last executing test programs:

1m19.385779465s ago: executing program 0 (id=6234):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f00000000c0)=0xc)

1m19.336201823s ago: executing program 0 (id=6236):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040))
r2 = socket$kcm(0x23, 0x7, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x18000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4)
syz_emit_ethernet(0x3ae, &(0x7f00000003c0)=ANY=[], 0x0)
r4 = socket$kcm(0x29, 0x6, 0x0)
sendmmsg$inet(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200), 0x1}}], 0x4000000000000a9, 0xc040)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = gettid()
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESOCT=r5, @ANYBLOB="001400df1280090080080013", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x11, &(0x7f0000000ac0)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYBLOB="000000f2ffffff00b70500000800000085000000a7000000950000000000000089ed4eb83b33e681b85fc9f0338065531aaa9f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xffffff84)
mmap(&(0x7f0000843000/0x1000)=nil, 0x1000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040), 0xfffffffffffffeb2)
pipe(&(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
write(r10, &(0x7f00000015c0)="b93bc4f2b790", 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r9, 0x0, r11, 0x0, 0x8000000000025a5, 0x0)
r12 = socket$inet6(0xa, 0x2, 0x0)
close(r12)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000000c0)={0x6, 'vlan1\x00', {}, 0x5f})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)

1m19.234442859s ago: executing program 0 (id=6238):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="59007a8008006400", @ANYRES32, @ANYBLOB="741194005eec40f4e2ba2a00d5c86f6af8d238212a3fde4b46e23817e54664da29c4693e96ce4d05efb2822bc9902b7bf6ffffffffffffc1910a116d51211a00000010324008000800000018000000000800c300", @ANYRES32, @ANYBLOB='\x00\x00'], 0x130}], 0x1, 0x0, 0x0, 0x20000080}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004380)=ANY=[@ANYBLOB="04", @ANYRES16=r1, @ANYBLOB="0d022cbd7000fedbdf2501000000050006000600000008000400ffff000008000300060000000500060000000000"], 0x34}}, 0x4000) (async)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004380)=ANY=[@ANYBLOB="04", @ANYRES16=r1, @ANYBLOB="0d022cbd7000fedbdf2501000000050006000600000008000400ffff000008000300060000000500060000000000"], 0x34}}, 0x4000)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2000000000000021, 0x2, 0x10000000000002) (async)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) (async)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x389c, 0x7}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x389c, 0x7})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000209500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="810000000000fbdbdf25250000000e0001006e65746465767302006e657464657673696d300000f3815099764ca6a0c49667f48135a14c8876680c94269d358809a3768d23b58c59b3e54e66d5b13a97182d8e5333a0ca3e0b5387d0779c1fccca97a87fbf0bb8116eecbafc7ae782d945eb3ff6a7723a2c3fb1683d51bf"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r8, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
bind$llc(r8, &(0x7f0000000000)={0x1a, 0x312, 0x5, 0xd, 0x3, 0x9, @broadcast}, 0x10) (async)
bind$llc(r8, &(0x7f0000000000)={0x1a, 0x312, 0x5, 0xd, 0x3, 0x9, @broadcast}, 0x10)
sendmmsg(r8, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r8) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r8)
r9 = socket(0x11, 0x3, 0x0)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x6a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
connect$inet(r9, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ioctl$FICLONE(r6, 0x40049409, r4) (async)
ioctl$FICLONE(r6, 0x40049409, r4)

1m19.115346613s ago: executing program 2 (id=6240):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r3=>0x0})
bind$can_raw(r2, &(0x7f00000005c0), 0x10)
read(r2, &(0x7f00000007c0)=""/4085, 0xff5)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x4, 0x108, 0xc, 0x0, 0x1}, 0x50)
r5 = socket$kcm(0x29, 0x5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a)
sendfile(r5, r6, 0x0, 0xffffffff000)
ioctl$sock_bt_hci(r6, 0x400448e4, &(0x7f0000000280)="e2c04eeb0110825d00875b5715ba77ef020c")
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7, r4}, 0xc)
sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f00000003c0)={&(0x7f0000000500)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r9, &(0x7f00000000c0)="2ae0", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty}, 0x1c)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x20044054}, 0x0)

1m19.05606077s ago: executing program 1 (id=6241):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x20044054}, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0)
preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x58, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4d, 0x2, 0x0, 0x1, [@vti_common_policy, @IFLA_VTI_LOCAL={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}, @IFLA_VTI_REMOTE={0x8, 0x5, @loopback}, @IFLA_VTI_REMOTE={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @IFLA_LINK={0x8}]}, 0x58}}, 0x0)
read$rfkill(r1, &(0x7f0000000000), 0x8)

1m19.054975786s ago: executing program 1 (id=6242):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000880)={@link_local, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x2, 0x0, @opaque="fddc606e6597bced93fa56f4865efb45a2e3a231b7e0565cf59718074c479f86eb89c02913feb3360f30ab79286dbd80d65c736315f3154426ed17adc0f1754bebac9f4248a4df5ad7aee3c0368f8bcfdb7f824c4fec2454e7699dcf6ec0fe5ecbb2b25cf3746f5977f86d6e09768e64762226417b61c8679b6a02e027e66273b3ebb36533acbb9bbbcb836c179a6989849bcb1c0747218fac98bcf1579b0429e25a82"}}}}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010121}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000025bd7000fbdbdf257300000008000300", @ANYRES32=r3, @ANYBLOB="0800ef60c761000d0400000800ef00080000000500ee00da000000"], 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x44054}, 0x8000)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b03000000000000001c012bd14efb9f49fcdb26a04883ad5c8c82b8af00", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"a53bfb42d2000025ea0e7fd0caf7f100", "463fdbc2a586da6a3849be94e8dafe19"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=r0], 0x0, 0x2003}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)}, 0xc}], 0x1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000007000000030000000000000f050000000000000001000004a60100000400000001000000000000000100000000000012050000000400000000000012050000000600000000000010080000000061615f5f"], 0x0, 0x67, 0x0, 0x1}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000000dc0)={{0x4, 0x0, 0x4533, 0x5, 0x2}, 0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
preadv(r6, &(0x7f0000000300), 0x0, 0xe, 0x6)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0x90b}, 0x10)
sendmsg$kcm(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)

1m16.069065771s ago: executing program 1 (id=6243):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x724}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x198, 0x10, 0x1, 0x70bc2c, 0x8000000, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x3507, 0x2, 0x4, 0x0, 0x2c}, [@algo_crypt={0x59, 0x2, {{'cbc(twofish)\x00'}, 0x88, 'n\x00\v\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00'}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x198}}, 0x44050)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008000a"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0)
ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000240))
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1b9800}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r1, 0x25, 0x4}, 0x14)
syz_emit_ethernet(0xfcbb, &(0x7f0000000300)=ANY=[@ANYRES64], 0x0)

1m4.442088121s ago: executing program 0 (id=6244):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x579b0cf1930a90d0, 0x3, 0xc, 0x7, 0x68, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x80, 0x7}}) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x579b0cf1930a90d0, 0x3, 0xc, 0x7, 0x68, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x80, 0x7}})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x6, 0x3, 0x4, 0xfffe, 0x56ef, 0x2, 0x1]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x9, 0x4f, 0xff, 0x65dd, 0xfffd]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004081}, 0x40000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000) (async)
sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000e7472cbcbbb7b541000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c000280080001400000000908000240000000000800044000000000080003400000008108000540000000040900010073797a30000000000900020073797a32"], 0x98}}, 0x0)

59.163499267s ago: executing program 2 (id=6245):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @none, 0x3}, 0xe)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000600)={r0, r1, 0xb, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x7, 0x2, 0x1, 'syz0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, &(0x7f0000000180)=0xffffffba)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'veth0_macvtap\x00', 0x2000})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xffff, 0xb}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x60004001)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
socket(0x1e, 0x5, 0x0)

59.162005091s ago: executing program 1 (id=6246):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000001b80))
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911079000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={<r2=>r1})
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000003c0))
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
getsockopt$inet_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000001b80)) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911079000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={r1}) (async)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000003c0)) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) (async)

52.089977044s ago: executing program 0 (id=6247):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9ad1", 0x2}], 0x1}}], 0x2, 0x4000840)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x8, @loopback}, {0x1, @multicast}, 0x38, {0x2, 0xffff, @empty}})
shutdown(r0, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r3, 0x400448e4, &(0x7f00000009c0)={0x0, 0x0, "0db43f"})
setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETGEN(r5, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xc400563}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8004)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x17, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x48}}, 0xc000)

52.088534541s ago: executing program 2 (id=6248):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000003c0)={0x2, 0x1, {0x6, @usage, <r1=>0x0, 0x5, 0x54, 0x80000001, 0x71a82a15, 0xe, 0x82, @struct={0x8, 0xba}, 0x401, 0x0, [0x100000001, 0xa, 0x3, 0x3951, 0xd6, 0x8]}, {0x7ff, @usage=0xe25, 0x0, 0x0, 0x3, 0x3, 0x5, 0x100000000, 0x5, @struct={0x82ec, 0x7fffffff}, 0x6, 0xa, [0xfffffffffffffff8, 0x8, 0x8, 0x7, 0x7, 0x1070497c]}, {0x5, @struct={0xff, 0x5b30000}, 0x0, 0x7fff, 0x46a4462d, 0x7, 0x7fffffffffffffff, 0x7, 0x20, @struct={0x5, 0x6}, 0x0, 0x8, [0x38be, 0xf, 0x6, 0x3, 0x80000001, 0xfffffffffffffff7]}, {0x6, 0xa, 0x81}})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="d8000000180081064e81f782db4cb904021e0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efbca4158858e796834b25ae5a3048000a007a290457f01a7cee4090000001fb7913fd25a21ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f", 0xa2}, {&(0x7f0000000280)="c6e92830568379be24e7d2cfa14e3179fea6a9af4f780998ebb65a384d5eea865c38871cc1350c7e42fcf530054c203e2273e02faf8c31", 0x37}], 0x2}, 0x22040000)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000007c0)={{r0}, {@val={r1}, @actul_num={@val=0x2d, 0x0, 0x67}}})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x3a0, 0x208, 0x700001b, 0x148, 0x208, 0x148, 0x308, 0x206, 0x240, 0x308, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x47, 0x1, 0x151c8f99, 0x100, 0x1, 0x8}, {0x8}}}, @common=@inet=@ecn={{0x28}, {0x30, 0x0, 0x5, 0xa3}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xfffffff6, 0x8]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0xf800, 0x0, [0x30, 0x19, 0x29, 0x18, 0x1, 0x13, 0x4, 0x1c, 0x3f, 0xc, 0x2b, 0x12, 0x10, 0x14, 0x37, 0x30], 0x0, 0x7ff, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x1, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
unshare(0x20000400)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004001000ffff00002a00000001"], 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x1f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0xa, 0xe}, {0xffff, 0xffff}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0xc}, @TCA_GRED_LIMIT={0x8, 0x5, 0x3}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0x4, 0x1, 0x6}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xfffffffc}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0xe, 0x1, 0x1}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x51}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00'})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x38}}, 0x4000010)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c00000002030500200000000000000007000005080001000000002c08000440000000150800044000000000090002001e947ff65154775d0800054000000014080005400000000008000340000000030900020021390000000600000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x81)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3f, 0x3f, 0x3, [@datasec={0x5, 0x4, 0x0, 0xf, 0x3, [{0x4, 0x6ec, 0x1}, {0x5, 0x2, 0x4}, {0x5, 0x8, 0x7}, {0x3, 0x5d0, 0x5}], "ec13e3"}]}, {0x0, [0x2e]}}, &(0x7f0000000880)=""/110, 0x5b, 0x6e, 0x1, 0x95c8}, 0x28)

52.08815691s ago: executing program 1 (id=6249):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffb, @local, 0x4, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[{0x10, 0x29, 0x3}], 0x10}, 0x4004080)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000e7472cbcbbb7b541000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c000280080001400000000908000240000000000800044000000000080003400000008108000540000000040900010073797a30000000000900020073797a32"], 0x98}}, 0x0)

44.543038676s ago: executing program 0 (id=6250):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x4}, 0x8) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffffffffffe78, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x1}, {0x0, 0x2}]}]}}, 0x0, 0x36, 0xd, 0x1}, 0x28) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)={0x3c, r3, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x40}, 0x8000) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4c}, @void, @val={0xc, 0x99, {0x23, 0x38}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, &(0x7f00000000c0), &(0x7f0000000080)=0x14) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)

36.190077575s ago: executing program 1 (id=6251):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711005000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r2, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xd8, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x60, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x194}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)

36.185759945s ago: executing program 2 (id=6252):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x0)

23.076912347s ago: executing program 2 (id=6253):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1d0, 0x1170, 0x1398, 0x0, 0x1170, 0x310, 0x1398, 0x1398, 0x310, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [0x0, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x6, 0x40}, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [0xff, 0xff, 0xff], @ipv4=@loopback, [0xff000000, 0x0, 0x0, 0xffffff00], @ipv4=@broadcast, [0xff, 0xff000000, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0xff, 0xffffff00, 0xffffff00], 0x4, 0x101, 0x87, 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x410, 0x300}, 0x41}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x6, 0x1, 'syz0\x00', {0x816}}}}, {{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x2000)
r3 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$MRT(r3, 0x0, 0x1, 0xfffffffffffffffc, &(0x7f0000000040))
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BYTEORDER_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x55}, 0x0)

17.360617466s ago: executing program 32 (id=6250):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x4}, 0x8) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfffffffffffffe78, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1, 0x1}, {0x0, 0x2}]}]}}, 0x0, 0x36, 0xd, 0x1}, 0x28) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)={0x3c, r3, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x40}, 0x8000) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r7, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4c}, @void, @val={0xc, 0x99, {0x23, 0x38}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, &(0x7f00000000c0), &(0x7f0000000080)=0x14) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)

17.360508288s ago: executing program 33 (id=6251):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711005000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r2, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xd8, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x60, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x194}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)

12.688055966s ago: executing program 2 (id=6256):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x3, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040044)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket(0x400000000010, 0x3, 0x0)
r14 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

