last executing test programs:

2.091308333s ago: executing program 2 (id=2478):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x102, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xac}}, 0x24040084)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, @info_reply={0x10, 0x0, 0x0, 0x6, 0x7}}}}}, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1c, r4, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
r5 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b45c33a47d3a158da980000000000000bea6f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f00000002c0)=[@assoc={0x0, 0x117, 0x4, 0x5e}], 0xa}], 0x1, 0x4008880)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0xf0ff)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bind$unix(r6, &(0x7f0000000900)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "877dab43c700", '\x00', "0100"}, 0x28)
recvmmsg(r7, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/147, 0x93}], 0x1}, 0x80000001}], 0x1, 0x102, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)

1.381584759s ago: executing program 0 (id=2492):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}, @typedef, @fwd={0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x0, 0x6}]}, @ptr, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x0, 0x796}]}]}}, 0x0, 0x8a}, 0x20)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x3ff, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000340)="a9", 0x0}, 0x20)

1.32787238s ago: executing program 0 (id=2493):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x4, 0x7, 0x4, 0x4}}, 0x26)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
socket$phonet_pipe(0x23, 0x5, 0x2)
close(0x3)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000080)=r4)
close(r5)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6)
shutdown(r1, 0x1)
syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20c0}, 0x0)
r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000340)='freezer.self_freezing\x00', 0x0, 0x0)

1.237632602s ago: executing program 2 (id=2497):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @fd=r0}]}, @nested={0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

1.165177185s ago: executing program 2 (id=2498):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.164600683s ago: executing program 2 (id=2499):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc3}], 0x1, &(0x7f00000001c0)=ANY=[], 0xf}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x54}}, 0x0)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="0a000300010000", 0x7)
recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5c17}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="d100000000000180c20000000800450000200000e000001190780000000000f15e6528b5ae6ecd0c908761040000"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f00000023c0)={'wg0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002000010027bd7000000000000a000040000000001400010005001300010000ed6170eaa8c619a7be6c18dc262de6fff094e9876de850b7636c5ecb2505de531e4678f22cfd788b6a8139ee8201b40088e56c9e8c4c3cb8e5efccded6af994d2a20d0171dfae3a81989cb5c1e"], 0x24}}, 0x4008000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg(r6, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a4f6dbf7076341df55b7aecaad952f364f05d5e0f", 0x29}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bd", 0x41}], 0x2}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000b00)="74a4e85cc89d33547afbda9d629f9f9f20b9b051442633488e9e33357c312479a404b3704c8d07860bf96d27dfa418938111b5863b28d31d6185a51a0ad41082802e5ca3be41e7ceac5799eac6bb0ff074730031c7dca06f1e3f85a9c396610ab3bce2e140e31e878fe2bb2c4c9bbdf6cf9fc309342407cb59bd5086e9dd41ade97c48664286653e4c390266c307182581eb72c91b5a03000000000000001b4b977e05116405bcf3c2da0b1194f01177fdd42215aa0a0a16dc8da2444854aae3729ffa795dd6e19d7fd7bdc62087", 0xce}, {&(0x7f0000000a40)="d82d33a6d81edc4b66cc88bf8c1a89a600010000000000006cab778d9631e23dc7b23087ca46c503e8b9bbf55511a47353213e9469564dc8aea385d25838f30a8b23ee20331856a97befcd9aaf4dba1e25357aa609052646e4f9b3f06de214eaa4734947274e4afa8de4aa82a84c49eb1e3b8fd516eee5361965121396212193511b75", 0x83}, {&(0x7f0000000580)="4cc291a1339f36fedfa937c3d768baa73ddc72c419695988fc8177e38f1379e15e6745bbb565b5a19e98a179b04a46aeeb2ae125123d2bb33ca7f7a32c4b04399893a25cdc4147", 0x47}, {&(0x7f0000000640)="4f5d11a3bedb1e613a22193c7efc0895ad8a3a732fc9ac7b82813fb06350e990d28156283d5b74e91294a85de9d112834691b29f7b8de2d221534387bb87a9000000006d90826596c1f8831c143bb8e2e7acd2128a4925e5c6e0a2131998d6d58ff9c3db3eb27243ac492f85077253fe06879f2a950f0ab0a7b4ffd3b60a365836b69adfc1ca21956b58515c62ef1093700b02bdcbab80daeb72f080b97c93670977b6a834487fac91000000000000", 0xaf}, {&(0x7f0000000700)="127e9e1fed85c92de6f35b0f5c5773cd2459424b46b24ee9f4a0a91f84a17ebf143111d986c7efde91a12cf09a83e70646f840c7c1dcf14a20e9e866989bc789469b60cef2dfd741ac914aab6751cf163f6acba335a266c0838f3be62539be506c2338c495277d70a1bb9021daa95c64d1c5e0134505179d0fef2933e0b19861951bb1bb630b9b4127f46b946ec1f7141b3ec2c9d11074b6ec41a314414c3f966cd19ab1ad99ddf83a1dd134358a68c0", 0xb0}, {&(0x7f00000007c0)="38efe9d712d905bf9f3d662a241229ad7ff87611e1aa1b7627a1f2079978a3", 0x1f}], 0x6}}], 0x2, 0x8810)
sendmsg$alg(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040001}, 0x0)
recvmsg$unix(r6, &(0x7f0000000440)={0x0, 0x2d, &(0x7f0000000140)=[{&(0x7f0000001140)=""/4083, 0x1002}], 0x1}, 0x12062)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000002060500000000000000000000000000120003006269746d61703a00000900020073797a30000000001c00078018000180140002400000000000000000000000000000000105000500020000000500010006000037"], 0x68}}, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628)
socket$kcm(0x29, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x1, 0xf7, 0xfffff008}, {0x6, 0x6, 0x0, 0x5}]}, 0x10)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r7, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)

1.145671924s ago: executing program 0 (id=2500):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53)

1.090281736s ago: executing program 0 (id=2501):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550a00000000000061115400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)

1.031495706s ago: executing program 0 (id=2502):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f0000000100)='\t)', 0x2, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x4, @private0, 0x81}, 0x1c)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0xd8f7, @mcast1, 0x4}, 0x1c)

951.863547ms ago: executing program 1 (id=2503):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt(r0, 0x1, 0x10, &(0x7f0000000a40)=""/78, &(0x7f0000000ac0)=0x4e)

919.77245ms ago: executing program 1 (id=2504):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340))
socket$igmp(0x2, 0x3, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = getpid()
sendmsg$nl_route(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@getlink={0x54, 0x12, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, 0x120, 0x100}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xf30e}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_TXQLEN={0x8, 0xd, 0x8001}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_IFALIASn={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000004)
write$cgroup_type(r2, &(0x7f00000000c0), 0x9)
sendfile(r2, r1, 0x0, 0x10000)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xfff4, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4)
r6 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@getneigh={0x14, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050)

