last executing test programs:

1.89791449s ago: executing program 1 (id=11912):
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'nicvf0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x10001, '\x00', r1, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f00000005c0)=""/155, 0x9b, <r5=>0x0, &(0x7f00000006c0)=""/67, 0x43}}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1a, 0x2, &(0x7f00000007c0)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}], &(0x7f0000000800)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, &(0x7f0000000880)=[0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xb, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000080000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183b0000050000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', r1, @fallback=0x37, r4, 0x8, &(0x7f0000000540)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0xb, 0x8, 0xffffff80}, 0x10, r5, r6, 0x6, &(0x7f0000000980)=[0xffffffffffffffff], &(0x7f00000009c0)=[{0x1, 0x4, 0x2, 0x8}, {0x4, 0x4, 0x3, 0xa}, {0x3, 0x1, 0xc, 0x9}, {0x2, 0x2, 0x9, 0xa}, {0x0, 0x4, 0x5, 0x9}, {0x4, 0x2, 0xb, 0x2}], 0x10, 0x8}, 0x94)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r8, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x800}}, 0x40)

1.780401931s ago: executing program 1 (id=11913):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket(0x9, 0x4, 0x2)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000540)={0x480, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x78, 0x3, "719a2b3c76d1d78bda086fe7c6097e993db27d3a29a80823b2515b2d5ac1b8fd414e3aafc3331dcd67b6eded54ab8430cff1e9a7d08c918446f82ed3a7cbe3371c18cc71c383016ec9912484b904a6e4769e53d72c3e1f26373e15ef909f83ade5ce7f94e4bf067f5a700dbe7e2b2218433de8cb"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe22e}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x354}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1d}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0ee}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}]}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "a8e5ab4c22690bfbb197af9fe62927434905dcc5c7428547b86e73fc00a9046b57"}}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000001}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "bc6c249190d1f1c70fae32a18aca8659fe8cd9d4672d092894d4fae8"}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "8c60485cf3c03d83654b2482b7aa7c6e5c20f20a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a06d1ad2aecdd551bc0df3789ce12c62c30fbe8923ff97118241c808ed70f00e69f16b"}}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa8e3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6918}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x58f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x480}, 0x1, 0x0, 0x0, 0x10040}, 0x40000) (async)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000540)={0x480, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0x78, 0x3, "719a2b3c76d1d78bda086fe7c6097e993db27d3a29a80823b2515b2d5ac1b8fd414e3aafc3331dcd67b6eded54ab8430cff1e9a7d08c918446f82ed3a7cbe3371c18cc71c383016ec9912484b904a6e4769e53d72c3e1f26373e15ef909f83ade5ce7f94e4bf067f5a700dbe7e2b2218433de8cb"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe22e}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x354}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1d}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0ee}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}]}, @TIPC_NLA_NODE={0x168, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "a8e5ab4c22690bfbb197af9fe62927434905dcc5c7428547b86e73fc00a9046b57"}}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000001}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "bc6c249190d1f1c70fae32a18aca8659fe8cd9d4672d092894d4fae8"}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "8c60485cf3c03d83654b2482b7aa7c6e5c20f20a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "a06d1ad2aecdd551bc0df3789ce12c62c30fbe8923ff97118241c808ed70f00e69f16b"}}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa8e3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6918}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x58f}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x480}, 0x1, 0x0, 0x0, 0x10040}, 0x40000)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0)

1.697603634s ago: executing program 1 (id=11915):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}]}}}]}]}], {0x14}}, 0x78}}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
sendto$inet(r6, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="3747e76de379", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xaf, 0xe754}]}}}}}}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x34, 0x64, 0xf31, 0xfffffff3, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xd}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8011}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0)

1.530200434s ago: executing program 1 (id=11917):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x800}, 0xc) (async)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x800}, 0xc)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0)

1.45020652s ago: executing program 1 (id=11918):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r1)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r1)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x20, r2, 0x9a1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}]}, 0x20}}, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r4=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=<r5=>0x0)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000e80)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="3b0019001d8558f88b7baa18bd5ad060921458eb0cf573b674b280806798854fb198a2e1bbd2cb44fc4597070412361e444c06bcb21f8e4a4086130008000100", @ANYRES32=r5, @ANYBLOB="080015000100000008000100", @ANYRES32=0x0, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400020000000019d141e02608f74300000a0000010900010073797a306e92ce3d153d0000000008000540000000020900020073797a320000000f00000a40ffffff19210011800e000100636f6e6e6c696569740000000c00028008000140fffff274140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, <r6=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, r6, 0x0, 0x6, 0x8, 0x10, 0x5, 0x0, 0x6, {[@timestamp={0x8, 0xa, 0x4, 0x200}]}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "100640", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r6, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x8, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x2)
r10 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c40)={'gretap0\x00', &(0x7f0000000bc0)={'syztnl1\x00', <r11=>0x0, 0x8000, 0x10, 0xee, 0xc000, {{0x10, 0x4, 0x2, 0x15, 0x40, 0x61, 0x0, 0x50, 0x4, 0x0, @local, @empty, {[@rr={0x7, 0x0, 0xde, [@multicast2, @empty, @loopback, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x3d}, @loopback, @local, @broadcast]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000d00)={'erspan0\x00', &(0x7f0000000c80)={'syztnl1\x00', <r12=>0x0, 0x8000, 0x40, 0x5, 0xd, {{0x13, 0x4, 0x0, 0x2, 0x4c, 0x68, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x16}, {[@end, @lsrr={0x83, 0x17, 0x12, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @local, @multicast2]}, @generic={0x82, 0x10, "3dc18f251da8b702006cfd0893e9"}, @timestamp_addr={0x44, 0xc, 0x2a, 0x1, 0xa, [{@local, 0x6}]}, @ra={0x94, 0x4}]}}}}})
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0x98, r7, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r13, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000001040)={0x414, r14, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x809, @local, 0x71}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xaf}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42f1}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "e16f0936722b5474681fc8cf9c219a71f16209405fc8d58c2af26320ac0f439832614f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1a7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x1d4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ID={0x6c, 0x3, "0cffa839752f94fcdc4a6ea6b55477a28b59b3b2cd97aa7da58f0dc9fbad8ef078744120b406c87175bcd56db2391cbca61e575fd61ee389cea41bab2b43da020e471a6fef28f34a4decd55f5f57df2a25b1609019f531acb7027b64a65866f79ba7f59ebeeb47a5"}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "d0049475eff28edbfd60b0e5c4f199a2a9b9319d26c1f6"}}, @TIPC_NLA_NODE_ID={0xe7, 0x3, "bbc1ea671043fb4a5be1b1b7bf8dcf082130dd7e87ef42f25831b933dce307e1291fdf294c4a2b2eeb6c52466522b30815e7d3e28633018ace77ba1873b77bddb11475f5077a391c6199bcd071ef973136b7c3aff43bdd5ff1063c230027297d048409cbc88a936ff6b03d948aa136c25585079b8ca676a624800981180a39407b03ccedea90f53d3e3a2a093ab15031d8275c87ab2e662c70c363eb32219f39e4861d1960920e79cff01aa2452fe1d97cf1e2abeb3a22afa641b4e1185f7102d0550b486910599d5599ef3d947d462f46be306cb5bf7c08904e23d2b8ea7065678415"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x1a, 0x3, "0a937f9e3aac8a68b04339837291c0ef1773824aafa7"}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9cd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19a5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x414}, 0x1, 0x0, 0x0, 0x48000}, 0x8000)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@setneightbl={0x14, 0x43, 0x200, 0x70bd27, 0x25dfdbfe, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x8010)

1.309541355s ago: executing program 1 (id=11921):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) (async)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/114, 0x72}], 0x1}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x0, 0x0) (async)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x18, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0)

510.240116ms ago: executing program 0 (id=11935):
r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x18)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500200119078000379ce2a3e30c6402e8260fe1c960476c0b5c6a084eb1950bc"], 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000bc0208000000040095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c '], 0x8)
sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r3, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}, 0x40}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4000000)

505.922871ms ago: executing program 0 (id=11937):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8000}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4a, &(0x7f0000000600)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0xfffffffffffffffb, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x20, 0x8001, 0x0, 0x0, {[@mss={0x2, 0x0, 0x4}, @mss={0x2, 0x0, 0x7ff}, @md5sig={0x13, 0x0, "5f1a0d9e8bb51d3e1d44513ff69a619c"}, @exp_smc, @exp_fastopen={0xfe, 0x0, 0xf989, "bbdb00c6fec98d"}]}}}}}}}}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc0000001300010100000000000000006401010200000000000000000000000000000000000000000000ffff7f0000010000000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000600000000000000000feffffff00000000000000000000000044000500fc020000000000000000000000000001000000002b0000000200000000000000000000000000ffffac1414bb0000000001000000feffffbf00ffffff0000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20048001}, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r3, 0xaa0f4000)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r9, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0)

503.322412ms ago: executing program 2 (id=11938):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c9a5aaef2e4d554ffb1fc4140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a320000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000000)={<r1=>0x41424344}, 0x8, 0x4)
syz_emit_ethernet(0x52, &(0x7f00000001c0)={@local, @local, @val={@val={0x88a8, 0x7}, {0x8100, 0x7, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, r1, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x7}}}}}}}, 0x0)

379.295657ms ago: executing program 2 (id=11939):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4)

309.928477ms ago: executing program 2 (id=11940):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r2, 0x1, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x20}}, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x41000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000084}, 0x4c005)
connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'xfrm0\x00'}}, 0x1e)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_PRIORITY={0x8, 0x6, 0xffffffff}]}, 0x24}}, 0x4000050)
r6 = socket(0x8, 0x3, 0x0)
bind$unix(r6, 0x0, 0x0)
bind$rxrpc(r6, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @private1, 0x8}}, 0x24)

309.336965ms ago: executing program 0 (id=11941):
writev(0xffffffffffffffff, &(0x7f0000003140)=[{0x0}, {&(0x7f00000002c0)="ca7bfc8312c9237bffa562dc1d03c723970f07a1078c261ec3fdfed5f81f4f5fe80bb3ebaa7484bfa3214d", 0x2b}, {0x0}, {&(0x7f0000001000)="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", 0x463}], 0x4)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff00000000001a0000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0)

250.453602ms ago: executing program 0 (id=11942):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c00028008001400ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048081}, 0x240080c1) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000300)=0x1) (async)
close(0x3)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)

99.850642ms ago: executing program 2 (id=11943):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r1=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r5, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r1, r5, 0x0, 0x3, 0x2}, 0x50) (async)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (rerun: 64)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$unix(0x1, 0x1, 0x0) (async)
r11 = socket$kcm(0x11, 0x3, 0x0) (async)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0)
close(r12) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0}) (rerun: 64)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4)
sendmsg$kcm(r11, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r13, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x300}], 0x2}, 0x20000085) (async)
r14 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="8400ffe81000130429bd70000000000064010000000000000000000000000000000000004e28002f000000203b0000009e3368d900164bca3392c050145ee1b33c23feaed74b992963f13f00c24c201e77817e0680b69d941bb75c618fbf7ba966a1a33bfefe5c1703b9c6bee29ec981b3991018a340a5656010f585f46449bdca56dd8676a571f08e1c79c4c819817bcee3d48dcfb9a8586649478af871a5218ce756f6e38a4389d337b9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/316], 0x184}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000680)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000700)="bd564b4aca100ed24247ef0b93c9fa6ddcf5db4258721144e29af3c9ab1affdb4c4a7892eeaca93406196da06b13363c", 0x30}], 0x1, &(0x7f0000000780)=[{0x68, 0x113, 0x101, "38baef3952f3fb1db195d24735e560711481352a21a668512ba8c5d1bfa65532a81fc60022a8f232b1b1c65358f54e68c879afbb10a630e97282288e148a677c15bf8743a3c750039e3ed3540a3463315573013728ee393f"}, {0x50, 0x0, 0x0, "918f19940aaee7fc3eeaa77fcd93719a5752b1d2c4c056a8be5cb752c5d297dc5d537a6b8974eeae944502a55582c0180525e50dcbd8bb8977f398df1b"}, {0xf8, 0x116, 0x0, "40030b39f844cbfb7298d1045997922e623c8f3a75adaab476893be4a29b8bf5a53add6e762146c1b3173f68a51d96e6a93f0ca07ddb7f3d002c852c424110af1c1287f6d277820155689af27f077faa554ebfaa660ca1e9f98face0d3a5923befa722009f437ca3299ecd054817a4567c7abaefcfb2222c19109535d540d567ad4210dd6a8a5cbe781d563ffb3e462df81395e93795be17279e58cbe80398a7ca28a3cd402d20cd864100586978600b8174c9c4343ae3333a15c1175863f3026f976e93df528227c5a5f0819141adf1dd57442304a4deeaef6af737648a5d3900"}], 0x1b0}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', r1, 0x40, 0x7807, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @empty, @multicast2}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r1, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

94.114984ms ago: executing program 0 (id=11944):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x9, 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x2003208, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010104}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000042020200280012800b00010069703667726500001800028004001200060000000600020000400000579e84da7b0400000000"], 0x48}, 0x1, 0x0, 0x0, 0x2400c090}, 0x24048044)

9.85533ms ago: executing program 0 (id=11945):
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@qipcrtr, &(0x7f00000000c0)=0x80)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080))
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r2, &(0x7f0000001240)={@val={0x8, 0x800}, @void, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x55, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1b, 0x0, 0x6}]}}, {0x4e1c, 0x4e21, 0x3d, 0x0, @opaque="08cfb316271d6eeaf03a8078f8a26b08223a9c893edda43126fe429dff5158b0e9fe18ed6daabde6bce8e33765469f7d0b8996f3d6"}}}, 0x59)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000023c0)={0x1358, 0x30, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x1347, 0xf2, 0x0, 0x1, [@typed={0xc, 0xf2, 0x0, 0x0, @u64=0xfac08}, @nested={0x1258, 0xdd, 0x0, 0x1, [@typed={0x14, 0x134, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x123e, 0x2f, 0x0, 0x1, [@typed={0xb, 0x5c, 0x0, 0x0, @str='@-}r(:\x00'}, @generic="3956d94b4c0349a3b892ed3a9460f8f2be0642cf20b43a58281e168192fab841c98c6ccc9ea9345ffa0dc592d0acc4f435f0dda0e05e0c251011751897ff2557aedaf51bf7e75b9af7a37efef3d0cdfd7cdd24ce866897845e60be289fb69a1c102e8219f1e7b95d1a7a1cf8133cbc62cc99f87de004a15fbd6c63bcbc39fc6ba17bb2afd497b6382ceeb4020259948952cba4125bc7f5ec046b762b773806da9226057c2d02176780741b224c4f3e9761be355cdc0055a7000b2c1fa0ff0fe234ac163017bf966927dc", @generic="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", @generic="0936211c9ab7a97d406001bb271781145ce40fe18b146471bc529e29923e04d51ec5bfaa2df7d456c71441262768cc3139cebe58fb96748e00af52cc5e6d12231264d2ced929de78c6a3e92e9230f58790ef9d6cd557af4505e1e0", @generic="d0f35d04a6cb56bb5e51c2d88a7445a3a7de7c35c20a27917a834596669236504ea933773d19ece0bc76f499f4b78b82c9b68c6ba805090874603e6d36838618cfecb7c6717306378009e9cb334939cd", @generic="c91f302432d06b1022abe58c9f7f0370f7c5ce646fffa8fb59f0ac361fa49cb3a1f1aaa79809570b5d1fdc5f868f2526db43a3ca2896af08262e0af97c2699c4b9e3e237ad19acfa700a962a4365b7a3085398ddfc5d975cff6b74013d95bf6b336e6106fef6c81d5d558a133df783a60b7fcef1c46b75741bd35dc7ef42465063", @typed={0x8, 0xe8, 0x0, 0x0, @fd=r0}, @typed={0x2e, 0x92, 0x0, 0x0, @binary="97fa8c04297f564d43f6cdd8c7458ef8a4ee6ed1f1ae16565eb4916b7fd41c1d56d439028d233ca58d1e"}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x1358}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, 0x0, &(0x7f00000017c0))
connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0xe}, 0xa)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)

2.427398ms ago: executing program 2 (id=11946):
close(0xffffffffffffffff)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$unix(0x1, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
close(0x3) (async)
close(0x3)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0)