0s ago: executing program 34 (id=6256):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24)
sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x403, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x3, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4522f}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040044)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket(0x400000000010, 0x3, 0x0)
r14 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

kernel console output (not intermixed with test programs):

 mode
[  332.112309][T19813] syzkaller0: entered allmulticast mode
[  332.496108][T19850] block nbd1: server does not support multiple connections per device.
[  332.510912][T19850] block nbd1: shutting down sockets
[  332.951753][ T5666] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  332.963266][ T5666] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  332.971361][ T5666] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  332.977503][ T5666] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  333.174247][T19890] pim6reg1: entered promiscuous mode
[  333.176453][T19890] pim6reg1: entered allmulticast mode
[  333.179090][T19894] xt_addrtype: ipv6 does not support BROADCAST matching
[  333.303796][T19905] __nla_validate_parse: 81 callbacks suppressed
[  333.303809][T19905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4253'.
[  333.605942][T19934] netlink: 212916 bytes leftover after parsing attributes in process `syz.0.4261'.
[  333.688455][T19941] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  333.713881][T19941] tipc: Resetting bearer <eth:syzkaller0>
[  337.044518][T19970] netlink: 'syz.2.4273': attribute type 1 has an invalid length.
[  337.047913][T19970] netlink: 'syz.2.4273': attribute type 2 has an invalid length.
[  337.051470][T19970] netlink: 'syz.2.4273': attribute type 1 has an invalid length.
[  337.056932][T19970] netlink: 'syz.2.4273': attribute type 1 has an invalid length.
[  337.064501][T19970] netlink: 'syz.2.4273': attribute type 2 has an invalid length.
[  337.090924][T19971] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  337.249435][T19987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4277'.
[  337.257312][T19987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4277'.
[  337.273978][T19991] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4279'.
[  337.365105][T20012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4285'.
[  337.381546][T20012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.384603][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.390483][T20014] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4286'.
[  337.397075][T20014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4286'.
[  337.448105][T20019] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4288'.
[  337.471192][T20019] bond16: entered promiscuous mode
[  337.475083][T20019] 8021q: adding VLAN 0 to HW filter on device bond16
[  337.499456][T20019] openvswitch: netlink: Missing valid actions attribute.
[  337.505530][T20019] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.600525][T20033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4294'.
[  337.608836][T20039] netlink: 'syz.1.4296': attribute type 1 has an invalid length.
[  337.640171][T20039] 8021q: adding VLAN 0 to HW filter on device bond9
[  337.654600][T20039] macvlan1: entered promiscuous mode
[  337.656478][T20039] macvlan1: entered allmulticast mode
[  337.659337][T20039] bond9: entered allmulticast mode
[  337.661129][T20039] bond9: entered promiscuous mode
[  337.664844][T20039] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  337.670734][T20039] team0: Port device macvlan1 added
[  337.698426][T20039] bond9: (slave ip6gretap0): making interface the new active one
[  337.701343][T20039] ip6gretap0: entered promiscuous mode
[  337.706033][T20039] ip6gretap0: entered allmulticast mode
[  337.714370][T20039] bond9: (slave ip6gretap0): Enslaving as an active interface with an up link
[  338.035631][T20066] netlink: 'syz.2.4305': attribute type 13 has an invalid length.
[  338.051779][T20066] netlink: 'syz.2.4305': attribute type 17 has an invalid length.
[  338.891367][T20066] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.897292][T20066] 8021q: adding VLAN 0 to HW filter on device team0
[  338.908084][T20066] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.954944][T20066] veth1_vlan: left promiscuous mode
[  338.965264][T20066] veth1_vlan: entered promiscuous mode
[  338.969201][T20066] ipvlan0: left allmulticast mode
[  338.971088][T20066] veth0_vlan: left allmulticast mode
[  338.978061][T20066] veth0_macvtap: left promiscuous mode
[  338.988477][T20066] veth0_macvtap: entered promiscuous mode
[  339.003060][T20066] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  339.008616][T20073] __nla_validate_parse: 5 callbacks suppressed
[  339.008640][T20073] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4307'.
[  339.015641][T20073] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4307'.
[  339.050698][T20082] xt_CT: You must specify a L4 protocol and not use inversions on it
[  339.070356][ T5666] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  339.077807][ T5666] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  339.095116][ T5666] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  339.101384][ T5666] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  339.228062][T20101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4316'.
[  339.234178][T20101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4316'.
[  339.522379][T20118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4319'.
[  339.585861][T20122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4320'.
[  339.626504][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4322'.
[  339.710252][T20136] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  339.765484][T20139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4325'.
[  339.791045][T20139] bond17: entered promiscuous mode
[  339.794767][T20139] 8021q: adding VLAN 0 to HW filter on device bond17
[  339.819024][T20139] 8021q: adding VLAN 0 to HW filter on device bond17
[  339.823588][T20139] bond17: (slave sit1): The slave device specified does not support setting the MAC address
[  339.833842][T20139] bond17: (slave sit1): Error -95 calling set_mac_address
[  340.052292][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4327'.
[  340.142341][T20148] tipc: Resetting bearer <eth:syzkaller0>
[  340.147793][T20156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4331'.
[  340.201020][T20160] netlink: 'syz.1.4331': attribute type 1 has an invalid length.
[  340.331579][ T5506] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0
[  340.337461][ T5506] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0
[  340.340841][ T5506] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0
[  340.348752][ T5506] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0
[  340.753467][T20194] netlink: Unknown conntrack attr (type=2304, max=9)
[  341.131806][T20211] sctp: [Deprecated]: syz.2.4347 (pid 20211) Use of struct sctp_assoc_value in delayed_ack socket option.
[  341.131806][T20211] Use struct sctp_sack_info instead
[  341.313309][T20215] syzkaller0: entered promiscuous mode
[  341.315942][T20215] syzkaller0: entered allmulticast mode
[  342.095934][T20245] netlink: 'syz.1.4360': attribute type 8 has an invalid length.
[  343.832325][T20290] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  343.838048][T20290] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  343.841419][T20290] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  344.078368][T20318] __nla_validate_parse: 17 callbacks suppressed
[  344.078385][T20318] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4380'.
[  344.183275][T20319] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4380'.
[  344.342129][T20327] netlink: 324 bytes leftover after parsing attributes in process `syz.0.4382'.
[  344.759100][T20334] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  344.787086][T20334] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4385'.
[  344.798758][T20334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4385'.
[  345.275366][T20393] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4397'.
[  345.543954][T20414] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4402'.
[  345.656654][T20418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4404'.
[  345.776917][T20424] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.4407'.
[  345.783786][T20424] ip6tnl2: entered allmulticast mode
[  346.395193][T20441] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  346.640544][ T5506] tipc: Subscription rejected, illegal request
[  346.698573][T20458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4418'.
[  346.791687][T20461] netlink: 'syz.0.4419': attribute type 1 has an invalid length.
[  347.016484][T20474] macsec0: entered allmulticast mode
[  347.018551][T20474] veth1_macvtap: entered allmulticast mode
[  347.020939][T20474] macsec0: left allmulticast mode
[  347.024310][T20474] veth1_macvtap: left allmulticast mode
[  347.822497][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  347.828602][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  347.838252][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  347.843298][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  347.922334][T20553] netlink: 'syz.1.4447': attribute type 1 has an invalid length.
[  347.927993][T20553] netlink: 'syz.1.4447': attribute type 2 has an invalid length.
[  348.260817][T20595] netlink: 'syz.2.4457': attribute type 3 has an invalid length.
[  348.311094][T20595] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  348.374724][ T5620] Bluetooth: hci2: command 0x0405 tx timeout
[  348.574301][T20631] geneve5: entered promiscuous mode
[  348.576027][T20631] geneve5: entered allmulticast mode
[  348.580741][   T12] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  348.592715][   T12] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  348.597097][   T12] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  348.602553][   T12] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  348.868859][T20654] vlan3: entered promiscuous mode
[  348.871104][T20654] erspan0: entered promiscuous mode
[  349.005802][T20664] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  349.149632][T20668] __nla_validate_parse: 25 callbacks suppressed
[  349.149677][T20668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4477'.
[  349.155240][T20668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4477'.
[  352.380169][T20709] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  352.488113][T20726] macvlan1: left allmulticast mode
[  352.490688][T20726] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  352.495409][T20726] syzkaller0: left promiscuous mode
[  352.497731][T20726] syzkaller0: left allmulticast mode
[  352.501421][T20726] bridge3: left allmulticast mode
[  352.505372][T20726] ip6erspan0: left allmulticast mode
[  352.509514][T20726] gtp1: left allmulticast mode
[  352.512237][T20726] macsec1: left allmulticast mode
[  352.514367][T20726] bond10: left allmulticast mode
[  352.516691][T20726] hsr2: left promiscuous mode
[  352.518634][T20726] vlan2: left allmulticast mode
[  352.520217][T20726] bond0: left allmulticast mode
[  352.522106][T20726] gtp3: left promiscuous mode
[  352.524160][T20726] gtp3: left allmulticast mode
[  352.525919][T20726] gretap2: left allmulticast mode
[  352.527861][T20726] bond16: left promiscuous mode
[  352.532484][T20726] ip6tnl2: left allmulticast mode
[  352.536640][T20726] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4494'.
[  352.558008][T20724] netlink: 'syz.1.4493': attribute type 4 has an invalid length.
[  352.628649][T20734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4493'.
[  352.721951][T20740] dvmrp6: entered allmulticast mode
[  352.727112][T20740] x_tables: unsorted underflow at hook 2
[  352.740777][T20740] syz_tun: entered promiscuous mode
[  352.749406][T20740] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.753189][T20740] 8021q: adding VLAN 0 to HW filter on device team0
[  352.769354][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.774510][T14980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  352.793962][T20740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  352.797240][T20740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  352.800888][T20740] 8021q: adding VLAN 0 to HW filter on device hsr0
[  352.803719][T20740] tipc: Resetting bearer <eth:hsr0>
[  352.805611][T20740] tipc: Resetting bearer <eth:hsr0>
[  352.807488][T20740] tipc: Resetting bearer <eth:hsr0>
[  352.810943][T20740] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  352.947676][T20751] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  352.951104][T20750] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  352.952955][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  352.957841][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  352.961703][T20751] syzkaller0: entered promiscuous mode
[  352.965459][T20751] syzkaller0: entered allmulticast mode
[  352.969773][T20751] tipc: Resetting bearer <eth:syzkaller0>
[  353.212784][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  353.215464][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  353.372800][T20774] netlink: 39 bytes leftover after parsing attributes in process `syz.2.4508'.
[  353.391225][T20776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4509'.
[  353.404799][T20776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4509'.
[  353.410892][ T5506] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  353.417066][ T5506] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  353.419420][T20778] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4511'.
[  353.427749][ T5506] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  353.434950][ T5506] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  353.438194][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4510'.
[  353.446273][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4510'.
[  353.600428][T20798] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  353.657452][T20801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.742895][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  354.503708][T20805] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  354.625713][T20825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.778293][T20835] xt_hashlimit: overflow, rate too high: 0
[  355.186732][T20856] netlink: 'syz.1.4535': attribute type 2 has an invalid length.
[  355.222423][T20860] 8021q: VLANs not supported on vxcan1
[  355.284731][T20864] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  355.288046][T20864] syzkaller0: entered promiscuous mode
[  355.289848][T20864] syzkaller0: entered allmulticast mode
[  355.297566][T20864] tipc: Resetting bearer <eth:syzkaller0>
[  355.301738][T20863] tipc: Resetting bearer <eth:syzkaller0>
[  355.318651][T20863] tipc: Disabling bearer <eth:syzkaller0>
[  355.369337][T20869] bridge9: entered promiscuous mode
[  355.371650][T20869] bridge9: entered allmulticast mode
[  355.378003][T20869] team0: Port device bridge9 added
[  355.393938][T20869] team0: Port device bridge10 added
[  355.400899][T20869] bridge0: port 1(team0) entered blocking state
[  355.410727][T20869] bridge0: port 1(team0) entered disabled state
[  355.414255][T20869] team0: entered allmulticast mode
[  355.417161][T20869] dummy0: entered allmulticast mode
[  355.421995][T20869] bridge10: entered allmulticast mode
[  355.428967][T20869] team0: entered promiscuous mode
[  355.431411][T20869] dummy0: entered promiscuous mode
[  355.444728][T20869] bridge10: entered promiscuous mode
[  355.517126][T20879] netlink: 'syz.2.4545': attribute type 10 has an invalid length.
[  355.720721][T20893] __nla_validate_parse: 7 callbacks suppressed
[  355.720732][T20893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4549'.
[  355.818329][T20900] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4552'.
[  355.822022][T20900] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4552'.
[  355.872973][T20902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4553'.
[  355.879216][T20902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4553'.
[  356.152479][T20913] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4557'.
[  356.157777][T20914] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4557'.
[  356.608011][T20935] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.611641][T20935] syzkaller0: entered promiscuous mode
[  356.615718][T20935] syzkaller0: entered allmulticast mode
[  356.630469][T20935] tipc: Resetting bearer <eth:syzkaller0>
[  356.639680][T20934] tipc: Resetting bearer <eth:syzkaller0>
[  356.666736][T20934] tipc: Disabling bearer <eth:syzkaller0>
[  356.792164][T20948] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  356.816856][T20952] netlink: 'syz.2.4572': attribute type 9 has an invalid length.
[  356.819552][T20952] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.4572'.
[  356.825647][T20952] netlink: 'syz.2.4572': attribute type 9 has an invalid length.
[  356.828461][T20952] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.4572'.
[  356.835404][T20952] netlink: 'syz.2.4572': attribute type 9 has an invalid length.
[  356.838732][T20952] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.4572'.
[  356.844576][T20952] netlink: 'syz.2.4572': attribute type 9 has an invalid length.
[  356.848146][T20952] netlink: 'syz.2.4572': attribute type 9 has an invalid length.
[  356.851589][T20952] netlink: 'syz.2.4572': attribute type 9 has an invalid length.
[  356.854810][T20952] netlink: 'syz.2.4572': attribute type 9 has an invalid length.
[  356.857934][T20952] netlink: 'syz.2.4572': attribute type 9 has an invalid length.
[  356.864446][ T5612] Bluetooth: hci2: command 0x0405 tx timeout
[  357.896549][    C1] net_ratelimit: 41 callbacks suppressed
[  357.896600][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  357.900317][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  357.903428][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.213725][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.448315][T20965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  358.787563][T20993] openvswitch: netlink: Key type 156 is out of range max 32
[  358.814992][T20995] --map-set only usable from mangle table
[  358.932754][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  358.934881][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  359.039698][T21018] sock: sock_timestamping_bind_phc: sock not bind to device
[  359.588507][T21080] team1: entered promiscuous mode
[  359.590267][T21080] team1: entered allmulticast mode
[  359.592168][T21080] 8021q: adding VLAN 0 to HW filter on device team1
[  359.596823][T21080] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  359.610352][T21080] team2: entered promiscuous mode