201.746686ms ago: executing program 1 (id=2505):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001980)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@generic={{0x7, 0x4, 0x1, 0x31, 0xfc0, 0x65, 0x0, 0x2, 0x29, 0x0, @private=0xa010102, @broadcast, {[@generic={0x7, 0x5, "7ee226"}]}}, "ee16c4d5a51ed9c64a9233de22d702e877838558a85139d5afe66b4c03aeee544a3e0891381198954fce7353f2ac468bcfb3e4a635cdcae15b52d8f51e928ebb152bf32166fc691dc613e3e0a280ffdacba96d67fcf3d72c1baab5af2d3389abf1baddf2c76712b21ec1a0a8763451ec51c4931a878e40f5763ce7c46a66822fdd90738f5ee6c839e7c7c6b3f97ebfa0689f80738d637ef017c51f8675d7f516b8fe05c436d91259d954db815ee633439cdcd9097df2cde8d256ec7bf35a81f4395d3636416c9d543cfd4c0a1236de9bdbdbc0c2e62fe33e12806aae6efaa167f14351c7787e40f0e010c954d858561a6a6d1e674789c605ca47334812700ecc046c9f13a203ee89c6f72a43bcdb9c5b1ae894b4c9188c8d1e1f2cf0c6885a397e08d6b1db06efeadb51629ba9e1eadf058924ac058091c8fbd6db709b4e03c7837edef9440b3edce8ef4b3ea637aaf2c2441c9b267e314de02303e33573e8aafc3a2057593af3d2f4f11cf16f5f2d440f7f2dc29b2a6528f2b7953178fa675977c3e147f7979717bcccb69130f612b050707852cafc6882df10bd19f65b2c30202bb1cbeebbf8f617ae93270a9696a231bc651ac5b7ed088cf5d6103499804b5034eb91498e278998f9f3d59c02981c3568f7883f87d281b4aaf3efc25435cd6390f9c2e54d3631fb09119695b3f1a8abb954e1b89d29b43dcefe6d01b0f1a72105958b420e7808c5a6f764dc882c382ab1b6c2afa1358c44dd569d6df3804ff41627eedebda74b3cf8270295010a3282686b544e771c08bed08a20d56c35c66096d3476060d8c30e5e5e17e14a09a729c108a08ad62abca57dea5e0c9a8b99098619c2baff447cdf140226bb375b602d8193c8a99210a3b8603d209f5db47783181165d334bfb5f6650a87debe85360d5b6a1615c178f36994c1d424beb228db4492df4f331a2f96c3f0609af535f8da8e92adbfc6e814a0cd5ec05a9342885d0eae2c82d86a0cca2c9e4c448686d10fe34e731f89849dc57fbe5e3c1f3175aca9f7556f07c0b9497b5ded6d82f59d6de4038626643d4df61a8f866e8bc9aaa7b17e8bbacbf6020919505c5435f48d84fb0f127d10f74a5eb221eabe5e7d659560e7f82f4df6718a91e769d44b8f5c2ab5d90d1dc1fbb9cca6a695fc3768fb76d32fe3d38f68fc18872463792c87a0347efd1ad02665a30a42a77088f0160d13c8d5aaa3785ff1b3d0c1a63aa9f5a6829d3be3da468c629b0c05c8ae1671da6904336ece987debf51bfbe6018a3db901a7c516e664fcbb8cd2d6a5d5e18608b4eb55ae22549e61e2b5d3680bceb1746cf8dfb85d8081fa5299a725d483a03232fae5ece7b298dc05bdbfcd2088d852088ad04a57e8015cc35f5e1646abdffe94f12b450ab7a0416a7c10ee554fcf82e525fbc152d88aa0c9069454489ab216c91eb0f2411f5a55fc8a42991d042dfb670ccc4442a8d483f8df2985f6d48144c26f8c58a1a4998f435288beed567ab2ce8ce9277f01cfaa1b7d80a9be0a19f2ec2477be5b53f2f6c2dd3c3c49eee014b5cab5e880fc44a5cb16f526136ad3a9a5c9094029482f2b4902a783f8b42840bfc98b854cd904a4ce0a6d2e99baf8eabcaa8b1aa08192c85bc30e9acab848f343d45882e6eaa03bbb7f3cd15336519d4fd4ef2577be280b1aeae9b8f0df88afcabd8bdf854c1043dfcd13e0039768bafb86bb99b7a1fc600e54c0625d30e3cdb4c6c28e7ff755513c43de5f2bd5ff5b6a19f0a47f179df8c2cee73cd5cce2ec5afe08400683aa0ad52c5034ad0777abc677044bf56c072064ba662f4a7d928ca45ccb6fb82934fb235a4b9d2d5f8c8a0a16394e1cacb59eaf962c6e0b7da5912810e3ace226425f0e02b1c5dd1fcc265bc5e2582e40bb1825796aee2cb3a886d6f0aa9e2298a1e9115264aac7139987c534566fb477ff4dbf1b73495b07f857a4b5dc875020928dde6aed66e2751abea1a7c1bad2424b8e35b573427a2816239f96b8a9db9b3b5e6e01590bd132b4bec773b72c114ee7b9c3e0e2b5fddbd6851c4defbf4cdd61334dc15b72a806ed9c78a0672f57e43dc413a0734d89f93deb58366995e04304986d131d6e78ce0a4cd2e7359027fde34a6c372adfe9698e01032f30d6097bd329ca9873bc1e5cd497d8afad2a95a5e48dbfa9955c035f7ce3a4a63062cc766759b90be03bb2eab0c5868948b321500539b9e2286b2506b19415db6091361e0979fe0ead731aea7b3a825356ed638367addb1ff00614aca1b24b57873430b8e0851ebacdb288dfc971a586e2ecbd7ded9e7453ec81aff50e00949178991888faf72de8a0691edd4cbac7300e7d2beaafd6e06728dabd5c28e84b8ace41bca1ec660cb65f314c941b0347175513fcce92fd3cab3ea2fab1476a897c5b372855f4b3d0b806f520d1847c4f268e18087b09ab35f5455327d047ad660425b3085c890cce81cf0d0782e4fa95e4500a17730c5f5b7baee727c1c24d202b691b7bc7389fc9a8097e153a07ded5f355a8953186ed14b450639ca70b9f54638e3276a5e8c35ad28998f46c19776a5f40e704c8d775ae796d3d6b96b8648c4918c8ab77a2427d9741544024621cae057fdfa8d416cb47e54a833ffcd7d5398a945d710d8d3dd92b549e0e8b57682a50a37ca038d8443f85e917301b6b6ecd71f59a16f17910f9bff019e13b7f1816cde09545cd27a98e5957ace6c36e74cbaadcf0a36e49bed8912c06fa898384ae2de3fd8177b912e077a48ce5f41bf1f3f2b578ab9eb8a350a15606b593390c9ee0ec10ae28a3b3ce430262fd192928312caddf399b09e715225b27c9418ee95428bef7f653ebbec142c34a361ea684904d8d2ca552d17b61b487801adc8089c1d8577b6a6280fc7fac5e0759ecc0232cc4b2a185f764d4af6f26f96a8a43843fbc93e617b46afb64ce1f1392315772add3f5202b08614489cbe8e60b76e28a4cc1d93fc58fc20e7aa7762abdcf25654cdedb885b7bfde063baa168df1493af85e6b52902559b4de66f8858fd8a6ffb0e5ab26ff30792925020c09c01e0e1f2f7162417eb1c2b32f2212b152093cf95f3775f16b34f4625b73bcd719762fdf0c821983f740b1b24ddc99841b29b3ccfdc356114b562fdd8ccad292d6baf65c078d5de73f5983c2cf73c2305fbc494ce9e16790499a81fd09c6fac203f4ad3f05940a9d9c9e871ea4e3efc1884f22ada7323697b98e3baf87521740fdf5121ee9be5608afb38500e26a0578232614709061c1080d15e1650b586a17fd8dd68104abaddbb1d8ea299c9f4c34dc9b237a98864709c43a0c1397c34db2796762ced57fede0c933768bdc038b310a7cec303b5b6dd5506fe2e8cb783258c65c5aefb58a18671b9e1691294b41e3e10ebb4e81213192bcfea19f51f70087cc41701d95a4e41b638ca7d400cbd5d2c32ba456d3b0fdfd08f8d5ea8ca34766c3a82b07e9a725707eac91a8e0a02be0c6e6e37377b5c7e094d0248f5503168a7cc0a0466207fb2024c8ea73c5eb6c55a49d61d33326e70f4656ea835ece85504407bdcab9c7eacbfd2c052ad2af41c93e4adbe9e9a36314d4812a74a7c7b44f6a20876d8075620ebf352f59a6f19ad5904fa4315e0515e0b28b4dca1af7ca60c156b6de6e9f22dbea87512e594b7e89f9801069a3cf89916562776b8bc251c8c8f589b8bd2475c66ef2e5f837b407f12453cfbbc3ae42b845f65b2ca7248b8ceed275785dc0d3147b887faae38168a7e7925e9dabf0b430c681eb61881baad89c8536ff3a4a6fa31e039e67ec43f839aae1c89afad506f6cbf990f070cf5a469a21544912e154fa45f529cd850415e343b60e7fc5c76fbb383e8a97e49ac6b9e21011dbc1e3086805fe84f2f64d88a65323c0512c0d2eea50ade21f75d1f53c73b2ac9144a56865b1190a19b5717fd75981010d023fb945f0e19e50ae9f865b3f5e19e87bf3276a5586337841414bcf792ded7520e696ad64ef02ac148994718086abbbceabfc453a464e1d3ddd281a2d0aa390bfd63f7c667c745af5440d828e96bf25fdae5d263ffc811c5f7b83ea17fba320eaf3cc2f449aa26d4a4ef505e64672a96a29a6f27bcb074d86ac9caeb2f35315da2ec8d03a6ced8b034da95635ce23533959dc6619b0bb8800d4408773bfffdf85814423dd1a17262b3a0661911da09e1ae8b5d03a42856d03fc0064c376618fa470c6a56a38dde545c75cdc4f9e95b409de3e7b594ecfa3d3267ea7b89d5e92fd0375c556a79de6f9f6c554e7d3416606102892670881e2eb5bb4b858180970424292615e86f396bcfcd8338f8488eab437a027f2828a8f00ca704d3212d191ae33e3cc3a8a15987b67dbc89019645f8d1c06cb765f52d88780ef390ef269ded2a5ab429c24d99cdbc33d7c21ead55d58aa922ca86ba7570a371d4bcd5a70a8d950c331a75a6138e403bafe0a9f5923a65cf27b5473e4596ee52495459a77c0be800a697dc9951245511d6e0569d1b1b50cfaa3578b8b36d671d792d64627c712c2eb31d8811c374a529d198cfd68bcf3fb47a326c3124eea332b2ac560c9744c5da10bc6956f3c818f88ef4748febf407795322de9e3c176ae6f447e9e2c31b4ce1f050d34b047bf8e0f1b3cff9c98ed5ca683d8f50f7a2ae2207036b06e4c4b0d06f49c0808f2b245924ed9ac512c61a73ce8668844789ac2e02bf98df44eb213e2d8568d2a7f19c784626d53ee9374b6abe9bacf7d0be6040e2eec507a906cac066769586ec8aa7cbd52fbab83be844b0b6c5ba63e8f0e5b9a970d22f7d78d01e0830e36cc45e680924c99e742fcac00bb18c7dad2b28a2fc3342bf8148a0a4d0a575a572008e2f366b52be146367cbad544bfbbd6c2ef6d6b4a78a90a9187e479512fdbe6808ae3f45639957c25757fe91b2e59ad7ba2ce3ca505202e53a0c01a9c4dc9206c9def391161481a23adf3401cc6ddd2f5d92e2e3bd29a6ed8de1947cfaf1b64e71f2004950291f1658b813428b5b8bcb12c001572cb3ccf121a218073adf02b3aa43153c18de75e792500ed413721650cfeb2aa65c53b3bf59d284ca711447d9a4fe7af2fba8f420e2cf08f3c2716210d95987f4cffbbf6eba6ea7c028148b666f2ab68f5f23dc670a0854e6d7feb4b5a245f35157af52bd5f126bc69e34f3ceb8be68f2a1b861dac1f3d39e31598b5cd1066ddd45f6b78e1308fccf592dd735e2a55f8634d904791a6110870b6ad2fa799c23c65b785c028ec27fd61698958a2861ce99d254e06633c1a0111ccd722f0b7982fc1b0ba4e457648b180759f82817f6dcc47446e53d4b0a33b6f0032229f41b2747eabe918c8b3b85ccdd65bf01856f68c23a5b44c13d5c8cc9f5b3a424b68e6b2eaeb3a69142876c30ca9d1eff713c919927033e9c30d51d4a736b04f056ddf5c2922475b9ad6d60cb3d6a65df68c7791e1bec3fa8c7d226a7a810505e438af3c1dcde6c0f6cc3bf59c70e76de08ba4a3ac3c8c44e4484d7e54f790c2e159232bafb6607a018db779ea6578edfd9fc6ae0ec1dc218d7d3e0f12f237c7c7be7c0278a80fd4cfc0021580604007df94a4c93b383e0eed97dc6987b51fd959522874e4b3c820a44dac7871d91575ca24572528113b344463f784491"}}}, 0xfce)

197.840168ms ago: executing program 2 (id=2506):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4004816)

117.709489ms ago: executing program 2 (id=2507):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880)
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4)
listen(r7, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r10 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0x4, 0x4, 0x560, 0xffffffff, 0x128, 0x128, 0x220, 0xfeffffff, 0xffffffff, 0x490, 0x490, 0x490, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x84d3], 0x0, 0xa, 0x2}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@private0, @local, [0xffffffff, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff, 0xffffffff], 'veth0\x00', 'dummy0\x00', {}, {0xff}, 0x87, 0xf, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a82b", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast2, [0xffffff00, 0xffffffff, 0xffffff, 0xff000000], @ipv4=@private=0xa010102, [0x0, 0xffffff00, 0xff000000, 0xffffff00], 0x4d5, 0x3502, 0x3b, 0x0, 0x1a, 0x2}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0x0, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}, [0xff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d6, 0x3501, 0x0, 0x1, 0x8, 0x5}, {@ipv6=@mcast2, [0xff000000, 0xff, 0xffffff00, 0xffffffff], @ipv6=@mcast2, [0xffffff, 0xff000000, 0xff, 0xff000000], 0x4d5, 0x3504, 0x8, 0x0, 0x4, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0x0, 0xff, 0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1a}, [0xffffff00, 0xffffff00, 0xff], 0x4d4, 0x3505, 0x4, 0x1, 0xf, 0x4}], 0xb}}, @common=@ipv6header={{0x28}, {0x77, 0x4}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0)

117.254129ms ago: executing program 1 (id=2508):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="00000000140003000900000000001e00000000000000000014000100ff"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

315.395µs ago: executing program 1 (id=2509):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0xb, @mcast2, 0x5}, 0x19)

148.745µs ago: executing program 0 (id=2510):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'dummy0\x00', 0x96})

