0, 0x87, 0x0, 0x80000, 0xfffffeff, 0x1, 0x8, 0x0, 0x82000045, [0x2, 0x9]}})

468.418981ms ago: executing program 1 (id=2419):
socket(0x2, 0x80805, 0x0) (async)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={<r4=>r3, 0x4, 0x7, 0xfffffff7}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x2542, 0x9, 0x201, 0x5, 0x8, 0xab31, 0x1, 0xb6, r4}, 0x20) (async)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x2542, 0x9, 0x201, 0x5, 0x8, 0xab31, 0x1, 0xb6, r4}, 0x20)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r4, 0x3597}, 0x8)

396.58901ms ago: executing program 2 (id=2420):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x18, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4850) (async, rerun: 32)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0xfffffffffffffe8f, &(0x7f0000000800)=""/170, 0x40f00, 0x41, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2e798, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000a00)=r5, 0x4)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) (async, rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
bpf$LINK_DETACH(0x22, 0x0, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32)
syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) (async, rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = socket(0x10, 0x3, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x401, 0x9, 0x8000, 0x32de, 0xc255}, [@TCA_NETEM_RATE={0x9, 0x6, {0x9, 0x7fffffff, 0x0, 0x3}}]}}}]}, 0x60}}, 0x0)
close(0x3)

394.112121ms ago: executing program 1 (id=2421):
r0 = socket(0xa, 0x3, 0xff)
close(r0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8)
sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f00000010c0)=@in6={0xa, 0x4e20, 0x4, @mcast2, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffffec7d}}], 0x18}, 0x20008001)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060101000000000000000000000000050004000000000009000200000500010007000000050005000a000000140007800800114000000003080012400000ffff14000300686173683a69702c706f62742c697000"], 0x60}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0xa00}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="3c00000010003704030000000300000000000000", @ANYRES32=r8, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendto$packet(r5, &(0x7f0000000580)='o', 0x5b4, 0x4, &(0x7f0000000180)={0x11, 0x8100, r8, 0x1, 0xe9, 0x6, @local}, 0x14)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r9)
sendmsg$NFC_CMD_DISABLE_SE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002cc0)=ANY=[@ANYRES64=r3, @ANYRES8=r4, @ANYBLOB="01000100"/18, @ANYRESDEC=r6, @ANYBLOB="2100190002", @ANYRESDEC=r10, @ANYBLOB="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", @ANYRES32=r4, @ANYRES16=r1], 0x2c}, 0x1, 0x0, 0x0, 0x20008886}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r11, 0x15b4}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r12, &(0x7f00000000c0), 0x0}, 0x20)
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=ANY=[@ANYBLOB="1400000049000100000000000000000017a6806e"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20048800)

319.520558ms ago: executing program 2 (id=2422):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x51a, 0x30, "3265ae3a3c93c23b602f4fcd5f2e748624bf89f1dadaaf865cec88401dc88e990c098db6e61c4f923d4d87f679c806eb"}, 0x38)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@local, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0xb, 0x7fffffff, 0x543}, {0x4, 0x8000000000000002}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x1, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r4 = socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xa}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x2}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40805}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELCHAIN={0x120, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x58}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_HOOK={0x88, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6erspan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x168}, 0x1, 0x0, 0x0, 0x10}, 0x8084) (async)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r9, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r10, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x4000)

317.012361ms ago: executing program 0 (id=2423):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="04ac0f000cac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff)

301.421407ms ago: executing program 1 (id=2424):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4)
recvmmsg(r1, &(0x7f0000002f40)=[{{&(0x7f0000000480)=@sco={0x1f, @none}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/133, 0x85}], 0x1, &(0x7f0000000780)=""/94, 0x5e}}, {{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000600)=""/111, 0x6f}, {&(0x7f0000000900)=""/94, 0x5e}, {&(0x7f0000000a00)=""/244, 0xf4}, {&(0x7f0000000b00)=""/7, 0x7}, {&(0x7f0000000b40)=""/202, 0xca}, {&(0x7f0000000c40)=""/150, 0x96}], 0x6, &(0x7f0000002e00)=""/261, 0x105}, 0x800}, {{&(0x7f0000000e80)=@ax25={{0x3, @rose}, [@netrom, @netrom, @netrom, @bcast, @rose, @bcast, @remote, @netrom]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000f00)=""/48, 0x30}], 0x1, &(0x7f0000000500)=""/20, 0x14}, 0x1}, {{&(0x7f0000000fc0)=@nfc_llcp, 0x80, &(0x7f0000004480)=[{&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000001040)=""/91, 0x5b}, {&(0x7f00000020c0)=""/48, 0x30}, {&(0x7f0000002100)=""/166, 0xa6}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000d80)=""/249, 0xf9}, {&(0x7f0000002300)=""/175, 0xaf}, {&(0x7f00000023c0)=""/149, 0x95}, {&(0x7f0000004300)=""/190, 0xbe}, {&(0x7f00000043c0)=""/171, 0xab}], 0xa, &(0x7f0000002500)=""/118, 0x76}, 0x401}, {{&(0x7f0000002580)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002600)=""/169, 0xa9}, {&(0x7f00000026c0)=""/159, 0x9f}, {&(0x7f0000000380)=""/48, 0x30}], 0x3, &(0x7f0000002800)=""/132, 0x84}, 0xfffffff9}, {{&(0x7f00000028c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002940)=""/223, 0xdf}, {&(0x7f0000002a40)=""/248, 0xf8}, {&(0x7f0000002b40)=""/183, 0xb7}], 0x3, &(0x7f00000003c0)=""/75, 0x4b}, 0x8}], 0x6, 0x10123, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000022c0)={&(0x7f0000002c80)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000090000000000000e0100000001000000005f302e00d101783c63d82adcfac26514769ccf554e3003a4e277f35a85f3c0450ead4383e2bc3a8d51a7fb7c25c3e5dda9b73794c518628d1a50652251bf4dfc0a22dbe63961393b7abde30f41c5"], &(0x7f0000002200)=""/135, 0x2d, 0x87, 0x0, 0x3}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000002d00)=ANY=[@ANYBLOB="2000000080000000030000004000000000140000", @ANYRES32, @ANYBLOB="060000000000000000000000000000000000000035647863c4b891133ac2b635a35dc88e4fd53e552cdb8e39c7e41af0d15378960c143d96acb7ce7eb2038634d76097e2d2aeca0f23595f414d222042a36c15c4b18cef7e4a54549a1c3b359cc796bcc9eb5b5a1aabac8db446e1a06fc26beb5855079a7f75df858b433383f7daac13bcdd8b9ad75b234ef2240a066ad25163c9f63acc5c94511dc890c2fcf2b9bb3f4978c0a0d52bc9a815c02f5eee67c278111ed4388a6c25", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="05000000000000000300"/28], 0x50)
syz_emit_ethernet(0xb6, &(0x7f0000004140)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x1f, 0x4, 0x0, 0x2, 0xa8, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev, {[@lsrr={0x83, 0x2b, 0xb8, [@local, @remote, @multicast2, @private=0xa, @broadcast, @broadcast, @local, @local, @multicast1, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0xb2, 0x1, 0x3, [{@local, 0x80000000}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x27}, 0xb20a}]}, @timestamp_addr={0x44, 0x1c, 0xfd, 0x1, 0x1, [{@private=0xa010102, 0x2}, {@local, 0x100}, {@multicast1, 0x1ff}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x4}, @md5sig={0x13, 0x12, "c140c2ba3d3f09659390e45c2a2b031e"}]}}}}}}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000540)={'veth0_vlan\x00', 0x200})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000004240)=ANY=[@ANYBLOB='*\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000084020a000100bbbbbbbbbbbb0000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={<r5=>0x0}, &(0x7f0000000100)=0x8)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1)
sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x44)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r5, 0x2}, &(0x7f0000000180)=0x8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
r8 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r8)
getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000030c0)=ANY=[@ANYBLOB="3c000000100037040100fbffffff000000000000", @ANYRES32=r9, @ANYBLOB="83000500012c00001c0012800b00010067726574617000000c00028008000700ac1414aa", @ANYRESOCT, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850)
sendmmsg$inet(r7, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @local}}}], 0x20}}], 0x1, 0x24000000)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r11, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r11, 0x1, 0x24, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000071248d0005000080950000000055ada60000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000030101010000000000000000070000010800154000000001fb79069e57a1e8a9249784d6dc8f7b5012ad7d3c17cd8be79e6e94889977ea5503a4bd17f506cdbb599e396223ad1df31328dd56d3dae074949f8065607972564286c7d0"], 0x1c}, 0x1, 0x0, 0x0, 0x40054}, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0)

179.532721ms ago: executing program 0 (id=2425):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15, 0x10310}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4028841}, 0x8000)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000440)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cbc812ff5b517", 0x42}], 0x2, &(0x7f0000000940)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x28044854}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/74, 0x4a}], 0x2}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044090}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r4)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000026c0)={0x3c, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r6, &(0x7f0000000040)={0x23, 0x14}, 0x10)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0xfc, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@private0, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x2}}]}, 0xfc}}, 0x0)
write(r6, &(0x7f0000000240)="6d059d9349", 0x5)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c01000000000000000005000000090001007379e16891de5bf57777bbdd23547a30000000000900030073797a300000000050000000060a010400000000000000000500000008000b400000000028000480240001800b00f0ac0a01007470726f7879000014000280080001400000000108000340000000120900010073797a30000000001400000011000100"], 0xc4}, 0x1, 0x0, 0x0, 0x400020c0}, 0x0)

179.097696ms ago: executing program 2 (id=2426):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xfffe, 0x7}, 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
close(0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000014000000240007800c0003"], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r4, &(0x7f0000000200), 0x806000) (async)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
mmap(&(0x7f00005ee000/0x1000)=nil, 0x1000, 0x7, 0x50, r3, 0x0) (async)
write(r0, &(0x7f00000002c0)="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"/437, 0x1f0) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan4\x00'})

174.670884ms ago: executing program 0 (id=2427):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
splice(r3, 0x0, r2, 0x0, 0x20e69a38, 0x0) (async)
close(r3) (async)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
write$cgroup_int(r4, &(0x7f0000001480)=0x2, 0x12)
socket$igmp(0x2, 0x3, 0x2) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@can_newroute={0x26c, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0x22, 0xff, 0x3, 0x0, 0x7, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x0, "5c8d582a88d818b500"}}, @CGW_CS_CRC8={0x11e, 0x6, {0x8, 0x64, 0x0, 0x4, 0x4, "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", 0x1, "851ad6ade19c91171c7ce781b985f50d3f2bdb62"}}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1}, 0x8, 0x2, 0x0, 0x0, "f57de0eb74757e1d"}, 0x3}}]}, 0x26c}}, 0x404c004) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac141410bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x800c) (async)
r5 = socket$netlink(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c000040000280040013000800080001000000080014000300000008000100", @ANYRES32, @ANYBLOB="0600100003000000080014000000000008000700060000000800140000800000140003006e"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0)
splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async)
r7 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async)
bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) (async)
listen(r7, 0x0) (async)
r8 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)

73.03343ms ago: executing program 0 (id=2428):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_int(r1, 0x29, 0x4a, 0x0, &(0x7f0000000040))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0400000000000000df250b0000000c0001800800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x42000}, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x9}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4835}, 0x400c080)
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x7fffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xd}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008050}, 0x4000)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000580))
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$XFS_IOC_FSGEOMETRY(r2, 0x8100587e, &(0x7f0000000640))
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="0404f5bd7000fedbdf250100000008070100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002c000000000400000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0)

61.062372ms ago: executing program 0 (id=2429):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) (async)
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="130823bd7000fddbdf2517000000500006804c00040067636d28616571290000000010000000000000000000000000000000000000002400000000d9403689a0256bcd794a17ff7b0d56b0a9ad2b3677d487f78a2fe848023754154350f3c1f8c894fb98b1386b17c76ad25b077f4627598d3d58a15d3c0b22a99ec6c1159edfd2af513a5683b330c496e61d0f9e3db7e704ef63efefb8f4ebfd804a7f00131bec9951465a4a761d0e40f0b7d16e5b0c8acab99a5eabb545fcea6c912b717ad76a5726d11349211293752d1552f52616606d72340efcc276639aca0658fc428d72d71c7d8041c6"], 0x64}, 0x1, 0x0, 0x0, 0x20048044}, 0x20008000) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r4, 0x0, 0x0) (async, rerun: 64)
r5 = socket(0x10, 0x80003, 0x0) (rerun: 64)
write(r5, &(0x7f0000000400)="240000001e005f0214f9f4e6ff0804000a000000fc0000000000aa0008000f00fd000000", 0x24)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)
r6 = socket(0x10, 0x803, 0x0) (async, rerun: 32)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f00000008c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 32)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$6lowpan_control(r9, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b) (async, rerun: 32)
setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40, 0x83, 0x0, 0x6}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) (rerun: 32)
socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'wg2\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) (rerun: 32)
getpeername$tipc(r6, &(0x7f00000002c0)=@id, &(0x7f0000000300)=0x10) (async)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x7, &(0x7f00000001c0)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8010) (async)
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x3, 0x4) (async)
sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x18}}], 0x1, 0x4880)

0s ago: executing program 2 (id=2430):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2531"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r3], 0x68}, 0x1, 0x0, 0x0, 0xc4000}, 0x4004040)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a006da800000000000000001c000000f678000000121000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40010)
clock_gettime(0x0, &(0x7f0000002580)={<r4=>0x0, <r5=>0x0})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bridge0\x00', <r8=>0x0})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x724}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, r8, 0x25, 0x4}, 0x14)
bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x62)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
bind$unix(r10, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0)
recvmmsg(r3, &(0x7f00000024c0)=[{{&(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/96, 0x60}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/162, 0xa2}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/147, 0x93}, {&(0x7f0000001900)=""/94, 0x5e}, {&(0x7f0000001980)=""/14, 0xe}, {&(0x7f00000019c0)=""/14, 0xe}, {&(0x7f0000001a00)=""/9, 0x9}], 0xa, &(0x7f0000001b00)=""/133, 0x85}, 0x7}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001bc0)=""/5, 0x5}, {&(0x7f0000001c00)=""/58, 0x3a}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/73, 0x49}, {&(0x7f0000001dc0)=""/131, 0x83}, {&(0x7f0000001e80)=""/109, 0x6d}, {&(0x7f0000001f00)=""/24, 0x18}, {&(0x7f0000001f40)=""/199, 0xc7}, {&(0x7f0000002040)=""/94, 0x5e}, {&(0x7f00000020c0)=""/253, 0xfd}], 0xa, &(0x7f0000002280)=""/167, 0xa7}, 0x74d}, {{&(0x7f0000002340)=@pppol2tp, 0x80, &(0x7f0000002440)=[{&(0x7f00000023c0)=""/29, 0x1d}, {&(0x7f0000002400)=""/61, 0x3d}], 0x2, &(0x7f0000002480)=""/37, 0x25}, 0x6}], 0x3, 0x21, &(0x7f00000025c0)={r4, r5+10000000})

kernel console output (not intermixed with test programs):

  186.121144][ T9614] team0: entered allmulticast mode
[  186.126303][ T9614] team0: entered promiscuous mode
[  186.249190][ T9621] netlink: 'syz.2.1005': attribute type 2 has an invalid length.
[  186.322951][ T5004] Bluetooth: hci1: command 0x0406 tx timeout
[  186.613853][ T9629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1008'.
[  186.668460][ T9636] veth0: Caught tx_queue_len zero misconfig
[  186.711537][ T9636] syzkaller0: entered promiscuous mode
[  186.714013][ T9636] syzkaller0: entered allmulticast mode
[  186.783031][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'.
[  187.245443][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'.
[  187.249685][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'.
[  187.282952][ T8543] net_ratelimit: 22 callbacks suppressed
[  187.282971][ T8543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.311427][ T9667] netlink: 'syz.0.1019': attribute type 1 has an invalid length.