[  359.612118][T21080] team2: entered allmulticast mode
[  359.614232][T21080] 8021q: adding VLAN 0 to HW filter on device team2
[  359.863311][T21104] bond14: entered promiscuous mode
[  359.865284][T21104] 8021q: adding VLAN 0 to HW filter on device bond14
[  359.883058][T21104] 8021q: adding VLAN 0 to HW filter on device bond14
[  359.889462][T21104] bond14: (slave vcan0): The slave device specified does not support setting the MAC address
[  359.893820][T21104] bond14: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  359.900470][T21104] bond14: (slave vcan0): making interface the new active one
[  359.903672][T21104] vcan0: entered promiscuous mode
[  359.906575][T21104] bond14: (slave vcan0): Enslaving as an active interface with an up link
[  359.915540][T21109] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  359.982835][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  359.985618][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  360.721932][T21141] validate_nla: 43 callbacks suppressed
[  360.721945][T21141] netlink: 'syz.2.4639': attribute type 1 has an invalid length.
[  360.819416][T21154] netlink: 'syz.2.4641': attribute type 1 has an invalid length.
[  360.822029][T21154] netlink: 'syz.2.4641': attribute type 2 has an invalid length.
[  360.885988][T21160] bond13: (slave bond0): Releasing backup interface
[  360.892539][T21158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.896502][T21158] syzkaller0: entered promiscuous mode
[  360.898781][T21158] syzkaller0: entered allmulticast mode
[  360.918211][T21160] team0: Mode "activeba" not found
[  360.924111][T21158] tipc: Resetting bearer <eth:syzkaller0>
[  360.927738][T21157] tipc: Resetting bearer <eth:syzkaller0>
[  360.954991][T21157] tipc: Disabling bearer <eth:syzkaller0>
[  360.965898][T21163] sctp: [Deprecated]: syz.0.4644 (pid 21163) Use of int in max_burst socket option.
[  360.965898][T21163] Use struct sctp_assoc_value instead
[  361.097346][T21171] __nla_validate_parse: 60 callbacks suppressed
[  361.097356][T21171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4648'.
[  361.139960][T21173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4649'.
[  361.372438][T21188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4655'.
[  361.624333][T21211] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4662'.
[  361.687820][T21214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4663'.
[  361.781850][T21221] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  361.997742][T21243] syzkaller1: entered promiscuous mode
[  362.002799][T21243] syzkaller1: entered allmulticast mode
[  362.038378][T21249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4675'.
[  362.044522][T21247] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.047537][T21247] syzkaller0: entered promiscuous mode
[  362.049777][T21247] syzkaller0: entered allmulticast mode
[  362.053189][ T5620] Bluetooth: hci2: command 0x0405 tx timeout
[  362.059227][T21247] tipc: Resetting bearer <eth:syzkaller0>
[  362.064028][T21246] tipc: Resetting bearer <eth:syzkaller0>
[  362.099402][T21246] tipc: Disabling bearer <eth:syzkaller0>
[  362.172736][T21251] syzkaller1: entered allmulticast mode
[  362.207102][T21257] ip6tnl0: entered promiscuous mode
[  362.257618][T21265] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  362.421140][T21287] dvmrp0: left allmulticast mode
[  362.425964][T21287] dvmrp6: left allmulticast mode
[  362.485519][T21298] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  362.488071][T21298] syzkaller0: entered promiscuous mode
[  362.490042][T21298] syzkaller0: entered allmulticast mode
[  362.497303][T21298] tipc: Resetting bearer <eth:syzkaller0>
[  362.501232][T21296] tipc: Resetting bearer <eth:syzkaller0>
[  362.531087][T21296] tipc: Disabling bearer <eth:syzkaller0>
[  362.689612][T21316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4696'.
[  362.740631][T21320] syzkaller0: refused to change device tx_queue_len
[  362.825062][T21333] netlink: 'syz.0.4702': attribute type 116 has an invalid length.
[  362.830969][T21333] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4702'.
[  362.885844][T21340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4705'.
[  362.889904][T21340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4705'.
[  363.102864][    C1] net_ratelimit: 7 callbacks suppressed
[  363.102880][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  363.106959][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  363.333573][ T8598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.336502][T14980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.142812][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  364.144960][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  364.189383][T21406] netlink: 'syz.2.4724': attribute type 1 has an invalid length.
[  364.192213][T21406] nbd: illegal input index 871591272
[  364.884099][T21460] netlink: 'syz.1.4740': attribute type 1 has an invalid length.
[  365.183898][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  365.186747][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  365.265401][T21484] netlink: 'syz.2.4750': attribute type 6 has an invalid length.
[  365.346067][T21491] veth0_virt_wifi: entered allmulticast mode
[  366.212693][T21507] netlink: 'syz.1.4757': attribute type 1 has an invalid length.
[  366.215633][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  366.218484][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  366.234264][T21507] bond10: entered promiscuous mode
[  366.236195][T21507] 8021q: adding VLAN 0 to HW filter on device bond10
[  366.270544][T21507] bond10: (slave bridge10): making interface the new active one
[  366.274898][T21507] bridge10: entered promiscuous mode
[  366.278255][T21507] bridge10: left promiscuous mode
[  366.312154][T21512] netlink: 'syz.2.4758': attribute type 1 has an invalid length.
[  366.314913][T21512] __nla_validate_parse: 20 callbacks suppressed
[  366.314923][T21512] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4758'.
[  366.331792][T21510] bridge11: entered promiscuous mode
[  366.333846][T21510] bridge11: entered allmulticast mode
[  366.537932][T21528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4765'.
[  366.604033][T21531] netlink: 'syz.1.4764': attribute type 13 has an invalid length.
[  366.607600][T21531] netlink: 'syz.1.4764': attribute type 12 has an invalid length.
[  366.787758][T21562] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4776'.
[  366.823124][T21568] netlink: 'syz.2.4778': attribute type 4 has an invalid length.
[  366.924101][T21583] netlink: 'syz.0.4782': attribute type 1 has an invalid length.
[  366.935649][T21583] bond18: entered promiscuous mode
[  366.937516][T21583] 8021q: adding VLAN 0 to HW filter on device bond18
[  366.964633][T21583] 8021q: adding VLAN 0 to HW filter on device bond18
[  366.970309][T21583] bond18: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  366.978396][T21583] bond18: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  366.991713][T21583] bond18: (slave ip6gre1): making interface the new active one
[  366.994822][T21583] ip6gre1: entered promiscuous mode
[  366.999583][T21583] bond18: (slave ip6gre1): Enslaving as an active interface with an up link
[  367.056955][T21598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4786'.
[  367.059865][T21597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4787'.
[  367.063114][T21597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4787'.
[  367.070303][T21598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4786'.
[  367.178622][T21618] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4793'.
[  367.300882][T21627] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  367.386523][T21636] netlink: 'syz.0.4801': attribute type 1 has an invalid length.
[  367.468530][T21645] netlink: 'syz.2.4803': attribute type 1 has an invalid length.
[  367.471151][T21645] netlink: 'syz.2.4803': attribute type 11 has an invalid length.
[  367.475590][T21645] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4803'.
[  367.502147][T21647] tipc: Bearer <udp:syz2>: already 2 bearers with priority 10
[  367.505848][T21647] tipc: Bearer <udp:syz2>: trying with adjusted priority
[  367.509959][T21647] tipc: Enabling of bearer <udp:syz2> rejected, max 3 bearers permitted
[  367.688556][T21659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4808'.
[  367.692373][T21659] netlink: 'syz.2.4808': attribute type 4 has an invalid length.
[  367.751961][T21675] pimreg0: tun_chr_ioctl cmd 1074025681
[  367.761183][T21676] pimreg0: tun_chr_ioctl cmd 2147767511
[  368.292786][    C1] net_ratelimit: 5 callbacks suppressed
[  368.292799][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  368.296596][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  368.462793][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.632089][T21782] bond15: (slave vxcan5): The slave device specified does not support setting the MAC address
[  368.636177][T21782] bond15: (slave vxcan5): Error -95 calling set_mac_address
[  368.681117][T21789] macvlan3: entered promiscuous mode
[  368.684016][T21789] macvlan3: entered allmulticast mode
[  368.686825][T21789] bond15: (slave macvlan3): Error -98 calling set_mac_address
[  368.730877][T21782] bond0: entered promiscuous mode
[  368.734724][T21782] bond0: left promiscuous mode
[  368.779108][T21789] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  368.839897][T21799] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  368.843675][T21799] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  369.093781][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.098503][ T3365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.342778][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  369.344796][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  369.482291][T21849] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  369.648740][T21860] syzkaller0: entered promiscuous mode
[  369.650974][T21860] syzkaller0: entered allmulticast mode
[  369.769972][T21868] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  369.893017][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.102069][T21895] block nbd1: not configured, cannot reconfigure
[  370.222279][T21903] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.228200][T21903] syzkaller0: entered promiscuous mode
[  370.230674][T21903] syzkaller0: entered allmulticast mode
[  370.244586][T21903] tipc: Resetting bearer <eth:syzkaller0>
[  370.576257][T21910] ip6t_srh: unknown srh match flags  4000
[  370.905624][T21903] tipc: Resetting bearer <eth:syzkaller0>
[  370.921856][T21903] tipc: Disabling bearer <eth:syzkaller0>
[  371.045315][T21935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  371.415968][T21967] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.418626][T21967] erspan0: entered allmulticast mode
[  371.421188][T21967] tc_dump_action: action bad kind
[  371.424720][T21967] tipc: Resetting bearer <eth:syzkaller0>
[  371.436886][T21966] tipc: Disabling bearer <eth:syzkaller0>
[  371.487113][T21969] sctp: [Deprecated]: syz.1.4908 (pid 21969) Use of struct sctp_assoc_value in delayed_ack socket option.
[  371.487113][T21969] Use struct sctp_sack_info instead
[  371.579540][T21976] __nla_validate_parse: 25 callbacks suppressed
[  371.579554][T21976] netlink: 364 bytes leftover after parsing attributes in process `syz.1.4911'.
[  371.592192][T21979] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4912'.
[  371.911581][T22007] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4921'.
[  371.918628][T22009] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4921'.
[  371.923207][T22009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4921'.
[  372.252513][T22035] syzkaller0: entered promiscuous mode
[  372.255652][T22035] syzkaller0: entered allmulticast mode
[  372.309514][T22041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4930'.
[  372.361300][T22045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4932'.
[  372.366250][T22047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4932'.
[  372.555874][T22056] siw: device registration error -23
[  372.555981][T22057] siw: device registration error -23
[  372.698085][T22073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4940'.
[  372.748885][T22079] netlink: 268 bytes leftover after parsing attributes in process `syz.1.4942'.
[  373.032467][T22105] syzkaller0: left promiscuous mode
[  373.036992][T22105] syzkaller0: left allmulticast mode
[  373.041458][T22105] tipc: Resetting bearer <eth:syzkaller0>
[  373.171458][T22116] x_tables: duplicate underflow at hook 1
[  373.350346][T22128] net_ratelimit: 10 callbacks suppressed
[  373.350391][T22128] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.457314][T22132] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  373.460697][T22132] syzkaller0: entered promiscuous mode
[  373.462936][T22132] syzkaller0: entered allmulticast mode
[  373.470747][T22132] tipc: Resetting bearer <eth:syzkaller0>
[  373.478863][T22131] tipc: Resetting bearer <eth:syzkaller0>
[  373.500748][T22131] tipc: Disabling bearer <eth:syzkaller0>
[  373.502866][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  373.505857][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  374.140437][T22192] veth0_macvtap: entered allmulticast mode
[  374.148847][T22192] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  374.336767][T22209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.532976][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  374.535720][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  374.864068][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.869601][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.560247][T22255] tipc: Enabling of bearer <eth:team0> rejected, max 3 bearers permitted
[  375.572919][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  375.689913][T22266] validate_nla: 5 callbacks suppressed
[  375.689927][T22266] netlink: 'syz.1.4996': attribute type 2 has an invalid length.
[  376.290603][T22290] xt_CT: No such helper "netbios-ns"
[  376.328675][T22293] Cannot find add_set index 2 as target
[  376.549352][T22317] netlink: 'syz.0.5017': attribute type 1 has an invalid length.
[  376.574938][T22317] 8021q: adding VLAN 0 to HW filter on device bond19
[  376.629183][T22326] __nla_validate_parse: 28 callbacks suppressed
[  376.629196][T22326] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5019'.
[  376.637537][T22326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5019'.
[  378.692811][    C1] net_ratelimit: 7 callbacks suppressed
[  378.692824][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  378.696742][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  379.723021][T22340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  379.742928][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  379.745680][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  379.794887][T22376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5031'.
[  379.870185][T22384] syzkaller0: entered promiscuous mode
[  379.873596][T22384] syzkaller0: entered allmulticast mode
[  379.928831][T22390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5037'.
[  380.099427][T22408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5042'.
[  380.158496][T22412] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.291701][T22417] syzkaller0: entered promiscuous mode
[  380.294509][T22417] syzkaller0: entered allmulticast mode
[  380.297442][   T12] syzkaller0: tun_net_xmit 70
[  380.301294][T22417] syzkaller0: tun_net_xmit 14
[  380.613909][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.617361][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.772816][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  380.775012][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  380.859269][T22432] netlink: 'syz.2.5050': attribute type 1 has an invalid length.
[  380.941456][T22435] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5051'.
[  380.944737][T22435] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5051'.
[  381.348768][T22490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5066'.
[  381.544242][T22502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5070'.
[  381.668928][T22509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5072'.
[  381.726353][T22515] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5074'.
[  381.730736][T22515] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5074'.
[  381.818785][T22520] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5076'.
[  381.824938][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  382.730119][T22536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5081'.
[  383.017678][T22545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5084'.
[  383.179527][T22555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5088'.
[  383.217338][T22557] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5089'.
[  383.289002][T22564] IPv6: Can't replace route, no match found
[  383.294574][T22564] IPv6: Can't replace route, no match found
[  383.326995][T22568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5093'.
[  383.393471][T22418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  383.449076][T22574] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  383.490695][T22576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5095'.
[  383.528385][T22584] IPVS: set_ctl: invalid protocol: 59 100.1.1.0:20000
[  383.661613][T22600] netlink: 'syz.2.5102': attribute type 5 has an invalid length.
[  383.664900][T22600] netlink: 'syz.2.5102': attribute type 6 has an invalid length.
[  383.811638][T22630] net_ratelimit: 3 callbacks suppressed
[  383.811652][T22630] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  383.818220][T22628] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  383.893230][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  383.895438][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  383.978851][T22646] openvswitch: netlink: Key 6 has unexpected len 318 expected 2
[  384.068750][T22655] netlink: 'syz.1.5121': attribute type 83 has an invalid length.
[  384.078183][T22655] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  384.119070][T22659] netlink: 'syz.2.5123': attribute type 2 has an invalid length.
[  384.123513][T22659] netlink: 'syz.2.5123': attribute type 1 has an invalid length.
[  384.126867][T22659] netlink: 'syz.2.5123': attribute type 1 has an invalid length.
[  384.130486][T22659] netlink: 'syz.2.5123': attribute type 2 has an invalid length.
[  384.138095][T22659] netlink: 'syz.2.5123': attribute type 2 has an invalid length.
[  384.141361][T22659] netlink: 'syz.2.5123': attribute type 2 has an invalid length.
[  384.202801][T22667] sctp: [Deprecated]: syz.1.5124 (pid 22667) Use of struct sctp_assoc_value in delayed_ack socket option.
[  384.202801][T22667] Use struct sctp_sack_info instead
[  384.291206][T22675] SET target dimension over the limit!