0s ago: executing program 1 (id=2511):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:54489' (ED25519) to the list of known hosts.
syzkaller login: [   57.595296][ T5593] cgroup: Unknown subsys name 'net'
[   57.726152][ T5593] cgroup: Unknown subsys name 'cpuset'
[   57.730113][ T5593] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.458529][ T5593] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.400888][ T5001] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.406631][ T5001] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.410698][ T5001] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.421864][ T5001] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.447467][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.451110][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.463325][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.474222][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.483192][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.492265][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.498298][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.505175][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.509383][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.519459][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.529049][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.431513][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.434727][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.436811][ T5638] bridge_slave_0: entered allmulticast mode
[   70.439972][ T5638] bridge_slave_0: entered promiscuous mode
[   70.464561][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.466880][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.469544][ T5638] bridge_slave_1: entered allmulticast mode
[   70.473103][ T5638] bridge_slave_1: entered promiscuous mode
[   70.513691][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.515973][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.517977][ T5641] bridge_slave_0: entered allmulticast mode
[   70.520948][ T5641] bridge_slave_0: entered promiscuous mode
[   70.535825][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.538723][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.541574][ T5641] bridge_slave_1: entered allmulticast mode
[   70.544952][ T5641] bridge_slave_1: entered promiscuous mode
[   70.554582][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.559294][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.614483][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.618996][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.621644][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.624547][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.627292][ T5645] bridge_slave_0: entered allmulticast mode
[   70.630384][ T5645] bridge_slave_0: entered promiscuous mode
[   70.636202][ T5638] team0: Port device team_slave_0 added
[   70.659042][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.661364][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.665106][ T5645] bridge_slave_1: entered allmulticast mode
[   70.668202][ T5645] bridge_slave_1: entered promiscuous mode
[   70.671918][ T5638] team0: Port device team_slave_1 added
[   70.683168][ T5641] team0: Port device team_slave_0 added
[   70.701233][ T5641] team0: Port device team_slave_1 added
[   70.716048][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.718074][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.725889][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.741737][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.746062][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.748384][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.757263][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.778032][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.802949][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.805208][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.814172][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.827126][ T5645] team0: Port device team_slave_0 added
[   70.830183][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.833163][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.841891][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.854128][ T5645] team0: Port device team_slave_1 added
[   70.876342][ T5638] hsr_slave_0: entered promiscuous mode
[   70.879654][ T5638] hsr_slave_1: entered promiscuous mode
[   70.893541][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.895626][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.903635][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.934897][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.937175][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.945263][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.960252][ T5641] hsr_slave_0: entered promiscuous mode
[   70.962418][ T5641] hsr_slave_1: entered promiscuous mode
[   70.965146][ T5641] debugfs: 'hsr0' already exists in 'hsr'
[   70.967421][ T5641] Cannot create hsr debugfs directory
[   71.064666][ T5645] hsr_slave_0: entered promiscuous mode
[   71.067591][ T5645] hsr_slave_1: entered promiscuous mode
[   71.070214][ T5645] debugfs: 'hsr0' already exists in 'hsr'
[   71.072387][ T5645] Cannot create hsr debugfs directory
[   71.310689][ T5638] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.322943][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.326560][ T5638] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.334878][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.338850][ T5638] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.344789][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.359351][ T5638] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.366094][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.408755][ T5641] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.416650][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.426057][ T5641] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.432156][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.435224][ T5641] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.439208][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.441885][ T5641] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.448697][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.523084][ T5642] Bluetooth: hci1: command tx timeout
[   71.523268][   T54] Bluetooth: hci0: command tx timeout
[   71.540159][ T5645] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.547719][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.550952][ T5645] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.556580][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.560236][ T5645] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.565592][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.568955][ T5645] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.574916][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.603921][   T54] Bluetooth: hci2: command tx timeout
[   71.671911][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.711446][ T5638] 8021q: adding VLAN 0 to HW filter on device team0
[   71.726486][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.729667][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.737272][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.750832][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.753757][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.794763][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.803933][ T5641] 8021q: adding VLAN 0 to HW filter on device team0
[   71.830074][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.832707][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.847521][ T5645] 8021q: adding VLAN 0 to HW filter on device team0
[   71.851667][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.854458][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.867534][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.870362][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.905131][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.907665][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.200130][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.285762][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.329662][ T5645] veth0_vlan: entered promiscuous mode
[   72.345962][ T5645] veth1_vlan: entered promiscuous mode
[   72.415874][ T5638] veth0_vlan: entered promiscuous mode
[   72.428485][ T5645] veth0_macvtap: entered promiscuous mode
[   72.438156][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.447681][ T5645] veth1_macvtap: entered promiscuous mode
[   72.454445][ T5638] veth1_vlan: entered promiscuous mode
[   72.478604][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.499249][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.518325][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.522394][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.530669][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.534909][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.557307][ T5638] veth0_macvtap: entered promiscuous mode
[   72.579865][ T5638] veth1_macvtap: entered promiscuous mode
[   72.627807][ T5641] veth0_vlan: entered promiscuous mode
[   72.660064][ T5641] veth1_vlan: entered promiscuous mode
[   72.677723][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.697920][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.712019][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.717592][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.728717][ T5693] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.737002][ T5693] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.748602][ T5693] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.753358][ T5693] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.798419][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.798450][ T5641] veth0_macvtap: entered promiscuous mode
[   72.801650][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.835495][ T5641] veth1_macvtap: entered promiscuous mode
[   72.904898][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.916899][ T5645] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   72.931645][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.944060][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.948407][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.981347][ T5693] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.989215][ T5693] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.025317][ T5693] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.030148][ T5693] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.058819][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.062033][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.168267][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'.
[   73.210480][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.228693][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.286344][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.290254][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.428933][ T5756] only policy match revision 0 supported
[   73.428949][ T5756] unable to load match
[   73.603420][   T54] Bluetooth: hci0: command tx timeout
[   73.603463][ T5642] Bluetooth: hci1: command tx timeout
[   73.686289][   T54] Bluetooth: hci2: command tx timeout
[   74.017041][ T5782] warning: `syz.0.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.338428][ T5794] netpci0: tun_chr_ioctl cmd 1074025678
[   74.341987][ T5794] netpci0: group set to 0
[   74.474800][ T5800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.39'.
[   74.718285][ T5809] bond1 (unregistering): Released all slaves
[   74.988964][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'.
[   75.341901][ T5852] netlink: 132 bytes leftover after parsing attributes in process `syz.1.62'.
[   75.588955][ T5864] bond1 (unregistering): Released all slaves
[   75.655608][   T24] bridge0: entered promiscuous mode
[   75.684277][   T54] Bluetooth: hci0: command tx timeout
[   75.684336][ T5642] Bluetooth: hci1: command tx timeout
[   75.763197][ T5642] Bluetooth: hci2: command tx timeout
[   75.797111][ T5876] netlink: 'syz.0.72': attribute type 1 has an invalid length.
[   75.812341][ T5876] netlink: 224 bytes leftover after parsing attributes in process `syz.0.72'.
[   76.178459][ T5894] netlink: 'syz.0.81': attribute type 10 has an invalid length.
[   76.189494][ T5894] team0: Failed to send options change via netlink (err -105)
[   76.194511][ T5894] team0: Port device dummy0 added
[   76.201989][ T5894] netlink: 'syz.0.81': attribute type 10 has an invalid length.
[   76.207688][ T5894] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   76.216976][ T5894] team0: Failed to send options change via netlink (err -105)
[   76.227088][ T5894] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   76.242980][ T5894] team0: Port device dummy0 removed
[   76.251273][ T5894] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   76.339488][ T5901] syz.2.82 uses obsolete (PF_INET,SOCK_PACKET)
[   76.553144][ T5915] netlink: 'syz.0.87': attribute type 1 has an invalid length.
[   76.563252][ T5915] netlink: 'syz.0.87': attribute type 2 has an invalid length.
[   76.711539][ T5921] bond1: invalid ARP target 0.0.0.0 specified for addition
[   76.714617][ T5921] bond1: option arp_ip_target: invalid value (0)
[   76.721441][ T5921] bond1 (unregistering): Released all slaves
[   76.899350][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[   76.901863][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[   77.009376][ T5938] syzkaller0: entered promiscuous mode
[   77.012091][ T5938] syzkaller0: entered allmulticast mode
[   77.031602][ T5938] netlink: 40 bytes leftover after parsing attributes in process `syz.2.96'.
[   77.158834][ T5945] netlink: 'syz.0.99': attribute type 3 has an invalid length.
[   77.163295][ T5945] netlink: 666 bytes leftover after parsing attributes in process `syz.0.99'.
[   77.270729][ T5950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.101'.
[   77.287220][ T5948] syzkaller0: entered promiscuous mode
[   77.289961][ T5948] syzkaller0: entered allmulticast mode
[   77.298415][ T5948] sch_tbf: burst 185 is lower than device syzkaller0 mtu (1500) !
[   77.763170][ T5642] Bluetooth: hci0: command tx timeout
[   77.763220][   T54] Bluetooth: hci1: command tx timeout
[   77.766054][ T5966] Zero length message leads to an empty skb
[   77.842706][   T54] Bluetooth: hci2: command tx timeout
[   78.137739][ T5982] xt_connbytes: Forcing CT accounting to be enabled
[   78.279097][ T5990] netlink: 208 bytes leftover after parsing attributes in process `syz.0.119'.
[   78.299059][ T5990] netlink: 208 bytes leftover after parsing attributes in process `syz.0.119'.
[   78.340585][ T5994] netlink: 104 bytes leftover after parsing attributes in process `syz.0.121'.