[  187.342334][ T9667] bond8: entered promiscuous mode
[  187.344944][ T9667] 8021q: adding VLAN 0 to HW filter on device bond8
[  187.378464][ T9667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1019'.
[  187.395234][ T9667] vlan0: entered allmulticast mode
[  187.397440][ T9667] bond8: entered allmulticast mode
[  187.451263][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.459244][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.491693][ T9674] netlink: 'syz.0.1021': attribute type 1 has an invalid length.
[  187.494864][ T9674] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1021'.
[  187.586708][ T9672] netlink: 'syz.2.1020': attribute type 1 has an invalid length.
[  187.598225][ T9672] netlink: 'syz.2.1020': attribute type 3 has an invalid length.
[  187.789199][ T5652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.792967][ T5652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  187.804094][ T5652] nci: nci_rx_work: unknown MT 0x7
[  187.834534][ T9685] netlink: 'syz.2.1025': attribute type 4 has an invalid length.
[  188.043061][ T9695] netlink: 'syz.2.1027': attribute type 1 has an invalid length.
[  188.059532][ T9695] 8021q: adding VLAN 0 to HW filter on device bond10
[  188.079675][ T6351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.165142][ T9701] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  188.227052][ T9703] netlink: 'syz.2.1029': attribute type 8 has an invalid length.
[  188.230733][ T6159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  188.239848][ T9703] erspan0: entered promiscuous mode
[  188.242623][ T9703] 0{X: entered promiscuous mode
[  188.246218][ T9703] erspan0: left promiscuous mode
[  188.248815][ T9703] 0{X: left promiscuous mode
[  188.379429][ T9708] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  188.382009][ T9708] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  188.490494][ T8545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  189.350545][ T9762] gretap3: entered promiscuous mode
[  189.499062][ T9775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  190.085605][ T9798] tipc: Invalid UDP bearer configuration
[  190.085638][ T9798] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  190.334454][ T9810] __nla_validate_parse: 11 callbacks suppressed
[  190.334475][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1061'.
[  190.555778][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'.
[  190.596074][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1065'.
[  190.671864][ T9831] bond9 (unregistering): Released all slaves
[  190.973406][ T9846] tipc: Can't bind to reserved service type 0
[  191.121378][ T9851] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  191.285326][ T9868] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1073'.
[  191.291387][ T9869] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1073'.
[  191.474250][ T9875] syzkaller0: entered promiscuous mode
[  191.476502][ T9875] syzkaller0: entered allmulticast mode
[  191.827935][ T9887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1076'.
[  191.913110][ T9890] netlink: 'syz.0.1076': attribute type 21 has an invalid length.
[  191.970564][ T9894] netlink: 'syz.0.1076': attribute type 12 has an invalid length.
[  191.973703][ T9894] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.1076'.
[  192.719289][ T5652] net_ratelimit: 17 callbacks suppressed
[  192.719306][ T5652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.203534][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.206522][   T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.432446][ T6159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.435270][ T6159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.556357][ T9890] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1076'.
[  193.679876][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.708023][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'.
[  193.834060][ T5652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  193.839676][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  193.876046][ T9953] netlink: 'syz.0.1082': attribute type 1 has an invalid length.
[  193.904580][ T9953] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  193.908419][ T9953] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  193.945520][ T9959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1082'.
[  193.966043][ T9959] bond9: (slave bridge6): Enslaving as an active interface with a down link
[  193.983574][ T9953] 8021q: adding VLAN 0 to HW filter on device bond9
[  194.006525][ T9953] macvlan0: entered promiscuous mode
[  194.008951][ T9953] macvlan0: entered allmulticast mode
[  194.011835][ T9953] bond9: entered promiscuous mode
[  194.014527][ T9953] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  194.018704][ T9953] bond9: left promiscuous mode
[  194.400490][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.479821][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.558936][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  195.088372][ T9964] netlink: 'syz.2.1084': attribute type 1 has an invalid length.
[  195.138019][ T9964] bond2: (slave ): Releasing backup interface
[  195.150400][ T9964] bond2: (slave ): last VLAN challenged slave left bond - VLAN blocking is removed
[  195.163869][ T9972] netlink: 'syz.0.1087': attribute type 13 has an invalid length.
[  195.235928][ T9976] syzkaller0: Caught tx_queue_len zero misconfig
[  195.377917][ T9979] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  195.410936][ T9981] __nla_validate_parse: 5 callbacks suppressed
[  195.410946][ T9981] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1090'.
[  195.642717][ T9998] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1093'.
[  195.683264][T10001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1094'.
[  195.692897][T10001] netlink: 'syz.0.1094': attribute type 7 has an invalid length.
[  195.695888][T10001] netlink: 'syz.0.1094': attribute type 8 has an invalid length.
[  195.699402][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'.
[  195.703959][T10004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1095'.
[  195.713573][T10001] IPv6: sit2: Disabled Multicast RS
[  196.019795][T10022] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  196.102866][T10025] bridge_slave_0: Caught tx_queue_len zero misconfig
[  196.195234][T10029] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1104'.
[  196.270300][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1105'.
[  196.277694][T10032] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1105'.
[  196.606566][ T6155] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  196.614020][ T6155] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 50625 - 0
[  196.623587][ T6155] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  196.626609][ T6155] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 50625 - 0
[  196.630016][ T6155] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  196.632600][ T6155] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 50625 - 0
[  196.635312][ T6155] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  196.637813][ T6155] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 50625 - 0
[  197.377950][T10059] netlink: 'syz.2.1110': attribute type 1 has an invalid length.
[  197.393632][T10059] 8021q: adding VLAN 0 to HW filter on device bond11
[  197.401175][T10059] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1110'.
[  197.424464][T10062] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1111'.
[  197.439261][T10067] netlink: 'syz.2.1112': attribute type 1 has an invalid length.
[  197.465740][T10067] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address
[  197.471718][T10067] bond12: (slave vxcan1): Error -95 calling set_mac_address
[  197.496490][T10070] netlink: 'syz.0.1113': attribute type 13 has an invalid length.
[  197.515906][T10074] bond12: (slave gretap0): making interface the new active one
[  197.520740][T10074] bond12: (slave gretap0): Enslaving as an active interface with an up link
[  197.741183][T10102] netlink: 'syz.0.1122': attribute type 10 has an invalid length.
[  197.763373][T10101] mac80211_hwsim hwsim3 wlan1: Caught tx_queue_len zero misconfig
[  197.770034][T10102] tap0: tun_chr_ioctl cmd 1074025677
[  197.774664][T10102] tap0: linktype set to 773
[  197.849649][ T8537] net_ratelimit: 28 callbacks suppressed
[  197.849663][ T8537] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  197.878716][T10104] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  197.899850][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  197.910628][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  197.956960][T10115] netlink: 'syz.2.1126': attribute type 1 has an invalid length.
[  197.960519][T10115] netlink: 'syz.2.1126': attribute type 4 has an invalid length.
[  197.972754][T10117] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.975265][T10117] syzkaller0: entered promiscuous mode
[  197.977164][T10117] syzkaller0: entered allmulticast mode
[  197.984673][T10117] netlink: 'syz.1.1127': attribute type 8 has an invalid length.
[  197.989151][T10117] sch_fq: defrate 0 ignored.
[  198.017950][T10116] tipc: Resetting bearer <eth:syzkaller0>
[  198.044106][T10116] tipc: Disabling bearer <eth:syzkaller0>
[  198.051122][T10119] netlink: 'syz.2.1128': attribute type 2 has an invalid length.
[  198.249107][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.258891][T10134] syzkaller0: entered promiscuous mode
[  198.261015][T10134] syzkaller0: entered allmulticast mode
[  198.319761][ T6349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.496945][T10140] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.503695][T10140] syzkaller0: entered promiscuous mode
[  198.505567][T10140] syzkaller0: entered allmulticast mode
[  198.512232][T10140] tipc: Resetting bearer <eth:syzkaller0>
[  198.530125][T10140] tipc: Disabling bearer <eth:syzkaller0>
[  198.672942][T10145] veth0_macvtap: left promiscuous mode
[  198.739479][T10149] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  198.747902][T10149] syzkaller0: entered promiscuous mode
[  198.750223][T10149] syzkaller0: entered allmulticast mode
[  198.753690][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.861336][T10154] tipc: Failed to remove unknown binding: 66,1,1/1248642600:909186816/909186818
[  198.865411][T10154] tipc: Failed to remove unknown binding: 66,1,1/1248642600:909186816/909186818
[  198.878837][ T8545] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  198.960450][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.014062][ T6156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  199.059853][T10159] syzkaller0: entered promiscuous mode
[  199.062156][T10159] syzkaller0: entered allmulticast mode
[  199.231288][ T6155] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  199.233881][ T6155] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  199.236491][ T6155] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  199.239583][ T6155] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  199.378169][T10181] netlink: 'syz.1.1148': attribute type 1 has an invalid length.
[  199.536475][T10190] team0: Mode changed to "broadcast"
[  199.600550][ T1380] ieee802154 phy1 wpan1: encryption failed: -22
[  199.732008][T10199] netlink: 'syz.0.1154': attribute type 1 has an invalid length.
[  199.755192][T10199] 8021q: adding VLAN 0 to HW filter on device bond11
[  199.790549][T10199] vlan1: entered allmulticast mode
[  199.792763][T10199] bond11: entered allmulticast mode
[  199.864385][ T5673] bridge0: entered promiscuous mode
[  200.417143][T10225] macvtap1: entered promiscuous mode
[  200.419405][T10228] __nla_validate_parse: 33 callbacks suppressed
[  200.419418][T10228] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1162'.
[  200.420321][T10225] dummy0: entered promiscuous mode
[  200.427648][T10225] macvtap1: entered allmulticast mode
[  200.430489][T10225] dummy0: entered allmulticast mode
[  200.454945][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1161'.
[  200.488360][T10232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1163'.
[  200.538306][T10234] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1164'.
[  200.790106][T10248] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1169'.
[  200.801137][T10248] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1169'.
[  200.814685][T10248] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1169'.
[  200.838771][T10248] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1169'.
[  200.855499][T10248] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1169'.
[  200.867286][T10248] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1169'.
[  200.918864][T10248] bridge0: port 1(syz_tun) entered disabled state
[  201.084549][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 42921 - 0
[  201.102161][   T12] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  201.111004][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 42921 - 0
[  201.122191][   T12] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  201.140480][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 42921 - 0
[  201.156139][   T12] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  201.159857][T10264] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002
[  201.163642][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 42921 - 0
[  201.168677][   T12] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  201.289860][T10266] 8021q: adding VLAN 0 to HW filter on device bond13
[  201.323646][T10277] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  201.352237][T10266] bond13: (slave veth13): Enslaving as an active interface with a down link
[  201.355367][T10277] syzkaller0: entered promiscuous mode
[  201.357107][T10277] syzkaller0: entered allmulticast mode
[  201.367301][T10266] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.374709][T10266] bond13: (slave batadv0): making interface the new active one
[  201.379095][T10266] batadv0: entered promiscuous mode
[  201.381371][T10266] bond13: (slave batadv0): Enslaving as an active interface with an up link
[  201.676240][T10302] syzkaller0: entered promiscuous mode
[  201.680685][T10302] syzkaller0: entered allmulticast mode
[  201.744992][T10311] ip6tnl0: Caught tx_queue_len zero misconfig
[  201.794875][T10316] vlan4: entered allmulticast mode
[  201.796482][T10316] veth0_to_bond: entered allmulticast mode
[  201.821940][T10317] 8021q: adding VLAN 0 to HW filter on device bond14
[  201.853141][T10308] macsec2: entered promiscuous mode
[  201.936424][T10324] bond15: entered promiscuous mode
[  201.938397][T10324] 8021q: adding VLAN 0 to HW filter on device bond15
[  202.363962][T10342] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  202.367114][T10342] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  202.773625][T10386] validate_nla: 8 callbacks suppressed
[  202.773641][T10386] netlink: 'syz.0.1206': attribute type 10 has an invalid length.
[  202.804926][T10383] bond9: Unable to set up delay as MII monitoring is disabled
[  202.808440][T10383] bond9 (unregistering): Released all slaves
[  202.839630][T10392] netlink: 'syz.0.1207': attribute type 10 has an invalid length.
[  202.903124][T10392] wg2: Caught tx_queue_len zero misconfig
[  203.029625][T10411] netlink: 'syz.0.1212': attribute type 1 has an invalid length.
[  203.032202][T10410] netlink: 'syz.0.1212': attribute type 1 has an invalid length.
[  203.045398][T10410] net_ratelimit: 45 callbacks suppressed
[  203.045408][T10410] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes.
[  203.092051][T10416] vlan2: entered allmulticast mode
[  203.094161][T10416] macvtap0: entered allmulticast mode
[  203.122268][T10413] batadv_slave_0: entered promiscuous mode
[  203.128764][T10413] batadv_slave_0: entered allmulticast mode
[  203.266264][T10431] bridge14: the hash_elasticity option has been deprecated and is always 16
[  203.467217][T10439] syzkaller0: entered promiscuous mode
[  203.470822][T10439] syzkaller0: entered allmulticast mode
[  203.761453][T10444] IPv6: sit2: Disabled Multicast RS
[  203.961591][T10470] netlink: 'syz.2.1228': attribute type 1 has an invalid length.
[  203.969806][T10470] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  204.018045][T10476] netlink: 'syz.0.1229': attribute type 2 has an invalid length.
[  204.077192][T10476] bond12: option resend_igmp: invalid value (2878)
[  204.080321][T10476] bond12: option resend_igmp: allowed values 0 - 255
[  204.084492][T10476] bond12 (unregistering): Released all slaves
[  204.152138][T10484] netlink: 'syz.2.1232': attribute type 1 has an invalid length.
[  204.368206][T10514] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  204.372059][T10514] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  204.487927][T10515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.537807][T10519] syzkaller1: entered promiscuous mode
[  204.543022][T10519] syzkaller1: entered allmulticast mode
[  205.610843][T10539] netlink: 'syz.0.1249': attribute type 39 has an invalid length.
[  205.690201][T10539] __nla_validate_parse: 251 callbacks suppressed
[  205.690214][T10539] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1249'.
[  205.700324][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1249'.
[  205.875707][T10548] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1251'.
[  205.884012][T10548] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1251'.
[  205.887797][T10548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1251'.
[  205.894876][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1251'.
[  205.907909][T10548] netlink: 'syz.1.1251': attribute type 15 has an invalid length.
[  205.912437][T10549] netlink: 'syz.1.1251': attribute type 15 has an invalid length.
[  206.065408][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1254'.
[  206.252726][T10570] IPv6: NLM_F_CREATE should be specified when creating new route
[  206.259685][T10570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  206.262755][T10570] IPv6: NLM_F_CREATE should be set when creating new route
[  206.265057][T10570] IPv6: NLM_F_CREATE should be set when creating new route
[  206.267205][T10570] IPv6: NLM_F_CREATE should be set when creating new route
[  206.306671][T10570] syzkaller1: entered promiscuous mode
[  206.310677][T10570] syzkaller1: entered allmulticast mode
[  206.329372][T10578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1258'.
[  206.347429][T10576] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1257'.
[  206.402583][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1257'.
[  209.529794][T10590] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  209.688297][T10612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  209.761153][T10622] validate_nla: 3 callbacks suppressed
[  209.761163][T10622] netlink: 'syz.1.1270': attribute type 1 has an invalid length.
[  209.794520][T10622] 8021q: adding VLAN 0 to HW filter on device bond9
[  209.816719][T10622] vlan6: entered allmulticast mode
[  209.818389][T10622] bond9: entered allmulticast mode
[  209.879439][T10628] netlink: 'syz.2.1272': attribute type 10 has an invalid length.
[  212.479015][ T6155] batadv0: left promiscuous mode
[  212.963672][T10630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  213.062552][T10665] xt_hashlimit: size too large, truncated to 1048576
[  213.113272][T10673] __nla_validate_parse: 1 callbacks suppressed
[  213.113283][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'.
[  213.130770][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'.
[  213.135983][T10673] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1281'.
[  213.243067][T10677] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1282'.
[  213.302425][T10681] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1284'.
[  213.409458][T10689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1287'.
[  213.444709][T10691] wg2: Caught tx_queue_len zero misconfig
[  213.583619][T10695] netlink: 'syz.1.1289': attribute type 21 has an invalid length.
[  213.864171][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1292'.
[  213.904991][T10710] netlink: 'syz.2.1294': attribute type 83 has an invalid length.
[  213.928390][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1295'.
[  213.935081][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1295'.
[  214.215420][T10728] netlink: 'syz.0.1299': attribute type 1 has an invalid length.
[  214.235988][T10728] bond12: entered promiscuous mode
[  214.237912][T10728] 8021q: adding VLAN 0 to HW filter on device bond12
[  214.246673][T10728] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1299'.
[  214.859185][T10755] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  215.465072][T10782] netlink: 'syz.2.1312': attribute type 1 has an invalid length.
[  215.482007][T10782] bond16: entered promiscuous mode
[  215.484205][T10782] 8021q: adding VLAN 0 to HW filter on device bond16
[  215.493423][T10781] bond16: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  215.498433][T10781] bond16: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  215.502009][T10781] bond16: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  216.332924][T10820] GUP no longer grows the stack in syz.0.1323 (10820): 200000003000-20000000a000 (200000001000)
[  216.350514][T10820] CPU: 0 UID: 0 PID: 10820 Comm: syz.0.1323 Not tainted syzkaller #0 PREEMPT(full) 
[  216.350531][T10820] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  216.350537][T10820] Call Trace:
[  216.350543][T10820]  <TASK>
[  216.350548][T10820]  dump_stack_lvl+0xe8/0x150
[  216.350567][T10820]  __get_user_pages+0x2378/0x2720
[  216.350581][T10820]  ? __gup_longterm_locked+0xc4e/0x1630
[  216.350600][T10820]  ? __gup_longterm_locked+0xc4e/0x1630
[  216.350610][T10820]  ? down_read_killable+0x1bb/0x340
[  216.350626][T10820]  __gup_longterm_locked+0xdcf/0x1630
[  216.350638][T10820]  ? lock_acquire+0x106/0x350
[  216.350655][T10820]  gup_fast_fallback+0x1d84/0x20d0
[  216.350679][T10820]  ? __pfx_gup_fast_fallback+0x10/0x10
[  216.350689][T10820]  ? futex_unqueue+0x22/0x240
[  216.350724][T10820]  ? futex_unqueue+0x22/0x240
[  216.350734][T10820]  ? futex_unqueue+0x22/0x240
[  216.350744][T10820]  ? is_valid_gup_args+0x11f/0x200
[  216.350755][T10820]  ? get_user_pages_fast+0x4d/0xb0
[  216.350767][T10820]  __iov_iter_get_pages_alloc+0x370/0xa10
[  216.350785][T10820]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  216.350799][T10820]  iov_iter_get_pages2+0x5e/0xa0
[  216.350814][T10820]  __se_sys_vmsplice+0x7c7/0x1620
[  216.350834][T10820]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  216.350845][T10820]  ? __pfx_futex_wait+0x10/0x10
[  216.350862][T10820]  ? __pfx_generic_map_lookup_batch+0x10/0x10
[  216.350880][T10820]  ? put_files_struct+0x256/0x350
[  216.350889][T10820]  ? 0xffffffffff600000
[  216.350911][T10820]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.350921][T10820]  do_syscall_64+0x15f/0xf80
[  216.350932][T10820]  ? trace_irq_disable+0x3b/0x140
[  216.350946][T10820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.350957][T10820] RIP: 0033:0x7f6ff799cdd9
[  216.350965][T10820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.350972][T10820] RSP: 002b:00007f6ff87a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  216.350982][T10820] RAX: ffffffffffffffda RBX: 00007f6ff7c15fa0 RCX: 00007f6ff799cdd9
[  216.350989][T10820] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b
[  216.350994][T10820] RBP: 00007f6ff7a32d69 R08: 0000000000000000 R09: 0000000000000000
[  216.350999][T10820] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  216.351005][T10820] R13: 00007f6ff7c16038 R14: 00007f6ff7c15fa0 R15: 00007ffc445b3068
[  216.351020][T10820]  </TASK>
[  216.499946][T10823] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  216.950479][T10854] netlink: 'syz.1.1333': attribute type 1 has an invalid length.
[  217.003443][T10854] 8021q: adding VLAN 0 to HW filter on device bond10
[  219.741227][T10843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  219.898674][T10866] __nla_validate_parse: 8 callbacks suppressed
[  219.898691][T10866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1335'.
[  219.976202][T10867] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  219.979778][T10867] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  220.052933][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'.
[  220.056206][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'.
[  220.162981][T10877] syzkaller0: entered promiscuous mode
[  220.165852][T10877] syzkaller0: entered allmulticast mode
[  220.275319][T10877] IPVS: set_ctl: invalid protocol: 60 10.1.0.254:20004
[  220.282945][T10877] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1340'.
[  220.498149][T10882] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1341'.
[  220.525065][T10882] dummy0 (unregistering): left allmulticast mode
[  220.697597][T10885] bond0: Caught tx_queue_len zero misconfig
[  220.852171][T10891] netlink: 'syz.1.1343': attribute type 1 has an invalid length.
[  220.861351][T10888] netlink: 'syz.1.1343': attribute type 1 has an invalid length.
[  221.008489][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'.
[  221.018289][T10901] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1347'.
[  221.043650][T10904] netlink: 'syz.2.1348': attribute type 39 has an invalid length.
[  221.294870][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1353'.
[  221.360557][T10921] xt_CT: You must specify a L4 protocol and not use inversions on it
[  221.372510][T10921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1351'.
[  221.475987][T10940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  221.491379][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1357'.
[  221.554734][T10946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  221.593944][T10950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.743014][T10962] lo: Caught tx_queue_len zero misconfig
[  221.765939][T10960] tipc: Failed to remove unknown binding: 66,0,0/0:2129803702/2129803704
[  221.772205][T10960] tipc: Failed to remove unknown binding: 66,0,0/0:2129803702/2129803703
[  221.777161][T10960] tipc: Failed to remove unknown binding: 66,0,0/0:2129803702/2129803704
[  221.780712][T10960] tipc: Failed to remove unknown binding: 66,0,0/0:2129803702/2129803703
[  222.124709][T10987] IPVS: set_ctl: invalid protocol: 51 172.20.20.47:20000
[  222.586405][T10995] geneve1: entered promiscuous mode
[  222.817694][T11005] netlink: 'syz.1.1375': attribute type 12 has an invalid length.
[  222.834118][T11005] netlink: 'syz.1.1375': attribute type 39 has an invalid length.
[  222.910520][T11008] netlink: 'syz.0.1376': attribute type 11 has an invalid length.
[  225.714530][T11020] __nla_validate_parse: 5 callbacks suppressed
[  225.714541][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1377'.
[  225.757453][T11020] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address
[  225.762237][T11020] bond13: (slave vxcan3): Error -95 calling set_mac_address
[  225.787971][T11023] netlink: 'syz.2.1378': attribute type 1 has an invalid length.
[  225.828192][T11023] bond18: entered promiscuous mode
[  225.830098][T11023] bond18: entered allmulticast mode
[  225.832109][T11023] 8021q: adding VLAN 0 to HW filter on device bond18
[  225.836111][T11020] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1377'.
[  225.856673][T11023] bridge16: entered promiscuous mode
[  225.858751][T11023] bridge16: entered allmulticast mode
[  225.861440][T11023] bond18: (slave bridge16): Enslaving as a backup interface with an up link
[  225.865492][T11020] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1377'.
[  225.880191][T11023] bridge17: entered promiscuous mode
[  225.882224][T11023] bridge17: entered allmulticast mode
[  225.884329][T11023] bond18: (slave bridge17): Enslaving as a backup interface with a down link
[  225.891121][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1377'.
[  225.930646][ T8171] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  226.014786][T11036] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1383'.
[  226.043543][T11038] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1385'.
[  226.046763][T11039] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1385'.
[  226.053481][T11038] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  226.069236][ T6155] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  226.121221][T11045] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1384'.
[  226.125919][T11045] 8021q: adding VLAN 0 to HW filter on device team0
[  226.133386][T11045] netlink: 'syz.2.1384': attribute type 8 has an invalid length.
[  226.157562][T11041] bridge19: entered promiscuous mode
[  226.160572][T11041] bridge19: entered allmulticast mode
[  226.165120][T11041] team0: Port device bridge19 added
[  226.202707][T11056] ieee802154 phy1 wpan1: encryption failed: -22
[  226.209368][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1387'.
[  226.247945][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1388'.
[  226.264268][T11056] bond11: (slave bridge12): Enslaving as an active interface with an up link
[  226.296908][T11066] netlink: 'syz.2.1390': attribute type 8 has an invalid length.
[  226.662607][T11103] netlink: zone id is out of range
[  226.664689][T11103] netlink: zone id is out of range
[  226.666677][T11103] netlink: zone id is out of range
[  226.669604][T11103] netlink: zone id is out of range
[  226.671413][T11103] netlink: zone id is out of range
[  226.673306][T11103] netlink: zone id is out of range
[  226.675115][T11103] netlink: zone id is out of range
[  226.676764][T11103] netlink: zone id is out of range
[  226.679164][T11103] netlink: zone id is out of range
[  226.683739][T11103] netlink: zone id is out of range
[  227.174578][T11160] bond14 (unregistering): Released all slaves
[  227.305289][T11165] bond14: entered allmulticast mode
[  227.363713][T11168] netlink: 'syz.0.1410': attribute type 13 has an invalid length.
[  227.370002][T11168] netlink: 'syz.0.1410': attribute type 17 has an invalid length.
[  227.477462][T11175] netlink: 'syz.1.1412': attribute type 11 has an invalid length.
[  227.482472][T11175] syzkaller0: entered promiscuous mode
[  227.485938][T11175] syzkaller0: entered allmulticast mode
[  227.567160][T11177] bond15: option all_slaves_active: invalid value (140)
[  227.570533][T11177] bond15 (unregistering): Released all slaves
[  228.172963][T11204] netlink: 'syz.0.1421': attribute type 1 has an invalid length.
[  228.234654][T11215] netlink: 'syz.1.1424': attribute type 1 has an invalid length.
[  228.244751][T11204] vti0: entered promiscuous mode
[  228.295420][T11215] 8021q: adding VLAN 0 to HW filter on device bond12
[  228.418903][T11226] netlink: 'syz.0.1427': attribute type 13 has an invalid length.
[  228.642873][T11246] bond13: entered promiscuous mode
[  228.649187][T11246] 8021q: adding VLAN 0 to HW filter on device bond13
[  228.672206][T11246] macsec2: entered promiscuous mode
[  228.747385][T11255] syzkaller1: entered promiscuous mode
[  228.749341][T11255] syzkaller1: entered allmulticast mode
[  228.992467][T11263] bond0: (slave vlan3): Opening slave failed
[  229.073879][T11265] x_tables: duplicate underflow at hook 1
[  229.082282][T11265] erspan0: entered promiscuous mode
[  229.085995][T11265] gretap0: entered promiscuous mode
[  229.092644][T11265] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  229.140182][T11269] netlink: 'syz.1.1440': attribute type 1 has an invalid length.
[  229.142624][T11269] netlink: 'syz.1.1440': attribute type 1 has an invalid length.
[  229.175172][T11269] bond14: option arp_interval: invalid value (18446744073692775680)
[  229.177842][T11269] bond14: option arp_interval: allowed values 0 - 2147483647
[  229.183473][T11269] bond14 (unregistering): Released all slaves
[  229.343039][T11282] bridge0: port 1(syz_tun) entered blocking state
[  229.345980][T11282] bridge0: port 1(syz_tun) entered disabled state
[  229.351262][T11282] syz_tun: entered allmulticast mode
[  229.355959][T11282] syz_tun: entered promiscuous mode
[  229.626869][T11309] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  229.705297][T11311] bond19: Unable to set down delay as MII monitoring is disabled
[  229.711524][T11311] bond19 (unregistering): Released all slaves
[  230.063767][T11325] syzkaller0: entered promiscuous mode
[  230.065678][T11325] syzkaller0: entered allmulticast mode
[  230.257024][T11339] netlink: 'syz.1.1457': attribute type 11 has an invalid length.
[  230.425217][T11357] team_slave_1: Caught tx_queue_len zero misconfig
[  230.570272][T11363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  230.581776][T11362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  230.798360][T11389] __nla_validate_parse: 34 callbacks suppressed
[  230.798371][T11389] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1472'.
[  230.838397][T11395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1471'.
[  230.975360][T11401] siw: device registration error -23
[  231.016027][T11406] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  231.020292][T11406] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  231.088957][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1477'.
[  231.093230][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1477'.
[  231.096661][T11414] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1477'.
[  231.110891][T11414] hmac(sh: entered promiscuous mode
[  231.114321][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'.
[  231.130062][T11414] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1477'.
[  231.134525][T11414] netlink: 582 bytes leftover after parsing attributes in process `syz.2.1477'.
[  231.137451][T11414] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1477'.
[  231.351862][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1482'.
[  231.599009][ T5621] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  231.697967][T11432] xt_nfacct: accounting object `syz0' does not exist
[  231.878159][T11446] net_ratelimit: 18 callbacks suppressed
[  231.878178][T11446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.905019][T11446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.914108][T11446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.917627][T11446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.922320][T11446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.925633][T11446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.931148][T11446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.938476][T11446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.946846][T11446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.956279][T11446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.975078][T11456] xt_CONNSECMARK: invalid mode: 0
[  232.273923][T11467] can: request_module (can-proto-0) failed.
[  232.465394][T11481] bridge0: port 3(vlan5) entered blocking state
[  232.472442][T11481] bridge0: port 3(vlan5) entered disabled state
[  232.477067][T11481] vlan5: entered allmulticast mode
[  232.479681][T11481] bridge0: entered allmulticast mode
[  232.485825][T11481] vlan5: left allmulticast mode
[  232.487608][T11481] bridge0: left allmulticast mode
[  232.771342][   T34] audit: type=1804 audit(1778666999.538:6): pid=11500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1504" name="/newroot/493/cgroup.controllers" dev="tmpfs" ino=2536 res=1 errno=0
[  232.798528][   T34] audit: type=1800 audit(1778666999.538:7): pid=11500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1504" name="cgroup.controllers" dev="tmpfs" ino=2536 res=0 errno=0
[  232.903238][T11511] syz_tun: left allmulticast mode
[  232.904975][T11511] syz_tun: left promiscuous mode
[  232.906686][T11511] bridge0: port 1(syz_tun) entered disabled state
[  232.920174][T11511] vlan0: entered promiscuous mode
[  232.974577][T11518] : renamed from bond_slave_0
[  233.175048][T11542] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  233.343778][T11547] bridge_slave_0: Caught tx_queue_len zero misconfig
[  233.950346][T11532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  234.075717][T11556] validate_nla: 5 callbacks suppressed
[  234.075731][T11556] netlink: 'syz.2.1520': attribute type 1 has an invalid length.
[  234.129415][T11556] 8021q: adding VLAN 0 to HW filter on device bond19
[  234.283880][T11576] netlink: 'syz.0.1525': attribute type 1 has an invalid length.
[  234.409198][T11580] netlink: 'syz.0.1526': attribute type 13 has an invalid length.
[  234.483259][T11583] syzkaller0: Caught tx_queue_len zero misconfig
[  235.184360][T11620] bond0 (unregistering): Released all slaves
[  235.583639][T11642] bond15: option ad_select: invalid value (34)
[  235.593101][T11642] bond15 (unregistering): Released all slaves
[  235.714658][T11655] vlan8: entered allmulticast mode
[  235.725088][T11655] bond0: entered allmulticast mode
[  235.802690][T11655] bond0 (unregistering): Released all slaves
[  235.875345][T11665] __nla_validate_parse: 24 callbacks suppressed
[  235.875361][T11665] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1549'.
[  235.905764][T11665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1549'.
[  235.911076][T11665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1549'.
[  235.915788][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'.
[  235.921342][T11669] xt_CT: You must specify a L4 protocol and not use inversions on it
[  235.936841][ T8171] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  235.939966][T11669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1550'.
[  235.943945][ T8171] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  235.946925][ T8171] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  235.947549][T11669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1550'.
[  235.950042][ T8171] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  235.951059][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'.
[  235.959852][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'.
[  235.964160][T11669] netlink: 'syz.1.1550': attribute type 1 has an invalid length.
[  236.007060][T11669] 8021q: adding VLAN 0 to HW filter on device bond14
[  236.014666][T11669] bond0: (slave bond14): making interface the new active one
[  236.017619][T11669] bond0: (slave bond14): Enslaving as an active interface with an up link
[  236.034284][T11669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1550'.
[  236.039838][T11669] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.086789][T11678] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1553'.
[  236.090864][T11679] 0{X: renamed from gretap0 (while UP)
[  236.094546][T11679] 0{X: entered allmulticast mode
[  236.097381][T11678] 0{X: left allmulticast mode
[  236.975403][T11709] netlink: 'syz.0.1562': attribute type 2 has an invalid length.
[  236.977966][T11709] netlink: 'syz.0.1562': attribute type 8 has an invalid length.
[  237.045290][T11713] siw: device registration error -23
[  237.045299][T11714] siw: device registration error -23
[  237.198370][T11724] netlink: 'syz.0.1566': attribute type 4 has an invalid length.
[  237.218307][T11724] netlink: 'syz.0.1566': attribute type 4 has an invalid length.
[  237.238724][ T5652] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  237.244376][ T5652] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  237.250987][ T5652] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  237.256214][ T5652] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  237.426340][T11734] net_ratelimit: 259 callbacks suppressed
[  237.426363][T11734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.542876][T11749] syzkaller0: entered promiscuous mode
[  237.552266][T11749] syzkaller0: entered allmulticast mode
[  237.998946][T11764] netlink: 'syz.1.1577': attribute type 1 has an invalid length.
[  240.180196][T11764] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  240.227550][T11768] netlink: 'syz.0.1578': attribute type 1 has an invalid length.
[  240.280190][T11768] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  240.366990][T11778] netlink: 'syz.2.1581': attribute type 29 has an invalid length.
[  240.381783][T11778] netlink: 'syz.2.1581': attribute type 29 has an invalid length.
[  240.433998][T11782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.588002][T11797] syzkaller0: entered promiscuous mode
[  240.597444][T11797] syzkaller0: entered allmulticast mode
[  240.662135][T11800] xt_hl: Unknown TTL match mode: 237
[  240.887849][T11820] netlink: 'syz.0.1591': attribute type 58 has an invalid length.
[  240.890636][T11820] __nla_validate_parse: 20 callbacks suppressed
[  240.890645][T11820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1591'.
[  240.941638][T11822] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1592'.
[  240.946776][T11822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1592'.
[  242.876192][T11829] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1594'.
[  243.116189][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1599'.
[  243.505455][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1600'.
[  243.515142][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1601'.
[  243.521495][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1601'.
[  243.524768][T11853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1601'.
[  243.528249][T11854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1601'.
[  243.544738][ T8171] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  243.633246][ T8171] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  243.636629][ T8171] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  243.649384][ T8171] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  243.733713][T11861] bond15: entered allmulticast mode
[  243.744776][T11861] macvlan2: entered promiscuous mode
[  243.747103][T11861] macvlan2: entered allmulticast mode
[  243.750087][T11861] bond15: (slave macvlan2): Opening slave failed
[  243.900552][T11866] dvmrp1: tun_chr_ioctl cmd 1074025673
[  243.906971][T11866] dvmrp1: tun_chr_ioctl cmd 1074025673
[  243.909629][T11866] dvmrp1: tun_chr_ioctl cmd 1074025673
[  243.913108][T11869] netem: change failed
[  243.915231][T11866] dvmrp1: tun_chr_ioctl cmd 1074025673
[  243.917751][T11866] dvmrp1: tun_chr_ioctl cmd 1074025673
[  244.280606][T11884] netlink: 'syz.1.1607': attribute type 4 has an invalid length.
[  244.300443][T11884] netlink: 'syz.1.1607': attribute type 4 has an invalid length.
[  244.374962][T11888] bridge0: port 1(syz_tun) entered blocking state
[  244.385417][T11888] bridge0: port 1(syz_tun) entered disabled state
[  244.399899][T11888] syz_tun: entered allmulticast mode
[  244.405756][T11888] syz_tun: entered promiscuous mode
[  244.411191][T11888] bridge0: port 1(syz_tun) entered blocking state
[  244.413442][T11888] bridge0: port 1(syz_tun) entered forwarding state
[  244.595827][T11893] ip6gretap0: left promiscuous mode
[  244.601383][T11893] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  244.867508][T11929] netlink: 'syz.0.1618': attribute type 1 has an invalid length.
[  244.936875][T11929] bond15: (slave geneve4): making interface the new active one
[  244.944419][T11929] bond15: (slave geneve4): Enslaving as an active interface with an up link
[  244.950732][ T6155] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  244.969844][ T6155] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  245.005285][T11929] 8021q: adding VLAN 0 to HW filter on device bond15
[  245.012407][ T6155] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  245.028854][ T6155] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  245.325970][T11943] bridge0: port 3(erspan0) entered blocking state
[  245.332611][T11943] bridge0: port 3(erspan0) entered disabled state
[  245.334891][T11943] erspan0: entered allmulticast mode
[  245.338213][T11943] erspan0: entered promiscuous mode
[  245.570341][T11962] netlink: 'syz.0.1624': attribute type 1 has an invalid length.
[  247.598907][ T5004] Bluetooth: hci2: command 0x0405 tx timeout
[  248.622055][T11964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  248.747983][T12002] __nla_validate_parse: 13 callbacks suppressed
[  248.747995][T12002] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1632'.
[  248.839070][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'.
[  248.871271][T12016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.881027][T12024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1638'.
[  248.983434][T12035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1640'.
[  248.986918][T12035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1640'.
[  248.996739][T12035] erspan0: entered promiscuous mode
[  249.000796][T12035] 0{X: entered promiscuous mode
[  249.003805][T12035] debugfs: 'hsr0' already exists in 'hsr'
[  249.006172][T12035] Cannot create hsr debugfs directory
[  249.008429][T12035] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  249.013556][T12035] hsr0: Slave B (30{X) is not up; please bring it up to get a fully working HSR network
[  251.890903][T12026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  251.956385][T12040] --map-set only usable from mangle table
[  252.043912][T12049] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1644'.
[  252.056695][T12049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  252.064574][T12049] IPVS: set_ctl: invalid protocol: 51 172.30.0.2:20000
[  252.070665][T12051] syzkaller0: entered promiscuous mode
[  252.074003][T12051] syzkaller0: entered allmulticast mode
[  252.119175][T12058] netlink: 'syz.1.1647': attribute type 10 has an invalid length.
[  252.180175][T12060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.259369][T12060] bridge0: port 1(syz_tun) entered disabled state
[  252.266261][T12064] netlink: 'syz.0.1650': attribute type 1 has an invalid length.
[  252.290645][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1648'.
[  252.369711][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1652'.
[  252.480769][T12064] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  252.481174][ T8532] syz0: Port: 1 Link DOWN
[  252.491530][ T8171] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  252.501535][ T8171] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  252.512140][ T8171] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  252.531054][ T8171] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  252.582242][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'.
[  252.706411][T12089] sctp: [Deprecated]: syz.0.1657 (pid 12089) Use of struct sctp_assoc_value in delayed_ack socket option.
[  252.706411][T12089] Use struct sctp_sack_info instead
[  252.711744][T12089] sctp: [Deprecated]: syz.0.1657 (pid 12089) Use of struct sctp_assoc_value in delayed_ack socket option.
[  252.711744][T12089] Use struct sctp_sack_info instead
[  252.721591][T12089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  252.730986][T12089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  253.172053][T12109] netlink: 516 bytes leftover after parsing attributes in process `syz.2.1662'.
[  253.802561][T12123] __nla_validate_parse: 1 callbacks suppressed
[  253.802579][T12123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1666'.
[  253.878955][T12128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1668'.
[  253.882414][T12129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1668'.
[  253.885439][T12128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1668'.
[  253.894282][T12128] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1668'.
[  253.897420][T12129] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1668'.
[  253.904590][T12128] syzkaller0: entered promiscuous mode
[  253.907513][T12128] syzkaller0: entered allmulticast mode
[  254.255666][T12149] netlink: 'syz.2.1674': attribute type 1 has an invalid length.
[  254.271731][T12148] netlink: 460 bytes leftover after parsing attributes in process `syz.0.1675'.
[  254.329622][T12149] bond0: (slave bridge21): Enslaving as a backup interface with an up link
[  254.337926][T12149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1674'.
[  254.344149][T12149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1674'.
[  254.380386][T12162] bridge0: port 4(vlan5) entered blocking state
[  254.391531][T12162] bridge0: port 4(vlan5) entered disabled state
[  254.407347][T12162] vlan5: entered allmulticast mode
[  254.417763][T12162] bridge0: entered allmulticast mode
[  254.423990][T12162] vlan5: left allmulticast mode
[  254.425690][T12162] bridge0: left allmulticast mode
[  254.555626][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'.
[  254.597556][T12186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.645967][T12192] openvswitch: netlink: IP tunnel dst address not specified
[  254.835173][ T8171] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  254.838027][ T8171] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  254.842832][ T8171] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  254.845791][ T8171] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  254.957621][T12221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.111926][T12238] netlink: 'syz.1.1699': attribute type 13 has an invalid length.
[  255.114593][T12238] netlink: 'syz.1.1699': attribute type 17 has an invalid length.
[  255.125628][T12238] 0{X: refused to change device tx_queue_len
[  255.127889][T12238] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  255.138930][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.178899][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.363551][T12253] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.668884][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.912901][T12262] netlink: 'syz.2.1703': attribute type 11 has an invalid length.
[  256.253988][T12286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.319674][T12291] netlink: 'syz.1.1711': attribute type 322 has an invalid length.
[  256.655134][T12303] nbd: nbd0 already in use
[  256.657071][T12303] block nbd0: NBD_DISCONNECT
[  256.660346][T12303] block nbd0: Send disconnect failed -32
[  256.666367][T12303] block nbd0: Send disconnect failed -32
[  256.668180][T12303] block nbd0: shutting down sockets
[  256.690428][T12303] dvmrp0: left allmulticast mode
[  257.132384][T12325] bridge0: port 1(vlan2) entered blocking state
[  257.138037][T12325] bridge0: port 1(vlan2) entered disabled state
[  257.145106][T12325] vlan2: entered allmulticast mode
[  257.146723][T12325] bridge0: entered allmulticast mode
[  257.151290][T12325] vlan2: left allmulticast mode
[  257.153039][T12325] bridge0: left allmulticast mode
[  257.180172][T12332] netlink: 'syz.0.1724': attribute type 1 has an invalid length.
[  257.234630][T12337] Timeout policy `syz1' can only be used by L3 protocol number 34825
[  257.699004][T12369] tipc: Started in network mode
[  257.701520][T12369] tipc: Node identity 9efe018b426d, cluster identity 4711
[  257.707383][T12369] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.733456][T12373] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  257.781227][T12367] tipc: Disabling bearer <eth:syzkaller0>
[  257.842488][T12377] xt_hashlimit: max too large, truncated to 1048576
[  257.859025][T12377] xt_ecn: cannot match TCP bits for non-tcp packets
[  258.049527][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.054551][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.058205][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.060802][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.064584][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.067383][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.069683][T12395] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  258.080078][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.087102][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.089265][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.091538][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.101197][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.104169][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.116802][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.119997][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.123954][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.129603][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.132948][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.137713][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.140766][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.143131][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.145515][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.152480][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.156201][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.162689][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.169071][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.176572][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.180600][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.184892][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.187888][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.192677][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.197700][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.200933][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.205751][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.211286][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.214220][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.217183][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.220423][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.223408][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.236797][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.245731][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.252696][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.258296][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.262380][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.266091][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.268061][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.275034][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.281280][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.286367][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.289549][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.294255][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.297810][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.301976][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.304149][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.308133][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.312166][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.315800][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.318876][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.322020][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.325689][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.329693][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.333244][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.336893][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.339850][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.343399][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.347104][T12393] bridge: RTM_NEWNEIGH with invalid state 0x8
[  258.722081][T12422] netlink: 'syz.0.1746': attribute type 1 has an invalid length.
[  258.779126][T12422] 8021q: adding VLAN 0 to HW filter on device bond17
[  258.901547][T12436] __nla_validate_parse: 93 callbacks suppressed
[  258.901607][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'.
[  258.908010][T12436] netlink: 'syz.0.1749': attribute type 9 has an invalid length.
[  258.918387][ T8171] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  258.927252][ T8171] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  258.931694][ T8171] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  258.936849][ T8171] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  259.010318][T12445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1753'.
[  259.013209][T12445] nbd: must specify at least one socket
[  259.018828][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1753'.
[  259.132793][T12455] nbd: must specify a size in bytes for the device
[  259.214144][T12461] netlink: 'syz.2.1758': attribute type 1 has an invalid length.
[  259.237290][T12461] 8021q: adding VLAN 0 to HW filter on device bond20
[  259.263818][T12461] bond20: (slave ip6gretap1): making interface the new active one
[  259.267226][T12461] bond20: (slave ip6gretap1): Enslaving as an active interface with an up link
[  259.425854][T12474] netlink: 'syz.2.1762': attribute type 1 has an invalid length.
[  259.469658][T12474] bond21: entered promiscuous mode
[  259.471744][T12474] 8021q: adding VLAN 0 to HW filter on device bond21
[  259.517935][T12474] bond21: (slave bridge22): making interface the new active one
[  259.521914][T12474] bridge22: entered promiscuous mode
[  259.529901][T12474] bridge22: left promiscuous mode
[  259.562696][T12484] netlink: 'syz.2.1762': attribute type 5 has an invalid length.
[  259.568655][T12484] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1762'.
[  259.690482][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  259.696403][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  259.860010][T12499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.015206][T12509] bond17: entered promiscuous mode
[  260.108742][T12517] veth0_vlan: entered allmulticast mode
[  260.127974][T12517] net_ratelimit: 2 callbacks suppressed
[  260.127989][T12517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.175028][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1767'.
[  260.303366][T12530] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1771'.
[  260.314193][T12530] bridge10: entered promiscuous mode
[  260.315997][T12530] bridge10: entered allmulticast mode
[  260.320075][T12530] team0: Port device bridge10 added
[  260.947506][T12550] netlink: 'syz.1.1776': attribute type 1 has an invalid length.
[  260.982577][T12550] bond18: (slave bridge14): making interface the new active one
[  260.986768][T12550] bond18: (slave bridge14): Enslaving as an active interface with an up link
[  260.991147][T12550] SET target dimension over the limit!
[  260.998774][T12550] bond18: (slave vlan8): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  261.202629][T12560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.568886][T12587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1786'.
[  261.665917][T12589] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1787'.
[  261.669428][T12589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1787'.
[  261.672227][T12589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1787'.
[  261.697082][T12592] netlink: 'syz.2.1788': attribute type 1 has an invalid length.
[  261.700470][T12592] netlink: 'syz.2.1788': attribute type 1 has an invalid length.
[  261.709483][T12592] syzkaller1: entered promiscuous mode
[  261.711298][T12592] syzkaller1: entered allmulticast mode
[  261.716958][T12592] syzkaller1: left promiscuous mode
[  261.721873][T12592] syzkaller1: left allmulticast mode
[  261.756151][T12596] netlink: 'syz.0.1790': attribute type 49 has an invalid length.
[  261.816256][T12596] lo speed is unknown, defaulting to 1000
[  261.819393][T12596] lo speed is unknown, defaulting to 1000
[  261.821678][T12596] lo speed is unknown, defaulting to 1000
[  261.913018][T12596] infiniband sqz0: set down
[  261.914575][ T8539] lo speed is unknown, defaulting to 1000
[  261.919963][T12596] infiniband sqz0: added lo
[  261.928079][T12596] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  261.932909][T12596] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  261.938202][T12596] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  261.965681][T12596] RDS/IB: sqz0: added
[  261.970707][T12596] smc: adding ib device sqz0 with port count 1
[  261.975204][T12596] smc:    ib device sqz0 port 1 has no pnetid
[  261.979369][T12596] lo speed is unknown, defaulting to 1000
[  261.984906][   T32] lo speed is unknown, defaulting to 1000
[  262.088739][   T26] wlan1: Trigger new scan to find an IBSS to join
[  262.114701][T12596] lo speed is unknown, defaulting to 1000
[  262.242562][T12596] lo speed is unknown, defaulting to 1000
[  262.489013][T12623] Cannot find del_set index 3 as target
[  262.841322][T12626] validate_nla: 2 callbacks suppressed
[  262.841334][T12626] netlink: 'syz.2.1797': attribute type 1 has an invalid length.
[  262.863733][T12626] bond22: entered promiscuous mode
[  262.865921][T12626] 8021q: adding VLAN 0 to HW filter on device bond22
[  263.325390][T12646] bond18 (unregistering): Released all slaves
[  263.563811][T12664] erspan0: left allmulticast mode
[  263.568796][T12664] erspan0: left promiscuous mode
[  263.576183][T12664] bridge0: port 3(erspan0) entered disabled state
[  263.579502][T12670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.584999][T12664] syz_tun: left allmulticast mode
[  263.587155][T12664] syz_tun: left promiscuous mode
[  263.589438][T12664] bridge0: port 1(syz_tun) entered disabled state
[  263.593892][T12664] team0: left allmulticast mode
[  263.595797][T12664] team0: left promiscuous mode
[  263.598272][T12664] bridge0: port 2(team0) entered disabled state
[  263.603564][T12664] bond2: (slave gretap1): Releasing active interface
[  263.606443][T12664] veth5: left allmulticast mode
[  263.608031][T12664] veth5: left promiscuous mode
[  263.612949][T12664] bridge1: port 1(veth5) entered disabled state
[  263.620158][T12664] bond0: (slave geneve3): Releasing active interface
[  263.622865][T12664] geneve3: left allmulticast mode
[  263.629288][T12664] team0: Port device bridge5 removed
[  263.632799][T12664] bond9: (slave bridge6): Releasing active interface
[  263.640650][T12664] bond15: (slave geneve4): Releasing active interface
[  263.663636][T12664] team0: Port device bridge10 removed
[  263.675586][ T6156] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  263.681235][ T6156] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  263.686942][ T6156] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  263.698480][ T6156] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  263.703837][T12670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.802998][T12681] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  263.824478][T12684] xt_bpf: check failed: parse error
[  263.854694][T12684] syzkaller0: entered promiscuous mode
[  263.856555][T12684] syzkaller0: entered allmulticast mode
[  263.906346][T12687] hmac(sh: entered promiscuous mode
[  263.974369][T12695] __nla_validate_parse: 16 callbacks suppressed
[  263.974384][T12695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'.
[  264.074591][T12701] openvswitch: netlink: IPv4 tun info is not correct
[  264.441039][T12712] lo speed is unknown, defaulting to 1000
[  264.451641][T12730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.118768][   T26] wlan1: Trigger new scan to find an IBSS to join
[  265.122361][T12746] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1828'.
[  265.187617][T12748] xt_hashlimit: size too large, truncated to 1048576
[  265.307124][T12751] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  265.556649][T12764] netlink: 'syz.2.1833': attribute type 1 has an invalid length.
[  265.560239][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1833'.
[  265.563385][T12764] netlink: 'syz.2.1833': attribute type 1 has an invalid length.
[  265.577013][T12764] syzkaller1: entered promiscuous mode
[  265.579266][T12764] syzkaller1: entered allmulticast mode
[  265.646694][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'.
[  265.653252][T12752] lo speed is unknown, defaulting to 1000
[  265.707150][T12774] netlink: 'syz.2.1837': attribute type 58 has an invalid length.
[  265.715880][T12774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1837'.
[  265.744959][T12775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1836'.
[  265.901579][T12772] lo speed is unknown, defaulting to 1000
[  265.913004][T12782] bridge22: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  266.175276][ T5621] Bluetooth: hci2: link tx timeout
[  266.177876][ T5621] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  266.302563][T12798] netlink: 'syz.0.1842': attribute type 58 has an invalid length.
[  266.305155][T12798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1842'.
[  266.395212][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'.
[  266.434683][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1844'.
[  266.437657][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1844'.
[  266.648775][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.678011][T12817] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  266.680931][T12817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.727571][T12823] bond18: option ad_select: invalid value (34)
[  266.733560][T12823] bond18 (unregistering): Released all slaves
[  266.820919][T12828] netlink: 'syz.0.1851': attribute type 13 has an invalid length.
[  266.823515][T12828] netlink: 'syz.0.1851': attribute type 17 has an invalid length.
[  266.906498][T12828] ip6gretap0: left promiscuous mode
[  266.945585][T12828] bridge0: left promiscuous mode
[  266.954290][T12828] veth1: left promiscuous mode
[  266.955859][T12828] veth1: left allmulticast mode
[  266.959332][ T6343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.963339][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.968261][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.971645][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.975237][ T6349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.980185][ T8538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.026571][T12828] veth1_macvtap: left promiscuous mode
[  267.030511][T12828] veth1_macvtap: entered promiscuous mode
[  267.041734][   T10] lo speed is unknown, defaulting to 1000
[  267.043706][   T10] sqz0: Port: 1 Link ACTIVE
[  267.068066][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.071632][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.074812][ T5693] lo speed is unknown, defaulting to 1000
[  267.076819][   T10] syz1: Port: 1 Link ACTIVE
[  267.076869][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.085544][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.255040][T12836] lo speed is unknown, defaulting to 1000
[  267.360074][T12849] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  267.419412][T12851] netlink: 'syz.1.1856': attribute type 1 has an invalid length.
[  267.454107][T12851] bridge17: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  267.520231][T12854] macvlan3: entered promiscuous mode
[  267.522007][T12854] macvlan3: entered allmulticast mode
[  267.524330][T12854] bond19: entered promiscuous mode
[  267.526385][T12854] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  267.531621][T12854] bond19: left promiscuous mode
[  267.603963][T12856] netlink: 'syz.1.1857': attribute type 1 has an invalid length.
[  267.606856][T12856] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR
[  267.877264][T12880] netlink: 'syz.2.1864': attribute type 1 has an invalid length.
[  267.977253][T12888] 8021q: adding VLAN 0 to HW filter on device bond23
[  268.010453][T12880] macvlan2: entered promiscuous mode
[  268.013237][T12880] macvlan2: entered allmulticast mode
[  268.017337][T12880] bond23: entered promiscuous mode
[  268.020510][T12880] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  268.027092][T12880] bond23: left promiscuous mode
[  268.050866][T12891] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  268.078865][T11130] wlan1: Trigger new scan to find an IBSS to join
[  268.249274][ T5621] Bluetooth: hci2: command 0x0405 tx timeout
[  268.526691][T12919] lo speed is unknown, defaulting to 1000
[  269.048503][   T26] wlan1: Creating new IBSS network, BSSID 12:47:89:1e:7a:47
[  269.288104][T12972] __nla_validate_parse: 8 callbacks suppressed
[  269.288116][T12972] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1887'.
[  269.298268][T12972] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1887'.
[  269.336677][T12976] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  269.607415][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1893'.
[  269.722914][T12988] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1895'.
[  270.075831][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1898'.
[  270.080885][T13005] pim6reg1: entered promiscuous mode
[  270.082883][T13005] pim6reg1: entered allmulticast mode
[  270.572483][T12990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  270.697756][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1902'.
[  270.707378][T13021] net_ratelimit: 16 callbacks suppressed
[  270.707394][T13021] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  270.817987][T13031] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1904'.
[  270.849813][T13039] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1907'.
[  271.008065][T13049] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1909'.
[  271.116197][T13025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.120796][ T8529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.124060][ T8529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.127578][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.131385][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.134077][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.137454][T13025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.147879][T13025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.164896][T13064] netlink: 'syz.1.1913': attribute type 1 has an invalid length.
[  271.168398][T13024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.176900][T13067] netlink: 'syz.2.1914': attribute type 1 has an invalid length.
[  271.181962][T13064] 8021q: adding VLAN 0 to HW filter on device bond20
[  271.209126][T13072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1913'.
[  271.232357][T13067] 8021q: adding VLAN 0 to HW filter on device bond24
[  271.236295][T13064] syz_tun: left allmulticast mode
[  271.238331][T13064] syz_tun: left promiscuous mode
[  271.243256][T13064] bridge0: port 1(syz_tun) entered disabled state
[  271.255711][T13064] bond20: (slave syz_tun): Enslaving as a backup interface with an up link
[  271.395345][T13087] bond18: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  271.402830][T13087] bond18 (unregistering): Released all slaves
[  271.720304][T13105] lo speed is unknown, defaulting to 1000
[  271.804228][T13127] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  271.814906][T13127] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  272.024456][T13136] netlink: 'syz.1.1929': attribute type 61 has an invalid length.
[  272.040099][T13138] netlink: 'syz.2.1931': attribute type 1 has an invalid length.
[  272.207326][T13138] bond25: (slave geneve4): making interface the new active one
[  272.232938][T13138] bond25: (slave geneve4): Enslaving as an active interface with an up link
[  272.242069][ T5652] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  272.246896][ T5652] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  272.258099][ T5652] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  272.296078][ T5652] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  272.602959][T13153] sctp: [Deprecated]: syz.1.1936 (pid 13153) Use of struct sctp_assoc_value in delayed_ack socket option.
[  272.602959][T13153] Use struct sctp_sack_info instead
[  272.619531][T13153] vlan0: entered promiscuous mode
[  272.691219][T13155] syzkaller0: entered promiscuous mode
[  272.696111][T13155] syzkaller0: entered allmulticast mode
[  272.725466][T13160] syzkaller0: entered allmulticast mode
[  272.731244][T13155] netlink: 'syz.1.1938': attribute type 8 has an invalid length.
[  272.822720][T13167] netlink: 'syz.0.1940': attribute type 9 has an invalid length.
[  272.845405][T13168] netlink: 'syz.2.1937': attribute type 1 has an invalid length.
[  272.855558][T13168] netlink: 'syz.2.1937': attribute type 4 has an invalid length.
[  272.954921][ T6494] block nbd0: Receive control failed (result -32)
[  273.851231][T13239] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.067325][T13268] syzkaller0: entered promiscuous mode
[  274.076100][T13268] syzkaller0: entered allmulticast mode
[  274.262962][T13278] xt_l2tp: invalid flags combination: 8
[  274.266488][T13278] netlink: 'syz.1.1970': attribute type 1 has an invalid length.
[  274.296205][T13264] lo speed is unknown, defaulting to 1000
[  274.482505][T13284] __nla_validate_parse: 86 callbacks suppressed
[  274.482518][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'.
[  274.487464][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1972'.
[  274.502204][T13283] syzkaller1: tun_chr_ioctl cmd 35111
[  274.518323][T13288] netlink: 'syz.2.1973': attribute type 1 has an invalid length.
[  274.528040][T13290] netlink: 'syz.2.1973': attribute type 1 has an invalid length.
[  274.931754][T13311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1980'.
[  274.935699][T13315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1981'.
[  274.964004][T13315] syzkaller0: entered promiscuous mode
[  274.966531][T13315] syzkaller0: entered allmulticast mode
[  275.040815][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1981'.
[  275.126623][T13323] netlink: 'syz.1.1983': attribute type 1 has an invalid length.
[  275.161109][T13323] 8021q: adding VLAN 0 to HW filter on device bond21
[  275.167267][T13323] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1983'.
[  275.252161][T13329] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  275.430207][T13338] bond22: Unable to set down delay as MII monitoring is disabled
[  275.433966][T13338] bond22 (unregistering): Released all slaves
[  275.564553][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1989'.
[  275.564578][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1989'.
[  275.609464][T13348] netlink: 'syz.1.1990': attribute type 1 has an invalid length.
[  275.631449][T13350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1991'.
[  275.886681][T13375] netlink: 'syz.2.1997': attribute type 6 has an invalid length.
[  275.890949][T13375] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1997'.
[  275.976126][T13390] xt_l2tp: invalid flags combination: 8
[  276.007171][T13393] net_ratelimit: 217 callbacks suppressed
[  276.007182][T13393] openvswitch: netlink: Flow actions attr not present in new flow.
[  276.085682][T13398] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20004
[  276.320808][ T8546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.439616][T13439] syzkaller1: entered promiscuous mode
[  276.441433][T13439] syzkaller1: entered allmulticast mode
[  276.559568][ T5693] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  276.785603][T13455] netem: invalid attributes len -1
[  276.787342][T13455] netem: change failed
[  276.812054][ T8171] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  276.916848][T13458] bridge11: the hash_elasticity option has been deprecated and is always 16
[  277.087774][T13471] netlink: 'syz.0.2025': attribute type 1 has an invalid length.
[  277.117271][T13471] bond19: entered promiscuous mode
[  277.120231][T13471] 8021q: adding VLAN 0 to HW filter on device bond19
[  277.143876][T13471] 8021q: adding VLAN 0 to HW filter on device bond19
[  277.148281][T13471] bond19: (slave vti1): The slave device specified does not support setting the MAC address
[  277.152321][T13471] bond19: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  277.160175][T13471] bond19: (slave vti1): making interface the new active one
[  277.163258][T13471] vti1: entered promiscuous mode
[  277.166329][T13471] bond19: (slave vti1): Enslaving as an active interface with an up link
[  277.211795][T13474] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.272394][T13476] 8021q: adding VLAN 0 to HW filter on device bond20
[  277.360747][ T8546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.369025][ T8540] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  277.545346][T13486] bridge19: the hash_elasticity option has been deprecated and is always 16
[  277.609673][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.689967][T13497] netlink: 'syz.0.2033': attribute type 1 has an invalid length.
[  277.703866][T13497] netlink: 'syz.0.2033': attribute type 2 has an invalid length.
[  277.708680][T13497] netlink: 'syz.0.2033': attribute type 1 has an invalid length.
[  277.808763][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.813945][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.839346][ T5621] Bluetooth: hci2: command 0x0405 tx timeout
[  277.841504][ T5004] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  277.849028][ T8171] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  277.856123][ T8171] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  278.080061][ T8540] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  278.133403][T13519] block nbd3: server does not support multiple connections per device.
[  278.145336][T13519] block nbd3: shutting down sockets
[  278.288310][T13525] vlan5: entered allmulticast mode
[  278.329985][ T6343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.335722][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.339195][ T2934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.344619][T13528] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR
[  278.399533][ T8546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.408168][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.411321][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.515990][T13534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  278.842432][   T34] audit: type=1804 audit(1778667045.608:8): pid=13543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2044" name="/newroot/658/cgroup.controllers" dev="tmpfs" ino=3372 res=1 errno=0
[  278.858124][   T34] audit: type=1800 audit(1778667045.618:9): pid=13543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2044" name="cgroup.controllers" dev="tmpfs" ino=3372 res=0 errno=0
[  278.873824][   T34] audit: type=1800 audit(1778667045.618:10): pid=13542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2044" name="cgroup.controllers" dev="tmpfs" ino=3372 res=0 errno=0
[  279.003663][T13553] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  279.006671][T13553] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  279.067362][T11127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.070709][T11127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.075355][T13554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  279.890633][T13572] __nla_validate_parse: 14 callbacks suppressed
[  279.890643][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2052'.
[  279.910995][T13572] tipc: Resetting bearer <eth:syzkaller0>
[  279.913255][T13572] tipc: Resetting bearer <eth:syzkaller0>
[  279.930254][T13572] validate_nla: 3 callbacks suppressed
[  279.930269][T13572] netlink: 'syz.0.2052': attribute type 16 has an invalid length.
[  279.934923][T13572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2052'.
[  279.939129][ T5693] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  279.979849][T13574] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2053'.
[  280.197586][T13588] netlink: 'syz.0.2058': attribute type 1 has an invalid length.
[  280.283217][   T34] audit: type=1800 audit(1778667047.048:11): pid=13592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2059" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=3620 res=0 errno=0
[  280.460041][T13609] pim6reg1: entered promiscuous mode
[  280.468070][T13609] pim6reg1: entered allmulticast mode
[  280.515085][T13619] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2067'.
[  280.521916][T13610] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2065'.
[  280.873659][T13629] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  280.876695][T13629] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  280.880644][ T5693] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  280.965370][T13637] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2073'.
[  281.157530][T13649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  281.598856][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  281.826031][T13671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2078'.
[  281.829173][T13671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2078'.
[  281.831998][T13671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2078'.
[  281.897675][T13673] netlink: 'syz.2.2079': attribute type 16 has an invalid length.
[  281.968182][T13675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2080'.
[  282.007245][T13679] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  282.013192][T13679] tipc: Resetting bearer <eth:syzkaller0>
[  282.043600][T13679] tipc: Resetting bearer <eth:syzkaller0>
[  282.137682][T13684] netlink: 'syz.2.2082': attribute type 1 has an invalid length.
[  282.210935][T13692] net_ratelimit: 8 callbacks suppressed
[  282.210951][T13692] netlink: zone id is out of range
[  282.229866][T13692] netlink: zone id is out of range
[  282.238508][T13692] netlink: zone id is out of range
[  282.245042][T13692] netlink: zone id is out of range
[  282.247297][T13692] netlink: zone id is out of range
[  282.256307][T13692] netlink: zone id is out of range
[  282.304608][T13698] syzkaller0: entered promiscuous mode
[  282.308269][T13698] syzkaller0: entered allmulticast mode
[  282.369445][T13701] erspan2: entered promiscuous mode
[  282.378902][T13701] erspan2: entered allmulticast mode
[  282.686979][T13726] xt_l2tp: invalid flags combination: 8
[  282.694005][T13726] netlink: 'syz.1.2093': attribute type 1 has an invalid length.
[  282.899988][T13735] xt_bpf: check failed: parse error
[  282.912355][T13707] lo speed is unknown, defaulting to 1000
[  283.850302][T13751] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  283.983376][T13755] syzkaller0: entered promiscuous mode
[  283.985130][T13755] syzkaller0: entered allmulticast mode
[  284.080403][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.083710][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.216605][T13769] netlink: 'syz.1.2104': attribute type 1 has an invalid length.
[  287.224286][T13765] bridge25: entered promiscuous mode
[  287.226299][T13765] bridge25: entered allmulticast mode
[  287.232897][T13765] team0: Port device bridge25 added
[  287.256934][T13769] bond22: entered promiscuous mode
[  287.260096][T13769] 8021q: adding VLAN 0 to HW filter on device bond22
[  287.273180][T13765] bridge26: entered promiscuous mode
[  287.274900][T13765] bridge26: entered allmulticast mode
[  287.278108][T13765] team0: Port device bridge26 added
[  287.291959][T13765] bridge0: port 1(team0) entered blocking state
[  287.295784][T13765] bridge0: port 1(team0) entered disabled state
[  287.302577][T13765] team0: entered allmulticast mode
[  287.310337][T13765] team0: entered promiscuous mode
[  287.374932][T13778] __nla_validate_parse: 12 callbacks suppressed
[  287.374945][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2106'.
[  287.382016][T13778] openvswitch: netlink: Message has 4 unknown bytes.
[  287.392854][T13778] syzkaller0: entered promiscuous mode
[  287.396206][T13778] syzkaller0: entered allmulticast mode
[  287.449603][T13781] tap0: tun_chr_ioctl cmd 1074025681
[  287.482874][T13784] netlink: 'syz.1.2109': attribute type 1 has an invalid length.
[  287.504608][T13784] bond23: entered promiscuous mode
[  287.507624][T13784] 8021q: adding VLAN 0 to HW filter on device bond23
[  287.552542][T13784] bond23: (slave veth21): making interface the new active one
[  287.557657][T13784] veth21: entered promiscuous mode
[  287.560785][T13788] netlink: 'syz.2.2110': attribute type 1 has an invalid length.
[  287.564678][T13784] bond23: (slave veth21): Enslaving as an active interface with an up link
[  287.569223][T13788] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2110'.
[  287.575248][T13788] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2110'.
[  287.578495][T13788] netlink: 'syz.2.2110': attribute type 1 has an invalid length.
[  287.657697][T13795] syzkaller0: entered promiscuous mode
[  287.663582][T13795] syzkaller0: entered allmulticast mode
[  287.804861][T13807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2116'.
[  288.265044][T13830] lo speed is unknown, defaulting to 1000
[  288.385076][T13848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2126'.
[  288.395693][T13850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.401579][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  288.510678][T13855] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.513864][T13854] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  288.527908][T13853] tipc: Disabling bearer <eth:syzkaller0>
[  288.631119][T13864] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2130'.
[  288.731467][T13870] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2132'.
[  288.734408][T13870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2132'.
[  288.772864][T13870] vlan0: entered allmulticast mode
[  288.775001][T13870] erspan0: entered allmulticast mode
[  288.805997][T13878] x_tables: duplicate underflow at hook 3
[  288.938822][T13885] syzkaller1: entered promiscuous mode
[  288.941241][T13885] syzkaller1: entered allmulticast mode
[  289.003131][T13884] batadv_slave_0: left promiscuous mode
[  289.005183][T13884] batadv_slave_0: left allmulticast mode
[  289.007468][T13884] veth0_vlan: left allmulticast mode
[  289.010209][T13884] vlan0: left promiscuous mode
[  289.038039][T13884] vlan4: left allmulticast mode
[  289.041219][T13884] veth0_to_bond: left allmulticast mode
[  289.043318][T13884] gretap3: left promiscuous mode
[  289.045568][T13884] vlan6: left allmulticast mode
[  289.058828][T13884] bond9: left allmulticast mode
[  289.061158][T13884] bond13: left promiscuous mode
[  289.064010][T13884] bond15: left allmulticast mode
[  289.066306][T13884] bond17: left promiscuous mode
[  289.073962][T13884] bond22: left promiscuous mode
[  289.083666][T13884] bond23: left promiscuous mode
[  289.085686][T13884] veth21: left promiscuous mode
[  289.173632][T13894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'.
[  289.183503][T13894] netlink: 'syz.1.2137': attribute type 8 has an invalid length.
[  289.186244][T13894] lo: entered promiscuous mode
[  289.187849][T13894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  289.199609][T11127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.208720][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  289.248736][T13896] netlink: 'syz.1.2138': attribute type 32 has an invalid length.
[  289.251774][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2138'.
[  289.292705][T13899] Dead loop on virtual device ip6_vti0 (net 26), fix it urgently!
[  289.301135][T13901] xt_TCPMSS: Only works on TCP SYN packets
[  289.440391][T13904] bond24 (unregistering): Released all slaves
[  289.480987][T13902] netlink: 'syz.1.2141': attribute type 13 has an invalid length.
[  289.495550][T13910] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.520883][T13910] netem: change failed
[  289.590898][T13919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.626701][T13919] bond0: Caught tx_queue_len zero misconfig
[  289.838739][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.842905][ T2934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  289.845578][ T2934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.150223][T13966] veth0_vlan: entered allmulticast mode
[  290.356131][T13977] syzkaller0: entered promiscuous mode
[  290.358078][T13977] syzkaller0: entered allmulticast mode
[  290.873146][T13982] netlink: 'syz.0.2161': attribute type 1 has an invalid length.
[  290.907757][T13982] 8021q: adding VLAN 0 to HW filter on device bond21
[  290.932625][T13982] bond21: (slave veth11): Enslaving as an active interface with a down link
[  291.459600][T14002] IPVS: set_ctl: invalid protocol: 16 10.1.1.2:20000
[  291.786583][T14009] netlink: 'syz.1.2169': attribute type 1 has an invalid length.
[  291.789795][T14008] netlink: 'syz.1.2169': attribute type 1 has an invalid length.
[  291.803488][T14008] bond25: entered promiscuous mode
[  291.805422][T14008] 8021q: adding VLAN 0 to HW filter on device bond25
[  291.821651][T14008] 8021q: adding VLAN 0 to HW filter on device bond25
[  291.824253][T14008] bond25: (slave wireguard0): The slave device specified does not support setting the MAC address
[  291.827570][T14008] bond25: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  291.846153][T14008] bond25: (slave wireguard0): making interface the new active one
[  291.849512][T14008] wireguard0: entered promiscuous mode
[  291.852503][T14008] bond25: (slave wireguard0): Enslaving as an active interface with an up link
[  292.067743][T14023] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  292.073051][T14023] syzkaller0: entered promiscuous mode
[  292.075348][T14023] syzkaller0: entered allmulticast mode
[  292.128348][T14023] tipc: Resetting bearer <eth:syzkaller0>
[  292.135814][T14022] tipc: Resetting bearer <eth:syzkaller0>
[  292.165623][T14022] tipc: Disabling bearer <eth:syzkaller0>
[  292.304038][T14030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  292.307074][T14030] IPv6: NLM_F_CREATE should be set when creating new route
[  292.310065][T14030] IPv6: NLM_F_CREATE should be set when creating new route
[  292.312559][T14030] IPv6: NLM_F_CREATE should be set when creating new route
[  292.401880][T14038] hsr0: entered promiscuous mode
[  292.413190][T14038] __nla_validate_parse: 11 callbacks suppressed
[  292.413208][T14038] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2178'.
[  292.420222][T14038] erspan0: left promiscuous mode
[  292.421913][T14040] validate_nla: 1 callbacks suppressed
[  292.421923][T14040] netlink: 'syz.0.2179': attribute type 21 has an invalid length.
[  292.421931][T14040] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2179'.
[  292.433174][T14038] 0{X: left promiscuous mode
[  292.436366][T14038] hsr0 (unregistering): left promiscuous mode
[  292.448167][T14040] netlink: 'syz.0.2179': attribute type 4 has an invalid length.
[  292.450839][T14040] netlink: 'syz.0.2179': attribute type 5 has an invalid length.
[  292.453699][T14040] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2179'.
[  292.528225][T14047] netlink: 'syz.0.2180': attribute type 4 has an invalid length.
[  292.594542][T14050] syzkaller0: entered promiscuous mode
[  292.597711][T14050] syzkaller0: entered allmulticast mode
[  292.657248][T14052] tipc: Resetting bearer <eth:syzkaller0>
[  292.662466][T14052] bond19: (slave vti1): Releasing backup interface
[  292.664900][T14052] vti1: left promiscuous mode
[  292.677930][T14052] bond21: (slave veth11): Releasing active interface
[  292.735657][T14054] netlink: 'syz.1.2184': attribute type 4 has an invalid length.
[  292.740683][T14054] netlink: 'syz.1.2184': attribute type 1 has an invalid length.
[  292.894429][T14056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2185'.
[  292.923182][T14056] bond22: option miimon: invalid value (18446744073709551607)
[  292.927218][T14056] bond22: option miimon: allowed values 0 - 2147483647
[  292.934534][T14056] bond22 (unregistering): Released all slaves
[  293.025463][   T56] block nbd3: Receive control failed (result -32)
[  293.094100][T14068] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2188'.
[  293.193277][T14073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2190'.
[  293.233657][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2190'.
[  293.283392][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2190'.
[  293.437082][T14099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2197'.
[  293.457626][T14102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.462153][T14102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.467449][T14102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.472292][T14102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.475392][T14102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.478294][T14102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.491454][T14102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.573741][T14110] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  294.032278][T14126] netlink: 'syz.2.2204': attribute type 1 has an invalid length.
[  294.045990][T14126] syzkaller0: entered promiscuous mode
[  294.048284][T14126] syzkaller0: entered allmulticast mode
[  294.268111][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2206'.
[  294.344753][T14135] syzkaller1: entered allmulticast mode
[  294.347915][T14135] syzkaller1: entered promiscuous mode
[  294.665747][T14154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.668761][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.694166][T14155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.764226][T14160] syzkaller0: entered promiscuous mode
[  294.766734][T14160] syzkaller0: entered allmulticast mode
[  294.783203][T14162] sctp: [Deprecated]: syz.0.2216 (pid 14162) Use of int in maxseg socket option.
[  294.783203][T14162] Use struct sctp_assoc_value instead
[  295.263809][T14184] lo speed is unknown, defaulting to 1000
[  295.536565][T14199] netlink: 'syz.1.2225': attribute type 5 has an invalid length.
[  295.639015][T14199] geneve4: entered promiscuous mode
[  295.641117][T14199] geneve4: entered allmulticast mode
[  295.644029][ T6159] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  295.647197][ T6159] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  295.651192][ T6159] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  295.654383][ T6159] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  296.486859][T14251] tipc: Resetting bearer <eth:syzkaller0>
[  299.082397][   T26] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  299.244771][T14243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  299.375126][T14260] xt_hashlimit: size too large, truncated to 1048576
[  299.439447][T14265] netlink: 'syz.0.2242': attribute type 13 has an invalid length.
[  299.451606][T14265] netlink: 'syz.0.2242': attribute type 17 has an invalid length.
[  299.915317][T14262] tipc: Resetting bearer <eth:syzkaller0>
[  300.012160][ T5693] lo speed is unknown, defaulting to 1000
[  300.040801][   T26] net_ratelimit: 4 callbacks suppressed
[  300.040816][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.045800][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  300.062843][T14265] veth1_macvtap: left promiscuous mode
[  300.065919][T14265] veth1_macvtap: entered promiscuous mode
[  300.077718][T14265] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  300.106932][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.112769][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.123582][ T5693] lo speed is unknown, defaulting to 1000
[  300.135827][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.138926][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  300.145072][ T5673] lo speed is unknown, defaulting to 1000
[  300.345275][T14294] __nla_validate_parse: 5 callbacks suppressed
[  300.345288][T14294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2249'.
[  300.427239][T14303] netlink: 'syz.2.2244': attribute type 1 has an invalid length.
[  300.505169][T14310] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  300.516048][T14312] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.532149][T14308] gretap3: entered allmulticast mode
[  300.570969][T14308] bond26: (slave gretap3): making interface the new active one
[  300.594612][T14308] bond26: (slave gretap3): Enslaving as an active interface with an up link
[  300.752369][T14325] bond20: (slave syz_tun): Removing an active aggregator
[  300.757387][T14325] bond20: (slave syz_tun): Releasing backup interface
[  300.764218][T14325] bond11: (slave bridge12): Releasing backup interface
[  300.772395][T14325] bond0: (slave bond14): Releasing backup interface
[  300.780709][T14325] bond18: (slave bridge14): Releasing active interface
[  300.790658][T14327] netlink: 'syz.1.2258': attribute type 11 has an invalid length.
[  300.795202][T14327] netlink: 'syz.1.2258': attribute type 23 has an invalid length.
[  300.801784][T14327] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2258'.
[  300.813136][T14325] bond23: (slave veth21): Releasing backup interface
[  300.841303][T14325] bond25: (slave wireguard0): Releasing backup interface
[  300.850722][T14325] wireguard0: left promiscuous mode
[  300.861416][T14327] vlan0: entered promiscuous mode
[  300.926700][T14337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2259'.
[  300.942949][T14337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2259'.
[  301.236128][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2269'.
[  301.240897][T14374] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  301.306830][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2270'.
[  301.312129][T14384] SET target dimension over the limit!
[  301.435351][T14394] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  301.597245][T14409] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2279'.
[  301.693131][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2280'.
[  301.730067][T14405] lo speed is unknown, defaulting to 1000
[  301.774685][T14418] netlink: 'syz.2.2282': attribute type 1 has an invalid length.
[  301.815135][T14418] 8021q: adding VLAN 0 to HW filter on device bond27
[  301.926792][T14423] syzkaller0: entered promiscuous mode
[  301.929765][T14423] syzkaller0: entered allmulticast mode
[  302.117232][ T8171] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  302.117761][T14430] netlink: 'syz.1.2284': attribute type 13 has an invalid length.
[  302.122869][T14430] netlink: 'syz.1.2284': attribute type 17 has an invalid length.
[  302.123508][ T8171] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  302.148933][T14430] lo: left promiscuous mode
[  302.197264][T14430] 8021q: adding VLAN 0 to HW filter on device team0
[  302.202024][T14430] 8021q: adding VLAN 0 to HW filter on device batadv0
[  302.257330][T14430] veth1_vlan: left promiscuous mode
[  302.260127][T14430] veth0_vlan: left allmulticast mode
[  302.264745][T14430] vlan0: left promiscuous mode
[  302.267168][T14430] veth1_vlan: entered promiscuous mode
[  302.276315][T14430] veth1_macvtap: left promiscuous mode
[  302.280177][T14430] veth0_macvtap: left promiscuous mode
[  302.293581][T14430] veth0_macvtap: entered promiscuous mode
[  302.304180][T14430] veth1_macvtap: entered promiscuous mode
[  302.317028][T14430] 8021q: adding VLAN 0 to HW filter on device bond1
[  302.321083][T14430] 8021q: adding VLAN 0 to HW filter on device bond2
[  302.344465][T14430] 8021q: adding VLAN 0 to HW filter on device bond3
[  302.351193][T14430] 8021q: adding VLAN 0 to HW filter on device bond4
[  302.368707][T14430] 8021q: adding VLAN 0 to HW filter on device bond5
[  302.373980][T14430] 8021q: adding VLAN 0 to HW filter on device bond6
[  302.400424][T14430] 8021q: adding VLAN 0 to HW filter on device bond7
[  302.413990][T14430] 8021q: adding VLAN 0 to HW filter on device bond8
[  302.445065][T14430] 8021q: adding VLAN 0 to HW filter on device bond9
[  302.451171][T14430] 8021q: adding VLAN 0 to HW filter on device bond10
[  302.456197][T14430] 8021q: adding VLAN 0 to HW filter on device bond11
[  302.483827][T14430] 8021q: adding VLAN 0 to HW filter on device bond12
[  302.491023][T14430] 8021q: adding VLAN 0 to HW filter on device bond13
[  302.521908][T14430] 8021q: adding VLAN 0 to HW filter on device bond14
[  302.525380][T14430] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  302.533156][ T8171] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  302.540034][ T8171] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  302.549129][ T8171] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  302.554008][ T8171] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  302.563552][ T8171] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  302.568172][ T8171] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  302.634424][ T5673] syz0: Port: 1 Link ACTIVE
[  302.642818][ T8171] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  302.648454][ T8171] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.658097][ T8171] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  302.670820][ T8171] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  302.704581][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2285'.
[  302.742067][T14440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2287'.
[  302.747242][ T6159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.752155][ T6159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.799626][ T8546] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  302.916477][ T8171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.919283][ T8171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  302.960034][T14450] 0{X: entered promiscuous mode
[  302.972566][T14450] vlan8: entered promiscuous mode
[  303.094616][T14445] lo speed is unknown, defaulting to 1000
[  303.180302][T14466] pim6reg: left allmulticast mode
[  303.224898][T14475] netlink: 'syz.0.2297': attribute type 1 has an invalid length.
[  303.233585][T14466] netlink: 'syz.2.2296': attribute type 1 has an invalid length.
[  303.261063][T14475] 8021q: adding VLAN 0 to HW filter on device bond22
[  303.304343][ T5652] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  303.320809][T14466] 8021q: adding VLAN 0 to HW filter on device bond28
[  303.382764][ T8546] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  304.167345][T14503] lo speed is unknown, defaulting to 1000
[  304.262668][T14542] netlink: 'syz.2.2313': attribute type 1 has an invalid length.
[  304.283874][T14542] bond29: entered promiscuous mode
[  304.290621][T14542] bond29: entered allmulticast mode
[  304.299802][T14542] 8021q: adding VLAN 0 to HW filter on device bond29
[  304.319262][ T5652] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  304.327734][ T5652] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  304.410446][T14551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.482511][   T24] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  304.762684][T14564] team0: Mode changed to "activebackup"
[  305.579924][T14571] __nla_validate_parse: 10 callbacks suppressed
[  305.579979][T14571] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2320'.
[  305.598837][    C1] net_ratelimit: 7 callbacks suppressed
[  305.598850][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.783160][T14582] netem: change failed
[  305.840524][ T6343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.843664][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.859332][T14588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2323'.
[  306.033144][T14599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2328'.
[  306.042834][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2329'.
[  306.100466][T14610] pim6reg: entered allmulticast mode
[  306.104137][T14609] pim6reg: left allmulticast mode
[  306.267019][T14620] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  306.277309][T14607] lo speed is unknown, defaulting to 1000
[  306.424736][T14638] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2336'.
[  306.430364][T14638] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2336'.
[  306.438796][T14638] netlink: 'syz.1.2336': attribute type 5 has an invalid length.
[  306.445101][T14638] netlink: 'syz.1.2336': attribute type 6 has an invalid length.
[  306.451611][T14638] netlink: 35 bytes leftover after parsing attributes in process `syz.1.2336'.
[  306.558952][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.563220][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.638220][T14656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2341'.
[  306.728503][T14660] netlink: 'syz.1.2342': attribute type 29 has an invalid length.
[  306.792091][T14660] netlink: 'syz.1.2342': attribute type 29 has an invalid length.
[  306.800134][T14660] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2342'.
[  306.809198][T14660] openvswitch: netlink: IP tunnel TTL not specified.
[  306.881837][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.946912][T14671] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2344'.
[  307.199359][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.202526][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.447651][T14693] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  307.596540][T14707] netlink: 'syz.0.2356': attribute type 1 has an invalid length.
[  307.603282][T14707] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR
[  307.798435][T14717] bridge29: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  307.812278][T14717] bridge30: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  307.844432][T14723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.864071][T14723] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.915254][T14725] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  307.930173][T14723] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.998137][T14727] netlink: 'syz.2.2363': attribute type 13 has an invalid length.
[  308.005834][T14723] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.063091][T14723] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.079449][   T10] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  308.139057][ T6155] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.149836][ T6155] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.158865][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  308.182297][ T5652] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.193636][ T6156] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.234541][T14731] netlink: 'syz.1.2364': attribute type 1 has an invalid length.
[  308.271683][T14731] bond26: entered promiscuous mode
[  308.274479][T14731] 8021q: adding VLAN 0 to HW filter on device bond26
[  308.339509][T14731] bond26: (slave bridge23): making interface the new active one
[  308.342754][T14731] bridge23: entered promiscuous mode
[  308.347803][T14731] bridge23: left promiscuous mode
[  308.689138][   T10] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  308.959245][T14749] netlink: 'syz.2.2368': attribute type 5 has an invalid length.
[  309.073976][T14751] veth0_to_bond: Caught tx_queue_len zero misconfig
[  309.153941][T14756] mac80211_hwsim hwsim4 wlan0: Caught tx_queue_len zero misconfig
[  309.275587][T14758] netlink: 'syz.2.2371': attribute type 4 has an invalid length.
[  309.382360][T14767] 8021q: adding VLAN 0 to HW filter on device bond30
[  309.393935][T14767] netlink: 'syz.2.2373': attribute type 8 has an invalid length.
[  309.435214][T14767] bond30: (slave geneve5): Enslaving as an active interface with an up link
[  309.438160][ T6159] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  309.443084][ T6159] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  309.448036][ T6159] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  309.452021][ T6159] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  309.467757][T14767] bond30 (unregistering): (slave geneve5): Releasing backup interface
[  309.486736][T14767] bond30 (unregistering): Released all slaves
[  309.516887][ T6159] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[  309.525744][ T6159] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[  309.530484][ T6159] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[  309.533749][ T6159] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[  309.634567][T14776] syzkaller1: entered promiscuous mode
[  309.636845][T14776] syzkaller1: entered allmulticast mode
[  309.708000][T14779] syzkaller0: entered promiscuous mode
[  309.715703][T14779] syzkaller0: entered allmulticast mode
[  309.964746][T14787] unsupported nlmsg_type 40
[  311.522518][T14792] __nla_validate_parse: 8 callbacks suppressed
[  311.522533][T14792] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2380'.
[  311.593638][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2382'.
[  311.605123][ T6343] net_ratelimit: 4 callbacks suppressed
[  311.605144][ T6343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.628059][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2382'.
[  311.662269][T14802] bond23: down delay (6) is not a multiple of miimon (80), value rounded to 0 ms
[  311.665128][T14802] bond23: peer notification delay (10) is not a multiple of miimon (80), value rounded to 0 ms
[  311.684729][T14802] bond23 (unregistering): Released all slaves
[  312.018337][T14831] 8021q: adding VLAN 0 to HW filter on device bond27
[  312.173908][T14848] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  312.399589][T14853] lo speed is unknown, defaulting to 1000
[  312.526676][T14859] netlink: 'syz.0.2395': attribute type 10 has an invalid length.
[  312.585772][T14860] netlink: 'syz.0.2395': attribute type 10 has an invalid length.
[  312.735802][T14864] netlink: 'syz.2.2396': attribute type 1 has an invalid length.
[  312.742312][T14864] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2396'.
[  312.788399][T14864] bond30: option lp_interval: invalid value (0)
[  312.791750][T14864] bond30: option lp_interval: allowed values 1 - 2147483647
[  312.819888][T14864] bond30 (unregistering): Released all slaves
[  312.866505][T14859] nbd4: detected capacity change from 0 to 63
[  312.892286][   T56] block nbd4: Receive control failed (result -32)
[  312.897388][ T9313] block nbd4: Receive control failed (result -32)
[  312.950804][T13774] block nbd4: Dead connection, failed to find a fallback
[  312.974969][T13774] block nbd4: shutting down sockets
[  313.012359][T13774] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.037269][T14868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2397'.
[  313.050875][T13774] Buffer I/O error on dev nbd4, logical block 0, async page read
[  313.067972][T14873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2397'.
[  313.071968][T13774] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.081277][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'.
[  313.086415][T13774] Buffer I/O error on dev nbd4, logical block 1, async page read
[  313.091833][T13774] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.114351][T14878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2398'.
[  313.114614][T14875] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2399'.
[  313.117326][T13774] Buffer I/O error on dev nbd4, logical block 2, async page read
[  313.121846][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'.
[  313.129570][T14878] openvswitch: netlink: Invalid VLAN frame
[  313.133694][T13774] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.139674][T14870] siw: device registration error -23
[  313.145700][T13774] Buffer I/O error on dev nbd4, logical block 3, async page read
[  313.152163][T13774] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.157162][T13774] Buffer I/O error on dev nbd4, logical block 0, async page read
[  313.157257][T14870] smc: removing ib device syz0
[  313.162137][T13774] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.167964][T13774] Buffer I/O error on dev nbd4, logical block 1, async page read
[  313.183595][T13774] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.191609][T13774] Buffer I/O error on dev nbd4, logical block 2, async page read
[  313.195941][T14878] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  313.197968][T13774] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.211032][T13774] Buffer I/O error on dev nbd4, logical block 3, async page read
[  313.223430][T13774] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.231356][T14878] sctp: [Deprecated]: syz.1.2398 (pid 14878) Use of int in max_burst socket option.
[  313.231356][T14878] Use struct sctp_assoc_value instead
[  313.240510][T13774] Buffer I/O error on dev nbd4, logical block 0, async page read
[  313.245104][T13774] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  313.252767][T13774] Buffer I/O error on dev nbd4, logical block 1, async page read
[  313.256922][T14870] smbdirect: ib_dev[syz0] removed
[  313.274660][T13774] ldm_validate_partition_table(): Disk read failed.
[  313.323817][T13774] Dev nbd4: unable to read RDB block 0
[  313.339386][T13774]  nbd4: unable to read partition table
[  313.347664][T14888] block nbd5: Unsupported socket: should be TCP or UNIX.
[  313.412062][T13774] ldm_validate_partition_table(): Disk read failed.
[  313.430296][T13774] Dev nbd4: unable to read RDB block 0
[  313.448350][T13774]  nbd4: unable to read partition table
[  313.472118][T14892] Cannot find add_set index 2 as target
[  313.561469][T14895] netlink: 'syz.0.2405': attribute type 7 has an invalid length.
[  313.570346][T14895] netlink: 'syz.0.2405': attribute type 8 has an invalid length.
[  314.003449][T14906] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  314.533370][ T6156] nci: nci_rx_work: unknown MT 0x7
[  314.540719][T14920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  314.547785][T14924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  314.705530][T14931] netlink: 'syz.1.2414': attribute type 1 has an invalid length.
[  314.738839][T14931] 8021q: adding VLAN 0 to HW filter on device bond28
[  314.779653][T14931] bond28: (slave veth25): Enslaving as an active interface with a down link
[  314.785231][T14931] bond28: entered allmulticast mode
[  314.904280][T14948] bridge23: entered promiscuous mode
[  314.906355][T14948] bridge23: entered allmulticast mode
[  314.978076][T14961] veth0_vlan: entered allmulticast mode
[  315.207085][T14978] netlink: 'syz.0.2428': attribute type 39 has an invalid length.
[  315.294917][T14980] 
[  315.295736][T14980] ======================================================
[  315.297822][T14980] WARNING: possible circular locking dependency detected
[  315.299907][T14980] syzkaller #0 Not tainted
[  315.301403][T14980] ------------------------------------------------------
[  315.303801][T14980] syz.0.2429/14980 is trying to acquire lock:
[  315.306110][T14980] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660
[  315.309694][T14980] 
[  315.309694][T14980] but task is already holding lock:
[  315.312492][T14980] ffffffff8f0acbc8 ((crypto_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90
[  315.316496][T14980] 
[  315.316496][T14980] which lock already depends on the new lock.
[  315.316496][T14980] 
[  315.320374][T14980] 
[  315.320374][T14980] the existing dependency chain (in reverse order) is:
[  315.323809][T14980] 
[  315.323809][T14980] -> #7 ((crypto_chain).rwsem){++++}-{4:4}:
[  315.326885][T14980]        down_read+0x47/0x2e0
[  315.328703][T14980]        blocking_notifier_call_chain+0x54/0x90
[  315.331080][T14980]        crypto_alg_mod_lookup+0x3b1/0x5f0
[  315.333328][T14980]        crypto_alloc_tfm_node+0x13e/0x3f0
[  315.335579][T14980]        tls_set_sw_offload+0xa33/0x1780
[  315.337739][T14980]        tls_setsockopt+0xef2/0x15c0
[  315.339876][T14980]        do_sock_setsockopt+0x17c/0x1b0
[  315.341884][T14980]        __x64_sys_setsockopt+0x13d/0x1b0
[  315.343786][T14980]        do_syscall_64+0x15f/0xf80
[  315.345330][T14980]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.347259][T14980] 
[  315.347259][T14980] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  315.349724][T14980]        lock_sock_nested+0x41/0x100
[  315.351318][T14980]        inet_shutdown+0x6a/0x390
[  315.352861][T14980]        nbd_mark_nsock_dead+0x2e9/0x560
[  315.354567][T14980]        sock_shutdown+0x15e/0x260
[  315.356132][T14980]        nbd_clear_sock+0x24/0x170
[  315.357634][T14980]        nbd_config_put+0x2dd/0x580
[  315.359180][T14980]        nbd_genl_connect+0x19d5/0x1cf0
[  315.360871][T14980]        genl_family_rcv_msg_doit+0x22a/0x330
[  315.362710][T14980]        genl_rcv_msg+0x61c/0x7a0
[  315.364224][T14980]        netlink_rcv_skb+0x232/0x4b0
[  315.365826][T14980]        genl_rcv+0x28/0x40
[  315.367199][T14980]        netlink_unicast+0x75c/0x8e0
[  315.368807][T14980]        netlink_sendmsg+0x813/0xb40
[  315.370417][T14980]        ____sys_sendmsg+0x972/0x9f0
[  315.372021][T14980]        ___sys_sendmsg+0x2a5/0x360
[  315.373617][T14980]        __x64_sys_sendmsg+0x1bd/0x2a0
[  315.375277][T14980]        do_syscall_64+0x15f/0xf80
[  315.376840][T14980]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.378786][T14980] 
[  315.378786][T14980] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  315.381364][T14980]        __mutex_lock+0x1a3/0x1550
[  315.383354][T14980]        nbd_queue_rq+0x37b/0x1100
[  315.385324][T14980]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  315.387678][T14980]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  315.390267][T14980]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  315.392770][T14980]        blk_mq_run_hw_queue+0x348/0x4f0
[  315.394904][T14980]        blk_mq_dispatch_list+0xd16/0xe10
[  315.397072][T14980]        blk_mq_flush_plug_list+0x48d/0x570
[  315.399333][T14980]        __blk_flush_plug+0x3ed/0x4d0
[  315.401445][T14980]        __submit_bio+0x28d/0x580
[  315.403354][T14980]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  315.405728][T14980]        block_read_full_folio+0x599/0x830
[  315.407963][T14980]        filemap_read_folio+0x137/0x3b0
[  315.410090][T14980]        do_read_cache_folio+0x358/0x590
[  315.412196][T14980]        read_part_sector+0xb6/0x2b0
[  315.414179][T14980]        adfspart_check_ICS+0xb1/0x960
[  315.416248][T14980]        bdev_disk_changed+0x817/0x1770
[  315.418354][T14980]        blkdev_get_whole+0x380/0x510
[  315.420449][T14980]        bdev_open+0x31e/0xd30
[  315.422274][T14980]        blkdev_open+0x470/0x610
[  315.424181][T14980]        do_dentry_open+0x785/0x14e0
[  315.426209][T14980]        vfs_open+0x3b/0x340
[  315.427981][T14980]        path_openat+0x2e08/0x3860
[  315.429943][T14980]        do_file_open+0x23e/0x4a0
[  315.431873][T14980]        do_sys_openat2+0x113/0x200
[  315.433848][T14980]        __x64_sys_openat+0x138/0x170
[  315.435912][T14980]        do_syscall_64+0x15f/0xf80
[  315.437612][T14980]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.439571][T14980] 
[  315.439571][T14980] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  315.441761][T14980]        __mutex_lock+0x1a3/0x1550
[  315.443314][T14980]        nbd_queue_rq+0xc6/0x1100
[  315.444848][T14980]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  315.446672][T14980]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  315.448668][T14980]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  315.450632][T14980]        blk_mq_run_hw_queue+0x348/0x4f0
[  315.452309][T14980]        blk_mq_dispatch_list+0xd16/0xe10
[  315.454026][T14980]        blk_mq_flush_plug_list+0x48d/0x570
[  315.455818][T14980]        __blk_flush_plug+0x3ed/0x4d0
[  315.457441][T14980]        __submit_bio+0x28d/0x580
[  315.458958][T14980]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  315.460836][T14980]        block_read_full_folio+0x599/0x830
[  315.462598][T14980]        filemap_read_folio+0x137/0x3b0
[  315.464210][T14980]        do_read_cache_folio+0x358/0x590
[  315.465881][T14980]        read_part_sector+0xb6/0x2b0
[  315.467482][T14980]        adfspart_check_ICS+0xb1/0x960
[  315.469129][T14980]        bdev_disk_changed+0x817/0x1770
[  315.470800][T14980]        blkdev_get_whole+0x380/0x510
[  315.472425][T14980]        bdev_open+0x31e/0xd30
[  315.473885][T14980]        blkdev_open+0x470/0x610
[  315.475385][T14980]        do_dentry_open+0x785/0x14e0
[  315.476969][T14980]        vfs_open+0x3b/0x340
[  315.478389][T14980]        path_openat+0x2e08/0x3860
[  315.479930][T14980]        do_file_open+0x23e/0x4a0
[  315.481473][T14980]        do_sys_openat2+0x113/0x200
[  315.483260][T14980]        __x64_sys_openat+0x138/0x170
[  315.485250][T14980]        do_syscall_64+0x15f/0xf80
[  315.487180][T14980]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.489622][T14980] 
[  315.489622][T14980] -> #3 (set->srcu){.+.+}-{0:0}:
[  315.492291][T14980]        __synchronize_srcu+0xca/0x300
[  315.494395][T14980]        elevator_switch+0x1e8/0x7a0
[  315.496421][T14980]        elevator_change+0x2cc/0x450
[  315.498436][T14980]        elevator_set_default+0x36c/0x430
[  315.500619][T14980]        blk_register_queue+0x3e9/0x4e0
[  315.502726][T14980]        __add_disk+0x677/0xd50
[  315.504578][T14980]        add_disk_fwnode+0xfb/0x480
[  315.506584][T14980]        nbd_dev_add+0x72c/0xb50
[  315.508463][T14980]        nbd_init+0x168/0x1f0
[  315.510263][T14980]        do_one_initcall+0x250/0x870
[  315.512295][T14980]        do_initcall_level+0x104/0x190
[  315.514391][T14980]        do_initcalls+0x59/0xa0
[  315.516236][T14980]        kernel_init_freeable+0x2a6/0x3e0
[  315.518432][T14980]        kernel_init+0x1d/0x1d0
[  315.520300][T14980]        ret_from_fork+0x514/0xb70
[  315.522307][T14980]        ret_from_fork_asm+0x1a/0x30
[  315.524341][T14980] 
[  315.524341][T14980] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  315.527272][T14980]        __mutex_lock+0x1a3/0x1550
[  315.529250][T14980]        elevator_change+0x1b3/0x450
[  315.531108][T14980]        elevator_set_none+0xb5/0x140
[  315.533147][T14980]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  315.535575][T14980]        nbd_start_device+0x17f/0xb10
[  315.537635][T14980]        nbd_genl_connect+0x165b/0x1cf0
[  315.539765][T14980]        genl_family_rcv_msg_doit+0x22a/0x330
[  315.542104][T14980]        genl_rcv_msg+0x61c/0x7a0
[  315.544048][T14980]        netlink_rcv_skb+0x232/0x4b0
[  315.546078][T14980]        genl_rcv+0x28/0x40
[  315.547822][T14980]        netlink_unicast+0x75c/0x8e0
[  315.549839][T14980]        netlink_sendmsg+0x813/0xb40
[  315.551856][T14980]        ____sys_sendmsg+0x972/0x9f0
[  315.553910][T14980]        ___sys_sendmsg+0x2a5/0x360
[  315.555933][T14980]        __x64_sys_sendmsg+0x1bd/0x2a0
[  315.558019][T14980]        do_syscall_64+0x15f/0xf80
[  315.559986][T14980]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.562454][T14980] 
[  315.562454][T14980] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  315.565740][T14980]        blk_alloc_queue+0x546/0x680
[  315.567789][T14980]        __blk_mq_alloc_disk+0x197/0x390
[  315.569918][T14980]        nbd_dev_add+0x499/0xb50
[  315.571800][T14980]        nbd_init+0x168/0x1f0
[  315.573590][T14980]        do_one_initcall+0x250/0x870
[  315.575641][T14980]        do_initcall_level+0x104/0x190
[  315.577699][T14980]        do_initcalls+0x59/0xa0
[  315.579588][T14980]        kernel_init_freeable+0x2a6/0x3e0
[  315.581856][T14980]        kernel_init+0x1d/0x1d0
[  315.583712][T14980]        ret_from_fork+0x514/0xb70
[  315.585703][T14980]        ret_from_fork_asm+0x1a/0x30
[  315.587744][T14980] 
[  315.587744][T14980] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  315.590501][T14980]        __lock_acquire+0x15a5/0x2cf0
[  315.592545][T14980]        lock_acquire+0x106/0x350
[  315.594462][T14980]        fs_reclaim_acquire+0x71/0x100
[  315.596563][T14980]        __kmalloc_cache_noprof+0x40/0x660
[  315.598775][T14980]        cryptomgr_notify+0x85/0x930
[  315.600836][T14980]        notifier_call_chain+0x1ad/0x3d0
[  315.602959][T14980]        blocking_notifier_call_chain+0x6a/0x90
[  315.605296][T14980]        crypto_alg_mod_lookup+0x3b1/0x5f0
[  315.607544][T14980]        crypto_has_alg+0x26/0x190
[  315.609477][T14980]        tipc_aead_key_validate+0x2b/0x210
[  315.611560][T14980]        tipc_nl_node_set_key+0x5c0/0x9d0
[  315.613245][T14980]        genl_family_rcv_msg_doit+0x22a/0x330
[  315.615108][T14980]        genl_rcv_msg+0x61c/0x7a0
[  315.616621][T14980]        netlink_rcv_skb+0x232/0x4b0
[  315.618208][T14980]        genl_rcv+0x28/0x40
[  315.619625][T14980]        netlink_unicast+0x75c/0x8e0
[  315.621282][T14980]        netlink_sendmsg+0x813/0xb40
[  315.622880][T14980]        ____sys_sendmsg+0x972/0x9f0
[  315.624470][T14980]        ___sys_sendmsg+0x2a5/0x360
[  315.626040][T14980]        __x64_sys_sendmsg+0x1bd/0x2a0
[  315.627657][T14980]        do_syscall_64+0x15f/0xf80
[  315.629383][T14980]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.631461][T14980] 
[  315.631461][T14980] other info that might help us debug this:
[  315.631461][T14980] 
[  315.634886][T14980] Chain exists of:
[  315.634886][T14980]   fs_reclaim --> sk_lock-AF_INET6 --> (crypto_chain).rwsem
[  315.634886][T14980] 
[  315.639840][T14980]  Possible unsafe locking scenario:
[  315.639840][T14980] 
[  315.642685][T14980]        CPU0                    CPU1
[  315.644721][T14980]        ----                    ----
[  315.646785][T14980]   rlock((crypto_chain).rwsem);
[  315.648702][T14980]                                lock(sk_lock-AF_INET6);
[  315.651339][T14980]                                lock((crypto_chain).rwsem);
[  315.654040][T14980]   lock(fs_reclaim);
[  315.655602][T14980] 
[  315.655602][T14980]  *** DEADLOCK ***
[  315.655602][T14980] 
[  315.658615][T14980] 4 locks held by syz.0.2429/14980:
[  315.660587][T14980]  #0: ffffffff8fe3f0e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  315.663570][T14980]  #1: ffffffff8fe3ef20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  315.666872][T14980]  #2: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: tipc_nl_node_set_key+0x8e/0x9d0
[  315.670447][T14980]  #3: ffffffff8f0acbc8 ((crypto_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90
[  315.674533][T14980] 
[  315.674533][T14980] stack backtrace:
[  315.676757][T14980] CPU: 1 UID: 0 PID: 14980 Comm: syz.0.2429 Not tainted syzkaller #0 PREEMPT(full) 
[  315.676773][T14980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  315.676782][T14980] Call Trace:
[  315.676790][T14980]  <TASK>
[  315.676797][T14980]  dump_stack_lvl+0xe8/0x150
[  315.676814][T14980]  print_circular_bug+0x2e1/0x300
[  315.676832][T14980]  check_noncircular+0x12e/0x150
[  315.676846][T14980]  __lock_acquire+0x15a5/0x2cf0
[  315.676861][T14980]  ? __pfx_stack_trace_save+0x10/0x10
[  315.676883][T14980]  ? check_path+0x21/0x40
[  315.676896][T14980]  ? check_noncircular+0xda/0x150
[  315.676914][T14980]  ? __kmalloc_cache_noprof+0x40/0x660
[  315.676931][T14980]  lock_acquire+0x106/0x350
[  315.676944][T14980]  ? __kmalloc_cache_noprof+0x40/0x660
[  315.676963][T14980]  fs_reclaim_acquire+0x71/0x100
[  315.676977][T14980]  ? __kmalloc_cache_noprof+0x40/0x660
[  315.676994][T14980]  __kmalloc_cache_noprof+0x40/0x660
[  315.677011][T14980]  ? cryptomgr_notify+0x85/0x930
[  315.677029][T14980]  cryptomgr_notify+0x85/0x930
[  315.677049][T14980]  notifier_call_chain+0x1ad/0x3d0
[  315.677068][T14980]  blocking_notifier_call_chain+0x6a/0x90
[  315.677083][T14980]  crypto_alg_mod_lookup+0x3b1/0x5f0
[  315.677097][T14980]  crypto_has_alg+0x26/0x190
[  315.677113][T14980]  tipc_aead_key_validate+0x2b/0x210
[  315.677127][T14980]  tipc_nl_node_set_key+0x5c0/0x9d0
[  315.677141][T14980]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  315.677156][T14980]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  315.677171][T14980]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  315.677187][T14980]  genl_family_rcv_msg_doit+0x22a/0x330
[  315.677199][T14980]  ? __asan_memcpy+0x40/0x70
[  315.677216][T14980]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  315.677237][T14980]  genl_rcv_msg+0x61c/0x7a0
[  315.677252][T14980]  ? __pfx_genl_rcv_msg+0x10/0x10
[  315.677264][T14980]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  315.677276][T14980]  ? __pfx_ref_tracker_free+0x10/0x10
[  315.677297][T14980]  netlink_rcv_skb+0x232/0x4b0
[  315.677314][T14980]  ? __pfx_genl_rcv_msg+0x10/0x10
[  315.677327][T14980]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  315.677373][T14980]  ? down_read+0x270/0x2e0
[  315.677387][T14980]  ? genl_rcv+0xd/0x40
[  315.677399][T14980]  genl_rcv+0x28/0x40
[  315.677410][T14980]  netlink_unicast+0x75c/0x8e0
[  315.677430][T14980]  netlink_sendmsg+0x813/0xb40
[  315.677444][T14980]  ? __pfx_netlink_sendmsg+0x10/0x10
[  315.677461][T14980]  ? aa_sock_msg_perm+0xf1/0x1b0
[  315.677480][T14980]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  315.677501][T14980]  ____sys_sendmsg+0x972/0x9f0
[  315.677517][T14980]  ? __might_fault+0xaf/0x130
[  315.677531][T14980]  ? __pfx_____sys_sendmsg+0x10/0x10
[  315.677550][T14980]  ? import_iovec+0x73/0xa0
[  315.677570][T14980]  ___sys_sendmsg+0x2a5/0x360
[  315.677587][T14980]  ? __lock_acquire+0x6b5/0x2cf0
[  315.677601][T14980]  ? __pfx____sys_sendmsg+0x10/0x10
[  315.677621][T14980]  ? futex_wait+0x2a2/0x390
[  315.677655][T14980]  ? __fget_files+0x2a/0x420
[  315.677665][T14980]  ? __fget_files+0x3a0/0x420
[  315.677681][T14980]  __x64_sys_sendmsg+0x1bd/0x2a0
[  315.677700][T14980]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  315.677721][T14980]  ? rcu_is_watching+0x15/0xb0
[  315.677740][T14980]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.677754][T14980]  do_syscall_64+0x15f/0xf80
[  315.677772][T14980]  ? trace_irq_disable+0x3b/0x140
[  315.677788][T14980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.677801][T14980] RIP: 0033:0x7f6ff799cdd9
[  315.677814][T14980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  315.677826][T14980] RSP: 002b:00007f6ff87a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  315.677839][T14980] RAX: ffffffffffffffda RBX: 00007f6ff7c15fa0 RCX: 00007f6ff799cdd9
[  315.677850][T14980] RDX: 0000000020008000 RSI: 0000200000000640 RDI: 0000000000000005
[  315.677859][T14980] RBP: 00007f6ff7a32d69 R08: 0000000000000000 R09: 0000000000000000
[  315.677867][T14980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  315.677875][T14980] R13: 00007f6ff7c16038 R14: 00007f6ff7c15fa0 R15: 00007ffc445b3068
[  315.677887][T14980]  </TASK>
[  316.088650][    C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  317.361786][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.119834][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