[  384.408223][T22684] 8021q: adding VLAN 0 to HW filter on device bond21
[  384.414537][T22684] bond20: (slave bond21): making interface the new active one
[  384.418550][T22684] bond20: (slave bond21): Enslaving as an active interface with an up link
[  384.424328][T22686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  384.495100][T22695] xt_hashlimit: size too large, truncated to 1048576
[  384.935390][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  384.937529][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  384.941016][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  385.270122][T22774] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  385.361601][T22790] sctp: [Deprecated]: syz.0.5159 (pid 22790) Use of struct sctp_assoc_value in delayed_ack socket option.
[  385.361601][T22790] Use struct sctp_sack_info instead
[  385.973082][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  385.975934][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  386.216492][T22852] validate_nla: 2 callbacks suppressed
[  386.216510][T22852] netlink: 'syz.0.5178': attribute type 1 has an invalid length.
[  386.227915][T22854] syz.2.5179: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  386.235960][T22854] CPU: 0 UID: 0 PID: 22854 Comm: syz.2.5179 Not tainted syzkaller #0 PREEMPT(full) 
[  386.235984][T22854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  386.235994][T22854] Call Trace:
[  386.236001][T22854]  <TASK>
[  386.236008][T22854]  dump_stack_lvl+0xe8/0x150
[  386.236032][T22854]  warn_alloc+0x249/0x340
[  386.236057][T22854]  ? stack_trace_save+0xa9/0x100
[  386.236082][T22854]  ? __pfx_warn_alloc+0x10/0x10
[  386.236106][T22854]  ? kasan_save_track+0x4f/0x80
[  386.236126][T22854]  ? kasan_save_track+0x3e/0x80
[  386.236143][T22854]  ? __kasan_kmalloc+0x93/0xb0
[  386.236162][T22854]  ? __kmalloc_cache_noprof+0x31c/0x660
[  386.236180][T22854]  ? xskq_create+0x56/0x170
[  386.236198][T22854]  ? xsk_setsockopt+0x54c/0x990
[  386.236214][T22854]  ? do_sock_setsockopt+0x17c/0x1b0
[  386.236232][T22854]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  386.236278][T22854]  ? do_syscall_64+0x15f/0xf80
[  386.236297][T22854]  __vmalloc_node_range_noprof+0x132/0x1750
[  386.236341][T22854]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  386.236365][T22854]  ? __kasan_kmalloc+0x93/0xb0
[  386.236387][T22854]  vmalloc_user_noprof+0xad/0xe0
[  386.236403][T22854]  ? xskq_create+0xbf/0x170
[  386.236420][T22854]  xskq_create+0xbf/0x170
[  386.236438][T22854]  xsk_init_queue+0x8a/0xe0
[  386.236457][T22854]  xsk_setsockopt+0x54c/0x990
[  386.236476][T22854]  ? __pfx_xsk_setsockopt+0x10/0x10
[  386.236492][T22854]  ? __pfx_aa_sk_perm+0x10/0x10
[  386.236511][T22854]  ? aa_sock_opt_perm+0xff/0x1a0
[  386.236532][T22854]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  386.236549][T22854]  ? __pfx_xsk_setsockopt+0x10/0x10
[  386.236566][T22854]  do_sock_setsockopt+0x17c/0x1b0
[  386.236589][T22854]  __x64_sys_setsockopt+0x13d/0x1b0
[  386.236610][T22854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.236624][T22854]  do_syscall_64+0x15f/0xf80
[  386.236636][T22854]  ? trace_irq_disable+0x3b/0x140
[  386.236659][T22854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.236672][T22854] RIP: 0033:0x7f709399cdd9
[  386.236686][T22854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  386.236698][T22854] RSP: 002b:00007f7094919028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  386.236714][T22854] RAX: ffffffffffffffda RBX: 00007f7093c15fa0 RCX: 00007f709399cdd9
[  386.236723][T22854] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  386.236731][T22854] RBP: 00007f7093a32d69 R08: 0000000000000004 R09: 0000000000000000
[  386.236739][T22854] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  386.236747][T22854] R13: 00007f7093c16038 R14: 00007f7093c15fa0 R15: 00007ffc5feff968
[  386.236776][T22854]  </TASK>
[  386.236782][T22854] Mem-Info:
[  386.342461][T22854] active_anon:13902 inactive_anon:7 isolated_anon:0
[  386.342461][T22854]  active_file:12293 inactive_file:41399 isolated_file:0
[  386.342461][T22854]  unevictable:1768 dirty:107 writeback:0
[  386.342461][T22854]  slab_reclaimable:12170 slab_unreclaimable:108049
[  386.342461][T22854]  mapped:18657 shmem:2371 pagetables:1274
[  386.342461][T22854]  sec_pagetables:0 bounce:0
[  386.342461][T22854]  kernel_misc_reclaimable:0
[  386.342461][T22854]  free:1084771 free_pcp:22759 free_cma:0
[  386.358150][T22854] Node 0 active_anon:20628kB inactive_anon:28kB active_file:16464kB inactive_file:158580kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48588kB dirty:316kB writeback:0kB shmem:4700kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9280kB pagetables:2268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  386.369436][T22854] Node 1 active_anon:34980kB inactive_anon:0kB active_file:32708kB inactive_file:7016kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26040kB dirty:112kB writeback:0kB shmem:4784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4612kB pagetables:2828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  386.381704][T22854] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  386.405746][T22854] lowmem_reserve[]: 0 1587 2117 2117 2117
[  386.408161][T22854] Node 0 DMA32 free:1335192kB boost:0kB min:25012kB low:31264kB high:37516kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10424kB inactive_anon:28kB active_file:12084kB inactive_file:20416kB unevictable:0kB writepending:200kB zspages:0kB present:2080636kB managed:1625248kB mlocked:0kB bounce:0kB free_pcp:33496kB local_pcp:21092kB free_cma:0kB
[  386.428866][T22854] lowmem_reserve[]: 0 0 530 530 530
[  386.431147][T22854] Node 0 Normal free:12544kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10204kB inactive_anon:0kB active_file:4380kB inactive_file:138164kB unevictable:3536kB writepending:116kB zspages:0kB present:1572868kB managed:543152kB mlocked:0kB bounce:0kB free_pcp:1356kB local_pcp:1352kB free_cma:0kB
[  386.455057][T22854] lowmem_reserve[]: 0 0 0 0 0
[  386.458068][T22854] Node 1 Normal free:2976364kB boost:0kB min:56344kB low:70428kB high:84512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34980kB inactive_anon:0kB active_file:32708kB inactive_file:7016kB unevictable:3536kB writepending:112kB zspages:0kB present:3670012kB managed:3594684kB mlocked:0kB bounce:0kB free_pcp:55668kB local_pcp:33764kB free_cma:0kB
[  386.469436][T22854] lowmem_reserve[]: 0 0 0 0 0
[  386.471285][T22854] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  386.484908][T22854] Node 0 DMA32: 20*4kB (UM) 1*8kB (M) 10*16kB (U) 115*32kB (U) 265*64kB (U) 174*128kB (U) 93*256kB (UME) 59*512kB (UM) 31*1024kB (UME) 5*2048kB (UME) 292*4096kB (UM) = 1335192kB
[  386.490462][T22854] Node 0 Normal: 342*4kB (UM) 26*8kB (UME) 200*16kB (U) 163*32kB (U) 30*64kB (U) 7*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12808kB
[  386.496245][T22854] Node 1 Normal: 1877*4kB (UME) 1479*8kB (UME) 1562*16kB (UM) 930*32kB (UM) 527*64kB (UME) 244*128kB (UM) 86*256kB (UM) 40*512kB (UME) 29*1024kB (UME) 22*2048kB (UME) 664*4096kB (UM) = 2976044kB
[  386.515991][T22854] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  386.518994][T22854] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  386.522103][T22854] 56063 total pagecache pages
[  386.524242][T22854] 0 pages in swap cache
[  386.525757][T22854] Free swap  = 124996kB
[  386.527387][T22854] Total swap = 124996kB
[  386.529405][T22854] 1834877 pages RAM
[  386.531608][T22854] 0 pages HighMem/MovableOnly
[  386.534157][T22854] 390266 pages reserved
[  386.535655][T22854] 0 pages cma reserved
[  386.715932][T22904] __nla_validate_parse: 55 callbacks suppressed
[  386.715945][T22904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5191'.
[  387.019503][T22920] bridge_slave_0: default FDB implementation only supports local addresses
[  387.067711][T22925] netlink: 'syz.2.5199': attribute type 1 has an invalid length.
[  387.086351][T22925] bond16: entered promiscuous mode
[  387.088547][T22925] 8021q: adding VLAN 0 to HW filter on device bond16
[  387.104968][T22925] 8021q: adding VLAN 0 to HW filter on device bond16
[  387.107717][T22925] bond16: (slave wireguard0): The slave device specified does not support setting the MAC address
[  387.111574][T22925] bond16: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  387.121329][T22925] bond16: (slave wireguard0): making interface the new active one
[  387.124153][T22925] wireguard0: entered promiscuous mode
[  387.126877][T22925] bond16: (slave wireguard0): Enslaving as an active interface with an up link
[  387.450236][T22936] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5203'.
[  387.560893][T22944] netlink: 'syz.2.5206': attribute type 1 has an invalid length.
[  387.566687][T22944] netlink: 936 bytes leftover after parsing attributes in process `syz.2.5206'.
[  387.709796][T22958] syzkaller0: entered promiscuous mode
[  387.712322][T22958] syzkaller0: entered allmulticast mode
[  387.715268][T22958] tipc: Resetting bearer <eth:syzkaller0>
[  387.769376][T22960] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5211'.
[  387.891138][T22971] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5215'.
[  388.049715][T22988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5219'.
[  388.053790][T22988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5219'.
[  388.172516][T22990] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5220'.
[  388.209618][T22992] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5221'.
[  388.304663][T22999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5224'.
[  388.473735][T23006] syzkaller0: left promiscuous mode
[  388.481437][T23006] syzkaller0: left allmulticast mode
[  388.483824][T23006] tipc: Resetting bearer <eth:syzkaller0>
[  389.102855][    C1] net_ratelimit: 11 callbacks suppressed
[  389.102873][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  389.107510][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  389.465449][T23044] dummy0 (unregistering): left promiscuous mode
[  389.560998][T23044] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  390.025959][T23103] x_tables: duplicate underflow at hook 2
[  390.040117][T23105] netlink: 'syz.1.5248': attribute type 1 has an invalid length.
[  390.043616][T23105] netlink: 'syz.1.5248': attribute type 1 has an invalid length.
[  390.048543][T23105] netlink: 'syz.1.5248': attribute type 1 has an invalid length.
[  390.051147][T23105] netlink: 'syz.1.5248': attribute type 2 has an invalid length.
[  390.055764][T23105] netlink: 'syz.1.5248': attribute type 2 has an invalid length.
[  390.058869][T23105] netlink: 'syz.1.5248': attribute type 2 has an invalid length.
[  390.061449][T23105] netlink: 'syz.1.5248': attribute type 2 has an invalid length.
[  390.142766][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  390.145006][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  391.182815][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  391.184961][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  391.413529][   T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.493444][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.222889][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  392.225080][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  394.292898][    C1] net_ratelimit: 2 callbacks suppressed
[  394.292916][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  394.297698][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  395.332933][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  395.335888][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  396.373039][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  396.375845][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  397.253741][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.256548][ T1109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.413232][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  397.416012][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  399.492904][    C1] net_ratelimit: 2 callbacks suppressed
[  399.492918][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  399.496739][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  400.542900][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  400.545344][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  401.583069][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  401.585711][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  402.293504][ T8585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.406606][T23163] __nla_validate_parse: 16 callbacks suppressed
[  402.406616][T23163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5265'.
[  402.406759][T23161] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  402.421273][T23161] syzkaller0: entered promiscuous mode
[  402.423959][T23161] syzkaller0: entered allmulticast mode
[  402.429774][T23161] tipc: Resetting bearer <eth:syzkaller0>
[  402.437274][T23161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5264'.
[  402.515911][T23173] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5269'.
[  402.537865][T23170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5270'.
[  402.541666][T23170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5270'.
[  402.555393][T23170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5270'.
[  402.562726][T23170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5270'.
[  402.614916][T23184] bond1: (slave lo): Releasing backup interface
[  402.619702][T23184] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  402.622736][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  402.625291][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  402.639515][T23184] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  402.656008][T23184] team0: No ports can be present during mode change
[  402.671221][T23188] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5275'.
[  402.702337][T23193] validate_nla: 2 callbacks suppressed
[  402.702350][T23193] netlink: 'syz.2.5276': attribute type 8 has an invalid length.
[  402.708157][T23193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5276'.
[  402.716178][T23193] bond0: entered promiscuous mode
[  402.718956][T23193] gretap0: entered promiscuous mode
[  402.724642][T23193] bond0: left promiscuous mode
[  402.728891][T23193] gretap0: left promiscuous mode
[  402.753299][T23195] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5277'.
[  402.759673][T23195] tipc: Resetting bearer <eth:syzkaller0>
[  402.771563][T23200] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[  402.841879][T23208] syzkaller1: entered promiscuous mode
[  402.845335][T23208] syzkaller1: entered allmulticast mode
[  402.850590][T23208] netlink: 'syz.1.5282': attribute type 49 has an invalid length.
[  403.021483][T23219] netlink: 'syz.1.5285': attribute type 11 has an invalid length.
[  403.108912][T23231] netlink: 'syz.1.5288': attribute type 2 has an invalid length.
[  404.171917][T23298] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  404.186709][T23298] syzkaller0: entered promiscuous mode
[  404.189023][T23298] syzkaller0: entered allmulticast mode
[  404.193584][T23298] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  404.244836][T23297] tipc: Resetting bearer <eth:syzkaller0>
[  404.268024][T23316] netlink: 'syz.0.5314': attribute type 83 has an invalid length.
[  404.271851][T23297] tipc: Disabling bearer <eth:syzkaller0>
[  404.692817][    C1] net_ratelimit: 5 callbacks suppressed
[  404.692835][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  404.698057][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  405.083572][T23394] bond17 (unregistering): Released all slaves
[  405.129942][T23397] xt_TCPMSS: Only works on TCP SYN packets
[  405.134857][T23397] netlink: 'syz.2.5335': attribute type 1 has an invalid length.
[  405.178061][T23406] netlink: 'syz.0.5338': attribute type 1 has an invalid length.
[  405.190854][T23406] syzkaller1: entered promiscuous mode
[  405.193968][T23406] syzkaller1: entered allmulticast mode
[  405.248871][T23416] netlink: 'syz.2.5342': attribute type 1 has an invalid length.
[  405.506824][T23437] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode
[  405.546894][T23435] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  405.608650][T23452] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  405.732794][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  405.735249][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  405.794141][T23463] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  405.961073][T23488] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  405.965128][T23488] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  406.756951][T23503] netlink: 'syz.0.5368': attribute type 1 has an invalid length.
[  406.759895][T23503] netlink: 'syz.0.5368': attribute type 1 has an invalid length.
[  406.772797][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  406.774853][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  406.822840][T23503] bond22: entered promiscuous mode
[  406.826161][T23503] 8021q: adding VLAN 0 to HW filter on device bond22
[  407.493702][ T3365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  407.812897][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  407.828176][T23597] __nla_validate_parse: 64 callbacks suppressed
[  407.828185][T23597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5400'.
[  407.839909][T23598] bond11 (unregistering): Released all slaves
[  408.005892][T23615] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5403'.
[  408.012150][T23615] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5403'.
[  408.722329][T23634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5408'.
[  408.812492][T23639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5410'.
[  409.902874][    C1] net_ratelimit: 4 callbacks suppressed
[  409.902893][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  409.907207][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  410.932853][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  410.935502][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  410.942505][T23609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  411.027739][T23648] netlink: 'syz.0.5413': attribute type 8 has an invalid length.
[  411.032904][T23648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5413'.
[  411.078928][T23654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5415'.
[  411.285734][T23681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5422'.
[  411.411993][T23699] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5427'.
[  411.593316][T23709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5429'.
[  411.747339][T23720] netlink: 'syz.1.5433': attribute type 3 has an invalid length.
[  411.773236][T23720] nbd: must specify an index to disconnect