[   78.426512][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'.
[   78.536067][ T6011] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.126'.
[   79.146326][ T6041] netlink: 'syz.0.138': attribute type 1 has an invalid length.
[   79.148656][ T6041] netlink: 224 bytes leftover after parsing attributes in process `syz.0.138'.
[   79.323863][ T6047] tun0: tun_chr_ioctl cmd 1074025672
[   79.326124][ T6047] tun0: ignored: set checksum disabled
[   79.435185][ T6051] netlink: 36 bytes leftover after parsing attributes in process `syz.2.143'.
[   79.571833][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'.
[   79.608830][ T6062] smc: net device wlan0 applied user defined pnetid SYZ0
[   79.679734][ T6064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.688989][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.148'.
[   79.698705][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'.
[   79.701752][ T6064] ip6tnl1: entered allmulticast mode
[   79.712173][ T6064] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.714259][   T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   80.006114][ T6085] bond1: Removing last arp target with arp_interval on
[   80.206797][ T6099] Driver unsupported XDP return value 0 on prog  (id 13) dev N/A, expect packet loss!
[   80.657214][ T6120] netlink: 'syz.2.169': attribute type 1 has an invalid length.
[   81.098897][ T6147] tunl0: entered promiscuous mode
[   81.106131][ T6147] netlink: 'syz.2.179': attribute type 4 has an invalid length.
[   81.591014][ T6178] tipc: Started in network mode
[   81.598551][ T6178] tipc: Node identity dede41fc9518, cluster identity 4711
[   81.613290][ T6178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.625736][ T6178] syzkaller0: entered promiscuous mode
[   81.628468][ T6178] syzkaller0: entered allmulticast mode
[   81.659475][ T6178] tipc: Resetting bearer <eth:syzkaller0>
[   81.707870][ T6177] tipc: Resetting bearer <eth:syzkaller0>
[   81.733850][ T6177] tipc: Disabling bearer <eth:syzkaller0>
[   82.298438][ T6219] netlink: 'syz.2.214': attribute type 2 has an invalid length.
[   82.305983][ T6219] netlink: 'syz.2.214': attribute type 2 has an invalid length.
[   82.508781][ T6230] openvswitch: netlink: Message has 4 unknown bytes.
[   82.515215][ T6230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.298763][ T6277] batadv_slave_1: entered promiscuous mode
[   83.301407][ T6276] batadv_slave_1: left promiscuous mode
[   83.411024][ T6283] netlink: 'syz.0.243': attribute type 1 has an invalid length.
[   83.452683][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   83.511312][ T6283] 8021q: adding VLAN 0 to HW filter on device bond2
[   83.515474][ T6283] bond1: (slave bond2): making interface the new active one
[   83.518711][ T6283] bond1: (slave bond2): Enslaving as an active interface with an up link
[   84.714857][ T6350] __nla_validate_parse: 9 callbacks suppressed
[   84.714872][ T6350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.273'.
[   84.808450][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'.
[   84.872843][ T6358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.277'.
[   84.964628][ T5713] IPVS: starting estimator thread 0...
[   85.053869][ T6363] IPVS: using max 65 ests per chain, 156000 per kthread
[   85.433780][ T6391] openvswitch: netlink: Actions may not be safe on all matching packets
[   85.465390][ T6393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.292'.
[   85.468697][ T6393] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.483127][ T6393] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.605471][ T6395] Cannot find del_set index 0 as target
[   85.680699][ T6402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.296'.
[   85.761369][ T6404] netlink: 'syz.2.297': attribute type 21 has an invalid length.
[   85.775049][ T6404] netlink: 132 bytes leftover after parsing attributes in process `syz.2.297'.
[   85.951878][ T6415] tunl0: left promiscuous mode
[   86.085758][ T6396] netlink: 32 bytes leftover after parsing attributes in process `syz.1.289'.
[   86.181339][ T6415] 8021q: adding VLAN 0 to HW filter on device bond1
[   86.578266][ T6440] syzkaller0: refused to change device tx_queue_len
[   86.732037][ T6450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.314'.
[   86.737584][ T6450] netem: change failed
[   87.144589][  T515] cfg80211: failed to load regulatory.db
[   88.286823][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'.
[   88.298026][ T6536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.354'.
[   88.509726][ T6550] netlink: 'syz.2.361': attribute type 10 has an invalid length.
[   88.526812][ T6550] team0: Failed to send options change via netlink (err -105)
[   88.534709][ T6550] team0: Port device dummy0 added
[   88.547589][ T6550] netlink: 'syz.2.361': attribute type 10 has an invalid length.
[   88.559003][ T6550] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   88.582558][ T6550] team0: Failed to send options change via netlink (err -105)
[   88.587141][ T6550] team0: Failed to send port change of device dummy0 via netlink (err -105)
[   88.600936][ T6550] team0: Port device dummy0 removed
[   88.621303][ T6550] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   89.590344][ T6583] netlink: 'syz.1.376': attribute type 1 has an invalid length.
[   89.669727][ T6583] macvlan2: entered promiscuous mode
[   89.672122][ T6583] macvlan2: entered allmulticast mode
[   89.690142][ T6583] bond1: entered promiscuous mode
[   89.703214][ T6583] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   89.716371][ T6583] bond1: left promiscuous mode
[   89.886084][ T6595] xt_CT: You must specify a L4 protocol and not use inversions on it
[   89.928153][ T6599] __nla_validate_parse: 1 callbacks suppressed
[   89.928168][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.384'.
[   89.947229][ T6599] vlan2: entered allmulticast mode
[   89.949207][ T6599] macvtap0: entered allmulticast mode
[   89.951012][ T6599] veth0_macvtap: entered allmulticast mode
[   90.106213][ T6607] syzkaller0: entered promiscuous mode
[   90.111302][ T6607] syzkaller0: entered allmulticast mode
[   90.126543][ T6607] 0: reclassify loop, rule prio 0, protocol 800
[   90.173526][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.389'.
[   90.177853][ T6611] netlink: 60 bytes leftover after parsing attributes in process `syz.1.389'.
[   90.917566][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'.
[   90.962631][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[   91.137003][ T6660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.408'.
[   91.452371][ T6683] netlink: 'syz.0.420': attribute type 15 has an invalid length.
[   91.461526][ T6683] netlink: 666 bytes leftover after parsing attributes in process `syz.0.420'.
[   91.758693][ T6703] netlink: 'syz.0.429': attribute type 1 has an invalid length.
[   91.807564][ T6707] netlink: 'syz.2.431': attribute type 1 has an invalid length.
[   91.843880][ T6707] bond2: entered promiscuous mode
[   91.847745][ T6707] 8021q: adding VLAN 0 to HW filter on device bond2
[   91.910800][ T6707] ipvlan2: entered allmulticast mode
[   91.916502][ T6707] bond2: entered allmulticast mode
[   91.931755][ T6707] bond2: (slave bridge1): making interface the new active one
[   91.934447][ T6707] bridge1: entered promiscuous mode
[   91.936218][ T6707] bridge1: entered allmulticast mode
[   91.938767][ T6707] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   92.170756][ T6727] syzkaller0: entered promiscuous mode
[   92.183586][ T6727] syzkaller0: entered allmulticast mode
[   92.575146][ T6755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'.
[   92.773985][ T6771] netlink: 211856 bytes leftover after parsing attributes in process `syz.0.461'.
[   92.828396][ T6776] netlink: 76 bytes leftover after parsing attributes in process `syz.0.463'.
[   92.877957][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'.
[   92.882718][ T6778] netlink: 'syz.2.464': attribute type 14 has an invalid length.
[   92.943707][ T6784] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   93.216744][ T6803] Bluetooth: MGMT ver 1.23
[   94.009214][ T6843] xfrm1: entered allmulticast mode
[   96.346068][ T6815] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   96.533470][ T6877] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[   96.697910][ T6886] sctp: [Deprecated]: syz.1.509 (pid 6886) Use of struct sctp_assoc_value in delayed_ack socket option.
[   96.697910][ T6886] Use struct sctp_sack_info instead
[   97.575242][ T6910] __nla_validate_parse: 4 callbacks suppressed
[   97.575262][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.520'.
[   97.815870][ T6924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.526'.
[   97.882436][ T6926] 8021q: adding VLAN 0 to HW filter on device bond1
[   97.888852][ T6926] vlan2: left allmulticast mode
[   97.890753][ T6926] macvtap0: left allmulticast mode
[   97.894491][ T6926] veth0_macvtap: left allmulticast mode
[   98.231007][ T6950] netlink: 'syz.0.535': attribute type 12 has an invalid length.
[   98.235417][ T6950] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.535'.
[   98.350052][ T6953] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   98.355618][ T6953] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   99.293974][ T7003] bond3: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms
[   99.301292][ T7003] bond3: entered promiscuous mode
[   99.357284][ T7008] bond2: option xmit_hash_policy: invalid value (10)
[   99.389219][ T7008] bond2 (unregistering): Released all slaves
[   99.503559][ T7019] syzkaller1: entered promiscuous mode
[   99.506540][ T7019] syzkaller1: entered allmulticast mode
[   99.532152][ T7023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.550612][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'.
[   99.557141][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.567'.
[   99.608145][ T7023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.629799][ T7022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.134364][ T7068] netlink: 56 bytes leftover after parsing attributes in process `syz.0.588'.
[  100.139202][ T7068] netlink: 19 bytes leftover after parsing attributes in process `syz.0.588'.
[  100.146292][ T7068] netlink: 19 bytes leftover after parsing attributes in process `syz.0.588'.
[  100.420889][ T7090] netlink: 'syz.1.596': attribute type 1 has an invalid length.
[  100.991173][ T7133] tipc: Invalid UDP bearer configuration
[  100.991215][ T7133] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  101.151579][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'.
[  101.160890][ T7150] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  101.174483][ T7151] netlink: 256 bytes leftover after parsing attributes in process `syz.2.625'.
[  101.536462][ T7177] syzkaller0: entered promiscuous mode
[  101.538790][ T7177] syzkaller0: entered allmulticast mode
[  101.660962][ T7185] xt_l2tp: v2 doesn't support IP mode
[  102.098811][ T7200] syzkaller0: entered promiscuous mode
[  102.102793][ T7200] syzkaller0: entered allmulticast mode
[  104.030483][ T7182] Set syz1 is full, maxelem 65536 reached
[  104.506279][ T7224] geneve2: entered allmulticast mode
[  104.708416][ T7236] netlink: 'syz.0.659': attribute type 1 has an invalid length.
[  104.711464][ T7236] netlink: 'syz.0.659': attribute type 4 has an invalid length.
[  104.715282][ T7236] __nla_validate_parse: 1 callbacks suppressed
[  104.715296][ T7236] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.659'.
[  104.723897][ T7236] netlink: 'syz.0.659': attribute type 1 has an invalid length.
[  104.728178][ T7236] netlink: 'syz.0.659': attribute type 4 has an invalid length.
[  104.734148][ T7236] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.659'.
[  104.748759][ T7241] netlink: 'syz.1.661': attribute type 2 has an invalid length.
[  104.896448][ T7245] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.899401][ T7245] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.959686][ T7253] netlink: 'syz.2.665': attribute type 6 has an invalid length.
[  104.962937][ T7253] netlink: 'syz.2.665': attribute type 23 has an invalid length.
[  104.965824][ T7253] IPv6: NLM_F_CREATE should be specified when creating new route
[  105.088435][ T7245] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.119250][ T7245] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.266448][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.275893][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.280801][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.286643][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.398959][ T7278] netlink: 'syz.0.672': attribute type 66 has an invalid length.
[  105.763437][ T7301] netlink: zone id is out of range
[  105.765534][ T7301] netlink: zone id is out of range
[  105.767572][ T7301] netlink: zone id is out of range
[  105.769716][ T7301] netlink: zone id is out of range
[  105.771849][ T7301] netlink: zone id is out of range
[  105.777643][ T7301] netlink: zone id is out of range
[  105.785374][ T7301] netlink: zone id is out of range
[  105.788790][ T7301] netlink: zone id is out of range
[  106.003627][   T34] audit: type=1804 audit(1778380137.219:2): pid=7314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.686" name="/newroot/235/cgroup.controllers" dev="tmpfs" ino=1198 res=1 errno=0
[  106.019501][   T34] audit: type=1800 audit(1778380137.219:3): pid=7314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.686" name="cgroup.controllers" dev="tmpfs" ino=1198 res=0 errno=0
[  106.047394][ T7318] Cannot find del_set index 2 as target
[  106.136272][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'.
[  106.141912][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.692'.
[  106.276491][ T7328] syzkaller0: entered promiscuous mode
[  106.282531][ T7328] syzkaller0: entered allmulticast mode
[  106.310177][ T7332] netlink: 'syz.1.694': attribute type 32 has an invalid length.
[  106.314428][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'.
[  106.434001][ T7332] bond2: option coupled_control: invalid value (12)
[  106.462066][ T7332] bond2 (unregistering): Released all slaves
[  106.780786][ T7361] netlink: 96 bytes leftover after parsing attributes in process `syz.1.707'.
[  106.803126][   T54] Bluetooth: hci0: command tx timeout
[  106.825632][ T7363] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.708'.
[  106.927527][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'.
[  106.939255][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'.
[  106.945762][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.948357][ T7371] netlink: 'syz.2.712': attribute type 13 has an invalid length.
[  106.949510][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.010302][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.715'.
[  107.032425][ T5693] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.038327][ T5693] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.042098][ T5693] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.049950][ T5693] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.270674][ T7397] IPv6: NLM_F_CREATE should be specified when creating new route
[  107.634348][ T7415] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  107.826828][ T7443] x_tables: unsorted underflow at hook 2
[  107.906610][ T7447] 8021q: adding VLAN 0 to HW filter on device bond4
[  108.451294][ T7495] gretap0: entered promiscuous mode
[  109.074706][ T7536] syzkaller0: entered promiscuous mode
[  109.079061][ T7536] syzkaller0: entered allmulticast mode
[  109.584960][ T7574] net_ratelimit: 100 callbacks suppressed
[  109.584972][ T7574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.806630][ T7587] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  110.215790][ T7612] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  110.420595][ T7621] validate_nla: 6 callbacks suppressed
[  110.420611][ T7621] netlink: 'syz.2.824': attribute type 8 has an invalid length.
[  110.426860][ T7621] sch_fq: defrate 0 ignored.
[  111.164885][ T7659] netlink: 'syz.0.843': attribute type 2 has an invalid length.
[  111.241070][ T7663] __nla_validate_parse: 9 callbacks suppressed
[  111.241084][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'.
[  111.296076][ T7663] 8021q: adding VLAN 0 to HW filter on device bond2
[  111.361395][ T7672] netlink: 24 bytes leftover after parsing attributes in process `syz.1.849'.
[  111.528064][ T7682] netlink: 104 bytes leftover after parsing attributes in process `syz.1.854'.
[  111.924136][ T5642] Bluetooth: hci2: command 0x0405 tx timeout
[  112.123812][ T7717] xt_limit: Overflow, try lower: 268435456/134217728
[  112.321741][ T7727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.875'.
[  112.554455][ T7730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.876'.
[  112.560210][   T55] block nbd0: Wrong magic (0x0)
[  112.612437][ T7735] ip6tnl2: entered allmulticast mode
[  112.849859][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'.
[  112.855008][ T7749] veth1_to_batadv: entered allmulticast mode
[  112.942111][ T7760] netlink: 32 bytes leftover after parsing attributes in process `syz.0.889'.
[  113.489468][ T7788] x_tables: ip_tables: icmp match: only valid for protocol 1
[  114.751904][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'.
[  114.827547][ T7832] netlink: 10 bytes leftover after parsing attributes in process `syz.0.921'.
[  114.961791][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.927'.
[  115.174249][ T7873] syzkaller0: entered promiscuous mode
[  115.176035][ T7873] syzkaller0: entered allmulticast mode
[  115.547294][ T7908] ip6gre1: entered promiscuous mode
[  115.549002][ T7908] ip6gre1: entered allmulticast mode
[  115.557936][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  115.569478][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  115.583703][ T5714] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  116.053642][ T5714] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  116.183107][ T5714] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  116.436501][ T7971] __nla_validate_parse: 3 callbacks suppressed
[  116.436512][ T7971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.980'.
[  117.105038][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'.
[  117.193718][ T7996] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[  117.198225][ T7996] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  117.305118][ T8005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.335921][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1009'.
[  118.831392][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'.
[  119.442713][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  119.923736][ T8099] sctp: [Deprecated]: syz.2.1032 (pid 8099) Use of int in maxseg socket option.
[  119.923736][ T8099] Use struct sctp_assoc_value instead
[  119.939654][ T8101] netlink: 'syz.0.1031': attribute type 1 has an invalid length.
[  119.984230][ T8101] 8021q: adding VLAN 0 to HW filter on device bond5
[  120.026874][ T8097] bond5: (slave veth3): Enslaving as an active interface with an up link
[  120.146389][ T8097] netlink: 'syz.0.1031': attribute type 1 has an invalid length.
[  120.161922][ T8097] 8021q: adding VLAN 0 to HW filter on device batadv1
[  120.166040][ T8097] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  121.188936][ T8159] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  121.839810][ T8185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1068'.
[  122.223551][ T8211] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1080'.
[  122.457622][ T8216] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.467101][ T8216] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.684671][ T8224] geneve2: entered promiscuous mode
[  122.693359][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.701083][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.720667][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.731489][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.910977][ T8236] syzkaller0: entered promiscuous mode
[  122.920770][ T8236] syzkaller0: entered allmulticast mode
[  123.080849][ T8250] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1100'.
[  123.559086][ T8269] infiniband syz0: set down
[  123.563082][ T8269] infiniband syz0: added bridge_slave_1
[  123.580920][ T8269] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  123.585735][ T8269] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  123.595341][ T8269] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  123.623808][ T8269] RDS/IB: syz0: added
[  123.626417][ T8269] smc: adding ib device syz0 with port count 1
[  123.629497][ T8269] smc:    ib device syz0 port 1 has no pnetid
[  124.486171][ T8296] netlink: 'syz.1.1120': attribute type 1 has an invalid length.
[  124.531397][ T8298] netlink: 'syz.1.1121': attribute type 2 has an invalid length.
[  124.683682][ T8306] ip6tnl3: entered allmulticast mode
[  124.746219][ T8310] netlink: 'syz.1.1127': attribute type 49 has an invalid length.
[  124.912823][ T8319] netlink: 'syz.2.1130': attribute type 1 has an invalid length.
[  124.943303][ T8319] bond3: (slave geneve3): making interface the new active one
[  124.954283][ T8319] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  124.957097][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  124.964336][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  124.968251][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  124.971524][   T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  125.012227][ T8325] netlink: 'syz.2.1133': attribute type 1 has an invalid length.
[  125.012397][ T8326] netlink: 'syz.1.1134': attribute type 13 has an invalid length.
[  125.016654][ T8325] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1133'.
[  125.059531][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1134'.
[  125.063009][   T33] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  125.251089][ T8345] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  125.351471][ T8356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1148'.
[  125.467967][ T8364] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1152'.
[  125.477078][ T8364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'.
[  125.602898][ T5713] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  125.927785][ T8405] netlink: 'syz.1.1166': attribute type 4 has an invalid length.
[  126.101741][ T8421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1173'.
[  126.239725][ T8429] syzkaller0: entered promiscuous mode
[  126.246724][ T8429] syzkaller0: entered allmulticast mode
[  127.157058][ T8462] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1192'.
[  128.082764][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  128.642981][ T8385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  128.713253][ T8479] syzkaller0: entered promiscuous mode
[  128.715745][ T8479] syzkaller0: entered allmulticast mode
[  128.960617][ T8504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1211'.
[  128.967993][ T8504] nbd: illegal input index -1113835520
[  130.039277][ T8526] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1222'.
[  130.069691][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1224'.
[  130.075757][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1224'.
[  130.082743][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'.
[  130.100626][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1224'.
[  130.100881][ T5693] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  130.105125][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1224'.
[  130.110833][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'.
[  130.116612][ T5693] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  130.129570][ T5693] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  130.143049][ T5693] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  130.164166][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'.
[  130.641596][ T8585] ipvlan2: entered allmulticast mode
[  130.646302][ T8585] gretap0: entered allmulticast mode
[  130.842733][ T8593] bond4: entered promiscuous mode
[  133.302221][ T8725] syzkaller1: entered promiscuous mode
[  133.309492][ T8725] syzkaller1: entered allmulticast mode
[  133.606962][ T8737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.676753][ T8745] __nla_validate_parse: 4 callbacks suppressed
[  133.676769][ T8745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1316'.
[  133.741742][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1325'.
[  133.795162][ T8765] bridge0: port 3(erspan0) entered blocking state
[  133.800027][ T8765] bridge0: port 3(erspan0) entered disabled state
[  133.805673][ T8765] erspan0: entered allmulticast mode
[  133.808515][ T8765] erspan0: entered promiscuous mode
[  133.813681][ T8765] erspan0: left allmulticast mode
[  133.815521][ T8765] erspan0: left promiscuous mode
[  133.819504][ T8765] bridge0: port 3(erspan0) entered disabled state
[  133.827299][ T8765] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1327'.
[  133.830265][ T8765] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1327'.
[  133.875015][ T8771] dummy0: entered allmulticast mode
[  134.057132][ T8791] xt_CT: You must specify a L4 protocol and not use inversions on it
[  134.389086][ T8828] block nbd1: Unsupported socket: should be TCP or UNIX.
[  134.479328][ T8838] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.509813][ T8840] macsec0: entered allmulticast mode
[  134.511894][ T8840] veth1_macvtap: entered allmulticast mode
[  134.516619][ T8840] macsec0: left allmulticast mode
[  134.518655][ T8840] veth1_macvtap: left allmulticast mode
[  134.587248][ T5693] tipc: Subscription rejected, illegal request
[  134.607873][ T8851] tipc: Started in network mode
[  134.609539][ T8851] tipc: Node identity 3ebb5d217106, cluster identity 4711
[  134.611763][ T8851] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.639487][ T8851] syzkaller0: entered promiscuous mode
[  134.641579][ T8851] syzkaller0: entered allmulticast mode
[  134.644944][ T8851] tipc: Resetting bearer <eth:syzkaller0>
[  134.655764][ T8850] tipc: Resetting bearer <eth:syzkaller0>
[  135.568230][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1371'.
[  135.668934][ T8866] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1371'.
[  135.980253][ T8850] tipc: Disabling bearer <eth:syzkaller0>
[  135.986665][   T33] tipc: Node number set to 1337810209
[  136.323640][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1393'.
[  136.334016][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'.
[  136.338681][ T8912] netlink: 'syz.1.1393': attribute type 15 has an invalid length.
[  136.430692][ T8918] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.435386][ T8918] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.484993][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1397'.
[  136.559834][ T8918] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.677493][ T5693] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.683633][ T5693] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  136.688006][ T5693] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.695810][ T5693] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  136.699962][ T5693] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.707765][ T5693] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  136.711632][ T5693] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  136.717205][ T5693] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  136.780966][ T8929] syzkaller0: entered promiscuous mode
[  136.784393][ T8929] syzkaller0: entered allmulticast mode
[  136.842240][ T8934] netlink: 'syz.1.1402': attribute type 11 has an invalid length.
[  136.844948][ T8934] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.1402'.
[  137.066769][ T8949] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.121013][ T8951] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  137.125051][ T8951] bond6 (unregistering): Released all slaves
[  137.471213][ T8973] sctp: [Deprecated]: syz.0.1419 (pid 8973) Use of int in maxseg socket option.
[  137.471213][ T8973] Use struct sctp_assoc_value instead
[  137.537506][ T8977] syzkaller0: entered promiscuous mode
[  137.539905][ T8977] syzkaller0: entered allmulticast mode
[  137.637579][ T5642] Bluetooth: hci2: link tx timeout
[  137.640116][ T5642] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  138.246300][ T9018] sctp: [Deprecated]: syz.0.1439 (pid 9018) Use of int in max_burst socket option.
[  138.246300][ T9018] Use struct sctp_assoc_value instead
[  138.698322][ T9030] __nla_validate_parse: 6 callbacks suppressed
[  138.698334][ T9030] netlink: 456 bytes leftover after parsing attributes in process `syz.0.1444'.
[  138.908631][ T9036] x_tables: duplicate underflow at hook 4
[  138.978726][ T9042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1450'.
[  139.200073][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1459'.
[  139.207703][ T9060] gtp0: entered promiscuous mode
[  139.209498][ T9060] gtp0: entered allmulticast mode
[  139.293986][ T9068] netlink: 'syz.0.1463': attribute type 15 has an invalid length.
[  139.684845][ T5642] Bluetooth: hci2: command 0x0405 tx timeout
[  139.939935][ T8941] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  140.065952][ T9102] batadv_slave_0: Caught tx_queue_len zero misconfig
[  140.087950][ T9106] netlink: 'syz.0.1479': attribute type 4 has an invalid length.
[  140.652515][ T9140] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1488'.
[  140.684663][ T9142] netlink: 'syz.0.1489': attribute type 10 has an invalid length.
[  140.687437][ T9142] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1489'.
[  141.065287][ T9149] netlink: 'syz.2.1492': attribute type 10 has an invalid length.
[  141.069841][ T9149] bond0: (slave dummy0): Releasing backup interface
[  141.078938][ T9149] team0: Port device dummy0 added
[  141.144556][ T9154] netlink: 'syz.2.1492': attribute type 10 has an invalid length.
[  141.149346][ T9154] team0: Port device dummy0 removed
[  141.153751][ T9154] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  141.356547][ T9149] nbd1: detected capacity change from 0 to 63
[  141.371323][ T7731] block nbd1: Receive control failed (result -32)
[  141.372401][ T9154] syz.2.1492 (9154) used greatest stack depth: 20128 bytes left
[  141.374813][   T55] block nbd1: Receive control failed (result -32)
[  141.378114][ T6546] block nbd1: Send control failed (result -32)
[  141.388654][ T6546] block nbd1: Request send failed, requeueing
[  141.401339][   T99] block nbd1: Dead connection, failed to find a fallback
[  141.406515][   T99] block nbd1: shutting down sockets
[  141.409226][   T99] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.415176][   T99] Buffer I/O error on dev nbd1, logical block 0, async page read
[  141.421807][ T6546] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.429944][ T6546] Buffer I/O error on dev nbd1, logical block 1, async page read
[  141.437272][ T6546] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.443766][ T6546] Buffer I/O error on dev nbd1, logical block 2, async page read
[  141.448484][ T6546] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.456715][ T6546] Buffer I/O error on dev nbd1, logical block 3, async page read
[  141.464558][ T6546] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.470242][ T6546] Buffer I/O error on dev nbd1, logical block 0, async page read
[  141.478878][ T6546] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.484702][ T6546] Buffer I/O error on dev nbd1, logical block 1, async page read
[  141.490806][ T6546] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.497715][ T6546] Buffer I/O error on dev nbd1, logical block 2, async page read
[  141.502378][ T6546] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.508269][ T6546] Buffer I/O error on dev nbd1, logical block 3, async page read
[  141.513754][ T6546] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.520043][ T6546] Buffer I/O error on dev nbd1, logical block 0, async page read
[  141.531743][ T6546] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  141.539112][ T6546] Buffer I/O error on dev nbd1, logical block 1, async page read
[  141.558165][ T6546] ldm_validate_partition_table(): Disk read failed.
[  141.577365][ T6546] Dev nbd1: unable to read RDB block 0
[  141.591366][ T6546]  nbd1: unable to read partition table
[  141.634124][ T6546] ldm_validate_partition_table(): Disk read failed.
[  141.638694][ T6546] Dev nbd1: unable to read RDB block 0
[  141.651570][ T6546]  nbd1: unable to read partition table
[  141.770029][ T9173] netlink: 'syz.0.1499': attribute type 11 has an invalid length.
[  141.992251][ T9187] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1505'.
[  141.998621][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'.
[  142.491608][ T9212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1517'.
[  142.746591][ T9233] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1526'.
[  142.855533][ T9242] bond3: entered promiscuous mode
[  142.857833][ T9242] bond3: entered allmulticast mode
[  142.860207][ T9242] 8021q: adding VLAN 0 to HW filter on device bond3
[  143.051746][ T9255] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  143.056112][ T9255] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.278964][ T9274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1547'.
[  143.430580][ T9285] syzkaller0: entered promiscuous mode
[  143.432966][ T9285] syzkaller0: entered allmulticast mode
[  143.949668][ T9301] nbd: must specify a size in bytes for the device
[  143.952063][ T9301] block nbd0: NBD_DISCONNECT
[  143.956977][ T9301] block nbd0: Send disconnect failed -32
[  143.959572][ T9301] block nbd0: shutting down sockets
[  144.458724][ T9359] netlink: 'syz.1.1584': attribute type 13 has an invalid length.
[  144.462229][ T9359] gretap0: refused to change device tx_queue_len
[  144.468446][ T9359] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  144.590585][ T9370] __nla_validate_parse: 1 callbacks suppressed
[  144.590596][ T9370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1589'.
[  144.595765][ T9370] netlink: 'syz.1.1589': attribute type 7 has an invalid length.
[  144.598302][ T9370] netlink: 'syz.1.1589': attribute type 8 has an invalid length.
[  144.600785][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1589'.
[  144.732916][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  144.781853][ T9380] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1595'.
[  144.898238][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'.
[  144.917321][ T9388] bond0: entered promiscuous mode
[  144.921029][ T9388] bond_slave_0: entered promiscuous mode
[  144.924806][ T9388] bond_slave_1: entered promiscuous mode
[  144.929062][ T9388] batadv_slave_0: entered promiscuous mode
[  144.931644][ T9388] batadv_slave_0: left promiscuous mode
[  144.935033][ T9388] bond0: left promiscuous mode
[  144.936474][ T9388] bond_slave_0: left promiscuous mode
[  144.938344][ T9388] bond_slave_1: left promiscuous mode
[  145.081853][ T9404] tipc: Enabling <eth:lo> not permitted
[  145.083989][ T9404] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  145.232230][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1611'.
[  145.267137][ T9418] macvlan4: entered allmulticast mode
[  145.270280][ T9418] hsr0: entered allmulticast mode
[  145.271842][ T9418] hsr_slave_0: entered allmulticast mode
[  145.276851][ T9418] hsr_slave_1: entered allmulticast mode
[  145.338456][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'.
[  145.474024][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1623'.
[  145.554583][ T9449] netlink: 'syz.0.1626': attribute type 6 has an invalid length.
[  145.559484][ T9449] netlink: 'syz.0.1626': attribute type 7 has an invalid length.
[  145.561843][ T9449] netlink: 'syz.0.1626': attribute type 8 has an invalid length.
[  145.566286][ T9449] netlink: 'syz.0.1626': attribute type 15 has an invalid length.
[  145.617544][ T9455] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.623018][ T9455] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.646896][ T9458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1631'.
[  145.819840][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1635'.
[  145.928111][ T9479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1640'.
[  146.269278][ T9506] bond7: entered promiscuous mode
[  146.271778][ T9506] 8021q: adding VLAN 0 to HW filter on device bond7
[  146.279439][ T9506] bond7 (unregistering): Released all slaves
[  146.477950][ T9517] veth1_to_batadv: left allmulticast mode
[  146.483394][ T9517] bond3: left promiscuous mode
[  146.485062][ T9517] geneve2: left allmulticast mode
[  146.493984][ T9517] gtp0: left promiscuous mode
[  146.495546][ T9517] gtp0: left allmulticast mode
[  146.499542][ T9517] hsr0: left allmulticast mode
[  146.501513][ T9517] hsr_slave_0: left allmulticast mode
[  146.505348][ T9517] hsr_slave_1: left allmulticast mode
[  146.507597][ T9517] macvlan4: left allmulticast mode
[  146.510445][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.517529][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.525256][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.535718][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.751417][ T9533] netlink: 'syz.0.1662': attribute type 4 has an invalid length.
[  146.809207][ T9537] Bluetooth: MGMT ver 1.23
[  146.986848][ T9544] smc: net device hsr0 applied user defined pnetid SYZ2
[  147.107325][ T9553] tc action pedit 'at' offset 9 out of bounds
[  147.110729][ T9553] tc action pedit 'at' offset 9 out of bounds
[  147.112581][ T9553] tc action pedit 'at' offset 9 out of bounds
[  147.114379][ T9553] tc action pedit 'at' offset 9 out of bounds
[  147.116305][ T9553] tc action pedit 'at' offset 9 out of bounds
[  147.118070][ T9553] tc action pedit 'at' offset 9 out of bounds
[  147.120061][ T9553] tc action pedit 'at' offset 9 out of bounds
[  147.122010][ T9553] tc action pedit 'at' offset 9 out of bounds
[  147.123922][ T9553] tc action pedit 'at' offset 9 out of bounds
[  147.125827][ T9553] tc action pedit 'at' offset 9 out of bounds
[  147.127583][ T9553] TC_ACT_REPEAT abuse ?
[  147.203071][ T9562] tipc: Started in network mode
[  147.204685][ T9562] tipc: Node identity 0a9db73e144e, cluster identity 4711
[  147.207229][ T9562] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.210161][ T9562] syzkaller0: entered promiscuous mode
[  147.212067][ T9562] syzkaller0: entered allmulticast mode
[  147.216556][ T9562] netem: change failed
[  147.220733][ T9562] tipc: Resetting bearer <eth:syzkaller0>
[  147.226186][ T9561] tipc: Resetting bearer <eth:syzkaller0>
[  147.251791][ T9561] tipc: Disabling bearer <eth:syzkaller0>
[  147.369482][ T9578] IPv6: NLM_F_CREATE should be specified when creating new route
[  147.371491][ T9577] netlink: 'syz.0.1681': attribute type 1 has an invalid length.
[  147.372378][ T9578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  147.379149][ T9578] IPv6: NLM_F_CREATE should be set when creating new route
[  147.381239][ T9578] IPv6: NLM_F_CREATE should be set when creating new route
[  147.383338][ T9578] IPv6: NLM_F_CREATE should be set when creating new route
[  147.501872][ T9584] netlink: 'syz.0.1685': attribute type 61 has an invalid length.
[  147.540110][ T9586] vxcan2: entered allmulticast mode
[  147.606464][ T9592] syz_tun: entered allmulticast mode
[  147.614850][ T9592] ip6gre0: entered allmulticast mode
[  148.785146][ T9677] bond0: option resend_igmp: invalid value (41663)
[  148.787289][ T9677] bond0: option resend_igmp: allowed values 0 - 255
[  149.109407][ T9702] syzkaller0: entered promiscuous mode
[  149.111317][ T9702] syzkaller0: entered allmulticast mode
[  149.604028][   T10] hid-generic 0005:15C2:0A11.0001: item fetching failed at offset 0/1
[  149.620472][   T10] hid-generic 0005:15C2:0A11.0001: probe with driver hid-generic failed with error -22
[  149.820557][ T9755] __nla_validate_parse: 12 callbacks suppressed
[  149.820569][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'.
[  149.844223][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1759'.
[  149.848440][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1759'.
[  149.901829][ T9762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1760'.
[  150.012335][ T9770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1764'.
[  150.058305][ T9773] validate_nla: 3 callbacks suppressed
[  150.058321][ T9773] netlink: 'syz.2.1765': attribute type 1 has an invalid length.
[  150.063369][ T9773] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1765'.
[  150.223374][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'.
[  150.542065][ T9793] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1775'.
[  150.700558][ T9801] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1779'.
[  150.777819][ T9807] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1782'.
[  150.847175][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.853326][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.863951][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.872629][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  150.910131][ T9813] sctp: [Deprecated]: syz.2.1785 (pid 9813) Use of struct sctp_assoc_value in delayed_ack socket option.
[  150.910131][ T9813] Use struct sctp_sack_info instead
[  150.989050][ T5617] IPVS: starting estimator thread 0...
[  151.001475][ T9815] IPVS: sh: FWM 3 0x00000003 - no destination available
[  151.091171][ T9833] netlink: 'syz.2.1794': attribute type 1 has an invalid length.
[  151.102809][ T9822] IPVS: using max 65 ests per chain, 156000 per kthread
[  151.392001][ T9863] netlink: 'syz.0.1808': attribute type 1 has an invalid length.
[  151.454857][ T9869] netlink: 'syz.2.1810': attribute type 28 has an invalid length.
[  151.932236][ T9909] ip6tnl0: Caught tx_queue_len zero misconfig
[  152.183659][ T9931] sock: sock_set_timeout: `syz.2.1838' (pid 9931) tries to set negative timeout
[  152.272064][ T9938] vlan2: entered allmulticast mode
[  152.307339][ T9942] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  152.935628][ T9988] syzkaller0: entered promiscuous mode
[  152.939490][ T9988] syzkaller0: entered allmulticast mode
[  153.155934][T10000] openvswitch: netlink: Flow key attribute not present in set flow.
[  153.287701][T10019] netlink: 'syz.1.1878': attribute type 1 has an invalid length.
[  156.223705][T10022] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  156.523533][T10070] netlink: 'syz.1.1900': attribute type 10 has an invalid length.
[  156.525926][T10070] __nla_validate_parse: 190 callbacks suppressed
[  156.525934][T10070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1900'.
[  156.731304][T10087] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1907'.
[  156.858583][T10095] syzkaller0: entered promiscuous mode
[  156.861566][T10095] syzkaller0: entered allmulticast mode
[  157.097564][T10113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.217143][T10121] trusted_key: syz.1.1924 sent an empty control message without MSG_MORE.
[  157.317224][T10130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1928'.
[  157.674282][T10161] netlink: 'syz.2.1943': attribute type 1 has an invalid length.
[  157.754073][T10171] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1947'.
[  157.765114][T10171] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1947'.
[  157.780154][T10175] xt_TPROXY: Can be used only with -p tcp or -p udp
[  157.834880][T10183] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1952'.
[  157.856591][T10185] syzkaller1: entered promiscuous mode
[  157.858743][T10185] syzkaller1: entered allmulticast mode
[  157.876068][T10187] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1955'.
[  157.968545][T10197] openvswitch: netlink: Flow key attr not present in new flow.
[  158.058465][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1962'.
[  158.120533][T10204] netlink: 'syz.2.1963': attribute type 8 has an invalid length.
[  158.335435][T10229] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1973'.
[  158.368833][T10229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1973'.
[  160.105582][T10262] veth0_macvtap: entered allmulticast mode
[  160.107400][T10262] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  160.200497][T10268] erspan0: entered promiscuous mode
[  160.217647][T10268] ip6gre0: left allmulticast mode
[  160.229503][T10268] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.234137][T10268] 8021q: adding VLAN 0 to HW filter on device team0
[  160.290718][T10268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  160.294163][T10268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  160.300390][T10268] veth1_vlan: left promiscuous mode
[  160.303060][T10268] veth0_vlan: left promiscuous mode
[  160.305311][T10268] veth0_vlan: entered promiscuous mode
[  160.309508][T10268] veth1_vlan: entered promiscuous mode
[  160.315099][T10268] veth1_macvtap: left promiscuous mode
[  160.317784][T10268] veth0_macvtap: left promiscuous mode
[  160.319621][T10268] veth0_macvtap: left allmulticast mode
[  160.322165][T10268] veth1_macvtap: entered promiscuous mode
[  160.329949][T10268] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  160.333434][T10268] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  160.336514][T10268] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  160.339525][T10268] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  160.347020][T10268] 8021q: adding VLAN 0 to HW filter on device bond1
[  160.350021][T10268] 8021q: adding VLAN 0 to HW filter on device bond2
[  160.370689][T10268] 8021q: adding VLAN 0 to HW filter on device bond3
[  160.388289][T10268] 8021q: adding VLAN 0 to HW filter on device bond4
[  160.410439][T10268] 8021q: adding VLAN 0 to HW filter on device bond5
[  160.414989][T10268] 8021q: adding VLAN 0 to HW filter on device batadv1
[  160.423980][T10268] veth0_to_team: entered promiscuous mode
[  160.427487][T10268] 8021q: adding VLAN 0 to HW filter on device bond6
[  160.431906][T10268] gretap0: entered promiscuous mode
[  160.438545][ T5714] hsr0: entered promiscuous mode
[  160.443430][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.446027][   T84] bridge0: port 1(bridge_slave_0) entered listening state
[  160.453651][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.455823][   T84] bridge0: port 2(bridge_slave_1) entered listening state
[  160.487848][   T24] syz0: Port: 1 Link ACTIVE
[  160.490486][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  160.495685][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.498955][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  160.502831][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.520243][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  160.525930][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.529318][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  160.534351][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.554253][T10270] ipt_rpfilter: unknown options
[  160.765982][T10278] netlink: 'syz.0.1992': attribute type 3 has an invalid length.
[  161.539081][T10237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  161.642271][T10283] __nla_validate_parse: 1 callbacks suppressed
[  161.642286][T10283] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1994'.
[  161.687092][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1997'.
[  161.690539][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1996'.
[  161.730020][T10289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1996'.
[  161.748229][T10288] bond5: entered promiscuous mode
[  161.752029][T10288] bond5: entered allmulticast mode
[  161.865306][T10301] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.028759][T10309] netlink: 'syz.2.2005': attribute type 30 has an invalid length.
[  162.137022][T10312] bond7: option lacp_active: invalid value (8)
[  162.150904][T10312] bond7 (unregistering): Released all slaves
[  162.451492][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2010'.
[  162.463903][T10326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2010'.
[  162.760862][T10345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.776220][T10346] : renamed from wg2
[  162.951133][T10364] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2028'.
[  163.056449][T10374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2032'.
[  163.171553][T10384] syzkaller1: entered promiscuous mode
[  163.176359][T10384] syzkaller1: entered allmulticast mode
[  163.727131][T10436] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2062'.
[  164.353972][T10467] xt_HMARK: spi-set and port-set can't be combined
[  164.557835][T10475] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2079'.
[  164.593810][T10483] veth1_macvtap: left promiscuous mode
[  164.793124][T10500] tcf_pedit_act: 22 callbacks suppressed
[  164.793135][T10500] tc action pedit 'at' offset 9 out of bounds
[  164.876358][ T5356] veth1_macvtap: entered promiscuous mode
[  164.977430][T10517] netlink: 'syz.0.2094': attribute type 1 has an invalid length.
[  164.986258][T10517] netlink: 'syz.0.2094': attribute type 1 has an invalid length.
[  167.235492][T10605] __nla_validate_parse: 3 callbacks suppressed
[  167.235503][T10605] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2119'.
[  167.449588][T10618] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  167.743781][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2127'.
[  167.813283][T10641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2128'.
[  168.080888][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2128'.
[  168.390222][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2140'.
[  168.396089][T10679] SET target dimension over the limit!
[  168.869384][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2153'.
[  169.129674][T10713] netlink: 488 bytes leftover after parsing attributes in process `syz.1.2157'.
[  169.142810][T10713] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.2157'.
[  169.171394][T10715] netlink: 'syz.1.2158': attribute type 1 has an invalid length.
[  169.192701][T10715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2158'.
[  169.199128][T10715] 8021q: adding VLAN 0 to HW filter on device bond4
[  169.221423][T10715] 8021q: adding VLAN 0 to HW filter on device bond4
[  169.233403][T10715] bond4: (slave geneve2): making interface the new active one
[  169.237194][T10715] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  169.240831][ T5746] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  169.245196][ T5746] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  169.257778][ T5746] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  169.262735][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  169.313746][T10718] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2159'.
[  170.049517][T10775] syzkaller0: entered promiscuous mode
[  170.051300][T10775] syzkaller0: entered allmulticast mode
[  172.369681][T10811] dvmrp0: entered allmulticast mode
[  172.608422][T10832] xt_CT: You must specify a L4 protocol and not use inversions on it
[  173.036762][T10855] __nla_validate_parse: 4 callbacks suppressed
[  173.036773][T10855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2221'.
[  173.181030][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'.
[  173.189505][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'.
[  173.196914][T10867] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2226'.
[  173.200567][T10865] netlink: 304 bytes leftover after parsing attributes in process `syz.1.2225'.
[  173.309053][T10874] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2230'.
[  173.505559][T10891] netlink: 'syz.1.2238': attribute type 2 has an invalid length.
[  173.579226][T10900] syzkaller0: entered promiscuous mode
[  173.581004][T10900] syzkaller0: entered allmulticast mode
[  173.699266][T10908] netlink: 5000 bytes leftover after parsing attributes in process `syz.2.2246'.
[  173.706734][T10910] netlink: 'syz.1.2247': attribute type 4 has an invalid length.
[  173.717746][T10910] netlink: 'syz.1.2247': attribute type 4 has an invalid length.
[  175.093267][T10965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2268'.
[  175.187170][T10974] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2272'.
[  175.545182][T11002] xt_hashlimit: max too large, truncated to 1048576
[  175.558185][T11002] xt_hashlimit: overflow, try lower: 2/0
[  175.655428][T11011] xt_hashlimit: overflow, rate too high: 0
[  175.823857][T11027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2297'.
[  175.987877][T11043] netlink: 'syz.2.2301': attribute type 1 has an invalid length.
[  175.991658][T11043] netlink: 'syz.2.2301': attribute type 1 has an invalid length.
[  177.185250][T11077] netlink: Unknown conntrack attr (type=2304, max=9)
[  177.980736][T11138] xt_hashlimit: overflow, try lower: 18446744073709551615/32
[  178.041613][T11143] netlink: 'syz.1.2343': attribute type 1 has an invalid length.
[  178.082721][T11143] 8021q: adding VLAN 0 to HW filter on device bond5
[  178.109192][T11143] vlan2: entered allmulticast mode
[  178.110831][T11143] bond5: entered allmulticast mode
[  178.136161][T11143] bond5: (slave geneve3): making interface the new active one
[  178.143843][T11143] geneve3: entered allmulticast mode
[  178.153646][T11143] bond5: (slave geneve3): Enslaving as an active interface with an up link
[  178.156467][   T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  178.161810][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  178.167195][T11152] __nla_validate_parse: 1 callbacks suppressed
[  178.167204][T11152] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2344'.
[  178.177864][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  178.181533][T11143] syz.1.2343 (11143) used greatest stack depth: 19104 bytes left
[  178.186322][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  178.304413][T11158] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.2349'.
[  178.545054][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2359'.
[  178.581454][T11180] syzkaller0: entered promiscuous mode
[  178.584860][T11180] syzkaller0: entered allmulticast mode
[  178.624714][T11180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2359'.
[  178.629225][T11186] netlink: 'syz.0.2363': attribute type 4 has an invalid length.
[  178.636572][T11186] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2363'.
[  178.641026][T11186] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  178.776863][T11196] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2368'.
[  178.861922][T11206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2373'.
[  178.865477][T11206] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2373'.
[  178.928469][T11214] netlink: 'syz.2.2377': attribute type 7 has an invalid length.
[  179.340315][T11240] ip6gretap2: entered promiscuous mode
[  179.382327][T11234] nbd: socks must be embedded in a SOCK_ITEM attr
[  179.385601][T11234] block nbd0: shutting down sockets
[  179.511982][T11247] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.557562][T11251] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2394'.
[  179.879941][T11272] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2403'.
[  181.089371][T11322] erspan1: entered promiscuous mode
[  181.091326][T11322] erspan1: entered allmulticast mode
[  181.240542][   T56] block nbd0: Receive control failed (result -1)
[  182.017238][T11362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.606165][T11405] netlink: 'syz.2.2462': attribute type 49 has an invalid length.
[  182.702161][T11405] ip6gretap0: entered promiscuous mode
[  182.707979][T11405] ip6gretap0: entered allmulticast mode
[  182.867579][T11423] netlink: 'syz.2.2470': attribute type 11 has an invalid length.
[  183.559416][T11473] Set syz1 is full, maxelem 65536 reached
[  183.970669][T11492] netlink: 'syz.2.2497': attribute type 1 has an invalid length.
[  184.169516][T11503] __nla_validate_parse: 9 callbacks suppressed
[  184.169527][T11503] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2499'.
[  185.100103][T11522] netlink: 'syz.1.2508': attribute type 3 has an invalid length.
[  185.171848][T11523] gretap0: left promiscuous mode
[  185.908539][T11523] bridge0: left promiscuous mode
[  185.911197][T11523] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.917101][T11523] 8021q: adding VLAN 0 to HW filter on device team0
[  185.921829][T11523] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.004845][T11523] batman_adv: batadv0: Interface activated: batadv_slave_0
[  186.014848][T11523] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  186.018755][T11523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  186.027799][T11523] veth1_vlan: left promiscuous mode
[  186.031083][T11523] veth0_vlan: left promiscuous mode
[  186.033948][T11523] veth0_vlan: entered promiscuous mode
[  186.040229][T11523] veth1_vlan: entered promiscuous mode
[  186.046810][T11523] veth1_macvtap: left promiscuous mode
[  186.050303][T11523] veth0_macvtap: left promiscuous mode
[  186.053602][T11523] veth0_macvtap: entered promiscuous mode
[  186.057228][T11523] veth1_macvtap: entered promiscuous mode
[  186.067270][T11523] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  186.075991][T11523] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  186.080432][T11523] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  186.084864][T11523] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  186.090923][T11523] 8021q: adding VLAN 0 to HW filter on device bond1
[  186.096292][T11523] bond2: left promiscuous mode
[  186.098092][T11523] bridge1: left promiscuous mode
[  186.100914][T11523] 8021q: adding VLAN 0 to HW filter on device bond2
[  186.107100][T11523] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  186.121567][T11523] geneve2: left promiscuous mode
[  186.126575][T11523] 8021q: adding VLAN 0 to HW filter on device bond3
[  186.131620][T11523] bond4: left promiscuous mode
[  186.135316][T11523] 8021q: adding VLAN 0 to HW filter on device bond4
[  186.139762][T11523] bond5: left promiscuous mode
[  186.141881][T11523] 8021q: adding VLAN 0 to HW filter on device bond5
[  186.147161][T11523] 8021q: adding VLAN 0 to HW filter on device bond6
[  186.154984][T11528] : renamed from dummy0 (while UP)
[  186.157549][T11528] 
[  186.158503][T11528] ======================================================
[  186.161041][T11528] WARNING: possible circular locking dependency detected
[  186.163523][T11528] syzkaller #0 Not tainted
[  186.165285][T11528] ------------------------------------------------------
[  186.167980][T11528] syz.0.2510/11528 is trying to acquire lock:
[  186.170288][T11528] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  186.174132][T11528] 
[  186.174132][T11528] but task is already holding lock:
[  186.176894][T11528] ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830
[  186.180381][T11528] 
[  186.180381][T11528] which lock already depends on the new lock.
[  186.180381][T11528] 
[  186.184155][T11528] 
[  186.184155][T11528] the existing dependency chain (in reverse order) is:
[  186.187507][T11528] 
[  186.187507][T11528] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[  186.190071][T11528]        down_write+0x96/0x200
[  186.191482][T11528]        kernfs_add_one+0x41/0x5c0
[  186.192965][T11528]        kernfs_create_dir_ns+0xde/0x130
[  186.194599][T11528]        internal_create_group+0x425/0x1180
[  186.196313][T11528]        cpuhp_invoke_callback+0x445/0x860
[  186.198029][T11528]        cpuhp_issue_call+0x430/0x7a0
[  186.199618][T11528]        __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0
[  186.201510][T11528]        __cpuhp_setup_state+0x3f/0x60
[  186.203049][T11528]        do_one_initcall+0x250/0x870
[  186.204583][T11528]        do_initcall_level+0x104/0x190
[  186.206158][T11528]        do_initcalls+0x59/0xa0
[  186.207567][T11528]        kernel_init_freeable+0x2a6/0x3e0
[  186.209218][T11528]        kernel_init+0x1d/0x1d0
[  186.210627][T11528]        ret_from_fork+0x514/0xb70
[  186.212103][T11528]        ret_from_fork_asm+0x1a/0x30
[  186.214092][T11528] 
[  186.214092][T11528] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[  186.217069][T11528] 
[  186.217069][T11528] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  186.219713][T11528]        cpus_read_lock+0x42/0x160
[  186.221212][T11528]        static_key_slow_inc+0x12/0x30
[  186.222846][T11528]        setup_udp_tunnel_sock+0x2fd/0x510
[  186.224799][T11528]        l2tp_tunnel_register+0xde2/0x1490
[  186.227007][T11528]        pppol2tp_connect+0x8b7/0x17c0
[  186.229072][T11528]        __sys_connect+0x312/0x450
[  186.231070][T11528]        __x64_sys_connect+0x7a/0x90
[  186.233005][T11528]        do_syscall_64+0x15f/0xf80
[  186.234826][T11528]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.237024][T11528] 
[  186.237024][T11528] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  186.239849][T11528]        lock_sock_nested+0x41/0x100
[  186.241494][T11528]        inet_shutdown+0x6a/0x390
[  186.242975][T11528]        nbd_mark_nsock_dead+0x2e9/0x560
[  186.244598][T11528]        recv_work+0x1c2e/0x1d40
[  186.246020][T11528]        process_scheduled_works+0xb5d/0x1860
[  186.247882][T11528]        worker_thread+0xa53/0xfc0
[  186.249452][T11528]        kthread+0x388/0x470
[  186.250809][T11528]        ret_from_fork+0x514/0xb70
[  186.252303][T11528]        ret_from_fork_asm+0x1a/0x30
[  186.253830][T11528] 
[  186.253830][T11528] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  186.256000][T11528]        __mutex_lock+0x1a3/0x1550
[  186.257511][T11528]        nbd_queue_rq+0x37b/0x1100
[  186.258991][T11528]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  186.260767][T11528]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  186.262747][T11528]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  186.264588][T11528]        blk_mq_run_hw_queue+0x348/0x4f0
[  186.266221][T11528]        blk_mq_dispatch_list+0xd16/0xe10
[  186.267868][T11528]        blk_mq_flush_plug_list+0x48d/0x570
[  186.269594][T11528]        __blk_flush_plug+0x3ed/0x4d0
[  186.271148][T11528]        __submit_bio+0x28d/0x580
[  186.272634][T11528]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  186.274445][T11528]        block_read_full_folio+0x599/0x830
[  186.276148][T11528]        filemap_read_folio+0x137/0x3b0
[  186.277789][T11528]        do_read_cache_folio+0x358/0x590
[  186.279428][T11528]        read_part_sector+0xb6/0x2b0
[  186.280950][T11528]        adfspart_check_ICS+0xb1/0x960
[  186.282512][T11528]        bdev_disk_changed+0x817/0x1770
[  186.284064][T11528]        blkdev_get_whole+0x380/0x510
[  186.285644][T11528]        bdev_open+0x31e/0xd30
[  186.287033][T11528]        blkdev_open+0x470/0x610
[  186.288470][T11528]        do_dentry_open+0x785/0x14e0
[  186.290002][T11528]        vfs_open+0x3b/0x340
[  186.291324][T11528]        path_openat+0x2e08/0x3860
[  186.292796][T11528]        do_file_open+0x23e/0x4a0
[  186.294239][T11528]        do_sys_openat2+0x113/0x200
[  186.295741][T11528]        __x64_sys_openat+0x138/0x170
[  186.297309][T11528]        do_syscall_64+0x15f/0xf80
[  186.298779][T11528]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.300592][T11528] 
[  186.300592][T11528] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  186.302645][T11528]        __mutex_lock+0x1a3/0x1550
[  186.304120][T11528]        nbd_queue_rq+0xc6/0x1100
[  186.305576][T11528]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  186.307305][T11528]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  186.309226][T11528]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  186.311078][T11528]        blk_mq_run_hw_queue+0x348/0x4f0
[  186.312681][T11528]        blk_mq_dispatch_list+0xd16/0xe10
[  186.314307][T11528]        blk_mq_flush_plug_list+0x48d/0x570
[  186.315983][T11528]        __blk_flush_plug+0x3ed/0x4d0
[  186.317591][T11528]        __submit_bio+0x28d/0x580
[  186.319075][T11528]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  186.320846][T11528]        block_read_full_folio+0x599/0x830
[  186.322531][T11528]        filemap_read_folio+0x137/0x3b0
[  186.324125][T11528]        do_read_cache_folio+0x358/0x590
[  186.325706][T11528]        read_part_sector+0xb6/0x2b0
[  186.327267][T11528]        adfspart_check_ICS+0xb1/0x960
[  186.328847][T11528]        bdev_disk_changed+0x817/0x1770
[  186.330425][T11528]        blkdev_get_whole+0x380/0x510
[  186.331955][T11528]        bdev_open+0x31e/0xd30
[  186.333337][T11528]        blkdev_open+0x470/0x610
[  186.334764][T11528]        do_dentry_open+0x785/0x14e0
[  186.336294][T11528]        vfs_open+0x3b/0x340
[  186.337655][T11528]        path_openat+0x2e08/0x3860
[  186.339196][T11528]        do_file_open+0x23e/0x4a0
[  186.340668][T11528]        do_sys_openat2+0x113/0x200
[  186.342187][T11528]        __x64_sys_openat+0x138/0x170
[  186.343736][T11528]        do_syscall_64+0x15f/0xf80
[  186.345208][T11528]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.346984][T11528] 
[  186.346984][T11528] -> #3 (set->srcu){.+.+}-{0:0}:
[  186.349005][T11528]        __synchronize_srcu+0xca/0x300
[  186.350552][T11528]        elevator_switch+0x1e8/0x7a0
[  186.352059][T11528]        elevator_change+0x2cc/0x450
[  186.353566][T11528]        elevator_set_default+0x36c/0x430
[  186.355209][T11528]        blk_register_queue+0x3e9/0x4e0
[  186.356853][T11528]        __add_disk+0x677/0xd50
[  186.358246][T11528]        add_disk_fwnode+0xfb/0x480
[  186.359715][T11528]        nbd_dev_add+0x72c/0xb50
[  186.361126][T11528]        nbd_init+0x168/0x1f0
[  186.362486][T11528]        do_one_initcall+0x250/0x870
[  186.363994][T11528]        do_initcall_level+0x104/0x190
[  186.365536][T11528]        do_initcalls+0x59/0xa0
[  186.366940][T11528]        kernel_init_freeable+0x2a6/0x3e0
[  186.368584][T11528]        kernel_init+0x1d/0x1d0
[  186.369970][T11528]        ret_from_fork+0x514/0xb70
[  186.371440][T11528]        ret_from_fork_asm+0x1a/0x30
[  186.372950][T11528] 
[  186.372950][T11528] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  186.375160][T11528]        __mutex_lock+0x1a3/0x1550
[  186.376646][T11528]        elevator_change+0x1b3/0x450
[  186.378163][T11528]        elevator_set_none+0xb5/0x140
[  186.379754][T11528]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  186.381594][T11528]        nbd_start_device+0x17f/0xb10
[  186.383138][T11528]        nbd_genl_connect+0x165b/0x1cf0
[  186.384771][T11528]        genl_family_rcv_msg_doit+0x22a/0x330
[  186.386543][T11528]        genl_rcv_msg+0x61c/0x7a0
[  186.388065][T11528]        netlink_rcv_skb+0x232/0x4b0
[  186.389851][T11528]        genl_rcv+0x28/0x40
[  186.391334][T11528]        netlink_unicast+0x75c/0x8e0
[  186.392906][T11528]        netlink_sendmsg+0x813/0xb40
[  186.394436][T11528]        ____sys_sendmsg+0x972/0x9f0
[  186.396255][T11528]        ___sys_sendmsg+0x2a5/0x360
[  186.398243][T11528]        __x64_sys_sendmsg+0x1bd/0x2a0
[  186.400290][T11528]        do_syscall_64+0x15f/0xf80
[  186.402232][T11528]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.404605][T11528] 
[  186.404605][T11528] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  186.407581][T11528]        blk_alloc_queue+0x546/0x680
[  186.409493][T11528]        __blk_mq_alloc_disk+0x197/0x390
[  186.411251][T11528]        nbd_dev_add+0x499/0xb50
[  186.412696][T11528]        nbd_init+0x168/0x1f0
[  186.414200][T11528]        do_one_initcall+0x250/0x870
[  186.416013][T11528]        do_initcall_level+0x104/0x190
[  186.417624][T11528]        do_initcalls+0x59/0xa0
[  186.419041][T11528]        kernel_init_freeable+0x2a6/0x3e0
[  186.420710][T11528]        kernel_init+0x1d/0x1d0
[  186.422114][T11528]        ret_from_fork+0x514/0xb70
[  186.423588][T11528]        ret_from_fork_asm+0x1a/0x30
[  186.425087][T11528] 
[  186.425087][T11528] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  186.427108][T11528]        __lock_acquire+0x15a5/0x2cf0
[  186.428680][T11528]        lock_acquire+0x106/0x350
[  186.430150][T11528]        fs_reclaim_acquire+0x71/0x100
[  186.431730][T11528]        __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  186.433667][T11528]        kstrdup+0x42/0x100
[  186.435013][T11528]        kernfs_rename_ns+0x476/0x830
[  186.436619][T11528]        sysfs_rename_link_ns+0x16e/0x1b0
[  186.438226][T11528]        device_rename+0x110/0x210
[  186.439689][T11528]        netif_change_name+0x28e/0x960
[  186.441311][T11528]        dev_change_name+0x125/0x260
[  186.442835][T11528]        dev_ioctl+0x5ec/0x1150
[  186.444273][T11528]        sock_do_ioctl+0x23e/0x320
[  186.445749][T11528]        sock_ioctl+0x5c6/0x7f0
[  186.447154][T11528]        __se_sys_ioctl+0xfc/0x170
[  186.448906][T11528]        do_syscall_64+0x15f/0xf80
[  186.450448][T11528]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.452289][T11528] 
[  186.452289][T11528] other info that might help us debug this:
[  186.452289][T11528] 
[  186.455142][T11528] Chain exists of:
[  186.455142][T11528]   fs_reclaim --> cpuhp_state_mutex --> &root->kernfs_rwsem
[  186.455142][T11528] 
[  186.459114][T11528]  Possible unsafe locking scenario:
[  186.459114][T11528] 
[  186.461283][T11528]        CPU0                    CPU1
[  186.462838][T11528]        ----                    ----
[  186.464413][T11528]   lock(&root->kernfs_rwsem);
[  186.465782][T11528]                                lock(cpuhp_state_mutex);
[  186.467764][T11528]                                lock(&root->kernfs_rwsem);
[  186.469870][T11528]   lock(fs_reclaim);
[  186.471036][T11528] 
[  186.471036][T11528]  *** DEADLOCK ***
[  186.471036][T11528] 
[  186.473394][T11528] 3 locks held by syz.0.2510/11528:
[  186.474870][T11528]  #0: ffffffff8fdcf900 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x5dc/0x1150
[  186.477268][T11528]  #1: ffff888175ed0dc8 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_change_name+0x10f/0x260
[  186.480268][T11528]  #2: ffff8881012b4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830
[  186.483036][T11528] 
[  186.483036][T11528] stack backtrace:
[  186.484778][T11528] CPU: 1 UID: 0 PID: 11528 Comm: syz.0.2510 Not tainted syzkaller #0 PREEMPT(full) 
[  186.484789][T11528] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  186.484796][T11528] Call Trace:
[  186.484801][T11528]  <TASK>
[  186.484806][T11528]  dump_stack_lvl+0xe8/0x150
[  186.484818][T11528]  print_circular_bug+0x2e1/0x300
[  186.484831][T11528]  check_noncircular+0x12e/0x150
[  186.484842][T11528]  __lock_acquire+0x15a5/0x2cf0
[  186.484851][T11528]  ? __lock_acquire+0x6b5/0x2cf0
[  186.484860][T11528]  ? __lock_acquire+0x6b5/0x2cf0
[  186.484870][T11528]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  186.484881][T11528]  lock_acquire+0x106/0x350
[  186.484889][T11528]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  186.484900][T11528]  ? kernfs_root+0x1c/0x230
[  186.484910][T11528]  fs_reclaim_acquire+0x71/0x100
[  186.484921][T11528]  ? __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  186.484931][T11528]  __kmalloc_node_track_caller_noprof+0x9d/0x7b0
[  186.484942][T11528]  ? kernfs_rename_ns+0x476/0x830
[  186.484953][T11528]  kstrdup+0x42/0x100
[  186.484961][T11528]  kernfs_rename_ns+0x476/0x830
[  186.484973][T11528]  sysfs_rename_link_ns+0x16e/0x1b0
[  186.484983][T11528]  device_rename+0x110/0x210
[  186.484993][T11528]  netif_change_name+0x28e/0x960
[  186.485002][T11528]  ? dev_change_name+0x125/0x260
[  186.485011][T11528]  ? __pfx___mutex_lock+0x10/0x10
[  186.485024][T11528]  ? __pfx_netif_change_name+0x10/0x10
[  186.485032][T11528]  ? full_name_hash+0x92/0xe0
[  186.485041][T11528]  ? __dev_get_by_name+0xe5/0x140
[  186.485048][T11528]  dev_change_name+0x125/0x260
[  186.485058][T11528]  dev_ioctl+0x5ec/0x1150
[  186.485068][T11528]  sock_do_ioctl+0x23e/0x320
[  186.485076][T11528]  ? __pfx_sock_do_ioctl+0x10/0x10
[  186.485083][T11528]  ? do_futex+0x333/0x420
[  186.485094][T11528]  sock_ioctl+0x5c6/0x7f0
[  186.485102][T11528]  ? __pfx_sock_ioctl+0x10/0x10
[  186.485109][T11528]  ? __fget_files+0x2a/0x420
[  186.485118][T11528]  ? __fget_files+0x3a0/0x420
[  186.485128][T11528]  ? __fget_files+0x2a/0x420
[  186.485137][T11528]  ? bpf_lsm_file_ioctl+0x9/0x20
[  186.485150][T11528]  ? __pfx_sock_ioctl+0x10/0x10
[  186.485157][T11528]  __se_sys_ioctl+0xfc/0x170
[  186.485193][T11528]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.485202][T11528]  do_syscall_64+0x15f/0xf80
[  186.485214][T11528]  ? trace_irq_disable+0x3b/0x140
[  186.485228][T11528]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.485237][T11528] RIP: 0033:0x7f921a59cdd9
[  186.485247][T11528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.485254][T11528] RSP: 002b:00007f921b43c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  186.485263][T11528] RAX: ffffffffffffffda RBX: 00007f921a815fa0 RCX: 00007f921a59cdd9
[  186.485268][T11528] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000003
[  186.485274][T11528] RBP: 00007f921a632d69 R08: 0000000000000000 R09: 0000000000000000
[  186.485279][T11528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  186.485284][T11528] R13: 00007f921a816038 R14: 00007f921a815fa0 R15: 00007fffdb07af18
[  186.485293][T11528]  </TASK>
[  186.595894][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.598049][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.600937][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.603113][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.617065][   T33] bridge0: entered promiscuous mode
[  186.619336][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  186.621948][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  186.624631][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  186.627218][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  186.629753][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  186.632268][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  186.644632][ T5746] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  186.648038][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  186.651199][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  186.653869][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  186.656491][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  186.659212][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.661762][   T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  190.322626][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  190.802841][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  190.804973][    C1] bridge0: port 1(bridge_slave_0) entered learning state