0s ago: executing program 2 (id=11947):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000)
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x2e}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)="55ee4addb0838779ff7a51df6a14", 0xe}], 0x1}, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r7 = socket(0x8, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
unshare(0x20400)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$unix(0x1, 0x1, 0x0)
bind$unix(r7, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0)
unshare(0x10030000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001c40)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x4210}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}}, 0x5)

kernel console output (not intermixed with test programs):

import_iovec+0x73/0xa0
[  802.424965][ T8203]  ___sys_sendmsg+0x2a5/0x360
[  802.424973][ T8203]  ? __lock_acquire+0x683/0x2cf0
[  802.424987][ T8203]  ? __pfx____sys_sendmsg+0x10/0x10
[  802.424999][ T8203]  ? futex_wait+0x2a2/0x390
[  802.425022][ T8203]  ? __fget_files+0x2a/0x420
[  802.425032][ T8203]  ? __fget_files+0x3a2/0x420
[  802.425046][ T8203]  __x64_sys_sendmsg+0x1b1/0x290
[  802.425057][ T8203]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  802.425107][ T8203]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.425125][ T8203]  do_syscall_64+0x174/0x580
[  802.425143][ T8203]  ? trace_irq_disable+0x3b/0x140
[  802.425167][ T8203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.425182][ T8203] RIP: 0033:0x7faf6c99e0d9
[  802.425198][ T8203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  802.425210][ T8203] RSP: 002b:00007faf6d8ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  802.425221][ T8203] RAX: ffffffffffffffda RBX: 00007faf6cc25fa0 RCX: 00007faf6c99e0d9
[  802.425227][ T8203] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  802.425233][ T8203] RBP: 00007faf6ca35024 R08: 0000000000000000 R09: 0000000000000000
[  802.425239][ T8203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  802.425244][ T8203] R13: 00007faf6cc26038 R14: 00007faf6cc25fa0 R15: 00007ffd18dd6e78
[  802.425259][ T8203]  </TASK>
[  802.635275][ T8212] __nla_validate_parse: 9 callbacks suppressed
[  802.635290][ T8212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10104'.
[  802.663137][ T8212] bond95: (slave ip6tnl17): The slave device specified does not support setting the MAC address
[  802.668377][ T8212] bond95: (slave ip6tnl17): Error -95 calling set_mac_address
[  802.719490][ T8207] netlink: 199784 bytes leftover after parsing attributes in process `syz.0.10102'.
[  802.739673][ T8207] netlink: 'syz.0.10102': attribute type 1 has an invalid length.
[  802.893540][ T8218] netlink: 'syz.1.10106': attribute type 15 has an invalid length.
[  803.022365][ T8223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10108'.
[  803.126992][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10109'.
[  803.130837][ T8225] bond0: Unable to set down delay as MII monitoring is disabled
[  803.138938][ T8225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10109'.
[  803.146743][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10109'.
[  803.390321][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10112'.
[  803.637289][ T8262] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10118'.
[  803.696288][ T8266] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001
[  803.705961][ T8265] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001
[  803.716921][ T8268] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10121'.
[  803.898948][ T8274] netlink: 'syz.2.10123': attribute type 3 has an invalid length.
[  804.029735][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10123'.
[  805.055574][ T8334] syzkaller1: tun_chr_ioctl cmd 1074025677
[  805.059557][ T8334] syzkaller1: linktype set to 773
[  805.234957][ T8350] netlink: 'syz.0.10143': attribute type 1 has an invalid length.
[  805.472486][ T8367] netlink: 'syz.2.10144': attribute type 9 has an invalid length.
[  806.726377][ T8395] 8021q: adding VLAN 0 to HW filter on device bond0
[  806.944024][ T8408] netlink: 'syz.2.10152': attribute type 21 has an invalid length.
[  807.171971][ T8429] sctp: [Deprecated]: syz.0.10159 (pid 8429) Use of int in maxseg socket option.
[  807.171971][ T8429] Use struct sctp_assoc_value instead
[  807.789694][ T8425] tipc: Resetting bearer <eth:syz_tun>
[  807.973279][ T8425] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  807.988806][ T7157] lo speed is unknown, defaulting to 1000
[  807.991349][ T7157] syz0: Port: 1 Link DOWN
[  807.996542][ T8433] bridge0: port 1(batadv7) entered blocking state
[  807.999811][ T8433] bridge0: port 1(batadv7) entered disabled state
[  808.002772][ T8433] batadv7: entered allmulticast mode
[  808.007195][ T8433] batadv7: entered promiscuous mode
[  808.012465][ T8442] netlink: 'syz.0.10162': attribute type 3 has an invalid length.
[  808.015995][ T8442] netlink: 'syz.0.10162': attribute type 3 has an invalid length.
[  808.147632][ T7157] lo speed is unknown, defaulting to 1000
[  808.240270][ T8451] __nla_validate_parse: 7 callbacks suppressed
[  808.240289][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10166'.
[  808.250758][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10166'.
[  808.298514][ T8452] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[  808.310471][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10165'.
[  808.351472][ T8452] bond96: (slave bond_slave_1): Device is not bonding slave
[  808.354426][ T8452] bond96: option active_slave: invalid value (bond_slave_1)
[  808.363818][ T8452] bond96 (unregistering): Released all slaves
[  808.442087][ T8458] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  808.497071][ T3207] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled
[  808.500079][ T3207] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled
[  808.533605][ T8461] netlink: 216 bytes leftover after parsing attributes in process `syz.1.10168'.
[  809.227790][ T8471] netlink: 'syz.2.10170': attribute type 1 has an invalid length.
[  809.270486][ T8471] bond81: entered promiscuous mode
[  809.274529][ T8471] 8021q: adding VLAN 0 to HW filter on device bond81
[  809.335676][ T8471] bond81: (slave bridge39): making interface the new active one
[  809.340110][ T8471] bridge39: entered promiscuous mode
[  809.345848][ T8471] bond81: (slave bridge39): Enslaving as an active interface with an up link
[  809.383347][ T8477] ip6tnl14: entered allmulticast mode
[  809.491806][ T8482] syzkaller0: entered promiscuous mode
[  809.495354][ T8482] syzkaller0: entered allmulticast mode
[  809.533043][ T8482] netlink: 220 bytes leftover after parsing attributes in process `syz.1.10172'.
[  809.546721][ T8482] tc_dump_action: action bad kind
[  809.721023][ T5635] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  809.724538][ T5635] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  809.748508][ T7162] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  809.852237][ T8501] ip6_vti0: left promiscuous mode
[  809.899529][ T7162] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  810.097445][ T7162] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  810.220667][ T8518] netlink: 'syz.1.10181': attribute type 11 has an invalid length.
[  810.227674][ T8518] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10181'.
[  810.249079][ T8524] macvlan1: entered allmulticast mode
[  810.295992][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10183'.
[  810.300131][ T8529] netlink: 'syz.2.10183': attribute type 30 has an invalid length.
[  810.304152][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10183'.
[  810.315834][ T8529] netlink: 'syz.2.10183': attribute type 30 has an invalid length.
[  810.409836][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10184'.
[  810.530344][ T8537] netlink: 'syz.2.10186': attribute type 23 has an invalid length.
[  810.580028][ T8537] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10186'.
[  810.753206][ T8550] sctp: [Deprecated]: syz.1.10188 (pid 8550) Use of struct sctp_assoc_value in delayed_ack socket option.
[  810.753206][ T8550] Use struct sctp_sack_info instead
[  811.643308][ T8612] Cannot find del_set index 17 as target
[  811.857953][ T8620] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap5
[  811.862067][ T8620] ip6gretap5: entered allmulticast mode
[  811.865743][ T8620] batman_adv: batadv0: Adding interface: ip6gretap5
[  811.868761][ T8620] batman_adv: batadv0: The MTU of interface ip6gretap5 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  811.877027][ T8620] batman_adv: batadv0: Interface activated: ip6gretap5
[  812.215220][ T8628] netlink: 'syz.0.10209': attribute type 21 has an invalid length.
[  812.220459][ T8628] netlink: 'syz.0.10209': attribute type 21 has an invalid length.
[  812.452118][ T8639] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  812.924918][ T8658] netlink: 'syz.0.10219': attribute type 3 has an invalid length.
[  812.954022][ T8660] netlink: 'syz.0.10221': attribute type 1 has an invalid length.
[  812.983099][ T8660] 8021q: adding VLAN 0 to HW filter on device bond106
[  813.012214][ T8660] macvlan13: entered promiscuous mode
[  813.014495][ T8660] macvlan13: entered allmulticast mode
[  813.018111][ T8660] bond106: entered allmulticast mode
[  813.020452][ T8660] bond106: entered promiscuous mode
[  813.023220][ T8660] 8021q: adding VLAN 0 to HW filter on device macvlan13
[  813.033882][ T8660] team0: Port device macvlan13 added
[  813.244926][ T8670] netlink: 'syz.2.10223': attribute type 1 has an invalid length.
[  813.315994][ T8672] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  813.356959][    C1] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  813.388060][ T8672] __nla_validate_parse: 14 callbacks suppressed
[  813.388076][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10224'.
[  813.394867][ T8672] netlink: 'syz.2.10224': attribute type 30 has an invalid length.
[  813.460043][ T8679] netlink: 136 bytes leftover after parsing attributes in process `syz.2.10225'.
[  813.506786][    C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  814.014148][ T8709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10232'.
[  814.019993][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10229'.
[  814.024375][ T8694] tipc: Resetting bearer <eth:syzkaller0>
[  814.045703][ T8694] tipc: Disabling bearer <eth:syzkaller0>
[  814.129803][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10234'.
[  814.161703][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10236'.
[  814.366508][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10239'.
[  814.528868][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10243'.
[  814.546773][    C1] ip6_tunnel: ip6tnl13 xmit: Local address not yet configured!
[  820.946909][    C1] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  824.147616][    C1] ip6_tunnel: ip6tnl15 xmit: Local address not yet configured!
[  835.028606][    C1] ip6_tunnel: ip6tnl14 xmit: Local address not yet configured!
[  837.501230][ T8772] validate_nla: 1 callbacks suppressed
[  837.501248][ T8772] netlink: 'syz.1.10250': attribute type 32 has an invalid length.
[  837.728735][ T8776] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  837.734524][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10252'.
[  837.758680][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10251'.
[  837.767053][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10251'.
[  838.358924][ T8804] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  838.383112][ T8806] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10260'.
[  839.229194][ T8809] 8021q: VLANs not supported on ip_vti0
[  839.482242][ T8832] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10270'.
[  839.497206][ T8833] netlink: 5 bytes leftover after parsing attributes in process `syz.0.10270'.
[  839.502710][ T8833] 1{X: renamed from 30{X
[  839.508928][ T8833] 1{X: entered allmulticast mode
[  839.511768][ T8833] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  839.590748][ T8842] tc_dump_action: action bad kind
[  839.750808][ T8856] netlink: 'syz.2.10276': attribute type 13 has an invalid length.
[  839.810020][ T8856] netlink: 'syz.2.10276': attribute type 13 has an invalid length.
[  840.555134][ T8895] x_tables: ip6_tables: TRACE target: only valid in raw table, not 
[  840.564868][ T8896] netlink: 9 bytes leftover after parsing attributes in process `syz.1.10283'.
[  840.707408][ T8904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10286'.
[  840.826086][ T8909] netlink: 'syz.0.10288': attribute type 10 has an invalid length.
[  840.885800][ T8911] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  841.149171][ T8921] bond74: entered allmulticast mode
[  841.161430][ T8921] dvmrp8: entered allmulticast mode
[  841.165048][ T8918] bond74: left allmulticast mode
[  841.457886][ T8944] netlink: 'syz.0.10299': attribute type 3 has an invalid length.
[  841.491523][ T8946] pim6reg1: entered allmulticast mode
[  841.661066][ T8950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  841.929399][ T8967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10307'.
[  841.944870][ T8963] pim6reg: entered allmulticast mode
[  841.953717][ T8965] netlink: 'syz.1.10306': attribute type 3 has an invalid length.
[  841.960830][ T8963] pim6reg: left allmulticast mode
[  842.063907][ T8973] openvswitch: netlink: IP tunnel dst address not specified
[  842.070460][ T8973] netlink: 'syz.2.10310': attribute type 21 has an invalid length.
[  842.072972][ T8973] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10310'.
[  842.115006][ T8975] netlink: 'syz.2.10312': attribute type 1 has an invalid length.
[  842.195502][ T8983] netlink: 'syz.0.10314': attribute type 1 has an invalid length.
[  842.263858][ T8989] netlink: 'syz.0.10316': attribute type 3 has an invalid length.
[  842.814862][ T9028] netlink: 'syz.1.10323': attribute type 3 has an invalid length.
[  842.844041][ T9021] __nla_validate_parse: 3 callbacks suppressed
[  842.844051][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10321'.
[  842.879709][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10324'.
[  843.253477][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10328'.
[  843.294210][ T9052] netlink: 'syz.0.10328': attribute type 5 has an invalid length.
[  843.301895][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10328'.
[  843.450562][ T9057] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10329'.
[  843.658151][ T9066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10330'.
[  843.760983][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10330'.
[  844.046893][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10334'.
[  844.329653][ T9096] netlink: 'syz.1.10337': attribute type 3 has an invalid length.
[  844.480728][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10339'.
[  844.492150][ T9100] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  844.648823][ T9106] ipvlan0: left promiscuous mode
[  844.660556][ T9106] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  844.827518][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10342'.
[  844.872771][ T9108] team0: No ports can be present during mode change
[  845.023924][ T9118] netlink: 'syz.0.10345': attribute type 1 has an invalid length.
[  845.097491][ T9118] 8021q: adding VLAN 0 to HW filter on device bond109
[  845.145350][ T9125] netlink: 'syz.2.10347': attribute type 10 has an invalid length.
[  845.259997][ T9133] netlink: 'syz.0.10349': attribute type 10 has an invalid length.
[  845.271790][ T9134] netlink: 'syz.0.10349': attribute type 10 has an invalid length.
[  846.275332][ T9149] 1{X: left allmulticast mode
[  846.565814][ T9164] siw: device registration error -23
[  846.702468][ T9149] bond69: left promiscuous mode
[  846.708864][ T9149] bond69: left allmulticast mode
[  846.715139][ T9149] bond70: left promiscuous mode
[  846.722081][ T9149] bond71: left promiscuous mode
[  846.729871][ T9149] vlan13: left allmulticast mode
[  846.734112][ T9149] bond71: left allmulticast mode
[  846.742612][ T9149] veth32: left promiscuous mode
[  846.750204][ T9149] bond74: left promiscuous mode
[  846.764308][ T9149] macvtap0: left allmulticast mode
[  846.769085][ T9149] macvtap1: left allmulticast mode
[  846.771836][ T9149] macvtap2: left allmulticast mode
[  846.773900][ T9149] macvtap3: left allmulticast mode
[  846.776321][ T9149] macvtap4: left allmulticast mode
[  846.780791][ T9149] macvtap5: left allmulticast mode
[  846.782982][ T9149] macvtap6: left allmulticast mode
[  846.784995][ T9149] macvtap7: left allmulticast mode
[  846.788125][ T9149] macvtap8: left allmulticast mode
[  846.790278][ T9149] macvtap9: left allmulticast mode
[  846.792636][ T9149] macvtap10: left allmulticast mode
[  846.794713][ T9149] macvtap11: left allmulticast mode
[  846.797212][ T9149] macvtap12: left allmulticast mode
[  846.799184][ T9149] macvtap13: left allmulticast mode
[  846.801434][ T9149] macvtap14: left allmulticast mode
[  846.803528][ T9149] macvtap15: left allmulticast mode
[  846.805693][ T9149] macvtap16: left allmulticast mode
[  846.809447][ T9149] macvtap17: left allmulticast mode
[  846.812301][ T9149] macvtap18: left allmulticast mode
[  846.814480][ T9149] macvtap19: left allmulticast mode
[  846.817542][ T9149] macvtap20: left allmulticast mode
[  846.819787][ T9149] macvtap21: left allmulticast mode
[  846.822350][ T9149] macvlan1: left allmulticast mode
[  846.839144][ T9149] bond78: left promiscuous mode
[  846.844845][ T9149] bond79: left allmulticast mode
[  846.854091][ T9149] vlan14: left promiscuous mode
[  846.856082][ T9149] bridge0: left promiscuous mode
[  846.858682][ T9149] veth38: left allmulticast mode
[  846.879940][ T9149] bond82: left promiscuous mode
[  846.893504][ T9149] team0: left promiscuous mode
[  846.904700][ T9149] team0: left allmulticast mode
[  846.916402][ T9149] bridge56: left promiscuous mode
[  846.919383][ T9149] bridge56: left allmulticast mode
[  846.921490][ T9149] bond83: left promiscuous mode
[  846.924099][ T9149] bond84: left promiscuous mode
[  846.931824][ T9149] veth40: left promiscuous mode
[  846.949097][ T9149] bond87: left promiscuous mode
[  847.005787][ T9149] ipvlan1: left promiscuous mode
[  847.018108][ T9149] ip6tnl13: left allmulticast mode
[  847.052481][ T9149] vlan15: left allmulticast mode
[  847.056445][ T9149] bridge60: left allmulticast mode
[  847.063853][ T9149] bond95: left promiscuous mode
[  847.081297][ T9149] bond100: left promiscuous mode
[  847.100623][ T9149] bridge62: left allmulticast mode
[  847.115564][ T9149] bond104: left promiscuous mode
[  847.120167][ T9149] bond104: left allmulticast mode
[  847.139918][ T9149] ip6tnl14: left allmulticast mode
[  847.157435][ T9149] bond106: left allmulticast mode
[  847.160892][ T9149] bond106: left promiscuous mode
[  847.163159][ T9149] macvlan13: left promiscuous mode
[  847.164850][ T9149] macvlan13: left allmulticast mode
[  847.191539][ T5666] wg2 speed is unknown, defaulting to 1000
[  847.206857][ T5666] syz2: Port: 1 Link DOWN
[  847.229528][ T3207] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  847.235241][ T3207] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  847.253078][ T3207] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  847.290366][ T3207] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  847.324525][ T9163] lo speed is unknown, defaulting to 1000
[  847.336823][ T5635] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  847.341445][ T5635] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  847.365622][ T5635] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  847.377637][ T5635] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  847.551207][ T9177] veth0: Caught tx_queue_len zero misconfig
[  847.570440][ T9163] wg2 speed is unknown, defaulting to 1000
[  848.095668][ T9211] netlink: 'syz.1.10364': attribute type 3 has an invalid length.
[  848.100035][ T9208] __nla_validate_parse: 7 callbacks suppressed
[  848.100045][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10363'.
[  848.520083][ T9228] x_tables: unsorted entry at hook 3
[  848.923833][ T9243] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10372'.
[  848.937396][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10372'.
[  849.009540][ T9251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10373'.
[  849.082000][ T9254] netlink: 'syz.2.10374': attribute type 1 has an invalid length.
[  849.145182][ T9254] 8021q: adding VLAN 0 to HW filter on device bond83
[  849.206005][ T9259] bond83: (slave veth35): Enslaving as a backup interface with a down link
[  849.235590][ T9265] syzkaller0: entered promiscuous mode
[  849.238543][ T9254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10374'.
[  849.244960][ T9265] syzkaller0: entered allmulticast mode
[  849.250481][ T9254] netlink: 'syz.2.10374': attribute type 10 has an invalid length.
[  849.265489][ T9254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10374'.
[  849.461384][ T9277] bond8: (slave bond9): Releasing backup interface
[  849.468353][ T9277] bond8: (slave bond9): the permanent HWaddr of slave - 66:aa:a0:87:13:57 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  849.486906][ T9277] bond8: (slave gretap1): making interface the new active one
[  849.500638][ T9277] bond8: (slave gretap1): Releasing backup interface
[  849.504307][ T9281] netlink: 'syz.0.10382': attribute type 1 has an invalid length.
[  849.511154][ T9277] bond10: (slave geneve3): Releasing active interface
[  849.520515][ T9277] bond11: (slave ip6gretap1): Releasing active interface
[  849.531793][ T9277] bond14: (slave bridge3): Releasing backup interface
[  849.537519][ T9277] bond15: (slave gretap2): Releasing active interface
[  849.542515][ T9277] vlan0: left promiscuous mode
[  849.546360][ T9277] erspan0: left promiscuous mode
[  849.550217][ T9277] vlan0: left allmulticast mode
[  849.553522][ T9277] erspan0: left allmulticast mode
[  849.559709][ T9277] team0: Port device vlan0 removed
[  849.566324][ T9277] bond19: (slave gretap3): Releasing active interface
[  849.578253][ T9277] team0: left allmulticast mode
[  849.583172][ T9277] bridge12: left allmulticast mode
[  849.585155][ T9277] team0: left promiscuous mode
[  849.589498][ T9277] bridge12: left promiscuous mode
[  849.594757][ T9277] bridge0: port 2(team0) entered disabled state
[  849.612487][ T9277] bond28: (slave veth19): Releasing active interface
[  849.622688][ T9277] bond32: (slave bridge8): Releasing active interface
[  849.634939][ T9277] bond34: (slave veth21): Releasing active interface
[  849.650310][ T9277] bond39: (slave ip6gre3): Releasing backup interface
[  849.661042][ T9277] bond42: (slave veth25): Releasing active interface
[  849.668837][ T9277] bond43: (slave veth27): Releasing active interface
[  849.683379][ T9277] team0: Port device bridge12 removed
[  849.689822][ T9277] bond49: (slave bridge16): Releasing backup interface
[  849.699555][ T9277] bond51: left allmulticast mode
[  849.702469][ T9277] bond51: left promiscuous mode
[  849.711972][ T9277] team0: Port device macvlan0 removed
[  849.721181][ T9277] bond56: (slave bridge0): Releasing backup interface
[  849.728162][ T9277] bond56: (slave bridge0): the permanent HWaddr of slave - d2:46:10:4e:6c:95 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  849.741594][ T9277] bond56: (slave bridge18): making interface the new active one
[  849.751966][ T9277] bond56: (slave bridge18): Releasing backup interface
[  849.761051][ T9277] bond57: (slave veth31): Releasing active interface
[  849.769388][ T9277] bond57: (slave veth31): the permanent HWaddr of slave - c2:21:2c:47:c2:84 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  849.782643][ T9277] bond57: (slave batadv0): Releasing active interface
[  849.785398][ T9277] batadv0: left promiscuous mode
[  849.794245][ T9277] bond58: (slave veth33): Releasing active interface
[  849.797234][ T9277] bond58: (slave veth33): the permanent HWaddr of slave - 02:3b:e0:56:35:8f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  849.807618][ T9277] bond58: (slave veth35): Releasing active interface
[  849.813134][ T9277] bond59: (slave veth37): Releasing active interface
[  849.815961][ T9277] bond59: (slave veth37): the permanent HWaddr of slave - 9a:2e:b4:d2:e7:23 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  849.920432][ T9277] bond59: (slave batadv1): Releasing active interface
[  849.922679][ T9277] batadv1: left promiscuous mode
[  849.925949][ T9277] batman_adv: batadv0: Removing interface: gretap4
[  849.931513][ T9277] team0: Port device bridge33 removed
[  849.937004][ T9277] bond82: (slave ipip8): Releasing backup interface
[  849.939755][ T9277] ipip8: left promiscuous mode
[  849.947638][ T9277] bond84: (slave gre5): Releasing backup interface
[  849.951998][ T9277] gre5: left promiscuous mode
[  849.982527][ T9281] bond110: entered promiscuous mode
[  849.984534][ T9281] 8021q: adding VLAN 0 to HW filter on device bond110
[  849.994891][ T9282] vlan14: entered allmulticast mode
[  849.997062][ T9282] bond110: entered allmulticast mode
[  850.011528][ T9283] bond110: (slave bridge0): making interface the new active one
[  850.017703][ T9283] bridge0: entered promiscuous mode
[  850.020738][ T9283] bridge0: entered allmulticast mode
[  850.024174][ T9283] bond110: (slave bridge0): Enslaving as an active interface with an up link
[  850.028479][ T9288] workqueue: Failed to create a rescuer kthread for wq "bond84": -EINTR
[  850.184867][ T9298] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.10385'.
[  850.367142][ T9303] syzkaller0: entered promiscuous mode
[  850.369512][ T9303] syzkaller0: entered allmulticast mode
[  850.564338][ T9307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10388'.
[  850.951387][ T9317] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10389'.
[  851.076206][ T9324] netlink: 'syz.1.10393': attribute type 12 has an invalid length.
[  851.333984][ T9331] netlink: 176 bytes leftover after parsing attributes in process `syz.0.10396'.
[  851.496506][ T9329] bond0 (unregistering): Released all slaves
[  851.548499][ T5683] smbdirect: ib_dev[syz1] removed
[  851.905724][ T9353] *A^m: left promiscuous mode
[  851.914521][ T9353] tunl0: left promiscuous mode
[  851.917998][ T9353] gre0: left promiscuous mode
[  851.921506][ T9353] erspan0: left promiscuous mode
[  851.924206][ T9353] ip_vti0: left promiscuous mode
[  851.928396][ T9353] sit0: left promiscuous mode
[  851.931035][ T9353] ip6tnl0: left promiscuous mode
[  851.933343][ T9353] ip6gre0: left promiscuous mode
[  851.936045][ T9353] ip6gretap0: left promiscuous mode
[  851.940964][ T9353] nlmon0: left promiscuous mode
[  851.944535][ T9353] veth0: left promiscuous mode
[  851.948408][ T9353] veth1: left promiscuous mode
[  851.951757][ T9353] wg0: left promiscuous mode
[  851.955381][ T9353] wg2: left promiscuous mode
[  851.966780][ T9353] veth1_to_bridge: left promiscuous mode
[  851.973139][ T9353] bridge_slave_1: left promiscuous mode
[  851.980622][ T9353] veth0_to_bond: left promiscuous mode
[  851.989383][ T9353] bond_slave_0: left promiscuous mode
[  851.993185][ T9353] veth0_to_team: left promiscuous mode
[  851.999603][ T9353] team_slave_0: left promiscuous mode
[  852.008091][ T9353] team_slave_1: left promiscuous mode
[  852.015128][ T9353] xfrm0: left promiscuous mode
[  852.024810][ T9353] veth0_to_hsr: left promiscuous mode
[  852.031984][ T9353] hsr_slave_0: left promiscuous mode
[  852.035750][ T9353] geneve0: left promiscuous mode
[  852.040237][ T9353] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  853.062825][ T9445] bond84: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  853.175655][ T9445] bond84 (unregistering): Released all slaves
[  853.709823][ T9473] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping
[  853.972478][ T9485] netlink: 'syz.1.10433': attribute type 1 has an invalid length.
[  853.974794][ T9489] __nla_validate_parse: 6 callbacks suppressed
[  853.974804][ T9489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10432'.
[  853.975496][ T9485] netlink: 'syz.1.10433': attribute type 12 has an invalid length.
[  853.978807][ T9489] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  853.996685][ T9485] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10433'.
[  854.058057][ T9494] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10436'.
[  854.124221][ T9496] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10434'.
[  854.137887][ T9490] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10434'.
[  854.144647][ T9490] netlink: 116 bytes leftover after parsing attributes in process `syz.0.10434'.
[  854.154030][ T9490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10434'.
[  854.207150][ T9502] netlink: 'syz.1.10437': attribute type 3 has an invalid length.
[  854.459224][ T9512] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10440'.
[  855.474123][ T9541] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10451'.
[  855.593948][ T9551] netlink: 'syz.2.10454': attribute type 3 has an invalid length.
[  855.906097][ T9563] netlink: 'syz.2.10458': attribute type 1 has an invalid length.
[  855.934076][ T9563] bond84: entered promiscuous mode
[  855.939437][ T9563] 8021q: adding VLAN 0 to HW filter on device bond84
[  856.435471][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10462'.
[  856.651990][ T9593] netlink: 'syz.0.10464': attribute type 11 has an invalid length.
[  857.506083][ T9595] netlink: 'syz.0.10465': attribute type 3 has an invalid length.
[  857.567868][ T9604] netlink: 'syz.1.10468': attribute type 13 has an invalid length.
[  857.571016][ T9604] netlink: 'syz.1.10468': attribute type 17 has an invalid length.
[  858.224482][ T9604] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  858.291004][ T7162] lo speed is unknown, defaulting to 1000
[  858.306702][ T7162] syz0: Port: 1 Link ACTIVE
[  858.398324][ T7162] lo speed is unknown, defaulting to 1000
[  858.441333][ T9623] netlink: 'syz.1.10474': attribute type 1 has an invalid length.
[  858.467750][ T9622] syzkaller0: entered promiscuous mode
[  858.470008][ T9622] syzkaller0: entered allmulticast mode
[  858.496345][ T9623] netlink: 'syz.1.10474': attribute type 1 has an invalid length.
[  858.635923][T32755] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  858.650038][T32755] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  858.662010][T32755] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  858.670605][T32755] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  858.791872][ T9638] xt_l2tp: invalid flags combination: 8
[  859.068911][ T9646] netlink: 'syz.1.10482': attribute type 1 has an invalid length.
[  859.237868][ T9654] __nla_validate_parse: 3 callbacks suppressed
[  859.237880][ T9654] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10484'.
[  859.256324][ T9654] netlink: 'syz.1.10484': attribute type 1 has an invalid length.
[  859.298790][ T9654] workqueue: Failed to create a rescuer kthread for wq "bond97": -EINTR
[  859.317236][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10486'.
[  859.323304][ T9666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10486'.
[  859.330174][ T9666] netlink: 'syz.0.10486': attribute type 11 has an invalid length.
[  859.370449][ T9669] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10487'.
[  859.396066][ T9667] ip_tables: iptables: counters copy to user failed while replacing table
[  859.668916][ T9683] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10491'.
[  859.741879][ T9681] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  859.803669][ T9693] team0: Port device macvlan13 removed
[  859.808181][ T9693] bond110: (slave bridge0): Releasing backup interface
[  859.826004][ T9693] netlink: Conntrack attr type has unexpected length (type=0, length=4, expected=0)
[  859.835847][ T9693] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  859.843204][ T9693] team0: Mode changed to "random"
[  859.871194][ T9696] netlink: 'syz.0.10495': attribute type 4 has an invalid length.
[  859.929455][ T9697] lo speed is unknown, defaulting to 1000
[  860.332719][ T9697] wg2 speed is unknown, defaulting to 1000
[  860.560573][ T9716] syzkaller1: entered promiscuous mode
[  860.562579][ T9716] syzkaller1: entered allmulticast mode
[  860.765481][ T9717] 8021q: VLANs not supported on ip_vti0
[  861.067117][ T9723] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10501'.
[  861.464292][ T9743] netlink: 'syz.1.10507': attribute type 3 has an invalid length.
[  861.523247][ T9746] ip6t_rpfilter: unknown options
[  861.576218][ T9749] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  861.631525][ T9749] bridge0: Caught tx_queue_len zero misconfig
[  861.652245][ T9749] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  861.769944][ T9756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  861.820231][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10511'.
[  861.942258][ T9763] netlink: 'syz.0.10513': attribute type 1 has an invalid length.
[  862.337519][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10520'.
[  862.506028][ T9797] netlink: 'syz.0.10523': attribute type 2 has an invalid length.
[  862.904554][ T9822] netlink: 92 bytes leftover after parsing attributes in process `syz.0.10529'.
[  863.020253][ T9831] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10532'.
[  863.291236][ T9843] netlink: 'syz.1.10533': attribute type 1 has an invalid length.
[  863.338966][ T9849] netlink: 'syz.0.10534': attribute type 1 has an invalid length.
[  863.375432][ T9850] bond112 (unregistering): Released all slaves
[  863.389650][ T9849] workqueue: Failed to create a rescuer kthread for wq "bond112": -EINTR
[  863.450116][ T9858] netlink: 'syz.1.10536': attribute type 3 has an invalid length.
[  863.626549][ T9874] pim6reg1: entered promiscuous mode
[  863.632951][ T9874] pim6reg1: entered allmulticast mode
[  863.789252][ T8454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.792949][ T8454] syzkaller0: tun_net_xmit 76
[  863.799102][ T9882] syzkaller0: create flow: hash 4223602869 index 2
[  863.810351][ T8454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.814901][ T8454] syzkaller0: tun_net_xmit 48
[  863.817516][ T7198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  863.821856][ T7198] syzkaller0: tun_net_xmit 76
[  863.834653][ T9882] syzkaller0: delete flow: hash 4223602869 index 2
[  864.145138][ T9887] validate_nla: 1 callbacks suppressed
[  864.145154][ T9887] netlink: 'syz.1.10545': attribute type 3 has an invalid length.
[  864.250707][ T9892] syzkaller0: entered promiscuous mode
[  864.253113][ T9892] syzkaller0: entered allmulticast mode
[  864.589982][ T9900] x_tables: unsorted underflow at hook 2
[  864.704329][ T9907] syzkaller0: entered promiscuous mode
[  864.706279][ T9907] syzkaller0: entered allmulticast mode
[  864.714475][ T9907] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  864.721730][ T9907] tipc: Resetting bearer <eth:syzkaller0>
[  864.734533][ T9907] pim6reg1: entered promiscuous mode
[  864.741035][ T9907] pim6reg1: entered allmulticast mode
[  864.743625][ T9909] netlink: 'syz.1.10554': attribute type 3 has an invalid length.
[  864.830659][ T9905] tipc: Resetting bearer <eth:syzkaller0>
[  864.853836][ T9905] tipc: Disabling bearer <eth:syzkaller0>
[  865.033977][ T9925] can: request_module (can-proto-0) failed.
[  865.100524][ T9931] __nla_validate_parse: 3 callbacks suppressed
[  865.100541][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10561'.
[  865.121684][ T9928] syzkaller0: entered promiscuous mode
[  865.124545][ T9928] syzkaller0: entered allmulticast mode
[  865.349623][ T9936] netlink: 'syz.2.10561': attribute type 12 has an invalid length.
[  865.614515][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10564'.
[  866.000393][ T9962] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  866.016163][ T9962] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  866.085844][ T9967] netlink: 'syz.2.10570': attribute type 1 has an invalid length.
[  866.468497][ T5666] wg2 speed is unknown, defaulting to 1000
[  866.470966][ T9983] netlink: 'syz.2.10573': attribute type 3 has an invalid length.
[  866.538392][ T9986] netlink: 'syz.2.10574': attribute type 5 has an invalid length.
[  866.580242][ T9988] bond0: (slave gretap0): Error: Device is in use and cannot be enslaved
[  866.660068][ T9991] x_tables: duplicate entry at hook 2
[  867.079654][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10583'.
[  867.236131][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10584'.
[  867.257253][T10028] netlink: 'syz.1.10587': attribute type 1 has an invalid length.
[  867.298544][T10028] 8021q: adding VLAN 0 to HW filter on device bond97
[  867.545622][T10047] netlink: 524 bytes leftover after parsing attributes in process `syz.2.10591'.
[  867.552458][T10050] netlink: 'syz.1.10592': attribute type 1 has an invalid length.
[  867.626981][T10050] 8021q: adding VLAN 0 to HW filter on device bond98
[  867.808301][T10071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10596'.
[  867.840800][T10071] 8021q: adding VLAN 0 to HW filter on device bond112
[  867.850050][T10071] bond112: option ad_select: unable to set because the bond device is up
[  867.863011][T10075] netlink: 'syz.1.10598': attribute type 10 has an invalid length.
[  867.869664][T10075] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10598'.
[  867.874668][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10598'.
[  868.324878][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10607'.
[  868.391879][T10109] x_tables: duplicate underflow at hook 2
[  868.481428][T10116] netlink: 'syz.1.10610': attribute type 19 has an invalid length.
[  868.583123][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10611'.
[  868.733258][T10128] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[  869.620330][T10163] netlink: 'syz.1.10624': attribute type 1 has an invalid length.
[  869.631211][T10171] netlink: 'syz.0.10626': attribute type 20 has an invalid length.
[  869.676449][T10168] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001
[  869.693209][T10163] 8021q: adding VLAN 0 to HW filter on device bond100
[  869.822144][T10179] bridge0: entered allmulticast mode
[  870.108344][T10197] __nla_validate_parse: 4 callbacks suppressed
[  870.108360][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10636'.
[  870.129473][T10197] 8021q: adding VLAN 0 to HW filter on device bond0
[  870.280159][T10208] netlink: 'syz.2.10640': attribute type 3 has an invalid length.
[  870.359544][T10216] netlink: 'syz.1.10641': attribute type 8 has an invalid length.
[  870.401618][T10218] netlink: 'syz.2.10643': attribute type 1 has an invalid length.
[  870.470878][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10646'.
[  870.489837][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10646'.
[  870.625946][T10231] netlink: 'syz.0.10648': attribute type 3 has an invalid length.
[  870.648668][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10649'.
[  870.743403][T10240] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10652'.
[  870.980015][T10253] 8021q: adding VLAN 0 to HW filter on device bond1
[  870.985684][T10253] 8021q: adding VLAN 0 to HW filter on device bond2
[  870.995257][T10253] 8021q: adding VLAN 0 to HW filter on device bond3
[  871.008701][T10257] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10656'.
[  871.012662][T10253] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  871.025558][ T7198] wg2 speed is unknown, defaulting to 1000
[  871.029885][ T8454] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  871.034839][ T7198] syz2: Port: 1 Link ACTIVE
[  871.139891][ T5635] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  871.146707][ T5635] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  871.164610][ T5635] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  871.378487][T10270] IPVS: length: 15 != 1751912768
[  871.388107][T10271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10658'.
[  871.594679][T10287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10663'.
[  871.603552][T10287] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  871.751186][T10297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10667'.
[  871.817528][T10297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10667'.
[  872.075322][T10321] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  872.508446][T10343] lo speed is unknown, defaulting to 1000
[  873.005467][T10343] wg2 speed is unknown, defaulting to 1000
[  873.482488][T10380] vlan0: entered promiscuous mode
[  873.805075][T10405] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  874.523242][T10438] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  875.837088][T10482] netlink: 'syz.2.10724': attribute type 3 has an invalid length.
[  876.053440][T10494] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[  876.059608][T10494] CPU: 1 UID: 0 PID: 10494 Comm: syz.1.10728 Not tainted syzkaller #0 PREEMPT(full) 
[  876.059627][T10494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  876.059636][T10494] Call Trace:
[  876.059643][T10494]  <TASK>
[  876.059650][T10494]  dump_stack_lvl+0xe8/0x150
[  876.059678][T10494]  sysfs_warn_dup+0x8e/0xa0
[  876.059700][T10494]  sysfs_do_create_link_sd+0xc0/0x110
[  876.059722][T10494]  device_add_class_symlinks+0x1cf/0x240
[  876.059742][T10494]  device_add+0x467/0xb80
[  876.059759][T10494]  wiphy_register+0x1fc8/0x2ff0
[  876.059791][T10494]  ? __pfx_wiphy_register+0x10/0x10
[  876.059810][T10494]  ? __pfx_netdev_run_todo+0x10/0x10
[  876.059828][T10494]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  876.059848][T10494]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  876.059871][T10494]  ieee80211_register_hw+0x3d3d/0x4a50
[  876.059922][T10494]  ? ieee80211_register_hw+0x19c1/0x4a50
[  876.059960][T10494]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  876.060009][T10494]  ? __asan_memset+0x22/0x50
[  876.060026][T10494]  ? __hrtimer_setup+0x1b7/0x260
[  876.060042][T10494]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  876.060066][T10494]  mac80211_hwsim_new_radio+0x3238/0x5680
[  876.060110][T10494]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  876.060129][T10494]  ? kstrndup+0xbd/0x160
[  876.060152][T10494]  ? kstrndup+0xbd/0x160
[  876.060172][T10494]  hwsim_new_radio_nl+0xd8b/0xf90
[  876.060201][T10494]  genl_family_rcv_msg_doit+0x233/0x340
[  876.060227][T10494]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  876.060257][T10494]  ? bpf_lsm_capable+0x9/0x20
[  876.060274][T10494]  ? security_capable+0x7e/0x2c0
[  876.060305][T10494]  genl_rcv_msg+0x614/0x7a0
[  876.060329][T10494]  ? __pfx_genl_rcv_msg+0x10/0x10
[  876.060347][T10494]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  876.060367][T10494]  ? __pfx_ref_tracker_free+0x10/0x10
[  876.060395][T10494]  netlink_rcv_skb+0x226/0x4a0
[  876.060414][T10494]  ? __pfx_genl_rcv_msg+0x10/0x10
[  876.060432][T10494]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  876.060461][T10494]  ? down_read+0x2be/0x330
[  876.060485][T10494]  genl_rcv+0x28/0x40
[  876.060502][T10494]  netlink_unicast+0x7bb/0x940
[  876.060526][T10494]  netlink_sendmsg+0x813/0xb40
[  876.060551][T10494]  ? __pfx_netlink_sendmsg+0x10/0x10
[  876.060570][T10494]  ? aa_sock_msg_perm+0xf1/0x1b0
[  876.060590][T10494]  ? __pfx_netlink_sendmsg+0x10/0x10
[  876.060606][T10494]  sock_sendmsg_nosec+0x13a/0x180
[  876.060628][T10494]  ____sys_sendmsg+0x54e/0x850
[  876.060646][T10494]  ? __pfx_____sys_sendmsg+0x10/0x10
[  876.060667][T10494]  ? import_iovec+0x73/0xa0
[  876.060691][T10494]  ___sys_sendmsg+0x2a5/0x360
[  876.060706][T10494]  ? __lock_acquire+0x683/0x2cf0
[  876.060728][T10494]  ? __pfx____sys_sendmsg+0x10/0x10
[  876.060746][T10494]  ? futex_wait+0x2a2/0x390
[  876.060785][T10494]  ? __fget_files+0x2a/0x420
[  876.060803][T10494]  ? __fget_files+0x3a2/0x420
[  876.060827][T10494]  __x64_sys_sendmsg+0x1b1/0x290
[  876.060846][T10494]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  876.060877][T10494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.060895][T10494]  do_syscall_64+0x174/0x580
[  876.060910][T10494]  ? trace_irq_disable+0x3b/0x140
[  876.060931][T10494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.060945][T10494] RIP: 0033:0x7f9397d9e0d9
[  876.060962][T10494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  876.061000][T10494] RSP: 002b:00007f9398bcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  876.061016][T10494] RAX: ffffffffffffffda RBX: 00007f9398025fa0 RCX: 00007f9397d9e0d9
[  876.061028][T10494] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  876.061037][T10494] RBP: 00007f9397e35024 R08: 0000000000000000 R09: 0000000000000000
[  876.061044][T10494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  876.061053][T10494] R13: 00007f9398026038 R14: 00007f9398025fa0 R15: 00007fffd6b04d98
[  876.061079][T10494]  </TASK>
[  876.435052][T10507] bond113: option updelay: invalid value (18446744073709518847)
[  876.441112][T10507] bond113: option updelay: allowed values 0 - 2147483647
[  876.449123][T10507] bond113 (unregistering): Released all slaves
[  876.452057][T10516] __nla_validate_parse: 15 callbacks suppressed
[  876.452071][T10516] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10732'.
[  876.683702][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10736'.
[  876.699822][T10525] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10736'.
[  876.729465][T10525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10736'.
[  876.733348][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10736'.
[  876.834816][T10535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10738'.
[  876.842422][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10738'.
[  876.850847][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10738'.
[  876.863671][T10534] netlink: 'syz.0.10738': attribute type 18 has an invalid length.
[  876.888193][T10543] netlink: 'syz.2.10739': attribute type 3 has an invalid length.
[  877.009635][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10743'.
[  877.091509][T10558] netlink: 'syz.2.10745': attribute type 5 has an invalid length.
[  877.143753][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10743'.
[  877.286049][T10567] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  877.351974][T10567] syzkaller0: entered promiscuous mode
[  877.362924][T10567] syzkaller0: entered allmulticast mode
[  877.368062][T10567] tipc: Resetting bearer <eth:syzkaller0>
[  877.394448][T10566] tipc: Resetting bearer <eth:syzkaller0>
[  877.519323][T10575] sctp: [Deprecated]: syz.1.10750 (pid 10575) Use of int in maxseg socket option.
[  877.519323][T10575] Use struct sctp_assoc_value instead
[  878.005830][T10581] block nbd3: server does not support multiple connections per device.
[  878.028037][T10581] block nbd3: shutting down sockets
[  880.930289][T10566] tipc: Disabling bearer <eth:syzkaller0>
[  881.105574][T10624] netlink: 'syz.2.10756': attribute type 1 has an invalid length.
[  881.403967][T10648] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  882.010254][T10678] __nla_validate_parse: 1 callbacks suppressed
[  882.010273][T10678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10771'.
[  882.026393][T10678] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  882.493108][T10694] netlink: 92 bytes leftover after parsing attributes in process `syz.1.10776'.
[  882.556020][T10698] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20002
[  882.638620][T10695] mac80211_hwsim hwsim88 wlan1: entered promiscuous mode
[  882.928639][T10710] netlink: 'syz.1.10779': attribute type 2 has an invalid length.
[  882.996733][T10710] : entered promiscuous mode
[  883.605519][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10784'.
[  884.012974][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10787'.
[  884.113522][T10741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10789'.
[  884.322695][T10751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10791'.
[  884.382756][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10791'.
[  884.387660][T10751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10791'.
[  884.451622][T10757] netlink: 'syz.0.10791': attribute type 4 has an invalid length.
[  884.581898][T10759] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10792'.
[  884.669294][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10793'.
[  884.783914][T10771] syzkaller0: entered promiscuous mode
[  884.788107][T10771] syzkaller0: entered allmulticast mode
[  889.075396][T10813] __nla_validate_parse: 1 callbacks suppressed
[  889.075414][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10806'.
[  889.093965][T10816] tipc: Enabling of bearer <udp:sy> rejected, failed to enable media
[  889.100563][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10806'.
[  889.171014][T10817] bond88 (unregistering): Released all slaves
[  889.447186][T10836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10812'.
[  889.462754][T10836] openvswitch: netlink: Missing key (keys=c0, expected=880)
[  889.514173][T10839] netlink: 'syz.1.10813': attribute type 3 has an invalid length.
[  889.523956][T10839] netlink: 'syz.1.10813': attribute type 3 has an invalid length.
[  889.691232][T10847] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10815'.
[  889.984147][T10860] netlink: 'syz.1.10819': attribute type 1 has an invalid length.
[  890.059904][T10860] 8021q: adding VLAN 0 to HW filter on device bond101
[  890.277933][T10876] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10821'.
[  890.289266][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10822'.
[  890.323710][T10875] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  890.904716][T10918] netlink: 260 bytes leftover after parsing attributes in process `syz.0.10832'.
[  890.911154][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10831'.
[  890.918932][T10921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10831'.
[  890.929856][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10831'.
[  891.352415][T10943] netlink: 'syz.2.10839': attribute type 2 has an invalid length.
[  891.376063][T10924] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  891.430045][ T7162] wg2 speed is unknown, defaulting to 1000
[  891.437261][ T8454] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  891.444039][ T7162] syz2: Port: 1 Link DOWN
[  891.451258][ T8454] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  891.463291][ T8454] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  891.474885][ T8454] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  891.736069][T10950] netlink: 'syz.1.10840': attribute type 3 has an invalid length.
[  891.750555][T10950] netlink: 'syz.1.10840': attribute type 3 has an invalid length.
[  891.975151][T10961] netlink: 'syz.0.10841': attribute type 1 has an invalid length.
[  892.135828][T10961] 8021q: adding VLAN 0 to HW filter on device bond113
[  893.127871][T11020] netlink: 'syz.2.10854': attribute type 2 has an invalid length.
[  893.473238][T11050] bond0: Device is already in use.
[  893.483966][T11047] bond0: Device is already in use.
[  893.503422][T11049] lo speed is unknown, defaulting to 1000
[  893.690909][T11049] wg2 speed is unknown, defaulting to 1000
[  893.838155][T11068] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  894.316734][T11069] __nla_validate_parse: 6 callbacks suppressed
[  894.316754][T11069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10868'.
[  894.327843][T11069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10868'.
[  894.811372][T11094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10876'.
[  894.879812][T11099] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10878'.
[  894.946728][T11101] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10879'.
[  895.057569][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10879'.
[  895.434843][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10884'.
[  895.628384][T11139] netlink: 'syz.0.10887': attribute type 4 has an invalid length.
[  895.632455][T11140] netlink: 'syz.0.10887': attribute type 4 has an invalid length.
[  896.014322][T11149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10889'.
[  896.022751][T11149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10889'.
[  896.146041][T11158] netlink: 'syz.1.10892': attribute type 2 has an invalid length.
[  896.265923][T11160] netlink: 'syz.0.10893': attribute type 2 has an invalid length.
[  896.273535][T11167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10894'.
[  896.611109][T11179] netlink: 'syz.1.10898': attribute type 4 has an invalid length.
[  896.618708][T11179] netlink: 'syz.1.10898': attribute type 8 has an invalid length.
[  896.623873][T11179] netlink: 'syz.1.10898': attribute type 1 has an invalid length.
[  896.629435][T11179] NCSI netlink: No device for ifindex 7388461
[  897.297063][T11211] netlink: 'syz.2.10910': attribute type 13 has an invalid length.
[  897.379810][T11215] netlink: 'syz.1.10911': attribute type 1 has an invalid length.
[  897.563907][T11215] bridge44: entered promiscuous mode
[  897.585184][T11215] bond102: (slave bridge44): making interface the new active one
[  897.594119][T11215] bond102: (slave bridge44): Enslaving as an active interface with an up link
[  897.626989][T11223] bridge45: entered promiscuous mode
[  897.642895][T11223] bond102: (slave bridge45): Enslaving as a backup interface with an up link
[  897.729592][T11225] netlink: 'syz.2.10913': attribute type 1 has an invalid length.
[  897.801510][T11230] Bluetooth: hci0: invalid length 0, exp 2 for type 11
[  898.790820][T11264] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  898.868505][T11264] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  898.939224][T11264] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  899.125657][T11264] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  899.329464][T11272] __nla_validate_parse: 18 callbacks suppressed
[  899.329478][T11272] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10926'.
[  899.350096][T11272] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10926'.
[  899.386743][ T3207] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  899.390787][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10926'.
[  899.397928][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10926'.
[  899.443348][T11272] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  899.497449][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  899.507471][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  899.521937][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  899.559933][T11292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10931'.
[  899.780444][T11299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10935'.
[  899.797584][T11299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10935'.
[  899.808711][T11302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10936'.
[  899.879081][T11305] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10935'.
[  900.218636][T11311] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10937'.
[  900.277373][T11323] bridge0: left allmulticast mode
[  900.347849][ T5666] lo speed is unknown, defaulting to 1000
[  900.353103][ T7198] lo speed is unknown, defaulting to 1000
[  900.365984][ T7198] lo speed is unknown, defaulting to 1000
[  900.417053][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  900.679120][T11335] validate_nla: 4 callbacks suppressed
[  900.679138][T11335] netlink: 'syz.0.10944': attribute type 10 has an invalid length.
[  900.787695][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  901.156171][T11357] netlink: 'syz.1.10949': attribute type 1 has an invalid length.
[  901.185068][T11357] 8021q: adding VLAN 0 to HW filter on device bond104
[  901.353759][T11362] netlink: 'syz.1.10950': attribute type 1 has an invalid length.
[  901.471358][T11362] sctp: [Deprecated]: syz.1.10950 (pid 11362) Use of struct sctp_assoc_value in delayed_ack socket option.
[  901.471358][T11362] Use struct sctp_sack_info instead
[  901.602130][T11362] bridge46: entered promiscuous mode
[  901.618633][T11362] bond105: (slave bridge46): making interface the new active one
[  901.629022][T11362] bond105: (slave bridge46): Enslaving as an active interface with an up link
[  902.112323][T11388] netlink: 'syz.1.10957': attribute type 3 has an invalid length.
[  902.114977][T11388] netlink: 'syz.1.10957': attribute type 3 has an invalid length.
[  903.224277][T11436] 8021q: adding VLAN 0 to HW filter on device bond1
[  903.233797][T11436] 8021q: adding VLAN 0 to HW filter on device bond2
[  903.249354][T11436] 8021q: adding VLAN 0 to HW filter on device bond3
[  903.253891][T11436] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  903.307961][ T7211] wg2 speed is unknown, defaulting to 1000
[  903.310842][ T7211] syz2: Port: 1 Link ACTIVE
[  903.348071][ T3207] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  903.352122][ T3207] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  903.354924][ T3207] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  903.397694][ T3207] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  903.479449][T11449] syzkaller0: entered promiscuous mode
[  903.484602][T11449] syzkaller0: entered allmulticast mode
[  907.039357][T11459] : renamed from vlan0 (while UP)
[  907.097417][T11469] __nla_validate_parse: 12 callbacks suppressed
[  907.097428][T11469] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10972'.
[  907.203929][T11473] tc_dump_action: action bad kind
[  907.736666][T11484] bridge0: left allmulticast mode
[  907.808563][T11487] netlink: 'syz.0.10976': attribute type 13 has an invalid length.
[  908.175126][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10981'.
[  908.223871][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10981'.
[  908.270173][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10982'.
[  908.279789][T11505] Unsupported ieee802154 address type: 0
[  908.339638][T11497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10981'.
[  908.422036][T11512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10984'.
[  908.549134][T11516] lo speed is unknown, defaulting to 1000
[  908.574947][T11520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10985'.
[  908.592139][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10985'.
[  909.084712][T11516] wg2 speed is unknown, defaulting to 1000
[  909.173425][T11537] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10990'.
[  909.189588][T11537] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10990'.
[  909.473173][T11560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  909.745324][T11571] vlan7: entered promiscuous mode
[  910.136441][T11588] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0
[  910.422764][T11596] netlink: 'syz.2.11001': attribute type 12 has an invalid length.
[  910.503431][T11605] netlink: 'syz.0.11004': attribute type 1 has an invalid length.
[  910.633010][T11618] netlink: 'syz.0.11007': attribute type 3 has an invalid length.
[  910.635567][T11618] netlink: 'syz.0.11007': attribute type 3 has an invalid length.
[  910.876502][T11635] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  910.934078][T11635] netlink: 'syz.0.11010': attribute type 8 has an invalid length.
[  910.989611][T11638] netlink: 'syz.1.11012': attribute type 1 has an invalid length.
[  910.993073][T11640] sit0: Caught tx_queue_len zero misconfig
[  911.030409][T11638] 8021q: adding VLAN 0 to HW filter on device bond107
[  911.220944][T11648] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  911.714328][   T34] audit: type=1804 audit(1787082029.488:13): pid=11681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.11022" name="/newroot/3753/cgroup.controllers" dev="tmpfs" ino=19161 res=1 errno=0
[  911.725042][   T34] audit: type=1800 audit(1787082029.498:14): pid=11681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11022" name="cgroup.controllers" dev="tmpfs" ino=19161 res=0 errno=0
[  911.789251][T11683] bond115: option ad_user_port_key: invalid value (65535)
[  911.792218][T11683] bond115: option ad_user_port_key: allowed values 0 - 1023
[  911.832313][T11683] bond115 (unregistering): Released all slaves
[  912.230693][T11707] __nla_validate_parse: 12 callbacks suppressed
[  912.230705][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11031'.
[  912.236034][T11707] netlink: 'syz.2.11031': attribute type 10 has an invalid length.
[  912.240243][T11707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11031'.
[  912.279306][T11711] netlink: 'syz.2.11032': attribute type 12 has an invalid length.
[  912.411589][T11716] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  912.422818][T11716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11033'.
[  912.425593][T11716] netlink: 'syz.2.11033': attribute type 8 has an invalid length.
[  912.438970][T11716] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11033'.
[  912.721781][T11731] wg2: Caught tx_queue_len zero misconfig
[  912.942972][T11750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11041'.
[  912.967707][T11750] netlink: 'syz.1.11041': attribute type 1 has an invalid length.
[  913.024971][T11750] netlink: 'syz.1.11041': attribute type 2 has an invalid length.
[  913.033772][T11750] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11041'.
[  913.057185][T11759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11044'.
[  913.385171][T11778] netlink: 'syz.0.11048': attribute type 3 has an invalid length.
[  913.397231][T11778] netlink: 'syz.0.11048': attribute type 3 has an invalid length.
[  914.059014][T11799] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11053'.
[  914.237682][T11802] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11054'.
[  914.341634][T11804] bond109: entered allmulticast mode
[  914.407010][T11813] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11057'.
[  914.715689][T11832] xt_CT: No such helper "netbios-ns"
[  914.923155][T11844] netlink: 'syz.1.11064': attribute type 3 has an invalid length.
[  914.930262][T11844] netlink: 'syz.1.11064': attribute type 3 has an invalid length.
[  915.235877][T11865] netlink: 'syz.1.11073': attribute type 3 has an invalid length.
[  915.246684][T11865] netlink: 'syz.1.11073': attribute type 3 has an invalid length.
[  915.300240][T11869] netlink: 'syz.0.11076': attribute type 1 has an invalid length.
[  915.337864][T11869] 8021q: adding VLAN 0 to HW filter on device bond115
[  915.442802][T11876] bond115: (slave veth1): Enslaving as an active interface with a down link
[  915.445591][T11873] IPVS: Unknown mcast interface: netdevsim0
[  915.469686][T11876] netlink: 'syz.0.11076': attribute type 10 has an invalid length.
[  915.483997][T11869] bond115: (slave dummy0): making interface the new active one
[  915.487830][T11869] dummy0: entered promiscuous mode
[  915.491642][T11869] bond115: (slave dummy0): Enslaving as an active interface with an up link
[  916.299533][T11881] workqueue: Failed to create a rescuer kthread for wq "bond88": -EINTR
[  916.300174][T11878] lo speed is unknown, defaulting to 1000
[  916.628748][T11878] wg2 speed is unknown, defaulting to 1000
[  916.794856][T11897] mac80211_hwsim hwsim58 wlan0: entered promiscuous mode
[  916.812759][T11897] mac80211_hwsim hwsim58 wlan0: entered allmulticast mode
[  916.818747][T11897] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  917.228238][T11918] syzkaller0: entered promiscuous mode
[  917.231252][T11918] syzkaller0: entered allmulticast mode
[  917.241764][T11918] __nla_validate_parse: 13 callbacks suppressed
[  917.241777][T11918] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11089'.
[  917.355400][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11090'.
[  917.362716][T11921] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  917.572076][T11923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11091'.
[  917.647620][T11928] netlink: 248 bytes leftover after parsing attributes in process `syz.0.11094'.
[  917.755821][T11932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11095'.
[  917.764734][T11934] netlink: 6060 bytes leftover after parsing attributes in process `syz.1.11096'.
[  917.850411][T11942] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11097'.
[  918.420159][ T3207] syzkaller0: tun_net_xmit 76
[  918.426885][T11971] syzkaller0: create flow: hash 4223602869 index 1
[  918.430231][ T3207] syzkaller0: tun_net_xmit 48
[  918.573540][T11970] syzkaller0: delete flow: hash 4223602869 index 1
[  920.702301][T11977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11107'.
[  920.704977][T11977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11107'.
[  920.773314][T11984] validate_nla: 10 callbacks suppressed
[  920.773332][T11984] netlink: 'syz.1.11109': attribute type 3 has an invalid length.
[  920.795979][T11984] netlink: 'syz.1.11109': attribute type 3 has an invalid length.
[  920.858773][T11986] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  920.905335][T11990] netlink: 'syz.1.11113': attribute type 4 has an invalid length.
[  920.915036][T11990] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11113'.
[  921.113673][T12004] bond88: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  921.169599][T12004] bond88 (unregistering): Released all slaves
[  921.488878][T12025] ip6tnl17: entered allmulticast mode
[  921.880474][T12045] bond110: option miimon: invalid value (18446744073709551615)
[  921.883877][T12045] bond110: option miimon: allowed values 0 - 2147483647
[  921.889537][T12045] bond110 (unregistering): Released all slaves
[  921.972825][T12051] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  921.984737][T12051] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  922.004475][T12051] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  922.018852][T12051] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  922.047743][T12051] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  922.094563][T12050] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  922.099723][T12050] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  922.130526][T12050] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  922.149599][T12051] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  922.453609][T12067] netlink: 'syz.0.11130': attribute type 3 has an invalid length.
[  922.456379][T12067] netlink: 'syz.0.11130': attribute type 3 has an invalid length.
[  922.580158][T12083] netlink: 'syz.1.11133': attribute type 1 has an invalid length.
[  922.585569][T12083] __nla_validate_parse: 6 callbacks suppressed
[  922.585580][T12083] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11133'.
[  922.597229][T12083] netlink: 'syz.1.11133': attribute type 1 has an invalid length.
[  922.658420][T12092] macsec0: entered promiscuous mode
[  922.858552][T12102] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11139'.
[  922.971099][T12100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11138'.
[  922.997204][T12100] bond115: (slave veth1): Releasing active interface
[  922.999604][T12100] bond115: (slave veth1): the permanent HWaddr of slave - 8a:42:49:21:8e:e1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  923.172358][T12115] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  923.185468][T12113] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11140'.
[  923.253478][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11143'.
[  923.301256][T12121] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004
[  923.304683][T12122] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004
[  923.825690][T12135] netlink: 'syz.0.11147': attribute type 1 has an invalid length.
[  923.836713][T12135] netlink: 248 bytes leftover after parsing attributes in process `syz.0.11147'.
[  923.908255][T12140] netlink: 'syz.0.11147': attribute type 1 has an invalid length.
[  923.917210][T12140] netlink: 248 bytes leftover after parsing attributes in process `syz.0.11147'.
[  924.046603][T12151] netlink: 'syz.1.11153': attribute type 2 has an invalid length.
[  924.096700][T12149] x_tables: ip_tables: ah match: only valid for protocol 51
[  924.122430][T12149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11152'.
[  924.131068][T12149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11152'.
[  924.256985][T12161] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.11158'.
[  924.275715][T12157] netlink: 'syz.2.11156': attribute type 11 has an invalid length.
[  925.425197][T12199] x_tables: duplicate underflow at hook 2
[  925.518909][T12205] bond102: (slave bridge44): Releasing backup interface
[  925.534722][T12205] bond102: (slave bridge44): the permanent HWaddr of slave - da:ea:ef:d7:57:19 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  925.556800][T12205] bond102: (slave bridge45): making interface the new active one
[  925.599032][T12205] bond102: (slave bridge45): Releasing backup interface
[  925.631442][T12205] bond105: (slave bridge46): Releasing backup interface
[  925.770769][T12214] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  925.799515][T12214] syzkaller0: entered promiscuous mode
[  925.801393][T12214] syzkaller0: entered allmulticast mode
[  925.803682][T12214] tipc: Resetting bearer <eth:syzkaller0>
[  925.809517][T12213] tipc: Resetting bearer <eth:syzkaller0>
[  925.827081][T12218] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20000
[  928.381333][T12213] tipc: Disabling bearer <eth:syzkaller0>
[  928.631634][T12229] __nla_validate_parse: 3 callbacks suppressed
[  928.631652][T12229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11173'.
[  928.645255][T12229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11173'.
[  928.885707][T12236] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20002
[  929.002003][T12248] validate_nla: 2 callbacks suppressed
[  929.002020][T12248] netlink: 'syz.1.11179': attribute type 2 has an invalid length.
[  929.294389][T12260] bond110: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  929.336419][T12260] bond110 (unregistering): Released all slaves
[  929.457209][T12263] workqueue: Failed to create a rescuer kthread for wq "bond116": -EINTR
[  929.612772][T12277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11187'.
[  929.622062][T12279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11188'.
[  929.629939][T12278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11188'.
[  929.918776][T12292] bond0: Device is already in use.
[  929.928526][T12295] bond0: Device is already in use.
[  929.933893][T12296] x_tables: duplicate underflow at hook 1
[  929.972836][T12297] openvswitch: netlink: IP tunnel dst address not specified
[  930.011714][   T13] bond115: (slave dummy0): link status definitely down, disabling slave
[  930.104176][   T13] dummy0: left promiscuous mode
[  930.112884][T12296] block nbd2: NBD_DISCONNECT
[  930.123341][T12296] block nbd2: Send disconnect failed -32
[  930.124613][   T13] bond115: now running without any active interface!
[  930.160224][T12291] bridge0: entered allmulticast mode
[  930.329912][T12312] sctp: [Deprecated]: syz.0.11198 (pid 12312) Use of struct sctp_assoc_value in delayed_ack socket option.
[  930.329912][T12312] Use struct sctp_sack_info instead
[  930.453060][T12314] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11199'.
[  930.462135][T12314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11199'.
[  930.531148][T12321] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.11200'.
[  930.826773][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11202'.
[  930.842248][T12330] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  930.870506][T12330] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  931.021564][T12347] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11205'.
[  931.303559][T12349] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[  931.553669][T12375] bond111: entered allmulticast mode
[  931.760007][T12391] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  931.765276][T12391] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  932.033355][ T3207] syzkaller0: tun_net_xmit 76
[  932.037996][ T3207] syzkaller0: tun_net_xmit 48
[  932.040604][T12412] syzkaller0: create flow: hash 4223602869 index 1
[  932.057922][ T7162] syzkaller0: tun_net_xmit 76
[  932.214506][T12418] syzkaller0: delete flow: hash 4223602869 index 1
[  935.379716][T12429] workqueue: Failed to create a rescuer kthread for wq "bond116": -EINTR
[  935.560666][T12441] __nla_validate_parse: 6 callbacks suppressed
[  935.560682][T12441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11230'.
[  935.571089][T12441] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11230'.
[  935.580016][T12441] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11230'.
[  935.735935][T12450] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11232'.
[  935.867478][T12452] netlink: 'syz.2.11233': attribute type 1 has an invalid length.
[  935.883022][T12452] 8021q: adding VLAN 0 to HW filter on device bond89
[  935.995371][T12460] syzkaller0: create flow: hash 4223602869 index 2
[  936.115681][T12474] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11240'.
[  936.154258][T12474] netlink: 'syz.2.11240': attribute type 6 has an invalid length.
[  936.247187][T12466] syzkaller0: delete flow: hash 4223602869 index 2
[  936.252063][ T3207] syzkaller0: tun_net_xmit 76
[  936.254082][ T3207] syzkaller0: tun_net_xmit 48
[  936.256225][T12477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11241'.
[  936.259896][T12477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11241'.
[  939.240163][T12477] macvlan0: entered promiscuous mode
[  939.242545][T12477] netlink: 'syz.2.11241': attribute type 1 has an invalid length.
[  939.245594][T12477] netlink: 'syz.2.11241': attribute type 2 has an invalid length.
[  939.367980][T12483] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  939.429911][T12489] netlink: 'syz.2.11242': attribute type 1 has an invalid length.
[  939.492813][T12491] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.11245'.
[  942.746134][T12508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11249'.
[  943.195701][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11256'.
[  943.380499][T12536] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11258'.
[  943.792239][T12549] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11262'.
[  943.815715][T12549] veth1: entered promiscuous mode
[  943.863809][T12551] openvswitch: netlink: Missing key (keys=40, expected=100)
[  944.049591][T12553] bond37: option mode: unable to set because the bond device has slaves
[  944.063995][T12553] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11264'.
[  944.193612][T12560] --map-set only usable from mangle table
[  944.198459][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11266'.
[  944.218844][T12557] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  944.372287][T12566] lo speed is unknown, defaulting to 1000
[  944.429001][T12567] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11269'.
[  944.523611][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11271'.
[  944.535059][T12571] bond0: Unable to set up delay as MII monitoring is disabled
[  944.771556][T12566] wg2 speed is unknown, defaulting to 1000
[  944.824857][T12580] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11273'.
[  944.884266][T12582] netlink: 'syz.1.11274': attribute type 1 has an invalid length.
[  944.898080][T12582] netlink: 'syz.1.11274': attribute type 1 has an invalid length.
[  944.908276][T12582] netlink: 'syz.1.11274': attribute type 2 has an invalid length.
[  944.920322][T12582] netlink: 'syz.1.11274': attribute type 2 has an invalid length.
[  944.989470][T12585] netlink: 'syz.2.11275': attribute type 1 has an invalid length.
[  945.015789][T12585] 8021q: adding VLAN 0 to HW filter on device bond90
[  945.126054][T12585] netlink: 'syz.2.11275': attribute type 16 has an invalid length.
[  945.135804][T12585] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11275'.
[  945.389760][T12592] veth41: entered allmulticast mode
[  945.437229][T12592] bond90: (slave veth41): Enslaving as an active interface with an up link
[  945.700706][T12603] netlink: 'syz.2.11279': attribute type 2 has an invalid length.
[  945.866188][T12609] netlink: 'syz.1.11281': attribute type 2 has an invalid length.
[  946.252738][T12620] erspan0: entered promiscuous mode
[  946.491222][T12643] netlink: 'syz.1.11289': attribute type 2 has an invalid length.
[  946.817704][T12663] bond115: (slave dummy0): Releasing active interface
[  946.907860][T12671] netlink: 'syz.2.11297': attribute type 2 has an invalid length.
[  947.016207][T12676] 8021q: adding VLAN 0 to HW filter on device bond91
[  947.218128][T12683] macvlan1: entered promiscuous mode
[  947.224329][T12683] macvlan1: entered allmulticast mode
[  947.231882][T12680] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  948.126523][T12688] __nla_validate_parse: 10 callbacks suppressed
[  948.126539][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11302'.
[  948.183650][T12689] bond116: option mode: invalid value (69)
[  948.191101][T12695] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11302'.
[  948.194512][T12689] bond116 (unregistering): Released all slaves
[  948.202171][T12695] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11302'.
[  948.358582][T12703] netlink: ct_mark mask cannot be 0
[  948.363121][T12703] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  948.378471][T12703] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11306'.
[  948.430627][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11308'.
[  949.501529][T12750] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11313'.
[  949.524669][T12751] macvlan0: entered promiscuous mode
[  949.770193][T12759] bond116: option primary_reselect: invalid value (6)
[  949.777954][T12759] bond116 (unregistering): Released all slaves
[  949.865318][T12765] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  950.073060][T12774] openvswitch: netlink: Duplicate or invalid key (type 0).
[  950.185909][T12777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11320'.
[  950.313107][T12782] validate_nla: 4 callbacks suppressed
[  950.313119][T12782] netlink: 'syz.0.11321': attribute type 16 has an invalid length.
[  950.324035][T12782] netlink: 'syz.0.11321': attribute type 17 has an invalid length.
[  950.367726][T12785] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11321'.
[  950.414577][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11322'.
[  950.420810][T12782] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  950.583257][T12790] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11324'.
[  950.593742][T12790] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001
[  950.642297][T12792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  950.744563][T12798] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  951.218035][T12836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  951.326536][T12847] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  951.433345][T12851] openvswitch: netlink: IPv4 tunnel dst address is zero
[  951.733945][T12869] netlink: 'syz.1.11349': attribute type 2 has an invalid length.
[  951.759153][T12869] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES'
[  951.766006][T12869] CPU: 1 UID: 0 PID: 12869 Comm: syz.1.11349 Not tainted syzkaller #0 PREEMPT(full) 
[  951.766027][T12869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  951.766039][T12869] Call Trace:
[  951.766047][T12869]  <TASK>
[  951.766054][T12869]  dump_stack_lvl+0xe8/0x150
[  951.766082][T12869]  sysfs_warn_dup+0x8e/0xa0
[  951.766116][T12869]  sysfs_do_create_link_sd+0xc0/0x110
[  951.766129][T12869]  device_add_class_symlinks+0x1cf/0x240
[  951.766141][T12869]  device_add+0x467/0xb80
[  951.766151][T12869]  wiphy_register+0x1fc8/0x2ff0
[  951.766170][T12869]  ? __pfx_wiphy_register+0x10/0x10
[  951.766181][T12869]  ? __pfx_netdev_run_todo+0x10/0x10
[  951.766192][T12869]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  951.766204][T12869]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  951.766217][T12869]  ieee80211_register_hw+0x3d3d/0x4a50
[  951.766234][T12869]  ? ieee80211_register_hw+0x19c1/0x4a50
[  951.766257][T12869]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  951.766269][T12869]  ? __asan_memset+0x22/0x50
[  951.766278][T12869]  ? __hrtimer_setup+0x1b7/0x260
[  951.766286][T12869]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  951.766300][T12869]  mac80211_hwsim_new_radio+0x3238/0x5680
[  951.766325][T12869]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  951.766336][T12869]  ? kstrndup+0xbd/0x160
[  951.766356][T12869]  ? kstrndup+0xbd/0x160
[  951.766371][T12869]  hwsim_new_radio_nl+0xd8b/0xf90
[  951.766397][T12869]  genl_family_rcv_msg_doit+0x233/0x340
[  951.766426][T12869]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  951.766453][T12869]  ? bpf_lsm_capable+0x9/0x20
[  951.766467][T12869]  ? security_capable+0x7e/0x2c0
[  951.766490][T12869]  genl_rcv_msg+0x614/0x7a0
[  951.766510][T12869]  ? __pfx_genl_rcv_msg+0x10/0x10
[  951.766530][T12869]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  951.766550][T12869]  ? __pfx_ref_tracker_free+0x10/0x10
[  951.766576][T12869]  netlink_rcv_skb+0x226/0x4a0
[  951.766592][T12869]  ? __pfx_genl_rcv_msg+0x10/0x10
[  951.766612][T12869]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  951.766636][T12869]  ? down_read+0x2be/0x330
[  951.766656][T12869]  genl_rcv+0x28/0x40
[  951.766670][T12869]  netlink_unicast+0x7bb/0x940
[  951.766689][T12869]  netlink_sendmsg+0x813/0xb40
[  951.766712][T12869]  ? __pfx_netlink_sendmsg+0x10/0x10
[  951.766763][T12869]  ? aa_sock_msg_perm+0xf1/0x1b0
[  951.766782][T12869]  ? __pfx_netlink_sendmsg+0x10/0x10
[  951.766813][T12869]  sock_sendmsg_nosec+0x13a/0x180
[  951.766833][T12869]  ____sys_sendmsg+0x54e/0x850
[  951.766850][T12869]  ? __pfx_____sys_sendmsg+0x10/0x10
[  951.766870][T12869]  ? import_iovec+0x73/0xa0
[  951.766889][T12869]  ___sys_sendmsg+0x2a5/0x360
[  951.766904][T12869]  ? __lock_acquire+0x683/0x2cf0
[  951.766926][T12869]  ? __pfx____sys_sendmsg+0x10/0x10
[  951.766946][T12869]  ? futex_wake+0x51b/0x5f0
[  951.766984][T12869]  ? __fget_files+0x2a/0x420
[  951.767010][T12869]  ? __fget_files+0x3a2/0x420
[  951.767034][T12869]  __x64_sys_sendmsg+0x1b1/0x290
[  951.767053][T12869]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  951.767083][T12869]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  951.767100][T12869]  do_syscall_64+0x174/0x580
[  951.767119][T12869]  ? trace_irq_disable+0x3b/0x140
[  951.767140][T12869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  951.767154][T12869] RIP: 0033:0x7f9397d9e0d9
[  951.767169][T12869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  951.767183][T12869] RSP: 002b:00007f9398bcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  951.767200][T12869] RAX: ffffffffffffffda RBX: 00007f9398025fa0 RCX: 00007f9397d9e0d9
[  951.767211][T12869] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004
[  951.767220][T12869] RBP: 00007f9397e35024 R08: 0000000000000000 R09: 0000000000000000
[  951.767227][T12869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  951.767234][T12869] R13: 00007f9398026038 R14: 00007f9398025fa0 R15: 00007fffd6b04d98
[  951.767260][T12869]  </TASK>
[  952.106405][T12883] netlink: 'syz.0.11354': attribute type 9 has an invalid length.
[  952.170140][T12888] xt_TCPMSS: Only works on TCP SYN packets
[  952.174582][T12888] netlink: 'syz.2.11356': attribute type 1 has an invalid length.
[  952.197593][T12888] 8021q: adding VLAN 0 to HW filter on device bond92
[  952.437252][T12896] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  952.461941][T12897] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  952.753165][T12906] netlink: 'syz.0.11362': attribute type 9 has an invalid length.
[  952.772859][T12906] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping
[  952.983830][T12919] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  953.015156][T12923] netlink: 'syz.0.11368': attribute type 21 has an invalid length.
[  953.020409][T12923] netlink: 'syz.0.11368': attribute type 21 has an invalid length.
[  953.152040][T12928] xfrm0: entered allmulticast mode
[  953.220582][T12934] netlink: 'syz.0.11371': attribute type 2 has an invalid length.
[  953.289588][T12936] __nla_validate_parse: 18 callbacks suppressed
[  953.289607][T12936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11372'.
[  953.392558][T12938] x_tables: duplicate underflow at hook 1
[  953.498771][T12944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11376'.
[  953.531435][T12946] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11377'.
[  953.559053][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11376'.
[  953.581763][T12946] netlink: 37 bytes leftover after parsing attributes in process `syz.0.11377'.
[  953.628813][T12949] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11378'.
[  953.651340][T12949] netlink: 'syz.2.11378': attribute type 32 has an invalid length.
[  953.785274][T12957] netlink: 116 bytes leftover after parsing attributes in process `syz.1.11382'.
[  953.821157][T12955] ip6tnl0: Caught tx_queue_len zero misconfig
[  953.830965][T12955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11381'.
[  953.860757][T12961] netlink: 5276 bytes leftover after parsing attributes in process `syz.0.11380'.
[  953.864659][T12961] net_ratelimit: 2 callbacks suppressed
[  953.864673][T12961] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  954.273046][T12973] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11385'.
[  954.478467][T12979] geneve6: entered promiscuous mode
[  954.486245][T12979] geneve6: entered allmulticast mode
[  955.314089][T13013] xt_NFQUEUE: number of total queues is 0
[  955.379523][T13015] syzkaller0: entered promiscuous mode
[  955.383588][T13015] syzkaller0: entered allmulticast mode
[  955.673349][T13028] *A^m: entered allmulticast mode
[  955.686554][T13028] *A^m: left allmulticast mode
[  956.042611][T13039] openvswitch: netlink: Duplicate key (type 0).
[  956.069401][T13040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  956.081711][T13040] validate_nla: 2 callbacks suppressed
[  956.081729][T13040] netlink: 'syz.1.11405': attribute type 4 has an invalid length.
[  959.749724][T13038] __nla_validate_parse: 5 callbacks suppressed
[  959.749735][T13038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11405'.
[  959.902316][T13050] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11410'.
[  959.954546][T13054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11409'.
[  959.983440][T13054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11409'.
[  960.098087][T13068] netlink: 'syz.1.11413': attribute type 2 has an invalid length.
[  960.115077][T13054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11409'.
[  960.163507][T13065] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  960.201865][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11414'.
[  960.205771][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11414'.
[  960.220264][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11414'.
[  960.224125][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11414'.
[  960.710230][T13082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11417'.
[  960.790523][T13086] lo speed is unknown, defaulting to 1000
[  961.012134][T13086] wg2 speed is unknown, defaulting to 1000
[  961.028875][T13088] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  961.041049][T13088] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  961.056195][T13088] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  961.086072][T13088] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  961.222603][T13100] netlink: 'syz.1.11420': attribute type 10 has an invalid length.
[  961.321311][T13103] syzkaller0: entered promiscuous mode
[  961.324390][T13103] syzkaller0: entered allmulticast mode
[  961.643913][T13117] syzkaller0: entered promiscuous mode
[  961.665016][T13117] syzkaller0: entered allmulticast mode
[  961.896973][T13120] bond93: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  962.072597][T13120] bond93 (unregistering): Released all slaves
[  962.686517][T13150] netlink: 'syz.1.11432': attribute type 2 has an invalid length.
[  963.271567][T13180] netlink: 'syz.2.11440': attribute type 2 has an invalid length.
[  963.540607][T13181] syzkaller1: entered promiscuous mode
[  963.546845][T13181] syzkaller1: entered allmulticast mode
[  965.911453][T13225] __nla_validate_parse: 4 callbacks suppressed
[  965.911465][T13225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11451'.
[  967.827279][ T7211] wg2 speed is unknown, defaulting to 1000
[  967.828257][ T5635] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  967.830074][ T7211] syz2: Port: 1 Link DOWN
[  967.868220][ T5635] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  967.892195][ T5635] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  967.915783][ T5635] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  968.017332][T13232] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11452'.
[  968.036881][T13232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11452'.
[  968.070649][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11452'.
[  968.331562][T13239] bond_slave_0: Caught tx_queue_len zero misconfig
[  968.611167][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11456'.
[  968.627390][T13249] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11455'.
[  968.841213][T13264] netlink: 'syz.2.11458': attribute type 2 has an invalid length.
[  969.541444][T13293] netlink: 'syz.0.11465': attribute type 1 has an invalid length.
[  969.760452][T13293] workqueue: Failed to create a rescuer kthread for wq "bond116": -EINTR
[  969.891906][T13303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11467'.
[  969.947111][T13303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11467'.
[  970.144500][T13320] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11471'.
[  970.665030][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11473'.
[  970.740511][T13329] sctp: [Deprecated]: syz.1.11474 (pid 13329) Use of int in max_burst socket option deprecated.
[  970.740511][T13329] Use struct sctp_assoc_value instead
[  970.762871][T13329] netlink: 'syz.1.11474': attribute type 1 has an invalid length.
[  970.826088][T13329] bond112: option mode: invalid value (8)
[  970.839225][T13329] bond112 (unregistering): Released all slaves
[  971.114954][T13345] __nla_validate_parse: 5 callbacks suppressed
[  971.114970][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11478'.
[  971.150741][T13345] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  971.289054][T13350] bridge_slave_1: Caught tx_queue_len zero misconfig
[  971.306680][T13350] netlink: 120 bytes leftover after parsing attributes in process `syz.2.11479'.
[  971.318458][T13352] bridge0: entered allmulticast mode
[  971.551437][T13373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11487'.
[  971.580937][T13377] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11488'.
[  971.687452][T13385] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11491'.
[  971.691280][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11491'.
[  971.707608][T13384] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  971.810027][T13392] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11492'.
[  971.814621][T13392] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11492'.
[  971.891138][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11492'.
[  971.905968][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11492'.
[  972.294531][T13421] netlink: 'syz.0.11501': attribute type 11 has an invalid length.
[  972.471595][T13434] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  972.586095][T13436] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  973.114571][T13440] pim6reg0: left allmulticast mode
[  973.125574][T13440] macvlan0: left allmulticast mode
[  973.134531][T13440] bridge0: left allmulticast mode
[  973.151719][T13440] bond62: left allmulticast mode
[  973.166676][T13440] vlan2: left allmulticast mode
[  973.171339][T13440] bridge22: left allmulticast mode
[  973.204899][T13440] veth39: left allmulticast mode
[  973.219306][T13440] macvlan12: left allmulticast mode
[  973.228683][T13440] vti2: left allmulticast mode
[  973.233131][T13440] bond70: left allmulticast mode
[  973.237310][T13440] bridge33: left allmulticast mode
[  973.240035][T13440] bridge34: left allmulticast mode
[  973.242746][T13440] bridge35: left allmulticast mode
[  973.245133][T13440] xfrm4: left allmulticast mode
[  973.251708][T13440] vlan10: left allmulticast mode
[  973.253986][T13440] bond0: left allmulticast mode
[  973.257716][T13440] geneve9: left allmulticast mode
[  973.260333][T13440] bond77: left allmulticast mode
[  973.262809][T13440] erspan3: left allmulticast mode
[  973.265510][T13440] bridge40: left allmulticast mode
[  973.281384][T13440] ip6tnl15: left allmulticast mode
[  973.297278][T13440] bond109: left allmulticast mode
[  973.300084][T13440] ip6tnl17: left allmulticast mode
[  973.302526][T13440] bond111: left allmulticast mode
[  973.371122][T13450] 8021q: adding VLAN 0 to HW filter on device bond94
[  973.395659][T13450] bond94 (unregistering): Released all slaves
[  973.540400][T13459] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[  973.981154][T13493] netlink: 'syz.0.11523': attribute type 10 has an invalid length.
[  974.091664][T13498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  974.096170][T13498] netlink: 'syz.1.11524': attribute type 83 has an invalid length.
[  975.361061][T13552] netlink: 'syz.1.11537': attribute type 39 has an invalid length.
[  975.450368][T13559] Cannot find del_set index 4 as target
[  975.811851][T13579] netlink: 'syz.1.11543': attribute type 10 has an invalid length.
[  975.851682][T13579] geneve10: entered promiscuous mode
[  975.858020][T13579] geneve10: entered allmulticast mode
[  975.901950][T13583] team_slave_1: Caught tx_queue_len zero misconfig
[  976.206509][T13603] __nla_validate_parse: 37 callbacks suppressed
[  976.206523][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11549'.
[  976.804103][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11550'.
[  976.834151][T13609] netlink: 'syz.2.11551': attribute type 1 has an invalid length.
[  976.853739][T13609] 8021q: adding VLAN 0 to HW filter on device bond94
[  976.886933][T13609] bond94: (slave veth43): Enslaving as an active interface with a down link
[  976.896066][T13609] 8021q: adding VLAN 0 to HW filter on device batadv8
[  976.901468][T13609] bond94: (slave batadv8): making interface the new active one
[  976.905857][T13609] batadv8: entered promiscuous mode
[  976.909310][T13609] bond94: (slave batadv8): Enslaving as an active interface with an up link
[  976.943682][T13609] bond94: (slave veth45): Enslaving as an active interface with a down link
[  977.200954][T13626] netlink: 'syz.2.11554': attribute type 1 has an invalid length.
[  977.204774][T13628] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11555'.
[  977.352783][T13630] xfrm0: left allmulticast mode
[  977.392232][T13630] 8021q: adding VLAN 0 to HW filter on device bond1
[  977.400800][T13630] 8021q: adding VLAN 0 to HW filter on device bond2
[  977.431299][T13630] 8021q: adding VLAN 0 to HW filter on device bond3
[  977.442387][T13630] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  977.512027][T13387] wg2 speed is unknown, defaulting to 1000
[  977.516033][T13387] syz2: Port: 1 Link ACTIVE
[  977.518556][ T5635] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  977.558649][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  977.578122][ T5635] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  977.585794][ T5635] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  978.004217][T13655] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11562'.
[  978.483701][T13659] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.11565'.
[  978.492618][T13661] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20001
[  978.850707][T13676] *A^m: Caught tx_queue_len zero misconfig
[  979.378322][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11570'.
[  979.730965][T13689] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11572'.
[  979.735054][T13689] netlink: 100 bytes leftover after parsing attributes in process `syz.0.11572'.
[  980.004390][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11575'.
[  980.296225][T13721] sit0: entered promiscuous mode
[  980.302021][T13724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  980.438891][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11581'.
[  980.452377][T13721] netlink: 'syz.2.11579': attribute type 1 has an invalid length.
[  980.457639][T13731] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  980.710392][T13744] 1{X: entered promiscuous mode
[  980.730598][T13744] 0{X: renamed from 31{X
[  980.740903][T13744] 0{X: left promiscuous mode
[  980.759259][T13744] 0{X: entered allmulticast mode
[  980.775517][T13744] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  980.796666][T13747] 1{X: renamed from 30{X (while UP)
[  980.822173][T13747] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  980.840019][T13752] netlink: 'syz.0.11588': attribute type 1 has an invalid length.
[  980.892197][T13752] netlink: 'syz.0.11588': attribute type 12 has an invalid length.
[  981.126751][T13764] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  981.424354][T13788] __nla_validate_parse: 4 callbacks suppressed
[  981.424364][T13788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11599'.
[  981.456105][T13790] netlink: 'syz.2.11600': attribute type 21 has an invalid length.
[  981.475604][T13790] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11600'.
[  981.483366][T13790] netlink: 3 bytes leftover after parsing attributes in process `syz.2.11600'.
[  981.567466][T13794] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11602'.
[  981.640245][T13800] sctp: [Deprecated]: syz.0.11605 (pid 13800) Use of int in max_burst socket option.
[  981.640245][T13800] Use struct sctp_assoc_value instead
[  981.825808][T13809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11608'.
[  981.852617][T13809] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  981.867335][T13809] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11608'.
[  981.988064][T13823] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11613'.
[  982.070019][T13828] netlink: 'syz.2.11614': attribute type 49 has an invalid length.
[  982.073489][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11614'.
[  982.437408][T13845] syzkaller0: entered promiscuous mode
[  982.449957][T13845] syzkaller0: entered allmulticast mode
[  982.516557][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11620'.
[  982.764490][T13871] netlink: 'syz.1.11624': attribute type 4 has an invalid length.
[  982.785827][T10938] lo speed is unknown, defaulting to 1000
[  982.790890][T13871] netlink: 'syz.1.11624': attribute type 4 has an invalid length.
[  982.795528][T10938] syz0: Port: 1 Link DOWN
[  982.802348][T10938] lo speed is unknown, defaulting to 1000
[  982.810967][T10938] lo speed is unknown, defaulting to 1000
[  982.818663][T10938] syz0: Port: 1 Link ACTIVE
[  982.847007][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  982.948874][T13876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11626'.
[  983.603083][T13892] netlink: 'syz.2.11630': attribute type 1 has an invalid length.
[  983.616732][T13892] netlink: 'syz.2.11630': attribute type 1 has an invalid length.
[  983.676435][T13895] syzkaller0: create flow: hash 2196029777 index 2
[  983.746881][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  983.880773][T13902] xt_l2tp: wrong L2TP version: 0
[  983.902850][T13897] syzkaller0: delete flow: hash 2196029777 index 2
[  983.923984][T13898] bond117 (unregistering): Released all slaves
[  983.938612][ T5635] syzkaller0: tun_net_xmit 76
[  983.940471][ T5635] syzkaller0: tun_net_xmit 48
[  983.966887][T13388] syzkaller0: tun_net_xmit 76
[  987.261638][T13913] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  987.419088][T13922] netlink: 'syz.2.11638': attribute type 1 has an invalid length.
[  987.440730][T13922] netlink: 'syz.2.11638': attribute type 1 has an invalid length.
[  987.443669][T13922] netlink: 'syz.2.11638': attribute type 2 has an invalid length.
[  987.750140][T13942] __nla_validate_parse: 7 callbacks suppressed
[  987.750154][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11643'.
[  988.036696][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11646'.
[  988.054819][T13951] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  988.087118][ T3207] batadv8: left promiscuous mode
[  988.131006][T13952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11642'.
[  988.134810][T13952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11642'.
[  988.138780][T13952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11642'.
[  988.757732][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11650'.
[  988.767393][T13968] macsec1: entered promiscuous mode
[  988.769023][T13968] batadv0: entered promiscuous mode
[  988.770839][T13968] macsec1: entered allmulticast mode
[  988.773064][T13968] batadv0: entered allmulticast mode
[  988.775628][T13968] 8021q: adding VLAN 0 to HW filter on device macsec1
[  988.780970][T13968] batadv0: left allmulticast mode
[  988.782992][T13968] batadv0: left promiscuous mode
[  988.803285][T13970] bond117 (unregistering): Released all slaves
[  988.945365][T13985] netlink: 'syz.1.11651': attribute type 10 has an invalid length.
[  989.113513][T13987] netlink: 'syz.1.11653': attribute type 6 has an invalid length.
[  989.125348][T13992] netlink: 'syz.0.11654': attribute type 1 has an invalid length.
[  989.205376][T13992] bond117: entered promiscuous mode
[  989.215208][T13992] 8021q: adding VLAN 0 to HW filter on device bond117
[  989.279852][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11655'.
[  989.287873][T13999] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  989.329595][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11656'.
[  989.330613][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11656'.
[  989.341958][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11656'.
[  989.466107][T14009] netlink: 'syz.1.11658': attribute type 1 has an invalid length.
[  989.571587][T14009] 8021q: adding VLAN 0 to HW filter on device bond112
[  989.708953][T14016] bond112: (slave veth49): Enslaving as an active interface with a down link
[  989.750285][T14009] 8021q: adding VLAN 0 to HW filter on device batadv3
[  989.756410][T14009] bond112: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  989.874411][T14025] openvswitch: netlink: Duplicate or invalid key (type 0).
[  990.293812][T14050] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI %
[  990.359847][T14052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  990.972986][T14068] netlink: 'syz.0.11674': attribute type 5 has an invalid length.
[  991.089453][T14075] netlink: 'syz.2.11676': attribute type 1 has an invalid length.
[  991.094859][T14075] workqueue: Failed to create a rescuer kthread for wq "bond95": -EINTR
[  991.197288][T14073] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  991.227472][T14082] ip_tables: iptables: counters copy to user failed while replacing table
[  991.581870][T14099] netlink: 'syz.0.11682': attribute type 5 has an invalid length.
[  991.607192][T14102] ipip5: entered promiscuous mode
[  991.909457][T14109] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  992.005476][T14122] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  992.534717][T14163] mac80211_hwsim hwsim58 : renamed from wlan0
[  992.842754][T14178] __nla_validate_parse: 9 callbacks suppressed
[  992.842780][T14178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11706'.
[  992.863642][T14177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11706'.
[  993.059248][T14191] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11710'.
[  993.208153][T14197] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  993.212126][T14197] syzkaller0: entered promiscuous mode
[  993.214674][T14197] syzkaller0: entered allmulticast mode
[  993.223749][T14197] tipc: Resetting bearer <eth:syzkaller0>
[  993.354396][T14196] tipc: Resetting bearer <eth:syzkaller0>
[  993.407610][T14196] tipc: Disabling bearer <eth:syzkaller0>
[  993.731194][T14202] netlink: 'syz.2.11713': attribute type 1 has an invalid length.
[  993.805066][T14202] bond95: option mode: invalid value (8)
[  993.864501][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11715'.
[  993.933000][T14202] bond95 (unregistering): Released all slaves
[  994.247844][T14228] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11719'.
[  994.255971][T14229] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11718'.
[  994.451063][T14239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11723'.
[  994.891023][T14254] syzkaller0: create flow: hash 4223602869 index 2
[  995.345001][ T8454] syzkaller0 selects TX queue 2, but real number of TX queues is 2
[  995.349532][ T8454] syzkaller0: tun_net_xmit 76
[  995.357500][ T8454] syzkaller0 selects TX queue 2, but real number of TX queues is 2
[  995.361930][ T8454] syzkaller0: tun_net_xmit 48
[  995.370557][T14252] syzkaller0: delete flow: hash 4223602869 index 2
[  995.377192][T13388] syzkaller0: tun_net_xmit 76
[  995.583578][T14273] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11728'.
[  996.232229][T14287] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11731'.
[  996.235919][T14287] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11731'.
[  996.487804][T14291] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  999.725320][T14302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11734'.
[  999.741742][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11734'.
[  999.782235][T14302] syzkaller1: entered promiscuous mode
[  999.791430][T14302] syzkaller1: entered allmulticast mode
[  999.904331][T14319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11740'.
[  999.965089][T14323] bridge0: port 1(bridge_slave_0) entered blocking state
[  999.971601][T14323] bridge0: port 1(bridge_slave_0) entered disabled state
[  999.980280][T14323] bridge_slave_0: entered allmulticast mode
[  999.984040][T14323] bridge_slave_0: entered promiscuous mode
[ 1000.012721][T14325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11742'.
[ 1000.021946][T14325] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11742'.
[ 1000.024059][T14327] netlink: 'syz.0.11743': attribute type 1 has an invalid length.
[ 1000.043279][T14328] bond118: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1000.049851][T14328] bond118 (unregistering): Released all slaves
[ 1000.067518][T14325] bridge0: port 2(veth0) entered blocking state
[ 1000.072428][T14325] bridge0: port 2(veth0) entered disabled state
[ 1000.078888][T14325] veth0: entered allmulticast mode
[ 1000.087042][T14325] veth0: entered promiscuous mode
[ 1000.097987][T14325] bridge0: port 2(veth0) entered blocking state
[ 1000.100065][T14325] bridge0: port 2(veth0) entered forwarding state
[ 1000.142124][T14329] bridge71: entered promiscuous mode
[ 1000.191009][T14333] netlink: 128 bytes leftover after parsing attributes in process `syz.2.11744'.
[ 1000.378032][T14335] block nbd2: server does not support multiple connections per device.
[ 1000.384533][T14335] block nbd2: shutting down sockets
[ 1000.472596][T14348] geneve0: Caught tx_queue_len zero misconfig
[ 1000.518172][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11748'.
[ 1000.524431][T14350] syzkaller1: entered promiscuous mode
[ 1000.530418][T14350] syzkaller1: entered allmulticast mode
[ 1000.593007][T14352] netlink: 'syz.0.11750': attribute type 3 has an invalid length.
[ 1000.598450][T14352] netlink: 'syz.0.11750': attribute type 3 has an invalid length.
[ 1001.476522][T14416] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11769'.
[ 1001.483788][T14421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11770'.
[ 1001.534882][T14428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11772'.
[ 1001.861190][T14452] openvswitch: netlink: nsh attr 251 is out of range max 3
[ 1001.941648][T14456] bridge0: port 2(batadv8) entered blocking state
[ 1001.947348][T14456] bridge0: port 2(batadv8) entered disabled state
[ 1001.954308][T14456] batadv8: entered allmulticast mode
[ 1001.964173][T14456] batadv8: entered promiscuous mode
[ 1002.149487][T14461] 8021q: VLANs not supported on ip_vti0
[ 1002.429481][ T3207] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled
[ 1002.432351][ T3207] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled
[ 1002.924262][T14506] 8021q: adding VLAN 0 to HW filter on device bond113
[ 1003.032144][T14511] bridge0: port 2(veth0) entered disabled state
[ 1003.063943][T14520] netlink: 'syz.2.11795': attribute type 16 has an invalid length.
[ 1003.064467][T14515] sctp: [Deprecated]: syz.0.11798 (pid 14515) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1003.064467][T14515] Use struct sctp_sack_info instead
[ 1003.072000][T14520] netlink: 'syz.2.11795': attribute type 17 has an invalid length.
[ 1003.130290][T14522] bridge49: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[ 1003.147782][T14520] sit0: left promiscuous mode
[ 1003.183486][T14526] netlink: 'syz.1.11801': attribute type 8 has an invalid length.
[ 1003.186457][T14520] bridge0: port 2(veth0) entered blocking state
[ 1003.188393][T14520] bridge0: port 2(veth0) entered forwarding state
[ 1003.204604][T14520] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[ 1003.251825][T14532] netlink: 'syz.2.11802': attribute type 1 has an invalid length.
[ 1003.363403][T14532] bond95: entered promiscuous mode
[ 1003.379093][T14532] 8021q: adding VLAN 0 to HW filter on device bond95
[ 1004.329496][T14579] openvswitch: netlink: Duplicate or invalid key (type 0).
[ 1004.502320][T14582] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1004.504724][T14582] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1004.512927][T14582] bridge0: left allmulticast mode
[ 1004.535539][T14582] bridge0: left promiscuous mode
[ 1004.554706][T14582] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1004.801928][T14608] netlink: 'syz.2.11821': attribute type 1 has an invalid length.
[ 1004.939086][T14610] bond96: (slave bridge44): Enslaving as a backup interface with an up link
[ 1005.007013][ T3207] batman_adv: batadv8: IGMP Querier appeared
[ 1005.116133][T14621] syzkaller1: left promiscuous mode
[ 1005.127242][T14621] syzkaller1: left allmulticast mode
[ 1005.143446][T14621] __nla_validate_parse: 10 callbacks suppressed
[ 1005.143458][T14621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11825'.
[ 1005.164449][T14621] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[ 1005.383764][T14638] netlink: 'syz.0.11829': attribute type 1 has an invalid length.
[ 1005.386457][T14630] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11829'.
[ 1005.450818][T14640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11831'.
[ 1005.734747][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11834'.
[ 1005.745890][T14651] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[ 1005.776426][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.779547][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.781793][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.783969][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.786155][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.789311][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.791513][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.793725][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.796080][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.798741][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.801633][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.804409][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.808114][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.810862][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.813645][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.816374][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.819894][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.822561][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.825332][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1005.828637][T14657] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004
[ 1006.173440][T14678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1006.332844][T14681] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11843'.
[ 1006.337648][T14687] netlink: 'syz.2.11844': attribute type 10 has an invalid length.
[ 1006.605802][T14699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1006.651262][T14699] syzkaller0: entered promiscuous mode
[ 1006.653214][T14699] syzkaller0: entered allmulticast mode
[ 1006.655520][T14699] tipc: Resetting bearer <eth:syzkaller0>
[ 1006.697466][T14697] tipc: Resetting bearer <eth:syzkaller0>
[ 1010.512229][T14697] tipc: Disabling bearer <eth:syzkaller0>
[ 1010.521142][T14713] erspan0: entered promiscuous mode
[ 1010.523733][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11848'.
[ 1010.606215][T14717] netlink: 'syz.1.11850': attribute type 1 has an invalid length.
[ 1010.688594][T14720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11851'.
[ 1010.702618][T14720] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[ 1010.806160][T14728] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1010.862109][T14722] lo speed is unknown, defaulting to 1000
[ 1011.119496][T14722] wg2 speed is unknown, defaulting to 1000
[ 1011.606685][T14748] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1011.764759][T14765] netlink: 'syz.1.11861': attribute type 12 has an invalid length.
[ 1012.329068][T14781] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.11866'.
[ 1012.812362][T14796] netlink: 'syz.0.11872': attribute type 83 has an invalid length.
[ 1012.923397][T14801] macsec0: entered allmulticast mode
[ 1012.930748][T14801] bridge0: entered allmulticast mode
[ 1012.934815][T14801] macsec0: left allmulticast mode
[ 1012.939562][T14801] bridge0: left allmulticast mode
[ 1013.168353][T14809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11877'.
[ 1013.316064][T14818] bond118: option fail_over_mac: invalid value (127)
[ 1013.322045][T14818] bond118 (unregistering): Released all slaves
[ 1013.471609][T14821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11880'.
[ 1014.073806][T14844] netlink: 'syz.1.11891': attribute type 1 has an invalid length.
[ 1014.090303][T14844] 1{X: entered promiscuous mode
[ 1014.587745][T14881] syzkaller0: entered promiscuous mode
[ 1014.589535][T14881] syzkaller0: entered allmulticast mode
[ 1014.747535][T14885] tap0: tun_chr_ioctl cmd 1074025676
[ 1014.749934][T14885] tap0: owner set to 0
[ 1014.755481][T14885] netlink: 'syz.0.11903': attribute type 10 has an invalid length.
[ 1014.768676][T14885] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11903'.
[ 1014.884057][T14897] netlink: 'syz.2.11905': attribute type 1 has an invalid length.
[ 1014.925608][T14902] netlink: 'syz.0.11908': attribute type 1 has an invalid length.
[ 1014.976737][T14902] 8021q: adding VLAN 0 to HW filter on device bond118
[ 1015.023934][T14908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11909'.
[ 1015.031241][T14908] tipc: Enabling of bearer <eth:syz_tun> rejected, already enabled
[ 1015.175108][T14915] netlink: 'syz.1.11912': attribute type 1 has an invalid length.
[ 1015.176755][T14912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11911'.
[ 1015.209723][T14915] bond115: entered promiscuous mode
[ 1015.212044][T14915] bond115: entered allmulticast mode
[ 1015.214590][T14915] 8021q: adding VLAN 0 to HW filter on device bond115
[ 1015.356066][T14923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11915'.
[ 1015.389722][T14923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11915'.
[ 1015.468612][T14928] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1015.587424][T14935] __nla_validate_parse: 1 callbacks suppressed
[ 1015.587435][T14935] netlink: 72 bytes leftover after parsing attributes in process `syz.1.11918'.
[ 1016.221087][T14980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11929'.
[ 1016.239153][T14982] netlink: 'syz.0.11930': attribute type 17 has an invalid length.
[ 1016.251523][T14982] erspan0: left promiscuous mode
[ 1016.509083][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11936'.
[ 1016.580804][T15012] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11937'.
[ 1016.964529][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11944'.
[ 1017.283339][T15039] syzkaller0: entered promiscuous mode
[ 1017.285309][T15039] syzkaller0: entered allmulticast mode
[ 1017.310812][T15037] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11947'.
[ 1017.417271][ T8454] 
[ 1017.418277][ T8454] ============================================
[ 1017.420515][ T8454] WARNING: possible recursive locking detected
[ 1017.422789][ T8454] syzkaller #0 Not tainted
[ 1017.424583][ T8454] --------------------------------------------
[ 1017.426652][ T8454] kworker/u8:4/8454 is trying to acquire lock:
[ 1017.428858][ T8454] ffff8881b7712158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[ 1017.432747][ T8454] 
[ 1017.432747][ T8454] but task is already holding lock:
[ 1017.435508][ T8454] ffff88816a0f1d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[ 1017.439109][ T8454] 
[ 1017.439109][ T8454] other info that might help us debug this:
[ 1017.442100][ T8454]  Possible unsafe locking scenario:
[ 1017.442100][ T8454] 
[ 1017.444864][ T8454]        CPU0
[ 1017.446164][ T8454]        ----
[ 1017.447447][ T8454]   lock(&qdisc_xmit_lock_key#4);
[ 1017.449344][ T8454]   lock(&qdisc_xmit_lock_key#4);
[ 1017.451257][ T8454] 
[ 1017.451257][ T8454]  *** DEADLOCK ***
[ 1017.451257][ T8454] 
[ 1017.454258][ T8454]  May be due to missing lock nesting notation
[ 1017.454258][ T8454] 
[ 1017.457282][ T8454] 11 locks held by kworker/u8:4/8454:
[ 1017.459313][ T8454]  #0: ffff888195599940 ((wq_completion)bond65){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1017.463368][ T8454]  #1: ffffc9000443fc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[ 1017.468087][ T8454]  #2: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x1820
[ 1017.471646][ T8454]  #3: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820
[ 1017.475318][ T8454]  #4: ffff8881a2826228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820
[ 1017.479913][ T8454]  #5: ffff88816a0f1d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[ 1017.483653][ T8454]  #6: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450
[ 1017.486968][ T8454]  #7: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0
[ 1017.490596][ T8454]  #8: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[ 1017.493962][ T8454]  #9: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820
[ 1017.497794][ T8454]  #10: ffff88811ff20228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820
[ 1017.502475][ T8454] 
[ 1017.502475][ T8454] stack backtrace:
[ 1017.504523][ T8454] CPU: 1 UID: 0 PID: 8454 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[ 1017.504534][ T8454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1017.504542][ T8454] Workqueue: bond65 bond_alb_monitor
[ 1017.504560][ T8454] Call Trace:
[ 1017.504565][ T8454]  <TASK>
[ 1017.504571][ T8454]  dump_stack_lvl+0xe8/0x150
[ 1017.504584][ T8454]  print_deadlock_bug+0x279/0x290
[ 1017.504596][ T8454]  __lock_acquire+0x24df/0x2cf0
[ 1017.504607][ T8454]  ? __pfx_netif_skb_features+0x10/0x10
[ 1017.504617][ T8454]  ? ret_from_fork_asm+0x1a/0x30
[ 1017.504628][ T8454]  ? __lock_acquire+0x683/0x2cf0
[ 1017.504638][ T8454]  ? sch_direct_xmit+0x15f/0x4c0
[ 1017.504649][ T8454]  lock_acquire+0x106/0x350
[ 1017.504657][ T8454]  ? sch_direct_xmit+0x15f/0x4c0
[ 1017.504671][ T8454]  _raw_spin_lock+0x2e/0x40
[ 1017.504680][ T8454]  ? sch_direct_xmit+0x15f/0x4c0
[ 1017.504691][ T8454]  sch_direct_xmit+0x15f/0x4c0
[ 1017.504703][ T8454]  ? __pfx_sch_direct_xmit+0x10/0x10
[ 1017.504713][ T8454]  ? arp_solicit+0xae0/0xe40
[ 1017.504723][ T8454]  __dev_queue_xmit+0x177f/0x3820
[ 1017.504734][ T8454]  ? __dev_queue_xmit+0x29b/0x3820
[ 1017.504743][ T8454]  ? __lock_acquire+0x683/0x2cf0
[ 1017.504752][ T8454]  ? arpt_do_table+0x25b/0x1f90
[ 1017.504759][ T8454]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1017.504770][ T8454]  ? __pfx_arpt_do_table+0x10/0x10
[ 1017.504780][ T8454]  ? NF_HOOK+0xa2/0x3c0
[ 1017.504788][ T8454]  NF_HOOK+0x33a/0x3c0
[ 1017.504795][ T8454]  ? __pfx_arp_xmit_finish+0x10/0x10
[ 1017.504803][ T8454]  ? NF_HOOK+0xa2/0x3c0
[ 1017.504810][ T8454]  ? __pfx_NF_HOOK+0x10/0x10
[ 1017.504817][ T8454]  ? lock_acquire+0x106/0x350
[ 1017.504826][ T8454]  ? __pfx_arp_xmit_finish+0x10/0x10
[ 1017.504833][ T8454]  ? inet_addr_type_dev_table+0x25/0x190
[ 1017.504843][ T8454]  arp_xmit+0x16c/0x270
[ 1017.504850][ T8454]  ? arp_xmit+0x23/0x270
[ 1017.504857][ T8454]  arp_solicit+0xbdc/0xe40
[ 1017.504867][ T8454]  ? __pfx_arp_solicit+0x10/0x10
[ 1017.504876][ T8454]  ? __neigh_event_send+0xea4/0x1510
[ 1017.504887][ T8454]  ? __pfx_arp_solicit+0x10/0x10
[ 1017.504895][ T8454]  __neigh_event_send+0xf0c/0x1510
[ 1017.504908][ T8454]  neigh_resolve_output+0x1a1/0x720
[ 1017.504919][ T8454]  ? __pfx_ip_neigh_gw4+0x10/0x10
[ 1017.504929][ T8454]  ? ip_finish_output2+0x3de/0x10b0
[ 1017.504938][ T8454]  ip_finish_output2+0xc4b/0x10b0
[ 1017.504946][ T8454]  ? ip_skb_dst_mtu+0x811/0xa50
[ 1017.504954][ T8454]  ? ip_finish_output2+0x3de/0x10b0
[ 1017.504963][ T8454]  ? ip_finish_output+0x40b/0x530
[ 1017.504971][ T8454]  ip_output+0x29f/0x450
[ 1017.504978][ T8454]  ? ip_output+0x5a/0x450
[ 1017.504986][ T8454]  iptunnel_xmit+0x626/0xd10
[ 1017.504997][ T8454]  ip_tunnel_xmit+0x195b/0x2040
[ 1017.505010][ T8454]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[ 1017.505018][ T8454]  ? __pfx_gre_build_header+0x10/0x10
[ 1017.505026][ T8454]  ? kfree+0x1c5/0x640
[ 1017.505034][ T8454]  ? pskb_expand_head+0x469/0x13a0
[ 1017.505044][ T8454]  __gre_xmit+0x19e/0x240
[ 1017.505057][ T8454]  ? __pfx___gre_xmit+0x10/0x10
[ 1017.505065][ T8454]  erspan_xmit+0xad5/0x1590
[ 1017.505075][ T8454]  ? __pfx_erspan_xmit+0x10/0x10
[ 1017.505082][ T8454]  ? __lock_acquire+0x683/0x2cf0
[ 1017.505092][ T8454]  dev_hard_start_xmit+0x2cd/0x830
[ 1017.505104][ T8454]  sch_direct_xmit+0x257/0x4c0
[ 1017.505116][ T8454]  ? __pfx_sch_direct_xmit+0x10/0x10
[ 1017.505126][ T8454]  ? __switch_to_asm+0x70/0x70
[ 1017.505137][ T8454]  __dev_queue_xmit+0x177f/0x3820
[ 1017.505148][ T8454]  ? __dev_queue_xmit+0x29b/0x3820
[ 1017.505158][ T8454]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1017.505167][ T8454]  ? rcu_is_watching+0x15/0xb0
[ 1017.505206][ T8454]  ? kmem_cache_alloc_node_noprof+0x1f1/0x610
[ 1017.505222][ T8454]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 1017.505231][ T8454]  ? kmem_cache_alloc_node_noprof+0x1f1/0x610
[ 1017.505239][ T8454]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[ 1017.505247][ T8454]  ? local_lock_release+0x9c/0x160
[ 1017.505257][ T8454]  ? kmem_cache_alloc_node_noprof+0x1f5/0x610
[ 1017.505267][ T8454]  ? __alloc_skb+0x4cc/0x7a0
[ 1017.505275][ T8454]  ? alb_send_lp_vid+0x14e/0x550
[ 1017.505286][ T8454]  alb_send_lp_vid+0x348/0x550
[ 1017.505297][ T8454]  ? __pfx_alb_send_lp_vid+0x10/0x10
[ 1017.505310][ T8454]  alb_send_learning_packets+0x12c/0x300
[ 1017.505321][ T8454]  ? __pfx_alb_send_learning_packets+0x10/0x10
[ 1017.505330][ T8454]  ? bond_alb_monitor+0xf3/0x1820
[ 1017.505341][ T8454]  ? netdev_lower_get_next_private_rcu+0x9f/0x100
[ 1017.505353][ T8454]  bond_alb_monitor+0x3d0/0x1820
[ 1017.505364][ T8454]  ? bond_alb_monitor+0xf3/0x1820
[ 1017.505373][ T8454]  ? __pfx_bond_alb_monitor+0x10/0x10
[ 1017.505383][ T8454]  ? rcu_is_watching+0x15/0xb0
[ 1017.505394][ T8454]  ? process_scheduled_works+0xa20/0x14e0
[ 1017.505402][ T8454]  process_scheduled_works+0xa8e/0x14e0
[ 1017.505414][ T8454]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1017.505423][ T8454]  ? assign_work+0x3cf/0x5d0
[ 1017.505431][ T8454]  worker_thread+0xa47/0xfb0
[ 1017.505441][ T8454]  ? __kthread_parkme+0x71/0x1f0
[ 1017.505452][ T8454]  kthread+0x388/0x470
[ 1017.505462][ T8454]  ? __pfx_worker_thread+0x10/0x10
[ 1017.505469][ T8454]  ? __pfx_kthread+0x10/0x10
[ 1017.505479][ T8454]  ret_from_fork+0x514/0xb70
[ 1017.505490][ T8454]  ? __pfx_ret_from_fork+0x10/0x10
[ 1017.505499][ T8454]  ? __switch_to+0xc89/0x1420
[ 1017.505508][ T8454]  ? __pfx_kthread+0x10/0x10
[ 1017.505518][ T8454]  ret_from_fork_asm+0x1a/0x30
[ 1017.505531][ T8454]  </TASK>
[ 1017.700010][T15038] lo speed is unknown, defaulting to 1000
[ 1017.740416][T15038] wg2 speed is unknown, defaulting to 1000