[  411.784796][T23720] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  411.790380][T23720] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  411.796731][T23720] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  411.814634][T23720] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  411.897944][T23732] team0 (unregistering): left allmulticast mode
[  411.900020][T23732] team_slave_0: left allmulticast mode
[  411.901734][T23732] team_slave_1: left allmulticast mode
[  411.904757][T23732] vlan0: left allmulticast mode
[  411.906748][T23732] bond2: left allmulticast mode
[  411.909019][T23732] batadv1: left allmulticast mode
[  411.911292][T23732] bridge7: left allmulticast mode
[  411.915096][T23732] team0 (unregistering): left promiscuous mode
[  411.917908][T23732] team_slave_0: left promiscuous mode
[  411.920414][T23732] team_slave_1: left promiscuous mode
[  411.923179][T23732] bridge7: left promiscuous mode
[  411.926900][T23732] bridge0: port 1(team0) entered disabled state
[  411.938463][T23732] team0 (unregistering): Port device team_slave_0 removed
[  411.943527][T23732] team0 (unregistering): Port device team_slave_1 removed
[  411.947178][T23732] team0 (unregistering): Port device vlan0 removed
[  411.950837][T23732] team0 (unregistering): Port device bridge6 removed
[  411.955574][T23732] team0 (unregistering): Port device bridge7 removed
[  411.962114][T23732] bond9: left allmulticast mode
[  411.964831][T23732] ip6gretap0: left allmulticast mode
[  411.967212][T23732] bond9: left promiscuous mode
[  411.972546][T23732] team0 (unregistering): Port device macvlan1 removed
[  411.984370][  T942] ip6gretap0: left promiscuous mode
[  411.996440][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  411.999135][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  412.609664][T23784] netlink: 'syz.2.5452': attribute type 4 has an invalid length.
[  412.613195][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.613319][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  412.708704][T23800] 0: renamed from hsr0 (while UP)
[  412.722463][T23800] 0: entered allmulticast mode
[  412.724832][T23800] hsr_slave_0: entered allmulticast mode
[  412.726583][T23800] hsr_slave_1: entered allmulticast mode
[  412.728756][T23800] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  412.787068][T23807] netlink: 'syz.0.5460': attribute type 4 has an invalid length.
[  412.799657][T23807] netlink: 'syz.0.5460': attribute type 4 has an invalid length.
[  412.898155][T23807] tipc: Resetting bearer <eth:hsr0>
[  412.900756][T23807] tipc: Resetting bearer <eth:hsr0>
[  412.918283][T23807] tipc: Resetting bearer <eth:syzkaller0>
[  412.956183][T23822] __nla_validate_parse: 13 callbacks suppressed
[  412.956195][T23822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5463'.
[  412.961915][T23822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5463'.
[  412.976885][ T5506] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  412.978551][T23820] netlink: 'syz.1.5466': attribute type 6 has an invalid length.
[  412.980821][ T5506] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  412.987691][T23820] netlink: 3936 bytes leftover after parsing attributes in process `syz.1.5466'.
[  412.991841][T23820] netlink: 'syz.1.5466': attribute type 1 has an invalid length.
[  412.992048][ T5506] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  412.997315][T23820] block nbd1: Unsupported socket: should be TCP or UNIX.
[  412.999426][ T5506] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  413.192171][T23838] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5471'.
[  413.236569][T23844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5472'.
[  413.239403][T23844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5472'.
[  413.243350][T23844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5472'.
[  413.252466][T23846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5473'.
[  413.274259][T23846] netlink: 'syz.0.5473': attribute type 14 has an invalid length.
[  413.434874][T23867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5480'.
[  413.449235][T23867] veth15: entered promiscuous mode
[  413.458597][T23869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5481'.
[  413.509123][T23871] syzkaller0: entered promiscuous mode
[  413.511689][T23871] syzkaller0: entered allmulticast mode
[  413.520571][T23871] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  415.174126][ T5620] Bluetooth: hci2: command 0x0405 tx timeout
[  415.559222][T23892] syzkaller0: entered promiscuous mode
[  415.562974][T23892] syzkaller0: entered allmulticast mode
[  415.588787][T23894] bond23: entered promiscuous mode
[  415.591499][T23894] 8021q: adding VLAN 0 to HW filter on device bond23
[  415.672495][T23904] netlink: 'syz.1.5492': attribute type 20 has an invalid length.
[  415.685196][T23904] netlink: 'syz.1.5492': attribute type 21 has an invalid length.
[  416.405390][T23946] bridge11: entered promiscuous mode
[  416.407883][T23946] bridge11: entered allmulticast mode
[  416.720335][T23962] netlink: 'syz.0.5507': attribute type 2 has an invalid length.
[  417.089430][T23993] bridge16: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  417.277920][T24009] netlink: 'syz.1.5522': attribute type 1 has an invalid length.
[  417.306148][T24014] 8021q: VLANs not supported on lo
[  417.512167][T24034] vti0: entered promiscuous mode
[  417.514083][T24034] vti0: entered allmulticast mode
[  417.657706][T24059] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  418.091784][T24094] __nla_validate_parse: 11 callbacks suppressed
[  418.091813][T24094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5549'.
[  418.130659][T24097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5550'.
[  418.167183][T24100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5551'.
[  418.210567][T24103] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5552'.
[  418.251062][T24108] netlink: 'syz.0.5553': attribute type 10 has an invalid length.
[  418.253859][T24108] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5553'.
[  418.478519][T24114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  418.478578][T24120] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  418.669929][T24128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5558'.
[  418.889600][T24149] netem: unknown loss type 0
[  418.891376][T24149] netem: change failed
[  418.962782][T24153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5563'.
[  418.973367][T24153] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5563'.
[  419.089946][T24160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5567'.
[  419.366999][T24175] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5573'.
[  419.457089][T24183] pim6reg99999991: entered allmulticast mode
[  419.697994][T24210] netlink: 'syz.1.5583': attribute type 21 has an invalid length.
[  419.810616][T24228] netlink: 'syz.0.5592': attribute type 14 has an invalid length.
[  419.867439][T24231] netlink: 'syz.1.5591': attribute type 21 has an invalid length.
[  419.876353][T24235] netlink: 'syz.2.5593': attribute type 1 has an invalid length.
[  420.038692][ T5666] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  420.042243][ T5666] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  420.046128][ T5666] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  420.048808][ T5666] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  420.087045][T24260] netlink: 'syz.2.5596': attribute type 1 has an invalid length.
[  420.308095][T24277] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  420.794819][T24247] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  420.799234][T24247] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  420.815400][T24247] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  420.819309][T24247] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  421.011991][T24315] Unsupported ieee802154 address type: 0
[  421.018548][T24316] Unsupported ieee802154 address type: 0
[  421.506132][T24357] IPv6: NLM_F_CREATE should be specified when creating new route
[  421.625344][T24363] netlink: 'syz.1.5629': attribute type 1 has an invalid length.
[  422.017121][T24396] Cannot find del_set index 49151 as target
[  422.199462][T24421] bond17: option fail_over_mac: invalid value (127)
[  422.204227][T24421] bond17 (unregistering): Released all slaves
[  422.373874][T24440] netlink: 'syz.1.5650': attribute type 1 has an invalid length.
[  422.602699][T24469] tipc: Resetting bearer <eth:syzkaller0>
[  422.835632][T24495] syzkaller1: tun_chr_ioctl cmd 1074025677
[  422.838170][T24495] syzkaller1: Linktype set failed because interface is up
[  422.852832][   T31] syzkaller1: tun_net_xmit 90
[  422.899439][T24495] syzkaller1: tun_chr_ioctl cmd 21731
[  423.199666][T24514] __nla_validate_parse: 26 callbacks suppressed
[  423.199684][T24514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5668'.
[  423.206374][T24514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5668'.
[  423.469708][T24529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5672'.
[  423.781979][T24542] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5676'.
[  423.798126][T24543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5676'.
[  423.908248][T24551] netlink: 'syz.1.5679': attribute type 3 has an invalid length.
[  423.911917][T24551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5679'.
[  423.957633][T24551] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  424.053328][T24561] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5683'.
[  424.059656][T24561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5683'.
[  424.107129][T24565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5685'.
[  424.282015][T24580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5690'.
[  424.288441][T24580] team0: left allmulticast mode
[  424.290234][T24580] dummy0: left allmulticast mode
[  424.291949][T24580] bridge10: left allmulticast mode
[  424.298814][T24580] team0: left promiscuous mode
[  424.301725][T24580] dummy0: left promiscuous mode
[  424.304388][T24580] bridge10: left promiscuous mode
[  424.309354][T24580] bridge0: port 1(team0) entered disabled state
[  424.339645][T24583] openvswitch: netlink: IP tunnel TTL not specified.
[  424.448201][T24589] syzkaller0: entered promiscuous mode
[  424.451675][T24589] syzkaller0: entered allmulticast mode
[  424.705629][T24613] syzkaller0: entered promiscuous mode
[  424.708018][T24613] syzkaller0: entered allmulticast mode
[  424.778285][T24616] netlink: 'syz.2.5702': attribute type 1 has an invalid length.
[  424.807148][T24616] 8021q: adding VLAN 0 to HW filter on device bond17
[  424.868317][T24624] tipc: Invalid UDP bearer configuration
[  424.868359][T24624] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  425.159291][T24639] netlink: 'syz.1.5710': attribute type 1 has an invalid length.
[  425.188910][T24639] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address
[  425.193111][T24639] bond11: (slave vxcan3): Error -95 calling set_mac_address
[  425.245680][T24646] bond11: (slave gretap3): making interface the new active one
[  425.249184][T24646] bond11: (slave gretap3): Enslaving as an active interface with an up link
[  425.259591][T24639] macvlan0: entered promiscuous mode
[  425.261642][T24639] macvlan0: entered allmulticast mode
[  425.266769][T24639] bond11: entered promiscuous mode
[  425.269043][T24639] gretap3: entered promiscuous mode
[  425.273421][T24639] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  425.277620][T24639] bond11: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap3
[  425.282493][T24639] bond11: left promiscuous mode
[  425.285046][T24639] gretap3: left promiscuous mode
[  425.427982][T24653] Cannot find del_set index 3 as target
[  425.698254][T24685] bond14: (slave vcan0): Releasing backup interface
[  425.700953][T24685] vcan0 (unregistering): left promiscuous mode
[  425.704805][T24685] bond14: Destroying bond
[  425.710122][T24685] bond14 (unregistering): Released all slaves
[  425.780873][T24691] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  425.959102][T24700] IPVS: set_ctl: invalid protocol: 169 100.1.1.2:20003
[  426.300826][T24732] sctp: [Deprecated]: syz.1.5739 (pid 24732) Use of struct sctp_assoc_value in delayed_ack socket option.
[  426.300826][T24732] Use struct sctp_sack_info instead
[  426.460387][T24751] netlink: 'syz.1.5744': attribute type 1 has an invalid length.
[  426.513320][T24762] syzkaller1: entered promiscuous mode
[  426.516596][T24762] syzkaller1: entered allmulticast mode
[  426.544524][T24764] Unknown options in mask 6
[  426.853082][T24798] syzkaller0: entered promiscuous mode
[  426.855618][T24798] syzkaller0: entered allmulticast mode
[  428.166753][T24904] syzkaller0: entered promiscuous mode
[  428.169120][T24904] syzkaller0: entered allmulticast mode
[  428.641303][T24908] __nla_validate_parse: 30 callbacks suppressed
[  428.641317][T24908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5791'.
[  428.916790][T24926] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5796'.
[  429.935075][T24944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5805'.
[  429.940023][T24944] veth0_to_bond: entered allmulticast mode
[  429.944941][T24944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5805'.
[  430.107708][T24970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5812'.
[  430.111206][T24970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5812'.
[  430.140343][T24966] nicvf0: tun_chr_ioctl cmd 1074812117
[  430.166017][T24976] syzkaller0: entered promiscuous mode
[  430.167784][T24976] syzkaller0: entered allmulticast mode
[  430.170940][T24976] TC_ACT_REPEAT abuse ?
[  430.380597][T24993] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5820'.
[  430.531445][T25004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5825'.
[  430.552426][T25006] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5825'.
[  430.564277][T25004] bridge0: port 1(vlan6) entered blocking state
[  430.566476][T25004] bridge0: port 1(vlan6) entered disabled state
[  430.568585][T25004] vlan6: entered allmulticast mode
[  430.570355][T25004] geneve0: entered allmulticast mode
[  430.573211][T25004] vlan6: entered promiscuous mode
[  430.575160][T25004] geneve0: entered promiscuous mode
[  430.756825][T25036] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5835'.
[  430.799917][T25041] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  432.355916][T25199] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  432.539465][T25223] xt_CT: You must specify a L4 protocol and not use inversions on it
[  432.902963][T25242] netlink: 'syz.2.5895': attribute type 2 has an invalid length.
[  433.094766][T25254] Unsupported ieee802154 address type: 0
[  433.113529][T25257] netlink: 'syz.1.5901': attribute type 1 has an invalid length.
[  433.125444][T25257] netlink: 'syz.1.5901': attribute type 83 has an invalid length.
[  433.245067][T25272] nft_compat: unsupported protocol 5
[  433.431267][T25289] syzkaller0: entered promiscuous mode
[  433.433662][T25289] syzkaller0: entered allmulticast mode
[  433.604644][T25304] netlink: 'syz.2.5918': attribute type 2 has an invalid length.
[  433.614688][T25305] IPv6: sit2: Disabled Multicast RS
[  433.744874][T25318] __nla_validate_parse: 17 callbacks suppressed
[  433.744885][T25318] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5923'.
[  433.751268][T25318] openvswitch: netlink: Key type 769 is out of range max 32
[  433.806624][T25322] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5925'.
[  433.810226][T25322] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5925'.
[  433.820550][T25322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5925'.
[  434.014080][T25362] netlink: 'syz.2.5936': attribute type 12 has an invalid length.
[  434.016656][T25362] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.5936'.
[  434.020369][T25362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5936'.
[  434.023661][T25362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5936'.
[  434.167683][T25382] ip6gre1: entered promiscuous mode
[  434.169912][T25382] ip6gre1: entered allmulticast mode
[  434.275537][T25400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5946'.
[  434.324350][T25402] bond12: Removing last arp target with arp_interval on
[  434.498586][T25422] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5953'.
[  434.781088][T25448] netlink: 'syz.2.5959': attribute type 1 has an invalid length.
[  434.980022][T25464] syzkaller0: entered promiscuous mode
[  434.982331][T25464] syzkaller0: entered allmulticast mode
[  435.131372][T25477] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5970'.
[  435.407810][T25509] syzkaller0: entered promiscuous mode
[  435.410158][T25509] syzkaller0: entered allmulticast mode
[  436.391418][T25520] syz.1.5976 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  436.398129][T25520] CPU: 1 UID: 0 PID: 25520 Comm: syz.1.5976 Not tainted syzkaller #0 PREEMPT(full) 
[  436.398150][T25520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  436.398157][T25520] Call Trace:
[  436.398163][T25520]  <TASK>
[  436.398168][T25520]  dump_stack_lvl+0xe8/0x150
[  436.398188][T25520]  dump_header+0xd3/0x4c0
[  436.398207][T25520]  oom_kill_process+0x3ab/0x970
[  436.398223][T25520]  out_of_memory+0x106c/0x1410
[  436.398232][T25520]  ? try_charge_memcg+0xbb9/0x1570
[  436.398248][T25520]  ? __pfx___mutex_lock+0x10/0x10
[  436.398266][T25520]  ? __pfx_out_of_memory+0x10/0x10
[  436.398279][T25520]  ? do_raw_spin_unlock+0x4d/0x210
[  436.398302][T25520]  try_charge_memcg+0xc77/0x1570
[  436.398323][T25520]  ? __pfx_try_charge_memcg+0x10/0x10
[  436.398332][T25520]  ? percpu_ref_tryget+0x15/0x180
[  436.398350][T25520]  ? charge_memcg+0x23/0x2b0
[  436.398366][T25520]  charge_memcg+0x1a2/0x2b0
[  436.398380][T25520]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  436.398395][T25520]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  436.398413][T25520]  __swap_cache_prepare_and_add+0xdc/0x700
[  436.398431][T25520]  ? page_rmappable_folio+0x9a/0x170
[  436.398452][T25520]  swap_cache_alloc_folio+0xf1/0x240
[  436.398462][T25520]  swap_cluster_readahead+0x355/0x670
[  436.398479][T25520]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  436.398497][T25520]  ? get_vma_policy+0x27b/0x3c0
[  436.398509][T25520]  swapin_readahead+0x196/0xc50
[  436.398519][T25520]  ? swap_table_get+0x1e/0x260
[  436.398528][T25520]  ? __pfx_swapin_readahead+0x10/0x10
[  436.398538][T25520]  ? swap_table_get+0x1e/0x260
[  436.398545][T25520]  ? swap_table_get+0x1e/0x260
[  436.398552][T25520]  ? swap_table_get+0x1e/0x260
[  436.398560][T25520]  ? swap_table_get+0x216/0x260
[  436.398568][T25520]  ? swap_cache_get_folio+0x2e4/0x2f0
[  436.398579][T25520]  do_swap_page+0x555/0x5120
[  436.398589][T25520]  ? __pte_offset_map+0x29/0x240
[  436.398599][T25520]  ? __pte_offset_map+0x29/0x240
[  436.398611][T25520]  ? do_swap_page+0x128/0x5120
[  436.398618][T25520]  ? __pfx_do_swap_page+0x10/0x10
[  436.398626][T25520]  ? __pte_offset_map+0x1ae/0x240
[  436.398635][T25520]  ? pte_offset_map_rw_nolock+0xea/0x160
[  436.398645][T25520]  handle_mm_fault+0x12d2/0x3170
[  436.398659][T25520]  ? handle_mm_fault+0xee/0x3170
[  436.398670][T25520]  ? __pfx_handle_mm_fault+0x10/0x10
[  436.398678][T25520]  ? lock_vma_under_rcu+0x45a/0x500
[  436.398698][T25520]  do_user_addr_fault+0xa73/0x1340
[  436.398709][T25520]  ? rcu_is_watching+0x15/0xb0
[  436.398718][T25520]  ? trace_page_fault_user+0x84/0x1e0
[  436.398727][T25520]  exc_page_fault+0x6a/0xc0
[  436.398739][T25520]  asm_exc_page_fault+0x26/0x30
[  436.398747][T25520] RIP: 0033:0x7fc9a0557f03
[  436.398755][T25520] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ae 67 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b
[  436.398761][T25520] RSP: 002b:00007ffec4f24ff0 EFLAGS: 00010246
[  436.398769][T25520] RAX: 0000000000000000 RBX: 0000555565198500 RCX: 0000000000000000
[  436.398774][T25520] RDX: 00007ffec4f25030 RSI: 0000000000000000 RDI: 0000000000000000
[  436.398779][T25520] RBP: 00007fc9a0817da0 R08: 0000000000000000 R09: 0000000000000000
[  436.398783][T25520] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000006a828
[  436.398788][T25520] R13: 00007fc9a081627c R14: 000000000006a606 R15: 00007fc9a0816270
[  436.398799][T25520]  </TASK>
[  436.398802][T25520] memory: usage 307200kB, limit 307200kB, failcnt 3254
[  436.526794][T25520] memory+swap: usage 305604kB, limit 9007199254740988kB, failcnt 0
[  436.529366][T25520] kmem: usage 304792kB, limit 9007199254740988kB, failcnt 0
[  436.531638][T25520] Memory cgroup stats for /syz1:
[  436.531851][T25520] cache 0
[  436.534884][T25520] rss 0
[  436.535804][T25520] rss_huge 0
[  436.536924][T25520] shmem 0
[  436.537840][T25520] mapped_file 0
[  436.538998][T25520] dirty 0
[  436.539903][T25520] writeback 0
[  436.540956][T25520] workingset_refault_anon 2
[  436.542431][T25520] workingset_refault_file 11
[  436.544319][T25520] swap 229376
[  436.545677][T25520] swapcached 245760
[  436.547051][T25520] pgpgin 207510
[  436.548377][T25520] pgpgout 207508
[  436.549714][T25520] pgfault 371548
[  436.551033][T25520] pgmajfault 3
[  436.552427][T25520] inactive_anon 0
[  436.554457][T25520] active_anon 8192
[  436.555935][T25520] inactive_file 0
[  436.557265][T25520] active_file 0
[  436.558514][T25520] unevictable 0
[  436.559690][T25520] hierarchical_memory_limit 314572800
[  436.561526][T25520] hierarchical_memsw_limit 9223372036854771712
[  436.564247][T25520] total_cache 0
[  436.565804][T25520] total_rss 0
[  436.567221][T25520] total_rss_huge 0
[  436.568788][T25520] total_shmem 0
[  436.570286][T25520] total_mapped_file 0
[  436.571945][T25520] total_dirty 0
[  436.573884][T25520] total_writeback 0
[  436.575544][T25520] total_workingset_refault_anon 2
[  436.577564][T25520] total_workingset_refault_file 11
[  436.579643][T25520] total_swap 229376
[  436.581227][T25520] total_swapcached 245760
[  436.583329][T25520] total_pgpgin 207513
[  436.585044][T25520] total_pgpgout 207511
[  436.586727][T25520] total_pgfault 371560
[  436.588425][T25520] total_pgmajfault 3
[  436.590019][T25520] total_inactive_anon 0
[  436.591684][T25520] total_active_anon 8192
[  436.593924][T25520] total_inactive_file 0
[  436.595730][T25520] total_active_file 0
[  436.597237][T25520] total_unevictable 0
[  436.598859][T25520] anon_cost 0
[  436.600063][T25520] file_cost 0
[  436.608580][T25520] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5976,pid=25520,uid=0
[  436.617324][T25520] Memory cgroup out of memory: Killed process 25520 (syz.1.5976) total-vm:106660kB, anon-rss:1240kB, file-rss:27040kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000
[  436.754807][T25543] smc: net device team0 applied user defined pnetid SYZ2
[  436.757582][T25543] smc: net device team0 erased user defined pnetid SYZ2
[  436.835847][T25552] ipip2: entered promiscuous mode
[  436.867001][T25552] netlink: 'syz.1.5984': attribute type 9 has an invalid length.
[  437.000656][T25564] bond16: entered allmulticast mode
[  437.002451][T25564] wireguard0: entered allmulticast mode
[  437.013690][T25566] lo speed is unknown, defaulting to 1000
[  437.018017][T25566] lo speed is unknown, defaulting to 1000
[  437.025409][T25566] lo speed is unknown, defaulting to 1000
[  437.159064][T25566] infiniband sqz0: set active
[  437.160773][   T31] lo speed is unknown, defaulting to 1000
[  437.164264][T25566] infiniband sqz0: added lo
[  437.177131][T25566] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  437.182083][T25566] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  437.192806][T25566] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  437.217743][T25566] RDS/IB: sqz0: added
[  437.220757][T25566] smc: adding ib device sqz0 with port count 1
[  437.224556][T25566] smc:    ib device sqz0 port 1 has no pnetid
[  437.227698][   T31] lo speed is unknown, defaulting to 1000
[  437.231307][T25566] lo speed is unknown, defaulting to 1000
[  437.236080][T25575] netlink: 'syz.2.5991': attribute type 3 has an invalid length.
[  437.364596][T25578] netlink: 'syz.2.5992': attribute type 1 has an invalid length.
[  437.370802][T25578] netlink: 'syz.2.5992': attribute type 3 has an invalid length.
[  437.390986][T25566] lo speed is unknown, defaulting to 1000
[  437.456909][T25580] ipip3: entered promiscuous mode
[  437.526183][T25566] lo speed is unknown, defaulting to 1000
[  437.612340][T25592] sctp: [Deprecated]: syz.2.5996 (pid 25592) Use of int in maxseg socket option.
[  437.612340][T25592] Use struct sctp_assoc_value instead
[  437.617428][T25593] sctp: [Deprecated]: syz.2.5996 (pid 25593) Use of int in maxseg socket option.
[  437.617428][T25593] Use struct sctp_assoc_value instead
[  437.797645][T25599] lo speed is unknown, defaulting to 1000
[  437.845977][T25603] sctp: [Deprecated]: syz.2.6000 (pid 25603) Use of struct sctp_assoc_value in delayed_ack socket option.
[  437.845977][T25603] Use struct sctp_sack_info instead
[  437.992198][T25599] validate_nla: 1 callbacks suppressed
[  437.992210][T25599] netlink: 'syz.1.5999': attribute type 4 has an invalid length.
[  438.834958][T25604] syz.2.6001 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  438.839069][T25604] CPU: 0 UID: 0 PID: 25604 Comm: syz.2.6001 Not tainted syzkaller #0 PREEMPT(full) 
[  438.839087][T25604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  438.839094][T25604] Call Trace:
[  438.839101][T25604]  <TASK>
[  438.839108][T25604]  dump_stack_lvl+0xe8/0x150
[  438.839128][T25604]  dump_header+0xd3/0x4c0
[  438.839150][T25604]  oom_kill_process+0x3ab/0x970
[  438.839169][T25604]  out_of_memory+0x106c/0x1410
[  438.839183][T25604]  ? try_charge_memcg+0xbb9/0x1570
[  438.839201][T25604]  ? __pfx___mutex_lock+0x10/0x10
[  438.839221][T25604]  ? __pfx_out_of_memory+0x10/0x10
[  438.839234][T25604]  ? do_raw_spin_unlock+0x4d/0x210
[  438.839258][T25604]  try_charge_memcg+0xc77/0x1570
[  438.839287][T25604]  ? __pfx_try_charge_memcg+0x10/0x10
[  438.839301][T25604]  ? percpu_ref_tryget+0x15/0x180
[  438.839331][T25604]  ? charge_memcg+0x23/0x2b0
[  438.839349][T25604]  charge_memcg+0x1a2/0x2b0
[  438.839368][T25604]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  438.839384][T25604]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  438.839401][T25604]  __swap_cache_prepare_and_add+0xdc/0x700
[  438.839419][T25604]  ? page_rmappable_folio+0x9a/0x170
[  438.839440][T25604]  swap_cache_alloc_folio+0xf1/0x240
[  438.839456][T25604]  swap_cluster_readahead+0x355/0x670
[  438.839475][T25604]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  438.839498][T25604]  ? get_vma_policy+0x27b/0x3c0
[  438.839519][T25604]  swapin_readahead+0x196/0xc50
[  438.839535][T25604]  ? swap_table_get+0x1e/0x260
[  438.839551][T25604]  ? __pfx_swapin_readahead+0x10/0x10
[  438.839575][T25604]  ? swap_table_get+0x1e/0x260
[  438.839589][T25604]  ? swap_table_get+0x1e/0x260
[  438.839600][T25604]  ? swap_table_get+0x1e/0x260
[  438.839615][T25604]  ? swap_table_get+0x216/0x260
[  438.839629][T25604]  ? swap_cache_get_folio+0x2e4/0x2f0
[  438.839648][T25604]  do_swap_page+0x555/0x5120
[  438.839667][T25604]  ? __pte_offset_map+0x29/0x240
[  438.839683][T25604]  ? __pte_offset_map+0x29/0x240
[  438.839704][T25604]  ? do_swap_page+0x128/0x5120
[  438.839718][T25604]  ? __pfx_do_swap_page+0x10/0x10
[  438.839730][T25604]  ? __pte_offset_map+0x1ae/0x240
[  438.839747][T25604]  ? pte_offset_map_rw_nolock+0xea/0x160
[  438.839764][T25604]  handle_mm_fault+0x12d2/0x3170
[  438.839791][T25604]  ? handle_mm_fault+0xee/0x3170
[  438.839837][T25604]  ? __pfx_handle_mm_fault+0x10/0x10
[  438.839852][T25604]  ? lock_vma_under_rcu+0x45a/0x500
[  438.839886][T25604]  do_user_addr_fault+0xa73/0x1340
[  438.839906][T25604]  ? rcu_is_watching+0x15/0xb0
[  438.839921][T25604]  ? trace_page_fault_user+0x84/0x1e0
[  438.839937][T25604]  exc_page_fault+0x6a/0xc0
[  438.839956][T25604]  asm_exc_page_fault+0x26/0x30
[  438.839969][T25604] RIP: 0033:0x7f70938507bf
[  438.839983][T25604] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 18 3b 00 89 f0 4c 8d 05 49 f8 3a 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0
[  438.839994][T25604] RSP: 002b:00007ffc5feff9f8 EFLAGS: 00010206
[  438.840008][T25604] RAX: 0000000084b217d4 RBX: ffffffff84b217d4 RCX: 0000000000000001
[  438.840017][T25604] RDX: 00000000000017d4 RSI: ffffffff84b217d4 RDI: 0000000000000003
[  438.840025][T25604] RBP: 0000000000000000 R08: 00007f7093c00000 R09: 00007f7093c02000
[  438.840033][T25604] R10: 0000000084b217d8 R11: 0000000000000003 R12: 00007f7093c16038
[  438.840041][T25604] R13: 0000000000000008 R14: ffffffff84b217d4 R15: 00007f7094745720
[  438.840050][T25604]  ? _copy_from_user+0x94/0xb0
[  438.840070][T25604]  ? _copy_from_user+0x94/0xb0
[  438.840088][T25604]  ? _copy_from_user+0x94/0xb0
[  438.840108][T25604]  </TASK>
[  438.840114][T25604] memory: usage 307200kB, limit 307200kB, failcnt 4021
[  438.961234][T25604] memory+swap: usage 307436kB, limit 9007199254740988kB, failcnt 0
[  438.964868][T25604] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0
[  438.967903][T25604] Memory cgroup stats for /syz2:
[  438.968124][T25604] cache 0
[  438.971345][T25604] rss 0
[  438.972485][T25604] rss_huge 0
[  438.974636][T25604] shmem 0
[  438.975768][T25604] mapped_file 0
[  438.977051][T25604] dirty 0
[  438.978171][T25604] writeback 0
[  438.979561][T25604] workingset_refault_anon 6
[  438.981374][T25604] workingset_refault_file 33
[  438.984074][T25604] swap 241664
[  438.985511][T25604] swapcached 360448
[  438.987004][T25604] pgpgin 183769
[  438.988467][T25604] pgpgout 183757
[  438.989998][T25604] pgfault 330957
[  438.991404][T25604] pgmajfault 12
[  438.995920][T25604] inactive_anon 0
[  439.001796][T25604] active_anon 49152
[  439.003784][T25604] inactive_file 0
[  439.006901][T25604] active_file 0
[  439.009878][T25604] unevictable 0
[  439.011262][T25604] hierarchical_memory_limit 314572800
[  439.015334][T25604] hierarchical_memsw_limit 9223372036854771712
[  439.018694][T25604] total_cache 0
[  439.020154][T25604] total_rss 0
[  439.021427][T25604] total_rss_huge 0
[  439.024400][T25604] total_shmem 0
[  439.026477][T25604] total_mapped_file 0
[  439.028097][T25604] total_dirty 0
[  439.029554][T25604] total_writeback 0
[  439.031112][T25604] total_workingset_refault_anon 6
[  439.034413][T25604] total_workingset_refault_file 33
[  439.036708][T25604] total_swap 241664
[  439.038404][T25637] block nbd1: not configured, cannot reconfigure
[  439.040928][T25604] total_swapcached 360448
[  439.042755][T25604] total_pgpgin 183770
[  439.045399][T25604] total_pgpgout 183758
[  439.047838][T25604] total_pgfault 330964
[  439.049768][T25604] total_pgmajfault 12
[  439.051564][T25604] total_inactive_anon 0
[  439.053779][T25604] total_active_anon 49152
[  439.055657][T25604] total_inactive_file 0
[  439.058939][T25604] total_active_file 0
[  439.062061][T25604] total_unevictable 0
[  439.064747][T25604] anon_cost 0
[  439.067681][T25604] file_cost 0
[  439.068983][T25604] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.6001,pid=25604,uid=0
[  439.082220][T25604] Memory cgroup out of memory: Killed process 25604 (syz.2.6001) total-vm:102364kB, anon-rss:1248kB, file-rss:22860kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  439.184138][T25642] __nla_validate_parse: 7 callbacks suppressed
[  439.184150][T25642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6010'.
[  439.496138][T25668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6017'.
[  439.499192][T25668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6017'.
[  439.634296][T25675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6019'.
[  439.637773][T25675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6019'.
[  439.640785][T25675] netlink: 'syz.2.6019': attribute type 7 has an invalid length.
[  439.643667][T25675] netlink: 'syz.2.6019': attribute type 8 has an invalid length.
[  439.646234][T25675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6019'.
[  440.291980][T25690] netlink: 'syz.1.6024': attribute type 4 has an invalid length.
[  440.518123][T25700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6028'.
[  440.522457][T25700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6028'.
[  440.662485][T25708] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6031'.
[  440.666144][T25709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6031'.
[  440.731239][T25715] block nbd2: not configured, cannot reconfigure
[  441.291770][T25747] Cannot find del_set index 3 as target
[  441.489046][T25760] pim6reg: entered allmulticast mode
[  441.521209][T25769] syzkaller0: entered promiscuous mode
[  441.523670][T25769] syzkaller0: entered allmulticast mode
[  441.705640][T25782] syzkaller0: entered promiscuous mode
[  441.707280][T25782] syzkaller0: entered allmulticast mode
[  442.740400][T25801] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  443.059616][T25825] syzkaller0: entered promiscuous mode
[  443.062849][T25825] syzkaller0: entered allmulticast mode
[  445.992219][T25887] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  446.120207][T25889] bond13: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  446.125866][T25889] bond13 (unregistering): Released all slaves
[  446.897321][T25909] __nla_validate_parse: 16 callbacks suppressed
[  446.897337][T25909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6092'.
[  446.904134][T25909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6092'.
[  446.912981][T25909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6092'.
[  446.917579][T25909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6092'.
[  446.921944][T25901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6090'.
[  446.943635][T25911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6093'.
[  447.096800][T25919] x_tables: duplicate underflow at hook 2
[  447.215435][T25928] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6097'.
[  447.538026][T25943] ipip3: entered promiscuous mode
[  447.743455][T25962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6108'.
[  447.858350][T25976] 8021q: adding VLAN 0 to HW filter on device bond0
[  447.862171][T25976] 8021q: adding VLAN 0 to HW filter on device team0
[  447.898069][T25976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  447.903550][T25976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  447.911058][T25976] 8021q: adding VLAN 0 to HW filter on device hsr0
[  447.914811][T25976] tipc: Resetting bearer <eth:hsr0>
[  447.916838][T25976] tipc: Resetting bearer <eth:hsr0>
[  447.920556][T25976] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  447.968333][T25984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6115'.
[  447.977647][T25986] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6116'.
[  448.062774][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  448.064932][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  448.080517][T25997] xt_hashlimit: max too large, truncated to 1048576
[  448.086228][T25997] xt_ecn: cannot match TCP bits for non-tcp packets
[  448.156694][T26004] netlink: 'syz.2.6121': attribute type 1 has an invalid length.
[  448.182451][T26004] 8021q: adding VLAN 0 to HW filter on device bond14
[  448.273294][T26013] xt_socket: unknown flags 0x4
[  448.333771][T26025] ipip4: entered promiscuous mode
[  448.343428][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  448.346180][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  448.378413][T26030] sctp: [Deprecated]: syz.0.6131 (pid 26030) Use of struct sctp_assoc_value in delayed_ack socket option.
[  448.378413][T26030] Use struct sctp_sack_info instead
[  448.385227][T26030] sctp: [Deprecated]: syz.0.6131 (pid 26030) Use of struct sctp_assoc_value in delayed_ack socket option.
[  448.385227][T26030] Use struct sctp_sack_info instead
[  448.466601][T26039] : renamed from lo (while UP)
[  448.468530][T26037] block nbd2: not configured, cannot reconfigure
[  448.872815][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  448.874984][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  449.125511][T26133] netlink: 'syz.2.6150': attribute type 3 has an invalid length.
[  449.132278][T26133] netlink: 'syz.2.6150': attribute type 3 has an invalid length.
[  449.416633][T26157] bond18: entered promiscuous mode
[  449.418572][T26157] 8021q: adding VLAN 0 to HW filter on device bond18
[  449.627838][T26189] netlink: 'syz.1.6166': attribute type 1 has an invalid length.
[  449.710587][T26198] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  449.719937][T26198] CPU: 1 UID: 0 PID: 26198 Comm: syz.0.6170 Not tainted syzkaller #0 PREEMPT(full) 
[  449.719951][T26198] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  449.719956][T26198] Call Trace:
[  449.719960][T26198]  <TASK>
[  449.719964][T26198]  dump_stack_lvl+0xe8/0x150
[  449.719978][T26198]  sysfs_warn_dup+0x8e/0xa0
[  449.719989][T26198]  sysfs_do_create_link_sd+0xc0/0x110
[  449.719999][T26198]  device_add_class_symlinks+0x1cf/0x240
[  449.720029][T26198]  device_add+0x475/0xbb0
[  449.720040][T26198]  wiphy_register+0x1fb1/0x2fe0
[  449.720054][T26198]  ? __pfx_wiphy_register+0x10/0x10
[  449.720062][T26198]  ? __pfx_netdev_run_todo+0x10/0x10
[  449.720071][T26198]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  449.720084][T26198]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  449.720099][T26198]  ieee80211_register_hw+0x3c53/0x4910
[  449.720114][T26198]  ? ieee80211_register_hw+0x1941/0x4910
[  449.720132][T26198]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  449.720142][T26198]  ? __asan_memset+0x22/0x50
[  449.720152][T26198]  ? __hrtimer_setup+0x1b7/0x260
[  449.720162][T26198]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  449.720174][T26198]  mac80211_hwsim_new_radio+0x3327/0x57e0
[  449.720195][T26198]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  449.720204][T26198]  ? kstrndup+0xbf/0x160
[  449.720216][T26198]  hwsim_new_radio_nl+0xe20/0x26e0
[  449.720225][T26198]  ? unwind_next_frame+0xa6/0x2550
[  449.720242][T26198]  ? is_bpf_text_address+0x26/0x2b0
[  449.720255][T26198]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  449.720264][T26198]  ? __kernel_text_address+0xd/0x30
[  449.720275][T26198]  ? unwind_get_return_address+0x4d/0x90
[  449.720284][T26198]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  449.720296][T26198]  ? arch_stack_walk+0xfb/0x150
[  449.720310][T26198]  ? stack_trace_save+0xa9/0x100
[  449.720325][T26198]  ? __pfx_stack_trace_save+0x10/0x10
[  449.720337][T26198]  ? stack_depot_save_flags+0x33/0x810
[  449.720347][T26198]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  449.720363][T26198]  ? __nla_validate_parse+0x2480/0x2dc0
[  449.720373][T26198]  ? ____sys_sendmsg+0x972/0x9f0
[  449.720385][T26198]  ? ___sys_sendmsg+0x2a5/0x360
[  449.720403][T26198]  ? __pfx___nla_validate_parse+0x10/0x10
[  449.720421][T26198]  ? rcu_is_watching+0x15/0xb0
[  449.720430][T26198]  ? trace_kmalloc+0x2a/0xf0
[  449.720444][T26198]  ? __nla_parse+0x40/0x60
[  449.720456][T26198]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  449.720466][T26198]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  449.720478][T26198]  genl_family_rcv_msg_doit+0x22a/0x330
[  449.720489][T26198]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  449.720503][T26198]  ? bpf_lsm_capable+0x9/0x20
[  449.720514][T26198]  ? security_capable+0x7e/0x2c0
[  449.720526][T26198]  genl_rcv_msg+0x61c/0x7a0
[  449.720537][T26198]  ? __pfx_genl_rcv_msg+0x10/0x10
[  449.720545][T26198]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  449.720560][T26198]  netlink_rcv_skb+0x232/0x4b0
[  449.720572][T26198]  ? __pfx_genl_rcv_msg+0x10/0x10
[  449.720580][T26198]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  449.720597][T26198]  ? down_read+0x270/0x2e0
[  449.720604][T26198]  ? genl_rcv+0xd/0x40
[  449.720613][T26198]  genl_rcv+0x28/0x40
[  449.720620][T26198]  netlink_unicast+0x75c/0x8e0
[  449.720634][T26198]  netlink_sendmsg+0x813/0xb40
[  449.720649][T26198]  ? __pfx_netlink_sendmsg+0x10/0x10
[  449.720661][T26198]  ? aa_sock_msg_perm+0xf1/0x1b0
[  449.720672][T26198]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  449.720683][T26198]  ____sys_sendmsg+0x972/0x9f0
[  449.720694][T26198]  ? __might_fault+0xaf/0x130
[  449.720707][T26198]  ? __pfx_____sys_sendmsg+0x10/0x10
[  449.720745][T26198]  ? import_iovec+0x73/0xa0
[  449.720758][T26198]  ___sys_sendmsg+0x2a5/0x360
[  449.720769][T26198]  ? __lock_acquire+0x6b5/0x2cf0
[  449.720779][T26198]  ? __pfx____sys_sendmsg+0x10/0x10
[  449.720793][T26198]  ? futex_wake+0x4ac/0x580
[  449.720814][T26198]  ? __fget_files+0x2a/0x420
[  449.720823][T26198]  ? __fget_files+0x3a0/0x420
[  449.720836][T26198]  __x64_sys_sendmsg+0x1bd/0x2a0
[  449.720848][T26198]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  449.720863][T26198]  ? rcu_is_watching+0x15/0xb0
[  449.720875][T26198]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.720884][T26198]  do_syscall_64+0x15f/0xf80
[  449.720891][T26198]  ? trace_irq_disable+0x3b/0x140
[  449.720905][T26198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.720912][T26198] RIP: 0033:0x7f356259cdd9
[  449.720921][T26198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  449.720928][T26198] RSP: 002b:00007f35634df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  449.720937][T26198] RAX: ffffffffffffffda RBX: 00007f3562815fa0 RCX: 00007f356259cdd9
[  449.720943][T26198] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006
[  449.720947][T26198] RBP: 00007f3562632d69 R08: 0000000000000000 R09: 0000000000000000
[  449.720952][T26198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  449.720956][T26198] R13: 00007f3562816038 R14: 00007f3562815fa0 R15: 00007ffc6c52de78
[  449.720969][T26198]  </TASK>
[  449.904843][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  449.907140][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  450.231961][T26212] syzkaller0: entered promiscuous mode
[  450.235612][T26212] syzkaller0: entered allmulticast mode
[  450.407888][T26224] macsec0: entered promiscuous mode
[  450.587651][T26236] macvlan0: entered promiscuous mode
[  450.591727][T26236] macvlan0: entered allmulticast mode
[  450.658923][T26238] netlink: 'syz.0.6181': attribute type 1 has an invalid length.
[  450.847354][T26245]  speed is unknown, defaulting to 1000
[  450.942970][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  451.502914][T26302] netlink: 'syz.1.6201': attribute type 1 has an invalid length.
[  451.687161][T26320] netlink: 'syz.2.6206': attribute type 1 has an invalid length.
[  451.690494][T26320] netlink: 'syz.2.6206': attribute type 2 has an invalid length.
[  451.906808][T26337] __nla_validate_parse: 30 callbacks suppressed
[  451.906828][T26337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6212'.
[  451.931200][T26336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6212'.
[  451.943921][T26336] bond19: entered promiscuous mode
[  451.947503][T26336] 8021q: adding VLAN 0 to HW filter on device bond19
[  452.019902][T26345] xt_cluster: node mask cannot exceed total number of nodes
[  452.072070][T26345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6215'.
[  452.080282][T26345] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  452.114211][T26352] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6216'.
[  452.168773][T26354] netlink: 'syz.1.6217': attribute type 7 has an invalid length.
[  452.178622][T26354] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6217'.
[  452.341529][T26370] netlink: 'syz.1.6223': attribute type 3 has an invalid length.
[  452.347352][T26370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6223'.
[  452.390680][T26379] block nbd1: not configured, cannot reconfigure
[  452.468986][T26390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6229'.
[  452.713882][T26418] netlink: 272 bytes leftover after parsing attributes in process `syz.0.6238'.
[  452.730528][T26418] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6238'.
[  452.900837][T26429] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6241'.
[  453.022799][    C1] net_ratelimit: 6 callbacks suppressed
[  453.022815][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  453.027143][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  454.066474][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  454.068538][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  455.102884][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  455.105075][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  456.133628][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  456.136203][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  456.902691][    C0] sched: DL replenish lagged too much
[  456.969452][T26436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  457.177276][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  458.216069][    C1] net_ratelimit: 1 callbacks suppressed
[  458.216086][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  458.219968][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  459.267770][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  459.269877][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  460.297986][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  460.300115][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  461.338547][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  461.340678][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  462.380446][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  462.382555][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  463.432423][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  463.434850][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  464.473878][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  464.476556][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  465.495402][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  465.498232][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  466.547925][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  466.550051][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  467.585718][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  467.587809][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  468.631251][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  468.633392][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  469.656101][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  469.658219][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  470.696671][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  470.698922][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  471.746756][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  471.748920][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  472.774124][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  472.776276][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  473.815441][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  473.817592][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  474.862985][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  474.865055][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  475.897128][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  475.899102][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  476.935612][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  476.937805][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  477.985921][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  477.987943][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  479.020770][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  479.023056][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  480.055738][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  480.057738][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  481.110547][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  481.112631][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  482.136169][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  482.138823][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  483.179045][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  483.181160][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  484.228788][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  484.230864][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  485.261813][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  485.264636][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  485.571068][T26472] validate_nla: 2 callbacks suppressed
[  485.571089][T26472] netlink: 'syz.2.6248': attribute type 11 has an invalid length.
[  486.293548][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  486.295967][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  487.345340][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  487.347639][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  488.377838][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  488.380113][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  489.422469][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  489.424754][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  490.452802][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  490.454848][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  491.495185][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  491.497246][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  492.543215][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  492.545302][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  493.575026][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  493.576985][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  494.615096][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  494.617121][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  495.658312][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  495.661233][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  496.694388][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  496.696657][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  497.741267][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  497.743882][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  498.774818][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  498.776885][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  499.817062][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  499.819223][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  500.865566][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  500.867660][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  501.905248][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  501.907832][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  502.939802][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  502.941871][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  503.983828][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  503.986426][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  505.029408][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  505.031432][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  506.056557][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  506.059184][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  507.093027][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  507.095632][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  508.133646][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  508.136459][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  509.173603][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  509.175547][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  509.274981][T26492] xt_ecn: cannot match TCP bits for non-tcp packets
[  510.223148][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  510.225349][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  511.259610][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  511.261673][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  512.299543][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  512.302266][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  513.338613][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  513.340646][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  514.378836][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  514.380902][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  515.426234][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  515.428288][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  516.467506][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  516.469551][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  517.406510][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  517.499614][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  517.501842][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  517.543000][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  517.647155][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  517.846088][ T5000] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  518.291401][ T5000] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  518.534269][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  518.536311][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  518.620302][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  518.721013][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  519.574949][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  519.577007][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  519.920611][T26502] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  520.015219][T26502] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  520.075081][T26502] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  520.616495][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  520.618681][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  520.866523][ T5000] Bluetooth: hci3: command tx timeout
[  521.654425][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  521.656446][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  522.362145][T26512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6256'.
[  522.492526][ T5000] Bluetooth: hci1: command tx timeout
[  522.695333][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  522.697413][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  522.940252][ T5000] Bluetooth: hci3: command tx timeout
[  523.744906][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  523.747061][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  524.551706][ T5000] Bluetooth: hci1: command tx timeout
[  524.782970][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  524.785674][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  525.035712][ T5000] Bluetooth: hci3: command tx timeout
[  525.824309][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  525.826732][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  526.635957][ T5000] Bluetooth: hci1: command tx timeout
[  526.869051][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  526.871733][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  527.691857][ T5000] Bluetooth: hci3: command tx timeout
[  527.900866][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  527.903023][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  528.712566][ T5000] Bluetooth: hci1: command tx timeout
[  528.948255][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  528.950320][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  529.972756][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  529.974856][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  531.023923][    C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  531.026244][    C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  531.515457][T26485] bond0: (slave syz_tun): Releasing backup interface
[  534.481310][T26502] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  534.645770][T26502] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  534.824475][T26502] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  534.913948][T26502] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  535.048307][T26502] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  536.460277][T26512] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR
[  537.593169][ T5000] Bluetooth: hci0: command tx timeout
[  539.672071][ T5000] Bluetooth: hci0: command tx timeout
[  541.787637][ T5000] Bluetooth: hci0: command tx timeout
[  543.914376][ T5000] Bluetooth: hci0: command tx timeout
[  576.445805][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  576.504510][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  576.540158][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  576.660792][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  576.728070][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  577.051223][T26496]  speed is unknown, defaulting to 1000
[  577.300686][T26502] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  577.612521][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  577.712451][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  578.933442][T26556] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  579.655153][T26556] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  580.548870][ T5000] Bluetooth: hci4: command tx timeout
[  581.101179][   T13] vlan6: left allmulticast mode
[  581.109886][   T13] geneve0: left allmulticast mode
[  581.204687][   T13] vlan6: left promiscuous mode
[  581.206279][   T13] geneve0: left promiscuous mode
[  581.273930][   T13] bridge0: port 1(vlan6) entered disabled state
[  582.157124][   T13] tipc: Resetting bearer <eth:syzkaller0>
[  582.229696][ T5000] Bluetooth: hci2: command tx timeout
[  582.631955][ T5000] Bluetooth: hci4: command tx timeout
[  584.295514][ T5000] Bluetooth: hci2: command tx timeout
[  584.703453][ T5000] Bluetooth: hci4: command tx timeout
[  586.390223][ T5000] Bluetooth: hci2: command tx timeout
[  586.831275][ T5000] Bluetooth: hci4: command tx timeout
[  588.761557][ T5000] Bluetooth: hci2: command tx timeout
[  598.335885][T26556] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  598.642190][T26556] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  598.686876][T26556] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  598.791267][T26556] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  598.887396][T26556] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  601.423905][ T5000] Bluetooth: hci5: command tx timeout
[  603.508078][ T5000] Bluetooth: hci5: command tx timeout
[  605.588976][ T5000] Bluetooth: hci5: command tx timeout
[  607.668619][ T5000] Bluetooth: hci5: command tx timeout
[  642.060877][ T5000] Bluetooth: hci3: command 0x0406 tx timeout
[  647.123991][ T5000] Bluetooth: hci1: command 0x0406 tx timeout
[  650.449469][ T5000] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  650.538249][ T5000] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  650.565184][ T5000] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  651.431036][T26502] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  651.510407][T26502] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  652.217510][T26556] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  652.279246][T26556] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  652.371665][T26556] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  652.435104][T26556] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  652.489773][T26556] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  655.048196][ T5000] Bluetooth: hci7: command tx timeout
[  655.118020][ T5000] Bluetooth: hci6: command tx timeout
[  656.015152][T26556] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  656.055916][T26556] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  656.120446][T26556] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  656.240709][T26556] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  656.309487][T26556] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  657.199536][ T5000] Bluetooth: hci7: command tx timeout
[  657.201435][ T5000] Bluetooth: hci6: command tx timeout
[  658.554354][T26556] Bluetooth: hci8: command tx timeout
[  659.370019][T26556] Bluetooth: hci6: command tx timeout
[  659.388425][ T5000] Bluetooth: hci7: command tx timeout
[  660.623454][ T5000] Bluetooth: hci8: command tx timeout
[  661.425791][ T5000] Bluetooth: hci7: command tx timeout
[  661.542104][ T5000] Bluetooth: hci6: command tx timeout
[  662.475474][ T5000] Bluetooth: hci0: command 0x0406 tx timeout
[  662.703644][ T5000] Bluetooth: hci8: command tx timeout
[  665.045662][T26556] Bluetooth: hci8: command tx timeout
[  676.327968][   T13] bond5 (unregistering): (slave ip6erspan1): Releasing active interface
[  688.089097][   T13] bond18 (unregistering): (slave ip6gre1): Releasing backup interface
[  688.101497][   T13] ip6gre1 (unregistering): left promiscuous mode
[  703.586525][T26502] Bluetooth: hci2: command 0x0406 tx timeout
[  703.586792][ T5000] Bluetooth: hci4: command 0x0406 tx timeout
[  711.715132][ T5620] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  711.909054][ T5620] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  712.027924][ T5000] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  712.093719][ T5000] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  712.187544][ T5000] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  712.258353][ T5000] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  712.367401][T26556] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  712.480916][T26556] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  712.771332][ T5000] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  712.827131][ T5000] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  714.555663][ T5000] Bluetooth: hci9: command tx timeout
[  715.419470][ T5000] Bluetooth: hci10: command tx timeout
[  716.625292][ T5000] Bluetooth: hci9: command tx timeout
[  717.600627][ T5000] Bluetooth: hci10: command tx timeout
[  718.702137][ T5000] Bluetooth: hci9: command tx timeout
[  719.060995][ T5620] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  719.171629][ T5620] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  719.400666][ T5620] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  719.546687][ T5620] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  719.626072][ T5620] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  719.659645][ T5620] Bluetooth: hci10: command tx timeout
[  720.882778][ T5620] Bluetooth: hci9: command tx timeout
[  721.772180][ T5620] Bluetooth: hci10: command tx timeout
[  722.470890][T26502] Bluetooth: hci11: command tx timeout
[  723.910000][T26502] Bluetooth: hci5: command 0x0406 tx timeout
[  724.541034][ T5620] Bluetooth: hci11: command tx timeout
[  725.589858][   T34] INFO: task kworker/0:2:942 blocked for more than 143 seconds.
[  725.592443][   T34]       Not tainted syzkaller #0
[  725.609190][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  725.611882][   T34] task:kworker/0:2     state:D stack:23208 pid:942   tgid:942   ppid:2      task_flags:0x4208060 flags:0x00080000
[  725.623161][   T34] Workqueue: events switchdev_deferred_process_work
[  725.625394][   T34] Call Trace:
[  725.626687][   T34]  <TASK>
[  725.627813][   T34]  __schedule+0x17b4/0x5680
[  725.629549][   T34]  ? do_raw_spin_unlock+0x4d/0x210
[  725.631405][   T34]  ? __pfx___schedule+0x10/0x10
[  725.657501][   T34]  ? schedule+0x90/0x360
[  725.659039][   T34]  schedule+0x164/0x360
[  725.660563][   T34]  schedule_preempt_disabled+0x13/0x30
[  725.893866][   T34]  __mutex_lock+0x7f7/0x1550
[  725.895523][   T34]  ? __mutex_lock+0x608/0x1550
[  725.897050][   T34]  ? switchdev_deferred_process_work+0xe/0x20
[  725.899116][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  725.900900][   T34]  ? process_scheduled_works+0xa70/0x1860
[  725.983670][   T34]  ? process_scheduled_works+0xa70/0x1860
[  726.010533][   T34]  switchdev_deferred_process_work+0xe/0x20
[  726.208393][   T34]  process_scheduled_works+0xb5d/0x1860
[  726.210261][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  726.212247][   T34]  ? assign_work+0x3d5/0x5e0
[  726.267519][   T34]  worker_thread+0xa53/0xfc0
[  726.269444][   T34]  kthread+0x388/0x470
[  726.271036][   T34]  ? __pfx_worker_thread+0x10/0x10
[  726.285312][   T34]  ? __pfx_kthread+0x10/0x10
[  726.287263][   T34]  ret_from_fork+0x514/0xb70
[  726.751916][ T5620] Bluetooth: hci11: command tx timeout
[  726.829886][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  726.832141][   T34]  ? __switch_to+0xc79/0x1410
[  726.842174][   T34]  ? __pfx_kthread+0x10/0x10
[  727.108165][   T34]  ret_from_fork_asm+0x1a/0x30
[  727.109671][   T34]  </TASK>
[  727.110729][   T34] INFO: task dhcpcd:5355 blocked for more than 144 seconds.
[  727.595264][   T34]       Not tainted syzkaller #0
[  727.597261][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  727.619403][   T34] task:dhcpcd          state:D stack:21656 pid:5355  tgid:5355  ppid:5354   task_flags:0x400140 flags:0x00080000
[  727.641335][   T34] Call Trace:
[  727.642468][   T34]  <TASK>
[  727.653454][   T34]  __schedule+0x17b4/0x5680
[  727.654914][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  727.656473][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  727.658142][   T34]  ? stack_depot_save_flags+0x33/0x810
[  727.659853][   T34]  ? __pfx___schedule+0x10/0x10
[  727.661373][   T34]  ? schedule+0x90/0x360
[  727.841886][   T34]  schedule+0x164/0x360
[  727.849836][   T34]  schedule_preempt_disabled+0x13/0x30
[  727.851536][   T34]  __mutex_lock+0x7f7/0x1550
[  727.859014][   T34]  ? __mutex_lock+0x608/0x1550
[  727.860562][   T34]  ? rtnl_dumpit+0x92/0x200
[  727.861976][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  727.956484][   T34]  ? rcu_is_watching+0x15/0xb0
[  727.958011][   T34]  ? trace_kmalloc+0x2a/0xf0
[  727.959466][   T34]  ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0
[  727.961498][   T34]  ? __pfx_rtnl_dump_ifinfo+0x10/0x10
[  728.219894][   T34]  rtnl_dumpit+0x92/0x200
[  728.232967][   T34]  netlink_dump+0x702/0xe10
[  728.234394][   T34]  ? __pfx_netlink_dump+0x10/0x10
[  728.235949][   T34]  ? netlink_recvmsg+0x5d6/0xa50
[  728.244516][   T34]  ? kmem_cache_free+0x182/0x650
[  728.246141][   T34]  netlink_recvmsg+0x690/0xa50
[  728.247672][   T34]  ? __might_fault+0xaf/0x130
[  728.249177][   T34]  ? __pfx_netlink_recvmsg+0x10/0x10
[  728.250806][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  728.590814][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  728.592441][   T34]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  728.601230][   T34]  ? security_socket_recvmsg+0x7e/0x2c0
[  728.676541][   T34]  ? __pfx_netlink_recvmsg+0x10/0x10
[  728.678395][   T34]  sock_recvmsg+0x172/0x1b0
[  728.679921][   T34]  ____sys_recvmsg+0x1e6/0x4a0
[  728.681541][   T34]  ? __pfx_____sys_recvmsg+0x10/0x10
[  728.794163][   T34]  ? import_iovec+0x73/0xa0
[  728.796209][   T34]  ___sys_recvmsg+0x215/0x590
[  728.819308][   T34]  ? __pfx____sys_recvmsg+0x10/0x10
[  728.836547][   T34]  ? __pfx_handle_mm_fault+0x10/0x10
[  728.838591][   T34]  __x64_sys_recvmsg+0x1ba/0x2a0
[  728.854832][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  728.857161][   T34]  ? do_user_addr_fault+0xc6f/0x1340
[  728.872850][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.875441][   T34]  do_syscall_64+0x15f/0xf80
[  728.877139][   T34]  ? trace_irq_disable+0x3b/0x140
[  728.901698][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.924300][   T34] RIP: 0033:0x7f9e2c05591e
[  728.925813][   T34] RSP: 002b:00007ffff3e06498 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  728.955549][ T5620] Bluetooth: hci11: command tx timeout
[  729.085775][   T34] RAX: ffffffffffffffda RBX: 00007ffff3e075c0 RCX: 00007f9e2c05591e
[  729.088666][   T34] RDX: 0000000000000000 RSI: 00007ffff3e074e0 RDI: 0000000000000010
[  729.282747][   T34] RBP: 00007ffff3e07550 R08: 0000000000000000 R09: 0000000000000000
[  729.285388][   T34] R10: 000000000000009f R11: 0000000000000246 R12: 00000000000008e0
[  729.287947][   T34] R13: 00007ffff3e074c4 R14: 00007ffff3e074e0 R15: 00007ffff3e074d0
[  729.290603][   T34]  </TASK>
[  729.291846][   T34] INFO: task kworker/u10:12:24408 blocked for more than 147 seconds.
[  729.414935][   T34]       Not tainted syzkaller #0
[  729.416488][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  729.419053][   T34] task:kworker/u10:12  state:D stack:26296 pid:24408 tgid:24408 ppid:2      task_flags:0x4208060 flags:0x00080000
[  729.836403][   T34] Workqueue: events_unbound linkwatch_event
[  729.838466][   T34] Call Trace:
[  729.839576][   T34]  <TASK>
[  729.840528][   T34]  __schedule+0x17b4/0x5680
[  730.208656][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  730.210249][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  730.275245][   T34]  ? __pfx___schedule+0x10/0x10
[  730.276813][   T34]  ? schedule+0x90/0x360
[  730.278111][   T34]  schedule+0x164/0x360
[  730.279434][   T34]  schedule_preempt_disabled+0x13/0x30
[  730.344668][   T34]  __mutex_lock+0x7f7/0x1550
[  730.346205][   T34]  ? timerqueue_linked_add+0x287/0x2e0
[  730.348086][   T34]  ? __mutex_lock+0x608/0x1550
[  730.349767][   T34]  ? linkwatch_event+0xe/0x60
[  730.351449][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  730.376889][   T34]  ? process_scheduled_works+0xa70/0x1860
[  730.378919][   T34]  ? process_scheduled_works+0xa70/0x1860
[  730.380856][   T34]  linkwatch_event+0xe/0x60
[  730.382362][   T34]  process_scheduled_works+0xb5d/0x1860
[  730.406684][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  730.574087][   T34]  ? assign_work+0x3d5/0x5e0
[  730.576358][   T34]  worker_thread+0xa53/0xfc0
[  730.578243][   T34]  kthread+0x388/0x470
[  730.991392][   T34]  ? __pfx_worker_thread+0x10/0x10
[  731.004752][   T34]  ? __pfx_kthread+0x10/0x10
[  731.006779][   T34]  ret_from_fork+0x514/0xb70
[  731.008819][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  731.011074][   T34]  ? __switch_to+0xc79/0x1410
[  731.023454][   T34]  ? __pfx_kthread+0x10/0x10
[  731.024962][   T34]  ret_from_fork_asm+0x1a/0x30
[  731.026555][   T34]  </TASK>
[  731.051481][   T34] INFO: task syz-executor:26496 blocked for more than 148 seconds.
[  731.066448][   T34]       Not tainted syzkaller #0
[  731.068178][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  731.228476][   T34] task:syz-executor    state:D stack:25624 pid:26496 tgid:26496 ppid:1      task_flags:0x400140 flags:0x00080002
[  731.244838][   T34] Call Trace:
[  731.265960][   T34]  <TASK>
[  731.267026][   T34]  __schedule+0x17b4/0x5680
[  731.493471][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  731.495591][   T34]  ? __kernel_text_address+0xd/0x30
[  731.497337][   T34]  ? __pfx___schedule+0x10/0x10
[  731.499001][   T34]  ? schedule+0x90/0x360
[  731.500494][   T34]  schedule+0x164/0x360
[  731.502130][   T34]  schedule_preempt_disabled+0x13/0x30
[  731.546606][   T34]  __mutex_lock+0x7f7/0x1550
[  731.548130][   T34]  ? kasan_save_track+0x4f/0x80
[  731.549878][   T34]  ? kasan_save_track+0x3e/0x80
[  731.744354][   T34]  ? __mutex_lock+0x608/0x1550
[  731.927070][   T34]  ? ip_tunnel_init_net+0x2d7/0x840
[  731.929343][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  731.931502][   T34]  ? net_generic+0x1e/0x240
[  731.993905][   T34]  ? net_generic+0x1e/0x240
[  731.995483][   T34]  ip_tunnel_init_net+0x2d7/0x840
[  731.997129][   T34]  ? __pfx_ip_tunnel_init_net+0x10/0x10
[  732.078742][   T34]  ? __kmalloc_noprof+0x37d/0x760
[  732.080429][   T34]  ops_init+0x35c/0x5c0
[  732.081931][   T34]  setup_net+0x118/0x340
[  732.092764][   T34]  ? __pfx_setup_net+0x10/0x10
[  732.094551][   T34]  ? preinit_net+0x492/0x7b0
[  732.096123][   T34]  copy_net_ns+0x50e/0x730
[  732.097707][   T34]  create_new_namespaces+0x3e7/0x6a0
[  732.099563][   T34]  ? security_capable+0x7e/0x2c0
[  732.101343][   T34]  unshare_nsproxy_namespaces+0x149/0x190
[  732.239270][   T34]  ksys_unshare+0x57d/0x9f0
[  732.241203][   T34]  ? __pfx_ksys_unshare+0x10/0x10
[  732.317124][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.319250][   T34]  __x64_sys_unshare+0x38/0x50
[  732.690521][   T34]  do_syscall_64+0x15f/0xf80
[  732.692030][   T34]  ? trace_irq_disable+0x3b/0x140
[  732.754631][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.756556][   T34] RIP: 0033:0x7fe84459e0a7
[  732.757967][   T34] RSP: 002b:00007ffe89f47458 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  733.014565][   T34] RAX: ffffffffffffffda RBX: 00007fe844815f40 RCX: 00007fe84459e0a7
[  733.059564][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  733.076000][   T34] RBP: 00007fe8448167b8 R08: 0000000000000000 R09: 0000000000000000
[  733.091491][   T34] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[  733.273201][   T34] R13: 0000000000000003 R14: 00007ffe89f47698 R15: 0000000000000000
[  733.315570][   T34]  </TASK>
[  733.316696][   T34] INFO: task syz-executor:26497 blocked for more than 151 seconds.
[  733.319473][   T34]       Not tainted syzkaller #0
[  733.602346][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  733.612521][   T34] task:syz-executor    state:D stack:26704 pid:26497 tgid:26497 ppid:1      task_flags:0x400140 flags:0x00080002
[  733.660168][   T34] Call Trace:
[  733.661544][   T34]  <TASK>
[  733.721960][   T34]  __schedule+0x17b4/0x5680
[  733.732053][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  733.743231][   T34]  ? __pfx___schedule+0x10/0x10
[  733.745255][   T34]  ? schedule+0x90/0x360
[  733.746660][   T34]  schedule+0x164/0x360
[  733.748067][   T34]  schedule_preempt_disabled+0x13/0x30
[  733.851148][   T34]  __mutex_lock+0x7f7/0x1550
[  733.861951][   T34]  ? __mutex_lock+0x608/0x1550
[  733.873397][   T34]  ? add_one_compat_dev+0xf0/0x650
[  733.875188][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  733.876916][   T34]  ? rdma_dev_init_net+0x238/0x2f0
[  733.878734][   T34]  add_one_compat_dev+0xf0/0x650
[  733.880728][   T34]  ? down_read+0x270/0x2e0
[  733.882546][   T34]  rdma_dev_init_net+0x243/0x2f0
[  734.044868][   T34]  ? __pfx_rdma_dev_init_net+0x10/0x10
[  734.046676][   T34]  ? __kmalloc_noprof+0x37d/0x760
[  734.048363][   T34]  ops_init+0x35c/0x5c0
[  734.118322][   T34]  setup_net+0x118/0x340
[  734.119912][   T34]  ? __pfx_setup_net+0x10/0x10
[  734.121480][   T34]  ? preinit_net+0x492/0x7b0
[  734.741856][   T34]  copy_net_ns+0x50e/0x730
[  734.750451][   T34]  create_new_namespaces+0x3e7/0x6a0
[  734.848122][   T34]  ? security_capable+0x7e/0x2c0
[  734.849872][   T34]  unshare_nsproxy_namespaces+0x149/0x190
[  734.851887][   T34]  ksys_unshare+0x57d/0x9f0
[  734.860264][   T34]  ? __pfx_ksys_unshare+0x10/0x10
[  734.861931][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.869978][   T34]  __x64_sys_unshare+0x38/0x50
[  734.871527][   T34]  do_syscall_64+0x15f/0xf80
[  735.048372][   T34]  ? trace_irq_disable+0x3b/0x140
[  735.114232][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.116132][   T34] RIP: 0033:0x7fcc37d9e0a7
[  735.127307][   T34] RSP: 002b:00007fff5bfa88d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[  735.130141][   T34] RAX: ffffffffffffffda RBX: 00007fcc38015f40 RCX: 00007fcc37d9e0a7
[  735.155037][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  735.157804][   T34] RBP: 00007fcc380167b8 R08: 0000000000000000 R09: 0000000000000000
[  735.160724][   T34] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[  735.208712][   T34] R13: 0000000000000003 R14: 00007fff5bfa8b18 R15: 0000000000000000
[  735.211257][   T34]  </TASK>
[  735.212355][   T34] INFO: task syz-executor:26520 blocked for more than 152 seconds.
[  735.328562][   T34]       Not tainted syzkaller #0
[  735.330268][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  735.434783][   T34] task:syz-executor    state:D stack:26760 pid:26520 tgid:26520 ppid:1      task_flags:0x400140 flags:0x00080002
[  735.439231][   T34] Call Trace:
