last executing test programs:

1.374192179s ago: executing program 0 (id=7409):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x34}}, 0x0)
sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, r2, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008044}, 0x8084) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x3, 0x1001, 0x2, 0x1127, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xb}, 0x50) (async)
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000013c0)={'macvtap0\x00', &(0x7f00000012c0)=@ethtool_rxnfc={0x29, 0x1, 0x72, {0xe, @usr_ip6_spec={@remote, @mcast1, 0xffffe896, 0xf7, 0xfb}, {0x0, @remote, 0x1, 0x6, [0x3, 0x4]}, @udp_ip6_spec={@mcast1, @empty, 0x4e21, 0x4e20, 0xa}, {0x0, @link_local, 0x4ee, 0x9, [0x2]}, 0x7f, 0x5}}})
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r6, 0x0, 0x0) (async)
vmsplice(r4, &(0x7f0000000180), 0x2ae, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r8, 0x107, 0x7, &(0x7f0000000080)=0x6, 0x4) (async)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd09003000030030"], 0xfdef)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}]}}}]}, 0x48}}, 0x0)
r11 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r3) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000008c0)={'bridge0\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r13, 0x80, 0xa, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4040000)
sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x58, r11, 0xf03, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40044}, 0x40016) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
getsockopt$inet6_mreq(r3, 0x29, 0x9, &(0x7f0000000040)={@private2, <r14=>0x0}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@getchain={0x54, 0x66, 0x800, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0xffe0, 0x2}, {0x2, 0x9}, {0xc, 0x4}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xf}, {0x8, 0xb, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x200408a4}, 0x4000000)

1.175968454s ago: executing program 0 (id=7412):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c)
shutdown(r1, 0x2)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7e}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94)
syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac437bf8cb64c86dd6bcce16400000000000000000001000000000000000000000000000000002c02000000000000050200090502000005020006c204"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r4=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r4, 0x5}, &(0x7f0000000100)=0x8)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x4, 0x40, 0x0, 0xe, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_address={0x5, 0x6, 0x2b, 0x0, 0x0, @in6={0xa, 0x4e23, 0x1000, @dev={0xfe, 0x80, '\x00', 0x39}}}, @sadb_sa={0x2, 0x1, 0x0, 0xf, 0x0, 0x7, 0x1, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0x10000000, @mcast2, 0xfff}}]}, 0x70}, 0x1, 0x7}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$packet(0x11, 0xa, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xe, &(0x7f00000039c0)=ANY=[@ANYRESDEC=r5], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x2, 0x0, 0x9}, 0x10}, 0x23)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
socket(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffffffffffff5000007000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r7], 0x38}}, 0x10)

944.827691ms ago: executing program 0 (id=7415):
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000540)={0x4, {{0xa, 0x4e20, 0x38, @mcast1, 0xfffff511}}, {{0xa, 0x4e21, 0xcd7, @ipv4={'\x00', '\xff\xff', @remote}, 0x2e}}}, 0x108)
sendmsg$AUDIT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x200, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000))
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x80}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xfffffffffffffff9}}}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa}]}, 0x48}}, 0x0)

877.06694ms ago: executing program 0 (id=7416):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xb872b7b9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000092}, 0x844)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f0000000740))
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000001200)=""/114, 0x72}], 0x2}, 0x562a}], 0x1, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0)

598.040933ms ago: executing program 2 (id=7420):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010328bd700000000000010000014ac27e67f85078408b992e4043d2cc86fda7b7a6bc4c40d3a63df69f44dcef6b048fe900edf4dea44d6a7f6cbe70cc5b5c0cc52e59ae69862600"/84], 0x28}}, 0x44) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x90) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e22, 0x100, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async)
write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600)
getsockopt$inet6_buf(r5, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) (async)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r7, &(0x7f0000002740)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @local, 0x19d}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="380000000000000029000000040000003a030000000000000109000000000000000000c910000000000000000000000000000000000000001400000000000000290000003e0000000a00000000000000140000000000000029000000430000000400000000000000a80000000000000029000000390000003212020a00000000000000000000000000000000000000010000000000000000fc00000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001ff02000000000000000000000000000100000000000000000000000000000000fc010000000000000000000000000000ff0100000000000000000000000000012000000000000000290000"], 0x148}}], 0x2, 0x0) (async)
close(r2)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r8, 0x0, 0x0) (async)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10)
setsockopt(r9, 0x0, 0x7f, &(0x7f0000000040)="e21fb4dbff", 0x5)
connect$inet6(r9, 0x0, 0x0)
recvmsg(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
mmap(&(0x7f000068e000/0x8000)=nil, 0x8000, 0x100000c, 0x12, r6, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) (async)
openat$cgroup_int(r10, 0x0, 0x2, 0x0)

507.005862ms ago: executing program 2 (id=7421):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100003050003e2000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

457.331395ms ago: executing program 1 (id=7422):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000001500)={<r4=>r1, &(0x7f00000003c0)='\xa5[\x00', 0x103342, &(0x7f0000000400)={@align=0x77, {0x5f4, 0x9, 0xb, 0x7}}, 0x7fffffff, &(0x7f0000000480), &(0x7f00000014c0)=0x5})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040)
bind$xdp(r4, &(0x7f0000001540)={0x2c, 0xa, r7, 0x12}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}, @NFT_MSG_NEWFLOWTABLE={0xa0, 0x16, 0xa, 0x3, 0x0, 0x0, {0x59458a91d2e07a28, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x60, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'veth0\x00'}]}]}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x203, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x1d4, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x13, 0x6, "3471ea9203c65349f01f9842843c3a"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xbc, 0x6, "b4e93c63bbdbeac248774ddf982f714c637bdedb5330a0fc6c7080815b83b635ae2c584a0f41b17a560fa3899f8080aac08c0f6ffdd789ac4a27e882695c0e86c42218a9bb6a9daf4739e4cda38ba344c41ed75712b5975946b21c255ee23fed58e1a8335137e499e9e149d5c2fc2999789d1b5ba02ca71555f078994836514b3b9bc9ba96f31930e272d05c8841b3b74ac7604426557e266056a8f54fe951043772c9cd8e6b36fe39912f82d1560dc167ef646b6b4273b6"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xb4, 0x6, "fae413b679ac83962fc85d3d91dd7ec442bbf7168b34961eb5c6a833e39fff4d29670c9dddd0e5b37f255d825b18a795d654ad68580eb1b946efb136065bda28167d3c4928dec5e955af643fe71402f757f942738096c05c25c8b91ee37c5c1caa891378ed8878e8c3df9aa8dd7d38426aec98c7ce310b0c640074674707b9daf6ce08e47d26ae73f1c473a6a1264ec3bc26718f0c23abebc1953f3634b7bc2037c06dfacab169439c64d7209d4e3a8e"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_USERDATA={0x33, 0x7, 0x1, 0x0, "1834a32eee9329a2cf8dd2d69a73b53c94039af7ef73b096b89519979be4ac45faec92723a319e64c86ab8d0b282d6"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x330}, 0x1, 0x0, 0x0, 0x4001}, 0x4080)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'pimreg0\x00', <r9=>0x0})
ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f00000000c0))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x50)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)
recvmmsg(r10, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r11, r9, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20)
r13 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r13, 0x84, 0x22, &(0x7f0000000200)={0x8, 0x200, 0x6, 0x9}, &(0x7f0000000280)=0x10)
close(r12)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x10)

395.734484ms ago: executing program 2 (id=7423):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x1, 0x0, 0x8080000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x17, 0x0, 0x300}, [@nested={0xc, 0x116, 0x0, 0x1, [@nested={0x8, 0xb2, 0x0, 0x1, [@nested={0x4, 0x89}]}]}]}, 0x20}}, 0x0)

393.681547ms ago: executing program 2 (id=7424):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
read$alg(r1, &(0x7f0000000440)=""/90, 0x5a)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000180))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r3, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x100000}}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000600)={0x0, 0xfffffffffffffffa, 0x24f, 0x1})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000300)=0xfe, 0x4)
r8 = socket(0x40000000015, 0x5, 0x0)
sendto$l2tp6(r8, 0x0, 0x0, 0x4000000, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d40)={0x24, r9, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004}, 0x20000800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x30, 0x61, 0x1e]}}, 0x0, 0x29, 0x0, 0x1, 0x4}, 0x28)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, 0x0)
sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x5c, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfc}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xbb8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc006}, 0x0)

312.29475ms ago: executing program 1 (id=7425):
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, &(0x7f00000001c0)='nfc\x00', 0x404700, 0x0, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x3})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1900000004000000040000006637cf2c00000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) (async)
syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaa0000103afffee000000000000000000000000000bb3c0200000000"], 0x0) (async)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60) (async, rerun: 64)
getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x4, 0x0, &(0x7f0000000000)=0xffffffffffffff5b) (async, rerun: 64)
r1 = socket$igmp(0x2, 0x3, 0x2) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}}, 0x0) (async)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000030000000200000008"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20048880) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), r2) (async, rerun: 64)
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r7, 0x0, 0x0, 0x0)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r8, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60)
bind$nfc_llcp(r8, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x23}, 0x60) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x28, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '+,\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008041}, 0x20040000) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffb, {}, [@IFLA_ADDRESS={0xa}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 32)
socket(0x10, 0x3, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x494, 0x30, 0x12f, 0x0, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x7, 0xfffffe00, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x1, 0x3, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc74, 0x1, 0xffffffff, 0x2000010, 0x8, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x5, 0x0, 0x0, 0x2, 0x20000000, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0x80000000}, {0x0, 0x0, 0xb}}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x494}}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'})

311.113229ms ago: executing program 2 (id=7426):
r0 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x1e4c}}], 0x18, 0x4008000}, 0x28008841)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000001ced850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000054000380500000803e0001"], 0x80}}, 0x8000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
accept4$unix(r8, 0x0, &(0x7f0000000140), 0x800)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000), 0x8)
r9 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r9, &(0x7f0000000040), 0x10)
listen(r9, 0x0)
r10 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000002180)={{r5}, 0x0, 0x4, @unused=[0x67, 0x2, 0xb, 0x9], @subvolid=0x7fffffff})
sendmmsg(r10, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x890)

309.804023ms ago: executing program 1 (id=7427):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001100)={&(0x7f0000000080)={0x1060, 0x0, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0x8}, 0xf, 0x5, 0x9, 0xb4f0, 0x26, 'syz1\x00', "f3537902e3494405bee4339968982d354796ece3c22a695c34740a728c1f28b3", "536052dff0bc466b54aaab48cdb91e2b66baf2b27b7e9435d066a7c6f084dd3c", [{0x9, 0x6, {0x1, 0x3}}, {0x5, 0x0, {0x2, 0x6}}, {0x8000, 0x8, {0x0, 0x10}}, {0x4, 0xcb46, {0x0, 0x77e}}, {0x4, 0x6, {0x1, 0x400}}, {0x3ff, 0xfff8, {0x1, 0x4d}}, {0x8000, 0x1, {0x3}}, {0x7, 0x3}, {0xc, 0x800, {0x1, 0xc7}}, {0x80, 0x1000, {0x1}}, {0x8, 0x6, {0x1, 0x1}}, {0x6, 0x455d, {0x0, 0x385783cf}}, {0xe, 0x7fff, {0x1, 0x61}}, {0x4, 0xc, {0x0, 0x3}}, {0x10, 0x0, {0x2, 0xffff}}, {0x81, 0x4, {0x0, 0x8}}, {0x1, 0x0, {0x1}}, {0x3, 0x6, {0x2, 0x4}}, {0x3, 0x3, {0x3, 0xf4b}}, {0x0, 0x9, {0x1, 0x1}}, {0x4, 0xa}, {0x5d5, 0x9, {0x3, 0xd}}, {0x5, 0x200, {0x2, 0x6}}, {0x6}, {0x8, 0x7, {0x0, 0xffffffff}}, {0x7, 0x101, {0x0, 0x83b3}}, {0x800, 0xa283, {0x0, 0x7}}, {0x3, 0x60c8, {0x0, 0x70000000}}, {0xb11, 0x5, {0x2, 0x7}}, {0xe, 0x8000, {0x3, 0x1}}, {0xfeff, 0xbdb, {0x3, 0x1}}, {0x10, 0x3, {0x3}}, {0x4, 0x37, {0x3, 0x1}}, {0x4, 0x8, {0x2, 0x4}}, {0x4e, 0x81, {0x2, 0x9b}}, {0x8, 0x7fff, {0x3, 0x6}}, {0x4, 0x6, {0x2, 0x902}}, {0x1, 0x7, {0x1, 0x2}}, {0x7ff, 0x7, {0x1, 0x2}}, {0x3, 0x5, {0x1, 0xfffffffb}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x9, 0x6, 0x7, 0x2, 0x1, 'syz0\x00', "ec2289a6cc8ec74c69865f531eade590c1098edc1317a649e7660d99558384ab", "187b1d99d92b0dbf505ae931f81c39f61e448e6a146d5571b7a5eb3d07837e44", [{0x4, 0xb, {0x3, 0x3ff}}, {0x9, 0x7fff, {0x3, 0x3}}, {0x8, 0x6118, {0x3, 0x23}}, {0x40, 0x6, {0x0, 0xffffff83}}, {0x253, 0x609, {0x2, 0x2}}, {0x8, 0x0, {0x1, 0xa3}}, {0x8001, 0x5, {0x0, 0x2}}, {0x1, 0x3}, {0x0, 0x0, {0x0, 0x3}}, {0xfffe, 0x1, {0x2, 0xa}}, {0x5, 0x401, {0x2, 0xd}}, {0x7, 0x1, {0x0, 0x40}}, {0x7, 0x40, {0x2, 0xb80}}, {0x868f, 0x6f, {0x2, 0x1}}, {0x2, 0x2, {0x3, 0x6b}}, {0xb9, 0x7, {0x0, 0x1ff}}, {0xa, 0x200, {0x2, 0x3df}}, {0x8, 0x4, {0x1, 0x2}}, {0x0, 0x543c, {0x3, 0x1}}, {0x1, 0xf5c2, {0x1}}, {0x7, 0x80, {0x0, 0x5}}, {0x7ff, 0xa, {0x3, 0x1}}, {0x5, 0xa18, {0x1, 0x2}}, {0x4, 0xff00, {0x2, 0x1000}}, {0x5, 0xfff, {0x1, 0xfff}}, {0xa9, 0x401, {0x0, 0xffffffff}}, {0x3, 0x8000, {0x3, 0x4}}, {0xff, 0x8, {0x1}}, {0x8, 0x3, {0x3, 0x5}}, {0x0, 0x2, {0x2, 0x1}}, {0x0, 0x1, {0x2, 0x10}}, {0x4, 0x2, {0x1, 0x7}}, {0x3, 0x6, {0x2, 0x8000}}, {0xc, 0xe908, {0x1}}, {0x40, 0x2, {0x1, 0x8}}, {0x0, 0x0, {0x1, 0x4}}, {0x100, 0x100, {0x3, 0x31}}, {0x4, 0xfff0, {0x3, 0x2}}, {0x4, 0x5, {0x2, 0x9}}, {0x7, 0x0, {0x1, 0x1ff}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x2, 0xf2, 0x4, 0x9, 0x7, 'syz1\x00', "39bd1801e2c4495da5f485a324a86d7d26b0309a19b4a57ea84ce7ecf859ced5", "8eb81c502f4e215e7a9a526eb1d280e01a32ad869e66fe93b2b285df3a692082", [{0x7, 0x2, {0x3, 0x800}}, {0x80, 0x0, {0x2, 0x1}}, {0x3, 0x6, {0x2, 0x80000000}}, {0x1, 0x3, {0x2, 0x80000001}}, {0x8, 0x2, {0x0, 0x2}}, {0x5, 0x7}, {0x3, 0x31b, {0x1, 0x5}}, {0x3628, 0x5, {0x0, 0xffff}}, {0x8, 0x9, {0x0, 0x4}}, {0x4, 0x36, {0x3, 0xff}}, {0x8, 0xe83, {0x3, 0x3}}, {0x6, 0x8000, {0x2, 0x200}}, {0x7, 0x28, {0x3, 0xf}}, {0x7f, 0x8, {0x1, 0xc0e6}}, {0x1, 0x6, {0x2, 0x2}}, {0xffff, 0x8, {0x1, 0x73a}}, {0x6, 0xeaa, {0x2, 0xffff}}, {0x4, 0x4, {0x2, 0x1}}, {0xa, 0x7, {0x3, 0x8}}, {0x9, 0x17af, {0x1, 0x73}}, {0x8000, 0x4, {0x0, 0x2}}, {0x8001, 0x2, {0x2, 0x2}}, {0x9, 0x4, {0x1, 0xb}}, {0xfffe, 0x6, {0x3, 0x6}}, {0x18d7, 0x0, {0x1, 0xb2}}, {0x5, 0x6, {0x1, 0x1}}, {0x1, 0x8304, {0x1, 0xf125}}, {0x6, 0x9c, {0x3, 0x662}}, {0x3, 0x3, {0x3, 0xfffffffa}}, {0x1, 0x401, {0x2, 0x4}}, {0x6, 0x33, {0x1, 0x3a6f}}, {0x0, 0xfffe, {0x2, 0x10000}}, {0x1, 0x5, {0x0, 0x8}}, {0x7b3b, 0x2, {0x2, 0x7fffffff}}, {0x7fff, 0x3, {0x3, 0x6}}, {0x8, 0x104, {0x3, 0x3}}, {0x6, 0x7f, {0x1, 0x7}}, {0x0, 0x7, {0x1, 0x2}}, {0x0, 0x5, {0x2, 0x2}}, {0xe, 0x6, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x9}, 0x6, 0x1, 0x3, 0x1, 0x21, 'syz0\x00', "04920ccc09b33f39d9baae1927426cd01f521288e34d110e6183c9b988e221be", "817ac1ec4b578a3f2d053b5f5ecf4872021510d406ac25aff17293a5e1c13588", [{0x5, 0xe, {0x3, 0xfff}}, {0x2, 0x1, {0x2, 0x249}}, {0x5, 0x8, {0x6, 0x7}}, {0x474d, 0x400, {0x3, 0xc9a}}, {0x4, 0x4, {0x2, 0xbb}}, {0x5, 0x7, {0x3, 0x1}}, {0x2, 0x38, {0x3, 0x8001}}, {0x1, 0xfffb, {0x3, 0x6}}, {0x9, 0x5, {0x0, 0xffff}}, {0x8, 0x4, {0x0, 0x3}}, {0x4, 0x8, {0x0, 0x50b33d2c}}, {0x5, 0x6, {0xc057820cc92fa1ce, 0x10000}}, {0x0, 0x2, {0x3, 0x8}}, {0x1, 0x451, {0x2, 0x55a}}, {0x5, 0x8, {0x2, 0x3}}, {0x0, 0x6, {0x2, 0x200}}, {0x9, 0x670, {0x2, 0xf2}}, {0xaa0b, 0x1, {0x3, 0xa}}, {0x5, 0x2, {0x2, 0x3}}, {0x8, 0x7ff, {0x1, 0x5}}, {0x3, 0x3, {0x2, 0x6}}, {0xff, 0x0, {0x0, 0xfffffbff}}, {0x8, 0x7, {0x3, 0xff}}, {0x7, 0x2, {0x2, 0x1}}, {0x6, 0x1, {0x1, 0xfffffff9}}, {0x1ff, 0x1ff, {0x1, 0x1}}, {0x1, 0x5, {0x1, 0x1fa}}, {0xd, 0x3, {0x0, 0x5}}, {0x6, 0x223a, {0x3, 0x3}}, {0x7, 0x401, {0x0, 0x9}}, {0xff, 0x2, {0x2, 0x5}}, {0x72f, 0x2, {0x3, 0x6}}, {0x9909, 0x10, {0x0, 0x8}}, {0x4, 0x7, {0x2, 0x8}}, {0x2, 0xd040, {0x2}}, {0x3, 0x7, {0x1, 0x7b609e8b}}, {0x7ef, 0x5, {0x2, 0x8}}, {0x7, 0x4, {0x3, 0xfff}}, {0x5, 0x6, {0x2}}, {0x3, 0x440, {0x1, 0x81}}]}}}, {{0x254, 0x1, {{0x3, 0x8}, 0x2, 0x1, 0x44, 0x3, 0x1c, 'syz1\x00', "cbaa5e47e497b40188bd4e221b65db3b2214993c6de4bf7f8bc4b39cec199814", "cdf28f673eb4f8d45a0ed2d83f909394329371df00f683610bf119fc14d60b3d", [{0x8, 0x9, {0x1, 0x10}}, {0x5, 0x2b, {0x0, 0x1d0}}, {0x100, 0x4, {0x2, 0xfffff001}}, {0x8, 0x9, {0x1, 0x2}}, {0x5, 0x7f, {0x1, 0x1000}}, {0x4, 0xa3ff, {0x3, 0x9}}, {0x100, 0x1, {0x2, 0x7ff}}, {0xa, 0x5a9d, {0x0, 0x562d}}, {0xb, 0x5, {0x0, 0xa563}}, {0xb, 0x5, {0x2, 0x2}}, {0xff, 0x9, {0x0, 0x7f}}, {0x7, 0xfff8, {0x1}}, {0xfff7, 0xfff9, {0x2, 0xb1}}, {0x8, 0xc, {0x2, 0x71}}, {0x5, 0x200, {0x2, 0x4}}, {0x6, 0x5, {0x0, 0xa3}}, {0x8, 0x0, {0x2, 0x400}}, {0x8, 0x2, {0x1, 0x90}}, {0x9, 0x5c5c, {0x2}}, {0x4, 0x7, {0x0, 0x382}}, {0x7, 0x45b, {0x0, 0x6}}, {0x2, 0x1, {0x1, 0x8}}, {0x9db, 0x8cb5, {0x2, 0x6}}, {0x3, 0x8, {0x0, 0x3}}, {0x7, 0x0, {0x0, 0x930}}, {0xff, 0x7ff, {0x0, 0x8}}, {0x49, 0x1, {0x0, 0x1f}}, {0x8, 0x6, {0x1, 0xf}}, {0x5, 0x255, {0x2, 0x7}}, {0x4, 0x65, {0x3, 0x660b24ad}}, {0x2, 0x9, {0x0, 0xe8}}, {0x6, 0x1, {0x0, 0x5}}, {0x7, 0x2, {0x2, 0x2}}, {0xe41, 0x4, {0x0, 0x6}}, {0xf48b, 0x24, {0x1, 0x3}}, {0xa0, 0x7, {0x0, 0x10000}}, {0x0, 0xb, {0x3}}, {0x7fff, 0x8, {0x2, 0x4}}, {0x0, 0x6, {0x3, 0x3b}}, {0xd, 0x401, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x4c, 0xa1, 0x2, 0x3ff, 0x18, 'syz1\x00', "96843412a518df7adfec0265afd0aaf07807b716148c885acc2fb710f32957a5", "86a0b0c7f7c49f8ad2da5ada510e6b4bca3de6700a0a2b2eeb871312e894f2d4", [{0x7, 0x5, {0x3, 0x8}}, {0x7ff, 0x1, {0x2, 0x23}}, {0x1, 0x4, {0x1, 0x8}}, {0x800, 0x3, {0x1, 0xdd}}, {0x1ff, 0x3, {0x0, 0xfffffffc}}, {0x7, 0x7, {0x1, 0x8}}, {0x3, 0x8, {0xa9743dbed189c911, 0x8001}}, {0x7, 0xffff, {0x1}}, {0x3, 0xfffd, {0x0, 0x8}}, {0x2, 0x7114, {0x1, 0x4}}, {0x2, 0xa, {0x0, 0x2}}, {0x19d8, 0xc88a, {0x0, 0x800}}, {0xae, 0x5, {0x2, 0x5}}, {0xd0, 0x0, {0x1, 0x10000}}, {0x100, 0x3, {0x0, 0x7}}, {0x7, 0x9, {0x0, 0x4}}, {0x6, 0x6, {0x2, 0x3}}, {0x82c, 0x6, {0x0, 0x3}}, {0x0, 0xffff, {0x3, 0x4}}, {0x1d5, 0x5, {0x3, 0x8001}}, {0x3, 0x0, {0x1}}, {0x7, 0x7, {0x0, 0x1161}}, {0x8, 0xd, {0x2, 0x40400}}, {0x1, 0x7, {0x3, 0x6}}, {0x100, 0x81, {0x3, 0x80}}, {0x8, 0x3, {0x3, 0x3}}, {0xb, 0x8, {0x0, 0x2}}, {0x1, 0xb24e, {0x1, 0x7}}, {0x2c, 0x2, {0x1, 0x5c16}}, {0x45, 0x4, {0x2, 0x2}}, {0xff, 0x3ff, {0x3, 0x5}}, {0x7, 0x0, {0x1, 0x5}}, {0x80, 0x401, {0x0, 0x2}}, {0x1, 0x3, {0x1, 0x64}}, {0xfff, 0x8, {0x0, 0x8}}, {0x3, 0x3, {0x0, 0x4}}, {0x868, 0x8, {0x2, 0x40}}, {0x7, 0x0, {0x3, 0xffffffff}}, {0x0, 0xbf3, {0x2, 0x1}}, {0xfffe, 0x8b, {0x0, 0x80000001}}]}}}, {{0x254, 0x1, {{0x0, 0xff}, 0x3, 0xfb, 0x2, 0x3, 0xe, 'syz0\x00', "88da5360c4760eda5262da1204b4ce0edd1cf2a8d5ffea772077886388ef08d5", "e431eaa06c048cfde8cad40716f47df436d43f23430fcc93a7c9ffb110605eba", [{0x1, 0x7, {0x1, 0x7}}, {0x9, 0xfff, {0x0, 0xa}}, {0x2, 0x7fff, {0x0, 0x72}}, {0x4, 0x4, {0x1, 0x3}}, {0x1000, 0x7}, {0x5, 0x9, {0x3, 0x101}}, {0xb, 0x1, {0x1, 0x8}}, {0x9, 0x9, {0x1, 0x1}}, {0x81, 0x19e4, {0x2, 0x49}}, {0x6, 0x10, {0x0, 0x7}}, {0xa6, 0x0, {0x3, 0x6}}, {0x1, 0x1, {0x1, 0xfffffffe}}, {0x14, 0x9, {0x1, 0x8}}, {0x2538, 0x4, {0x0, 0x6}}, {0x8, 0xfc01, {0x1, 0xd}}, {0xe, 0x6, {0x1, 0x2}}, {0x3, 0x7fff, {0x2, 0x6}}, {0xba16, 0x40, {0x2, 0x2e01}}, {0xc6, 0x5, {0x0, 0x7f}}, {0x6, 0x2, {0x1}}, {0x800, 0x0, {0x1, 0x8}}, {0x1, 0xc, {0x1, 0x4}}, {0x8, 0xf, {0x3, 0x6}}, {0x4, 0x1ff, {0x0, 0xd73}}, {0x6, 0xffff, {0x3, 0x2}}, {0x8, 0x8, {0x0, 0x401}}, {0x4, 0x2, {0x0, 0x8}}, {0x3, 0x8, {0x2, 0x2}}, {0x40, 0x2, {0x2, 0x8}}, {0x1, 0x5, {0x3}}, {0x5, 0x9b, {0x2, 0x80000000}}, {0x7f, 0x45, {0x0, 0x53a}}, {0x3, 0x3, {0x3, 0x1}}, {0x0, 0x8001, {0x3}}, {0x6, 0x3, {0x3, 0xdd}}, {0x4, 0x7, {0x1, 0x2}}, {0x21, 0x7, {0x2}}, {0x1, 0xfff, {0x3, 0x80000000}}, {0x3, 0x3, {0x2, 0x40}}, {0x7, 0xb96b, {0x2, 0x6}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000)

237.978876ms ago: executing program 1 (id=7428):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000030000000000240804000000040000000000000408000011000000000000000c0000000000000000000000030000000001003f236888d850adcdffff002e615f5f00e66948390f61f00039f85d4f8b736d4c953d0184592b840199b10bc99280c8329594132a29afbc5040ea21e5bc8f5d9cc7a700b23e4fc67d5c3c16fdb8235eea3e9afba6d4dd77f3dfa512250dd3e8f32e23b5d13a4fb953a4f11ffdd75499ec6f799a4c04980d766032257da6c1532b18821fa461482d41a3"], 0x0, 0x5a, 0x0, 0x1}, 0x28)

177.148192ms ago: executing program 1 (id=7429):
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80)
sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="648434c8c193f805fd25f7566f6ade65634460dc65d03b001575ce38dbec2259f36f6913053049b0d346c76e157eec904a3f7353068466ab06f7cf324cc509705f5195af47cd828c7d34cf8874fe9b45a719b99e4760f1bbf838f148d9366a3ed969a738333fb568781587d621e2e8be8ca9d9d4c5fa4ca913354d38ea64c611", 0x80}, {&(0x7f0000000140)="e7d6fe9394a02efeb40b6270a401dc8ca02c977cd7afd9ff47", 0x19}, {&(0x7f0000000180)="5efa20df497828d7d3163d84b706731796cbb2b2c94e76de360fc66912147f7214bff3eb2d0195993ea9f5ab8408ae8cdee03b4777bd65ab7a72147fbd11e2dfa968e6c28aa84e6e385eb7fff74b2aec44435f6212b52638479a97da1da1548b0342a1c493a7589ccd882156ddcff40ea40fa2a9643291d3d299ec0bbf06eeca7918ce784d2aa6e50a55ce447d94ed1db84b3199633f3394af79b03afcab1b0509c9b93171abb438f549c54d0c23729d00517afd7fdd2520ae79af1b4cef539c905ce61609324327dddc6f40ea9675eb4a744077e0bd30f589288aeeab98", 0xde}, {&(0x7f0000000280)="6427b274e43c5b836497cb88b2572d8061caf61d3f477f654772aac4a2d58773d6cacf037126a915145642341ecd8881ce43c07c5640d824cb41f297f6c8a27aba8e575278bc5409c665fbab817e2f7d73626f828489f6a4ac57bacf39dc2d797e1fdcdf75ec620959c767a67f6ea6f2ed4d6180893d85a78b27484de7ddbd3cbe68", 0x82}], 0x4, &(0x7f0000000380)=[@ip_ttl={{0x14}}, @ip_retopts={{0x40, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @rr={0x7, 0x2b, 0x1d, [@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast, @broadcast]}]}}}], 0x58}}, {{&(0x7f0000000400)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000440)="12edf115876693a6816954f1dc01fae0f202848642bf12d52a1dd470058ab6cdb8ffd4bcc37bda6e433d53aaa81cd7b8cedebadd537c1106e1c8d0eff9032984e5b2c2d87ab8f94ae8627a34ca174ebbc88dd2f67a3eeac2d4fd9916fb1fc23e1a2e8d8f68166362e2a24d069e1c6a880c61eb757cf4bc0ca9513a5218147adf872f2493631d4dc565673e149ee50f479034658c4a4580171d97d2aa0bc631a9812f560bc00977f1c411e3590ed8cf5ecda012cc97d9a961119be40fdf4fc0ff7488ef70316c700c90fe21d85befbece71742a844a0b459d29c55de3342020d63d39068270d50e9ddef432ecca", 0xed}, {&(0x7f0000000540)="81536f9f2eb5d84a70333c5e19bd97c56a0fa8a57989dfb1", 0x18}, {&(0x7f0000000580)="9055bac732f0548eb6a92ebe30730a8aabceacf6088401a52eea7550e6a8c30adf2f0b798047d0ce4d09ed22bf78990b98283d09f4701a10534093b0a5b55b790aeca51f2f8eaf6cf44a256d31403227c840ed8aebbb1a07d07557640a704dadb462ea725fce7715a4989b", 0x6b}, {&(0x7f0000000600)="be128df0349155d280a162553925b295d1db28feb069e362ec57d608475aa848c9fe099d503d3dc8f1ff5ca98a8d007c64097d6eae9bb91c57f9250e312f2007", 0x40}, {&(0x7f0000000640)="8d2da557df9be3d349ed198185ddddd7a7d617637a2e1747c3aa28c41556631c83dc6eed4b", 0x25}, {&(0x7f0000000680)="06ce943c41d51c18b26dfd4d4fbb59e362e5c271a638bc9a934aed1f0a6ea1d01fb7f35ef2fb5b85ac019b54022877c7a0a7e2ce0cd0dc46ceb1167c6988719866ad19da98aabaa21d180b50d3bffabed7dcd9d20415d1777668e364092374dbd7e525f743d7bc7d050163d53db481e30cb9aea8796b92917e9392311d80c4f35adecbee9a942404ca3bce7dee40a04a8f882d8f2845beb23f", 0x99}, {&(0x7f0000000740)="5ea333d82072099ec99469baaac7ed60348c5ef5df663f067b65c1d52c28354e9524c4d28f0192430bc2", 0x2a}, {&(0x7f0000000780)="eb0b05ca9be8799a944c61fe167b059c31ecb6e7a9e6623b729412c254de0742f7", 0x21}, {&(0x7f00000007c0)="ca105fc705fac3d2bf30f5eb21b59f939ec27a64116f8e2c546b02019324ff22b17121df87e5b2d3147f28dee4177e7ca5c61aecd9d786838991cb7262a8babf1d3a38aac91805fad60a3bd46c000fddf199a93410b372cd2ea937358d7f88f1940cbba4ac4a429ff68eefc33def488ada416a94e579b8c736029bf6ef8064b778c3a291b02f952a8036d63a9cc6cee4e65afa6cec6b103ce4fbe74b46c68286ab376d21180e3ff82540f2b1c043527f936e8bbfe06ed553", 0xb8}, {&(0x7f0000000880)="beb899fffb2cf13dc642328237d42c92f8b3bc5e7a44e09f888f0cf561f470ad7a4b58c4fd01180ef7fc33d275338a3eb7acd7c71fd26b5ed1fe9ebdafabcadeef0e91bb2dfc4e7ffd96fdd4d1d5e2cf3cd44d88325a2c6698ecb88f94aee82ea65404178bea75cac2bfbab7582b5d08523fd1ecf1210d1bac6d876217dd92eed6799d33d676cbd54b1cfade5febaf1ef818ba8756a3f08426c44a9ee2d7aeb111ecd07a3ef4385d545dd5c9c9314a2d13a37bcb6dc82d138a38e88c17bc0e415dc08b3f04e3bda45056561ff083d095e5e40e8ad25949e35a840f21918605e2d7d5f0c9f75cadfaa14fbb78e118", 0xee}], 0xa, &(0x7f0000000a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x18}}], 0x2, 0x10)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000b00)={<r2=>0x0, 0xf5, "73edc3ebce679937547a8529c507c01cfae6fe8dc6026d5e0af7a739ef5f60d56ef20734c6683b8f8c9729348115914f0ccdd8f333f555841457dca39a3c4fbc04cc5402c57a55f47ff35e449b88d99aa7aff8cf867992e22e20c32f85ddbdd80747e02ebd333df2f116aeca72516702b88a20871d5e13cd99d3c78b6319006f9d6ec3eb011e34334cc037a39d7cdfea0d9a6febbba197e4ec25743f08e5cbfeaa7d28dcd9a9814e43f88d9ecda80d91f3ac738a09f89bc2da4fd8e5ceba9005e10b55c288a68a4f605818ebb4c418b4e849657d929c78a28b9bfa059af153e4e52be15179a9edbfa18ad706d51ce6129979528164"}, &(0x7f0000000c00)=0xfd)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000c40)={0xfc00, 0x2, 0x1, 0x41, 0x6, 0x7, 0x2, 0x9, r2}, &(0x7f0000000c80)=0x20)
r3 = accept4(r0, &(0x7f0000000cc0), &(0x7f0000000d40)=0x80, 0x80000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000e00)={'syztnl1\x00', &(0x7f0000000d80)={'syztnl1\x00', <r4=>0x0, 0x4, 0x0, 0x3, 0xfffffff9, 0x53, @mcast1, @dev={0xfe, 0x80, '\x00', 0x11}, 0x80, 0x700, 0x8000, 0x3}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000ec0)={'syztnl0\x00', &(0x7f0000000e40)={'ip6tnl0\x00', <r5=>r4, 0x29, 0x9, 0x2, 0x401, 0x8, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x7800, 0x5, 0x3}})
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000f00)='cgroup.events\x00', 0x0, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r0)
sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x54, r7, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}}, 0x8050)
sendmsg$inet6(r1, &(0x7f0000001340)={&(0x7f00000010c0)={0xa, 0x4e22, 0x2e58, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000001100)="749876a671505b995091721b660b9397855fedf59921fb30e3d02dad6d5931a98f49a84b957b62a77f964986d258b7e72af4343a79b74ab7f52625675c73511cd73f147080ae40219b52836c2332915c1d2ae23dc0ed3d789ba770613767ffc5ae0ced932c3497df758b301fd47c59755d185cabc44bbd7b32246609e5bf5976e1a8926cadadd6c17b478ddeb3ce6e72eca61de3b3dcf57f8e1fae", 0x9b}, {&(0x7f00000011c0)="4d64afcf103e653a46a192aac0c63e0790e895c70770adc3454b89c4b54fb1b7bd9312074e91742b7a94bd10352d06a181bc4f5647ca8c24808c4b9adf466292a853467bd0c1349e196fcc09fde9a27066c9733f140edf48ac10f821abbe2f5cf24b53683fa7b208aae1f8dfaaa941bff4267542ed9e0c744fba49f1320e70c5bf9597abd7e6fb2ecd27fb09359ba0a5c5d7f745c8db8f064da058fff3cbb20f2e542ddef4c74f87e6101a2b24f2e6", 0xaf}], 0x2, &(0x7f00000012c0)=[@hopopts_2292={{0x30, 0x29, 0x36, {0xff, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r5}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x6}]}}}], 0x78}, 0x40000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001400)={'vlan1\x00', &(0x7f00000013c0)=@ethtool_wolinfo={0x6, 0x8, 0x7, "9de1ce6b50d2"}})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000001480), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000014c0)=<r10=>0x0)
sendmsg$NFC_CMD_ENABLE_SE(r8, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x3c, r9, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x10c4)
socket$inet_smc(0x2b, 0x1, 0x0)
pselect6(0x40, &(0x7f00000015c0)={0x9, 0x200, 0x9, 0x1, 0xfffffffffffffffe, 0x6, 0xd, 0x5}, &(0x7f0000001600)={0x40, 0x200, 0xb, 0x1, 0x8, 0x101, 0x200, 0x9}, &(0x7f0000001640)={0x7, 0xfffffffffffffc00, 0x1ff, 0x400, 0x3, 0x6, 0x4, 0x7fffffff}, &(0x7f0000001680)={0x77359400}, &(0x7f0000001700)={&(0x7f00000016c0)={[0x8]}, 0x8})
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000001740)={'gre0\x00', {0x2, 0x0, @remote}})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000001780)={0x7, 'veth0_to_hsr\x00', {0x6}, 0x7})
r11 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r11, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f00000017c0)="e327cea2c2dbc969556732272447b9a25eacacdcf7ec852ea57c9d08a0dd2f80847fc1cc0f0e27a0df7380f618e1995a419ffe5accee04f675b43a27488c57b353256e8831c408087975d8cb8c5937701f1addfd17ed66e8c2b90e0d1597917665e1ae3793d3241eb4a9b97203973ac77c733a4181cda563f27a06949d241d9526598a35fedc285fcfd40d4f4ef5d4d28c6c5cab4fc9b36e87b8558336db8acf09e9ee55c05e36b3654795a05beaf2d7ac631b58458216965937377ee65282df464502ef37daef9addf4", 0xca}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="d201c9634b2685d29affca1248dbe5989ebefb64f7744e24a526f71b50e55fc6e786df52b780c4faa02c55e91339e369d1dade40afc416197339e7198079cd8fd5ddd31011a9bfe2d05d62941591689c9a9675bc24278062c665c923ec3f2bd084976f87c95d6b52435cc0f04ced138a41fac3510853c84d3f05a0a8ee1ee6ce70d92c02d41d85bc2034eb634c509b87a5e417f7fa813d3491a4d89dd1b895a17e8b4b4c2e3a689b0fd6747d82c36d0f60ab69425863bfdd6261b8888b9ad250a1ee87cb15df1a9fc569637ea6cfe8ad4e71817d9b1642fa85db57aef5bb989e41d23756bb1d0feec840ea142c1222040568c4de9b45a6a0165aa2dda1528e", 0xff}, {&(0x7f00000029c0)="ef4b4eb296eadeec555fa57f95ff427f14f7ee2972e429ec53db5ed3994cb1b4097dd9084d80e13a47eaf346e19ce711aef555feb467bbdb298a13cb423980e9332fa9db86f5addc90bf3a74ed19c99caefe64856288ffa7a46dcbc93b94ab8a02b5af", 0x63}, {&(0x7f0000002a40)="6b70dc11579f834a55c6455647fcff8983e27dfb0ebdbe18f3bbd4e3bc17e5509965051eb22ddb87d53e61ec4d20818af6ebd112b90d84c23201fed3fa9cf2bb5641e265a990bae57512e3f4f7ad8d789a70c674d038e7bc04334055a6646fc76fd6baf477db1444ccc2c7a11b34a6ced79f68f8fd24d463e416dac64f64a4d5a4236ea61e4ceb9d3cefbe091162bc60ab", 0x91}, {&(0x7f0000002b00)="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", 0xfc}, {&(0x7f0000002c00)="405fb4ee6a29873bed4379fecb371f6147c06edc4edcab4ccdabbf479e85aa7abe9231e0e972b677d8644e2cb937c37a6294717561a3c9a0d5cb73a06d9f408982b2b92103549471bd6728de38c7acc267bd6f219709bd19fb13bf54c794f8c5d81df426e8c6592caa4ab4c226ee46501fcbbea8b73f2f8aee2397cd80e9daa418c0e1fd138e5b23c802777ee700004e7f73d8534d7d802b6ffb8c73b27adf63df5c772ba7782501a45f2ec8de361a40b9fa8698874c13a7b2f8f89502f88cc6", 0xc0}, {&(0x7f0000002cc0)="b554a95b5d6d041b0c6a29fc31bb6e281fb606c13be2aa50eb83b453566fd020fcb7e48bab41608ebe4c15d32e30d7eee580c37fe512bc402be7b1d4d4bcc2cd5cdd7b46cf08703947ee775ce26ad11a99637c0d7c339bd1f2993bfe933280a72be0821c00f3321b86b774409ef29aa776acab3a58930d0a1c03599fbb788769d45a777d8fef3a6f4844900de7a7cf9e575ef2139d822024888a1c8ba9c334aba063a17e0619654fe346b9c6f12468667855948ade5f363e822121aa0bd9e6ddf1f0da7ae3bc950b5bb65b76d1c59b82635b2f90a53cb872ff40953bab9b9c", 0xdf}, {&(0x7f0000002dc0)="88dc4e4323acc6ca99b1abc99263da9487d4bd1f7ca630b8cfaf6669626f46b31a4c0dcc9b50f51cccb2790efc12b907fa9855876b09e2c5ceb5292872d493f1eb1fbe12eea0f0a15c80e48b", 0x4c}], 0x9, &(0x7f0000002f00)=[{0xe0, 0xff, 0x5, "945ac7b0949e4a2a11f27c1fc091134031bb77dd6bebb585396aca836ff2680edb2b873e3259164817bbce959ba2c7f49c11f51644d1e2a80765a961e4cb54c7f2e9b250442b94a570d71734ffd11fc55c54041232e31c568652d67cd2a5c2c1514e465bbd0880e62e00e1fc1eefc0a97ed3693211f97c0fee4cb2d8aded68f034848355484feb0b0b6343ae62f7b9e59c0da04a5c3f94b97a4fae303578faf6e4f9847ebc85b8efa14e0d6497aac6ed58a3690abd9d820aa2d8620377745ac35e89c9bdb84ca1eeb37e07d43e"}], 0xe0}, 0x20004011)
socket$inet6_udp(0xa, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000007680)={<r12=>0x0, <r13=>0x0})
recvmmsg(r3, &(0x7f0000007540)=[{{&(0x7f0000003040)=@nfc, 0x80, &(0x7f0000004200)=[{&(0x7f00000030c0)=""/158, 0x9e}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/95, 0x5f}], 0x3}, 0x80000001}, {{&(0x7f0000004240)=@nfc, 0x80, &(0x7f00000042c0), 0x0, &(0x7f0000004300)=""/84, 0x54}, 0x7ff}, {{&(0x7f0000004380)=@vsock, 0x80, &(0x7f0000004980)=[{&(0x7f0000004400)=""/125, 0x7d}, {&(0x7f0000004480)=""/147, 0x93}, {&(0x7f0000004540)=""/17, 0x11}, {&(0x7f0000004580)=""/110, 0x6e}, {&(0x7f0000004600)=""/218, 0xda}, {&(0x7f0000004700)=""/64, 0x40}, {&(0x7f0000004740)=""/175, 0xaf}, {&(0x7f0000004800)=""/96, 0x60}, {&(0x7f0000004880)=""/249, 0xf9}], 0x9, &(0x7f0000004a40)=""/31, 0x1f}, 0x3}, {{&(0x7f0000004a80)=@tipc=@id, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004b00)=""/198, 0xc6}, {&(0x7f0000004c00)=""/49, 0x31}, {&(0x7f0000004c40)=""/246, 0xf6}, {&(0x7f0000004d40)=""/160, 0xa0}, {&(0x7f0000004e00)}], 0x5, &(0x7f0000004ec0)=""/148, 0x94}, 0x2}, {{&(0x7f0000004f80)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000007480)=[{&(0x7f0000005000)=""/99, 0x63}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/193, 0xc1}, {&(0x7f0000006180)=""/164, 0xa4}, {&(0x7f0000006240)=""/97, 0x61}, {&(0x7f00000062c0)=""/133, 0x85}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000007380)=""/238, 0xee}], 0x8, &(0x7f0000007500)=""/61, 0x3d}, 0xa0000}], 0x5, 0x40000001, &(0x7f00000076c0)={r12, r13+60000000})
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000007700), &(0x7f0000007740)=0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000007780)={r11, r6})
r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007800), r8)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r8, &(0x7f00000078c0)={&(0x7f00000077c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000007880)={&(0x7f0000007840)={0x34, r14, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xaf}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4084}, 0x8801)

176.59956ms ago: executing program 2 (id=7430):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f00000041c0)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)={0x14, 0x3, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x200080c0}, 0x20000080)
r2 = socket(0x10, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r3, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0xb29, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x7f1, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x4, 0x1b, 0x0, 0x6}]}}, {0x4e20, 0x4e01, 0x7d9, 0x0, @wg=@data={0x4, 0x202, 0x1ff, "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"}}}}, 0x7ff)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000015}, 0x4000000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x78, &(0x7f00000000c0)=""/120, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r8, 0x18000000000002a0, 0xff1f, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES32], 0x44}}, 0x0)

105.629286ms ago: executing program 1 (id=7431):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r1, 0x8) (async)
r2 = accept4(r1, 0x0, 0x0, 0x0)
write(r2, &(0x7f0000000000)="ea", 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0xffffffff, 0x1}, 0x10) (async)
write(r2, &(0x7f00000002c0)="04", 0x1) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x0, 0x2}, 0x10) (async)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0) (async)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000000)=<r6=>0x0)
bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, r6, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
sendto(r4, &(0x7f00000005c0)="a1bfc48ba931fb1ceb70ba6de68925f84d607ce82b9339dda7f5adf00381be33ea1558c858be9d3a5b2aff8f4f59bd095d7034b500b19e0d0524e7bf37b4cec2aad04aacfac1eeca892aa86fe2f21df0a4619b459cb53e0cadf8e3486c5506c18326e1a39911052c19fee16f57ff67c91e3576d08cbca1dbfbdf03bc42498ba5fe9316ab4a80fdaab89a6461775b8f4f23b0f528e97eadd7ca6308c637", 0xfeca, 0x0, &(0x7f0000000700)=@ax25={{0x3, @bcast, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80)
close(r5) (async)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) (async)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)

2.289358ms ago: executing program 0 (id=7432):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newsa={0x150, 0x10, 0x413, 0x0, 0xffffffff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x7, 0x0, 0x4, 0x2000000000000000, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8}, 0x0, 0x4, 0x2, 0x0, 0x1, 0x10}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x80, "b512b390ac60fe3e6b54c6b909007c9f70d0cf"}}]}, 0x150}}, 0x844) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (rerun: 64)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x5}}) (async)
socket$packet(0x11, 0x3, 0x300)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r5, r7, 0x25, 0x4, @void}, 0x10) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (rerun: 32)
write$tun(r3, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) (async)
close(0x3)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x3261e) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async, rerun: 64)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x98) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000080), 0x0}, 0x20)
r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async, rerun: 32)
r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (rerun: 32)
connect$bt_l2cap(r12, &(0x7f0000000380), 0xe) (async, rerun: 32)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0xa4, r11, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x7c, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x81}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cd0cbaa91c2228ef3a1f5608d551e5cb145c4cc5020eadb5670b8914490500e0"}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (rerun: 32)

0s ago: executing program 0 (id=7433):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)=@newlink={0x60, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_TOS={0x5, 0x9, 0x9}, @IFLA_GRE_TOS={0x5, 0x9, 0x6}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x60}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x38, r2, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x482d, 0x4, 0x486f, 0x8, 0x5, 0x30, 0xc]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r5, 0x0, 0x21, 0x5) (async)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', <r7=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000000c0)={'syztnl2\x00', <r8=>0x0, 0x1, 0x1, 0x9, 0xd9b3a07, {{0x37, 0x4, 0x0, 0x1, 0xdc, 0x66, 0x0, 0x5, 0x0, 0x0, @private=0xa010102, @rand_addr=0x64010102, {[@rr={0x7, 0x7, 0xbf, [@loopback]}, @end, @timestamp={0x44, 0xc, 0x68, 0x0, 0x0, [0x2, 0x5f1]}, @ssrr={0x89, 0xf, 0x9f, [@empty, @local, @private=0xa010102]}, @ssrr={0x89, 0x1f, 0x56, [@remote, @dev={0xac, 0x14, 0x14, 0x1c}, @dev={0xac, 0x14, 0x14, 0x12}, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @end, @timestamp={0x44, 0x8, 0x47, 0x0, 0xd, [0x8000]}, @generic={0x44, 0xc, "3604ef7409149f4afe4d"}, @timestamp_addr={0x44, 0x44, 0x8c, 0x1, 0xb, [{@empty, 0x4d6}, {@rand_addr=0x64010101, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101, 0xd}, {@multicast2, 0x7}, {@private=0xa010101, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@empty, 0x10}]}, @timestamp_addr={0x44, 0x2c, 0xfe, 0x1, 0x2, [{@private=0xa010102, 0x9}, {@rand_addr=0x64010101, 0x4}, {@broadcast, 0xff1d}, {@multicast1, 0x7}, {@remote, 0x7}]}]}}}}})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="200028bd7000fddbdf250500000030000180080006000800000008000700", @ANYRES32=r7, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r8, @ANYBLOB="14000400fe8000000000000000000000000000bb380006800800060000000000080006000c000000050002000b00000014000400fc000000000000000000000000000001050002000800000020000180060005004e210000140004000000000000000000000000000000000005000500030000000500050005000000"], 0xac}, 0x1, 0x0, 0x0, 0x2400c080}, 0x14)

kernel console output (not intermixed with test programs):

 2 family 0 port 6081 - 0
[  448.338849][ T5992] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  448.342074][ T5992] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  448.345816][ T5992] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  448.352817][ T5992] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  448.358397][ T5992] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  448.364325][ T5992] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  448.370751][T24666] __nla_validate_parse: 15 callbacks suppressed
[  448.370763][T24666] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5716'.
[  448.400011][T24674] validate_nla: 7 callbacks suppressed
[  448.400028][T24674] netlink: 'syz.0.5718': attribute type 1 has an invalid length.
[  448.425565][T24674] bond87: entered promiscuous mode
[  448.427714][T24674] 8021q: adding VLAN 0 to HW filter on device bond87
[  448.683225][T24688] pim6reg: entered allmulticast mode
[  448.686790][T24687] pim6reg: left allmulticast mode
[  448.821480][T24695] netlink: 'syz.2.5725': attribute type 1 has an invalid length.
[  448.849019][T24695] bond66: entered promiscuous mode
[  448.851680][T24695] 8021q: adding VLAN 0 to HW filter on device bond66
[  448.885392][T24695] bond66: (slave bridge34): making interface the new active one
[  448.889008][T24695] bridge34: entered promiscuous mode
[  448.892638][T24695] bond66: (slave bridge34): Enslaving as an active interface with an up link
[  448.996907][T24711] xt_TPROXY: Can be used only with -p tcp or -p udp
[  449.019176][T24711] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  449.021884][T24711] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  449.190624][  T351] block nbd5: Connection timed out, retrying (0/2 alive)
[  449.193057][  T351] block nbd5: Connection timed out, retrying (0/2 alive)
[  449.196467][  T351] block nbd5: Connection timed out, retrying (0/2 alive)
[  449.196496][T24728] bond74: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  449.203657][  T351] block nbd5: Connection timed out, retrying (0/2 alive)
[  449.205935][  T351] block nbd5: Dead connection, failed to find a fallback
[  449.211395][T24728] bond74 (unregistering): Released all slaves
[  449.213394][  T351] block nbd5: shutting down sockets
[  449.215642][  T351] blk_print_req_error: 138 callbacks suppressed
[  449.215654][  T351] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  449.220860][  T351] buffer_io_error: 138 callbacks suppressed
[  449.220870][  T351] Buffer I/O error on dev nbd5, logical block 3, async page read
[  449.225560][  T351] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  449.228978][  T351] Buffer I/O error on dev nbd5, logical block 2, async page read
[  449.231812][  T351] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  449.235368][  T351] Buffer I/O error on dev nbd5, logical block 1, async page read
[  449.238832][  T351] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  449.242026][  T351] Buffer I/O error on dev nbd5, logical block 0, async page read
[  449.247762][T13197] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  449.251123][T13197] Buffer I/O error on dev nbd5, logical block 0, async page read
[  449.254273][T13197] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  449.263477][T13197] Buffer I/O error on dev nbd5, logical block 1, async page read
[  449.266954][T13197] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  449.267737][T24733] sit3: entered promiscuous mode
[  449.270722][T13197] Buffer I/O error on dev nbd5, logical block 2, async page read
[  449.276102][T13197] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  449.280115][T13197] Buffer I/O error on dev nbd5, logical block 3, async page read
[  449.283180][T13197] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  449.286867][T13197] Buffer I/O error on dev nbd5, logical block 0, async page read
[  449.290486][T13197] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  449.294677][T13197] Buffer I/O error on dev nbd5, logical block 1, async page read
[  449.300681][T13197] ldm_validate_partition_table(): Disk read failed.
[  449.304937][T13197] Dev nbd5: unable to read RDB block 0
[  449.309532][T13197]  nbd5: unable to read partition table
[  449.321560][T13197] ldm_validate_partition_table(): Disk read failed.
[  449.325940][T13197] Dev nbd5: unable to read RDB block 0
[  449.330784][T13197]  nbd5: unable to read partition table
[  449.368498][T24733] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5736'.
[  449.386786][T24737] netlink: 504 bytes leftover after parsing attributes in process `syz.0.5738'.
[  449.432235][T24739] netlink: 'syz.1.5739': attribute type 1 has an invalid length.
[  449.483983][T24739] bond74: (slave bridge25): making interface the new active one
[  449.490272][T24739] bond74: (slave bridge25): Enslaving as an active interface with an up link
[  449.504923][T24739] bond74: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  449.635511][T24750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5743'.
[  449.667632][T24749] bond75 (unregistering): Released all slaves
[  449.883119][T24761] netlink: 'syz.1.5747': attribute type 1 has an invalid length.
[  449.886322][T24761] netlink: 352 bytes leftover after parsing attributes in process `syz.1.5747'.
[  449.890243][T24761] netlink: 'syz.1.5747': attribute type 1 has an invalid length.
[  449.893132][T24761] netlink: 352 bytes leftover after parsing attributes in process `syz.1.5747'.
[  449.936130][T24764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5748'.
[  450.133414][T24771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5750'.
[  450.218881][T24776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5751'.
[  450.508447][T24791] netlink: 'syz.2.5756': attribute type 1 has an invalid length.
[  450.534153][T24791] bond67: entered promiscuous mode
[  450.537864][T24791] 8021q: adding VLAN 0 to HW filter on device bond67
[  450.553692][T24791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5756'.
[  450.556511][T24791] bond67: entered allmulticast mode
[  450.582721][T24791] bond67: (slave bridge36): making interface the new active one
[  450.586008][T24791] bridge36: entered promiscuous mode
[  450.588668][T24791] bridge36: entered allmulticast mode
[  450.597719][T24791] bond67: (slave bridge36): Enslaving as an active interface with an up link
[  450.880860][T24810] netlink: 'syz.0.5764': attribute type 13 has an invalid length.
[  450.884138][T24810] netlink: 'syz.0.5764': attribute type 17 has an invalid length.
[  450.906934][T24810] veth1_macvtap: left promiscuous mode
[  450.912301][T24810] veth0_macvtap: left promiscuous mode
[  450.916374][T24810] veth0_macvtap: entered promiscuous mode
[  450.919150][T24810] veth0_macvtap: entered allmulticast mode
[  450.942085][T24810] bridge0: port 2(vlan7) entered blocking state
[  450.944697][T24810] bridge0: port 2(vlan7) entered listening state
[  450.954297][T24810] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  450.987357][ T8397] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.993917][ T8397] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  451.006425][ T8397] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  451.014119][ T8397] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  451.177401][T24819] syzkaller1: entered promiscuous mode
[  451.179949][T24819] syzkaller1: entered allmulticast mode
[  451.318865][ T6309] tipc: Resetting bearer <eth:syzkaller0>
[  451.351852][T24829] netlink: 'syz.1.5770': attribute type 1 has an invalid length.
[  451.367821][T24829] 8021q: adding VLAN 0 to HW filter on device bond75
[  451.941324][T24845] ip6tnl0: Caught tx_queue_len zero misconfig
[  452.114430][T24861] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  452.211581][T24871] netlink: 'syz.2.5781': attribute type 5 has an invalid length.
[  452.411017][T24878] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.402131][T24918] validate_nla: 4 callbacks suppressed
[  454.402151][T24918] netlink: 'syz.0.5796': attribute type 64 has an invalid length.
[  454.578695][T24924] team0: Device macvlan0 failed to change mtu
[  454.701071][T24929] __nla_validate_parse: 16 callbacks suppressed
[  454.701088][T24929] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5800'.
[  454.785276][T24935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5803'.
[  454.901621][T24956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5809'.
[  454.963817][T24964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5810'.
[  454.963925][T24959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5810'.
[  454.970326][T24964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5810'.
[  454.985236][T24959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5810'.
[  455.248526][    C1] 0: reclassify loop, rule prio 0, protocol 800
[  455.256593][T24993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5820'.
[  456.318425][    C1] 0: reclassify loop, rule prio 0, protocol 800
[  458.130639][T24983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  458.257794][T25002] netlink: 'syz.2.5823': attribute type 13 has an invalid length.
[  458.264666][T25002] netlink: 'syz.2.5823': attribute type 17 has an invalid length.
[  458.327421][T19069] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.330290][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.360063][T25002] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  458.364533][T25002] 8021q: adding VLAN 0 to HW filter on device bond1
[  458.369970][T25002] 8021q: adding VLAN 0 to HW filter on device bond2
[  458.384799][T25002] 8021q: adding VLAN 0 to HW filter on device bond3
[  458.393523][T25002] 8021q: adding VLAN 0 to HW filter on device bond4
[  458.397981][T25002] bond4: entered allmulticast mode
[  458.400490][T25002] bond4: entered promiscuous mode
[  458.402917][T25002] macvlan2: left promiscuous mode
[  458.405081][T25002] bond4: left promiscuous mode
[  458.407171][T25002] macvlan2: left allmulticast mode
[  458.411867][T25002] bond4: left allmulticast mode
[  458.415691][T25002] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  458.430112][T25002] 8021q: adding VLAN 0 to HW filter on device bond0
[  458.442191][T25002] 8021q: adding VLAN 0 to HW filter on device bond5
[  458.450936][T25002] 8021q: adding VLAN 0 to HW filter on device bond6
[  458.466152][T25002] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check.
[  458.479894][ T6470] lo speed is unknown, defaulting to 1000
[  458.483078][ T6470] sqz0: Port: 1 Link ACTIVE
[  458.485325][ T6471] syz0: Port: 1 Link ACTIVE
[  458.514999][ T5668] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  458.517591][ T5668] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.522491][ T5668] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  458.529651][ T5668] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.540215][T25011] vlan0: entered promiscuous mode
[  458.556865][ T6471] lo speed is unknown, defaulting to 1000
[  458.561763][ T5668] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  458.567961][ T5668] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.579279][ T5668] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  458.582683][ T5668] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.712910][T25040] netlink: 'syz.2.5833': attribute type 1 has an invalid length.
[  458.819742][T25048] bond68: (slave bridge37): making interface the new active one
[  458.829574][T25048] bond68: (slave bridge37): Enslaving as an active interface with an up link
[  458.851215][T25040] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5833'.
[  458.860345][T25040] bond68: entered promiscuous mode
[  458.862722][T25040] bridge37: entered promiscuous mode
[  458.864609][T25040] bond68: entered allmulticast mode
[  458.866369][T25040] bridge37: entered allmulticast mode
[  458.870054][T25040] 8021q: adding VLAN 0 to HW filter on device bond68
[  458.924123][T25054] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5837'.
[  458.929399][T25059] netlink: 'syz.2.5839': attribute type 64 has an invalid length.
[  459.042766][T25066] netlink: 'syz.1.5841': attribute type 1 has an invalid length.
[  459.107739][T25066] bond77: (slave veth47): Enslaving as an active interface with a down link
[  459.131739][T25067] bond77: (slave veth49): Enslaving as an active interface with a down link
[  459.370390][ T5668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.386819][T25075] lo speed is unknown, defaulting to 1000
[  459.399611][T25092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.406624][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.425442][T25093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.429796][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.436830][ T5076] block nbd2: Possible stuck request ffff88810a1b0000: control (read@0,1024B). Runtime 240 seconds
[  459.441084][ T5076] block nbd2: Possible stuck request ffff88810a1b0200: control (read@1024,1024B). Runtime 240 seconds
[  459.444690][ T5076] block nbd2: Possible stuck request ffff88810a1b0400: control (read@2048,1024B). Runtime 240 seconds
[  459.449129][ T5076] block nbd2: Possible stuck request ffff88810a1b0600: control (read@3072,1024B). Runtime 240 seconds
[  459.453174][T25096] netlink: 'syz.1.5850': attribute type 20 has an invalid length.
[  459.453318][T25096] netlink: 'syz.1.5850': attribute type 20 has an invalid length.
[  459.609157][T25075] lo speed is unknown, defaulting to 1000
[  459.644525][T25108] syzkaller1: tun_chr_ioctl cmd 1074025677
[  459.650502][T25108] syzkaller1: linktype set to 805
[  459.962323][T25126] netlink: 'syz.2.5859': attribute type 64 has an invalid length.
[  460.087399][T25133] xt_TCPMSS: Only works on TCP SYN packets
[  460.092560][T25133] __nla_validate_parse: 9 callbacks suppressed
[  460.092575][T25133] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5861'.
[  460.110428][T25130] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5862'.
[  460.212843][T25139] netlink: 'syz.2.5865': attribute type 1 has an invalid length.
[  460.296145][T25139] workqueue: Failed to create a rescuer kthread for wq "bond69": -EINTR
[  460.298020][T25146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5866'.
[  460.366599][T25151] netlink: 'syz.2.5868': attribute type 64 has an invalid length.
[  460.389770][T25146] netlink: 'syz.1.5866': attribute type 1 has an invalid length.
[  460.394917][T25146] netlink: 'syz.1.5866': attribute type 2 has an invalid length.
[  460.478913][T25156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5870'.
[  460.511780][ T8397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.524409][T25153] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5869'.
[  460.662758][T25164] bond78: entered promiscuous mode
[  460.672694][T25164] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  460.692447][T25170] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.5874'.
[  460.696017][T25172] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5875'.
[  460.745552][T25174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5876'.
[  460.751934][T25174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5876'.
[  460.791296][T25178] netlink: 'syz.0.5878': attribute type 1 has an invalid length.
[  460.816481][T25178] bond89: entered promiscuous mode
[  460.824486][T25178] 8021q: adding VLAN 0 to HW filter on device bond89
[  460.857619][T25178] bond89: (slave bridge36): making interface the new active one
[  460.864490][T25178] bridge36: entered promiscuous mode
[  460.873087][T25178] bond89: (slave bridge36): Enslaving as an active interface with an up link
[  460.884083][T25182] netlink: 'syz.1.5879': attribute type 1 has an invalid length.
[  460.913500][T25182] bond79 (unregistering): Released all slaves
[  460.941851][T25189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5879'.
[  460.967035][T25189] veth51: entered allmulticast mode
[  461.041379][  T320] wlan1: Trigger new scan to find an IBSS to join
[  461.196031][T25206] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  461.521172][T25232] netlink: 'syz.1.5895': attribute type 1 has an invalid length.
[  461.542984][T25232] 8021q: adding VLAN 0 to HW filter on device bond79
[  461.629704][ T5668] net_ratelimit: 1 callbacks suppressed
[  461.629716][ T5668] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  461.991582][T25249] lo speed is unknown, defaulting to 1000
[  462.096606][T25249] lo speed is unknown, defaulting to 1000
[  462.659507][T25267] tipc: Resetting bearer <eth:syzkaller0>
[  462.684150][T25273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  462.705799][T25266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  462.742916][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  462.745469][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.236169][T25312] pim6reg1: entered allmulticast mode
[  463.537957][T25338] openvswitch: netlink: EtherType 0 is less than min 600
[  463.709452][T25348] bond80: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  463.714462][T25348] bond80 (unregistering): Released all slaves
[  463.888657][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.891888][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.909178][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  463.911994][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  464.068833][   T36] wlan1: Trigger new scan to find an IBSS to join
[  464.473597][T25365] validate_nla: 5 callbacks suppressed
[  464.473610][T25365] netlink: 'syz.1.5932': attribute type 64 has an invalid length.
[  464.876493][T25406] xt_TCPMSS: Only works on TCP SYN packets
[  464.906860][T25410] xt_TCPMSS: Only works on TCP SYN packets
[  465.030500][T25421] netlink: 'syz.2.5946': attribute type 64 has an invalid length.
[  465.254977][T25435] __nla_validate_parse: 12 callbacks suppressed
[  465.254995][T25435] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5954'.
[  465.344886][T25444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5957'.
[  465.409437][T25450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5960'.
[  465.558828][T25469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5964'.
[  465.625048][T25477] netlink: 'syz.0.5968': attribute type 64 has an invalid length.
[  465.639848][T25477] tipc: Resetting bearer <eth:syzkaller0>
[  465.735353][T25484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5970'.
[  465.740715][T25484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5970'.
[  465.743473][T25484] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5970'.
[  465.746333][T25484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5970'.
[  465.750392][T25484] netlink: 348 bytes leftover after parsing attributes in process `syz.0.5970'.
[  465.754723][T25484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5970'.
[  466.066450][T25505] xt_HMARK: spi-set and port-set can't be combined
[  466.257359][T25515] netlink: 'syz.0.5981': attribute type 1 has an invalid length.
[  466.280805][T25515] 8021q: adding VLAN 0 to HW filter on device bond91
[  466.465025][T25532] netlink: 'syz.0.5985': attribute type 1 has an invalid length.
[  466.491475][T25532] 8021q: adding VLAN 0 to HW filter on device bond92
[  466.506598][T25530] netlink: 'syz.2.5986': attribute type 8 has an invalid length.
[  466.759984][T25541] netlink: 'syz.2.5989': attribute type 21 has an invalid length.
[  466.869348][T25550] net_ratelimit: 9 callbacks suppressed
[  466.869364][T25550] openvswitch: netlink: EtherType 0 is less than min 600
[  467.031095][T19069] wlan1: Trigger new scan to find an IBSS to join
[  467.034808][T25556] tipc: Resetting bearer <eth:syzkaller0>
[  467.268871][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.272099][ T8414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.287737][T25565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.293499][T25565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.297039][T25565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.304327][T25565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.307663][T25565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.316225][T25565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.321691][T25565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  467.375055][T25570] netlink: 'syz.0.6000': attribute type 10 has an invalid length.
[  467.391604][T25570] block nbd6: shutting down sockets
[  467.407321][T25570] netlink: 'syz.0.6000': attribute type 10 has an invalid length.
[  467.417910][T25571] erspan0: entered promiscuous mode
[  467.872760][T25607] vlan0: entered promiscuous mode
[  468.117015][T25618] netlink: 'syz.1.6015': attribute type 1 has an invalid length.
[  468.136931][T25611] lo speed is unknown, defaulting to 1000
[  468.259604][T25611] lo speed is unknown, defaulting to 1000
[  468.391948][T25627] bond80: (slave bridge28): making interface the new active one
[  468.397033][T25627] bond80: (slave bridge28): Enslaving as an active interface with an up link
[  468.470001][T25627] macvlan4: entered promiscuous mode
[  468.471765][T25627] macvlan4: entered allmulticast mode
[  468.477786][T25627] veth22: entered promiscuous mode
[  468.487403][T25627] bond80: (slave macvlan4): Enslaving as an active interface with a down link
[  468.865014][T25657] sctp: [Deprecated]: syz.2.6030 (pid 25657) Use of struct sctp_assoc_value in delayed_ack socket option.
[  468.865014][T25657] Use struct sctp_sack_info instead
[  468.871996][T25657] sctp: [Deprecated]: syz.2.6030 (pid 25657) Use of struct sctp_assoc_value in delayed_ack socket option.
[  468.871996][T25657] Use struct sctp_sack_info instead
[  468.901275][T25659] syzkaller0: left promiscuous mode
[  468.903184][T25659] syzkaller0: left allmulticast mode
[  469.183134][T25692] 8021q: adding VLAN 0 to HW filter on device bond0
[  469.187396][T25692] 8021q: adding VLAN 0 to HW filter on device batadv0
[  469.234985][T25692] 1: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  469.284926][T25700] 8021q: adding VLAN 0 to HW filter on device bond93
[  469.600268][T25717] validate_nla: 6 callbacks suppressed
[  469.600283][T25717] netlink: 'syz.2.6047': attribute type 1 has an invalid length.
[  470.283751][T25765] netlink: 'syz.1.6059': attribute type 13 has an invalid length.
[  470.295059][T25765] netlink: 'syz.1.6059': attribute type 17 has an invalid length.
[  470.333623][T25765] 8021q: adding VLAN 0 to HW filter on device bond1
[  470.351886][T25765] 8021q: adding VLAN 0 to HW filter on device bond2
[  470.358018][T25765] 8021q: adding VLAN 0 to HW filter on device bond3
[  470.365281][ T5668] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  470.369771][ T5668] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  470.374867][ T5668] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  470.380171][ T5668] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.467383][T25765] tipc: Resetting bearer <eth:syzkaller0>
[  470.473671][T25765] syzkaller0: entered allmulticast mode
[  470.520598][T25778] netlink: 'syz.0.6064': attribute type 1 has an invalid length.
[  470.543651][T25778] bond94: entered promiscuous mode
[  470.566066][T25778] 8021q: adding VLAN 0 to HW filter on device bond94
[  470.599859][T25782] netlink: 'syz.1.6065': attribute type 64 has an invalid length.
[  470.615284][T25778] bond94: (slave bridge39): making interface the new active one
[  470.622500][T25778] bridge39: entered promiscuous mode
[  470.626572][T25778] bond94: (slave bridge39): Enslaving as an active interface with an up link
[  470.743058][T25792] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[  470.827864][T25798] __nla_validate_parse: 23 callbacks suppressed
[  470.827874][T25798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6073'.
[  470.870903][T25806] netlink: 'syz.2.6075': attribute type 1 has an invalid length.
[  470.896125][T25806] bond69: entered promiscuous mode
[  470.900509][T25806] 8021q: adding VLAN 0 to HW filter on device bond69
[  470.900916][T25809] netlink: 'syz.0.6076': attribute type 64 has an invalid length.
[  470.956839][T25806] bond69: (slave bridge38): making interface the new active one
[  470.963226][T25806] bridge38: entered promiscuous mode
[  470.970127][T25806] bond69: (slave bridge38): Enslaving as an active interface with an up link
[  471.019976][T25815] syzkaller1: entered promiscuous mode
[  471.024542][T25815] syzkaller1: entered allmulticast mode
[  471.027375][T25817] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  471.033350][T25817] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  471.086689][T25822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  471.140077][T25824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6081'.
[  471.162507][T25824] bridge29: port 1(veth53) entered blocking state
[  471.164627][T25824] bridge29: port 1(veth53) entered disabled state
[  471.166779][T25824] veth53: entered allmulticast mode
[  471.169642][T25824] veth53: entered promiscuous mode
[  471.237837][T25828] netlink: 'syz.1.6083': attribute type 64 has an invalid length.
[  471.415705][T25836] netlink: 'syz.1.6086': attribute type 1 has an invalid length.
[  471.421475][T25836] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6086'.
[  471.582734][T25840] syzkaller0: entered promiscuous mode
[  471.608551][    C0] tc action pedit offset must be on 32 bit boundaries
[  471.637522][T25843] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6089'.
[  471.714414][T25847] netlink: 'syz.1.6091': attribute type 11 has an invalid length.
[  471.808380][    C0] tc action pedit offset must be on 32 bit boundaries
[  472.455524][   T10] lo speed is unknown, defaulting to 1000
[  472.465331][   T10] sqz0: Port: 1 Link DOWN
[  472.467212][ T6480] syz0: Port: 1 Link DOWN
[  472.467249][ T5668] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  472.473925][ T5668] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  472.486601][ T5668] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  472.490688][ T5668] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  472.544574][T25871] bond95: entered promiscuous mode
[  472.546779][T25871] 8021q: adding VLAN 0 to HW filter on device bond95
[  472.550291][ T6480] lo speed is unknown, defaulting to 1000
[  472.554581][ T5668] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  472.563286][ T5668] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  472.590697][T25876] bond95: (slave bridge40): making interface the new active one
[  472.604897][T25876] bridge40: entered promiscuous mode
[  472.609955][T25876] bond95: (slave bridge40): Enslaving as an active interface with an up link
[  472.663704][ T5668] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  472.668568][ T5668] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  472.831507][T25882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6102'.
[  472.840323][T25882] nbd: must specify a size in bytes for the device
[  472.847367][T25882] nbd: must specify at least one socket
[  472.973779][T25889] net_ratelimit: 360 callbacks suppressed
[  472.973804][T25889] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  472.977907][T25889] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  472.979116][T25891] bond81: entered promiscuous mode
[  472.984968][T25891] 8021q: adding VLAN 0 to HW filter on device bond81
[  473.040756][T25891] bond81: (slave bridge30): making interface the new active one
[  473.048256][T25891] bridge30: entered promiscuous mode
[  473.054299][T25891] bond81: (slave bridge30): Enslaving as an active interface with an up link
[  473.223040][T25907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6108'.
[  473.229513][T25907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6108'.
[  473.397062][T25917] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6111'.
[  473.411678][T25917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  473.416701][ T6466] lo speed is unknown, defaulting to 1000
[  473.418763][ T6466] syz2: Port: 1 Link DOWN
[  473.451795][T25912] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6112'.
[  473.581942][T25920] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6113'.
[  473.584980][T25920] openvswitch: netlink: EtherType 0 is less than min 600
[  473.658649][T25922] bond96: entered promiscuous mode
[  473.662149][T25922] 8021q: adding VLAN 0 to HW filter on device bond96
[  473.691434][T25922] bond96: (slave bridge41): making interface the new active one
[  473.694725][T25922] bridge41: entered promiscuous mode
[  473.699774][T25922] bond96: (slave bridge41): Enslaving as an active interface with an up link
[  473.771474][T25925] 8021q: adding VLAN 0 to HW filter on device bond97
[  473.776678][T25925] bond97: entered promiscuous mode
[  473.779136][T25925] bond97: entered allmulticast mode
[  473.786192][T25925] 8021q: adding VLAN 0 to HW filter on device bond97
[  473.790187][T25925] team0: Port device bond97 added
[  473.794595][T25925] team_slave_1: entered promiscuous mode
[  473.961153][T25867] Set syz1 is full, maxelem 65536 reached
[  474.026058][T25937] bond98: entered promiscuous mode
[  474.030388][T25937] 8021q: adding VLAN 0 to HW filter on device bond98
[  474.169723][T25951] openvswitch: netlink: EtherType 0 is less than min 600
[  474.186601][T25945] bond99: entered promiscuous mode
[  474.190672][T25945] 8021q: adding VLAN 0 to HW filter on device bond99
[  474.254838][T25945] bond99: (slave bridge42): making interface the new active one
[  474.263039][T25945] bridge42: entered promiscuous mode
[  474.270609][T25945] bond99: (slave bridge42): Enslaving as an active interface with an up link
[  474.436355][T25970] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  474.713298][T25957] lo speed is unknown, defaulting to 1000
[  474.796297][T25986] openvswitch: netlink: EtherType 0 is less than min 600
[  474.889578][T25957] lo speed is unknown, defaulting to 1000
[  474.900113][T25992] validate_nla: 5 callbacks suppressed
[  474.900123][T25992] netlink: 'syz.0.6137': attribute type 1 has an invalid length.
[  474.978547][T25993] netlink: 'syz.0.6137': attribute type 15 has an invalid length.
[  476.606112][T26002] __nla_validate_parse: 8 callbacks suppressed
[  476.606123][T26002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6139'.
[  476.714171][T26013] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  476.721580][T26013] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  476.810998][T26018] netlink: 192 bytes leftover after parsing attributes in process `syz.2.6144'.
[  476.824564][T26018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6144'.
[  476.931118][T26021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6145'.
[  477.093499][T26021] team_slave_1: left promiscuous mode
[  477.105459][T26021] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  477.112164][ T6470] lo speed is unknown, defaulting to 1000
[  477.117576][ T6470] syz2: Port: 1 Link ACTIVE
[  477.277261][T26015] lo speed is unknown, defaulting to 1000
[  477.401696][T26015] lo speed is unknown, defaulting to 1000
[  477.627033][T26037] netlink: 'syz.0.6151': attribute type 4 has an invalid length.
[  477.632208][T26037] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6151'.
[  477.642763][T26037] openvswitch: netlink: EtherType 0 is less than min 600
[  477.753363][T26048] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.6155'.
[  477.757394][T26048] openvswitch: netlink: EtherType 0 is less than min 600
[  478.073603][T26073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6161'.
[  478.086150][T26073] ip6gre5: entered promiscuous mode
[  478.098021][T26073] ip6gre5: entered allmulticast mode
[  478.106036][T26078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6165'.
[  478.112273][T26078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6165'.
[  478.123400][T26067] netlink: 'syz.2.6161': attribute type 6 has an invalid length.
[  478.125705][T26067] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6161'.
[  478.180630][T26084] netlink: 'syz.1.6166': attribute type 4 has an invalid length.
[  478.182335][T26067] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  478.186784][T26067] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  478.412607][T26097] netlink: 'syz.1.6170': attribute type 4 has an invalid length.
[  478.426193][T26097] netlink: 'syz.1.6170': attribute type 4 has an invalid length.
[  478.436567][T26097] netlink: 'syz.1.6170': attribute type 4 has an invalid length.
[  478.626486][T26110] openvswitch: netlink: EtherType 0 is less than min 600
[  478.847794][T26124] bridge0: entered allmulticast mode
[  478.854781][T26124] pim6reg: entered allmulticast mode
[  478.864198][T26124] pim6reg: left allmulticast mode
[  478.865926][T26124] bridge0: left allmulticast mode
[  479.030726][T26131] netlink: 'syz.2.6181': attribute type 3 has an invalid length.
[  479.034312][T26131] netlink: 'syz.2.6181': attribute type 3 has an invalid length.
[  479.039070][T26134] openvswitch: netlink: EtherType 0 is less than min 600
[  479.103048][T26138] erspan0: left promiscuous mode
[  479.146110][T26138] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  479.151729][ T6470] lo speed is unknown, defaulting to 1000
[  479.153679][ T6470] sqz0: Port: 1 Link ACTIVE
[  479.155529][ T6476] syz0: Port: 1 Link ACTIVE
[  479.166220][ T5646] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  479.174883][ T6471] lo speed is unknown, defaulting to 1000
[  479.176743][ T5646] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  479.182623][ T5646] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.186839][ T5646] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.272732][T26157] 8021q: adding VLAN 0 to HW filter on device bond70
[  479.333973][T26156] tipc: Resetting bearer <eth:syzkaller0>
[  479.478762][T26167] bond82: option packets_per_slave: invalid value (18446744073709551615)
[  479.481786][T26167] bond82: option packets_per_slave: allowed values 0 - 65535
[  479.491023][T26167] bond82 (unregistering): Released all slaves
[  479.609378][T26177] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  479.635908][T26179] bond82: Removing last arp target with arp_interval on
[  479.678536][T26182] bridge0: Device is already in use.
[  480.011613][T26202] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  480.144061][T26214] bridge40: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  480.193135][T26218] xt_hashlimit: max too large, truncated to 1048576
[  480.198981][T26218] xt_hashlimit: Unknown mode mask 300, kernel too old?
[  480.899468][T26261] validate_nla: 4 callbacks suppressed
[  480.899480][T26261] netlink: 'syz.0.6224': attribute type 7 has an invalid length.
[  481.147244][T26286] netlink: 'syz.2.6231': attribute type 64 has an invalid length.
[  481.201773][    C1] bridge0: port 2(vlan7) entered learning state
[  481.236000][T26292] bridge0: port 1(erspan0) entered blocking state
[  481.240297][T26292] bridge0: port 1(erspan0) entered disabled state
[  481.245606][T26292] erspan0: entered allmulticast mode
[  481.278423][T26292] erspan0: left allmulticast mode
[  481.518355][T26321] netlink: 'syz.2.6242': attribute type 7 has an invalid length.
[  481.857138][T26341] __nla_validate_parse: 18 callbacks suppressed
[  481.857158][T26341] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6250'.
[  481.888924][T26339] block nbd6: server does not support multiple connections per device.
[  481.894923][T26339] block nbd6: shutting down sockets
[  481.947151][T26342] bridge0: port 1(vlan0) entered blocking state
[  481.954894][T26342] bridge0: port 1(vlan0) entered disabled state
[  481.957997][T26345] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6251'.
[  481.961986][T26345] netlink: Conntrack attr has 3 unknown bytes
[  481.962253][T26342] vlan0: entered allmulticast mode
[  481.968062][T26342] geneve0: entered allmulticast mode
[  481.971929][T26342] vlan0: entered promiscuous mode
[  481.973953][T26342] geneve0: entered promiscuous mode
[  481.987542][T26345] openvswitch: netlink: Actions may not be safe on all matching packets
[  482.023040][T26345] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6251'.
[  482.027209][T26345] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6251'.
[  482.031972][T26348] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  482.083303][T26353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6254'.
[  482.105988][T26358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6256'.
[  482.110470][T26357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6256'.
[  482.117868][T26353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6254'.
[  482.135638][T26353] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6254'.
[  482.225344][T26370] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6259'.
[  482.330569][T26384] netem: change failed
[  482.342181][T26384] bridge41: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  482.346480][T26370] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  482.350203][T26370] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  482.506985][T26395] xt_TPROXY: Can be used only with -p tcp or -p udp
[  482.660243][T26393] bridge0: port 2(vlan7) entered disabled state
[  482.918475][T26393] veth0_macvtap: left allmulticast mode
[  482.976502][T26393] gretap3: left allmulticast mode
[  482.980499][T26393] bond44: left promiscuous mode
[  482.982426][T26393] bridge17: left promiscuous mode
[  482.984532][T26393] bond45: left promiscuous mode
[  482.987046][T26393] bond47: left promiscuous mode
[  482.990894][T26393] bridge19: left promiscuous mode
[  482.993496][T26393] bridge20: left allmulticast mode
[  482.995678][T26393] vlan3: left allmulticast mode
[  482.997722][T26393] macvtap0: left allmulticast mode
[  483.000805][T26393] bond48: left promiscuous mode
[  483.002850][T26393] bridge21: left promiscuous mode
[  483.005115][T26393] bond49: left promiscuous mode
[  483.007228][T26393] bridge22: left promiscuous mode
[  483.010546][T26393] vlan4: left promiscuous mode
[  483.012640][T26393] bond50: left promiscuous mode
[  483.014933][T26393] vlan4: left allmulticast mode
[  483.016860][T26393] bond50: left allmulticast mode
[  483.019258][T26393] bond51: left promiscuous mode
[  483.021590][T26393] bridge24: left promiscuous mode
[  483.024067][T26393] bond52: left promiscuous mode
[  483.027127][T26393] bond56: left promiscuous mode
[  483.029489][T26393] bridge25: left promiscuous mode
[  483.032592][T26393] vlan5: left allmulticast mode
[  483.034887][T26393] batadv_slave_1: left allmulticast mode
[  483.037462][T26393] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  483.040906][T26393] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  483.044607][T26393] veth37: left promiscuous mode
[  483.047018][T26393] bond59: left promiscuous mode
[  483.049760][T26393] bond60: left promiscuous mode
[  483.051994][T26393] bond61: left promiscuous mode
[  483.054441][T26393] geneve7: left promiscuous mode
[  483.062906][T26393] bond64: left promiscuous mode
[  483.068899][T26393] bond65: left promiscuous mode
[  483.072272][T26393] bond66: left promiscuous mode
[  483.078742][T26393] bond67: left promiscuous mode
[  483.082590][T26393] bond68: left promiscuous mode
[  483.084733][T26393] bond69: left promiscuous mode
[  483.087653][T26393] bond70: left promiscuous mode
[  483.089507][T26393] bond71: left promiscuous mode
[  483.091417][T26393] bond72: left promiscuous mode
[  483.093140][T26393] bridge28: left promiscuous mode
[  483.095382][T26393] ipvlan2: left allmulticast mode
[  483.097083][T26393] ipvlan3: left allmulticast mode
[  483.099408][T26393] bond72: left allmulticast mode
[  483.101379][T26393] bridge28: left allmulticast mode
[  483.103184][T26393] gtp1: left allmulticast mode
[  483.105599][T26393] bond73: left promiscuous mode
[  483.116746][T26393] bond16: left allmulticast mode
[  483.119870][T26393] macvlan3: left allmulticast mode
[  483.124234][T26393] bond75: left allmulticast mode
[  483.137530][T26393] vlan6: left allmulticast mode
[  483.140979][T26393] bond76: left allmulticast mode
[  483.153545][T26393] bond78: left promiscuous mode
[  483.169206][T26393] veth47: left promiscuous mode
[  483.186060][T26393] bond81: left promiscuous mode
[  483.193450][T26393] bond82: left allmulticast mode
[  483.207265][T26393] bond84: left promiscuous mode
[  483.211406][T26393] bond84: left allmulticast mode
[  483.387363][T26393] bond87: left promiscuous mode
[  483.401032][T26393] bond89: left promiscuous mode
[  483.408382][T26393] bridge36: left promiscuous mode
[  483.457801][T26393] bond94: left promiscuous mode
[  483.464251][T26393] bridge39: left promiscuous mode
[  483.486900][T26393] bond95: left promiscuous mode
[  483.490726][T26393] bridge40: left promiscuous mode
[  483.516408][T26393] bond96: left promiscuous mode
[  483.521131][T26393] bridge41: left promiscuous mode
[  483.548430][T26393] bond97: left promiscuous mode
[  483.554701][T26393] bond97: left allmulticast mode
[  483.558917][T26393] bond98: left promiscuous mode
[  483.563913][T26393] bond99: left promiscuous mode
[  483.568200][T26393] bridge42: left promiscuous mode
[  483.595054][ T5646] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  483.601879][ T6466] lo speed is unknown, defaulting to 1000
[  483.604424][ T5646] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  483.615395][ T6466] syz2: Port: 1 Link DOWN
[  483.616382][ T5646] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  483.626034][ T5646] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  483.634105][ T5646] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  483.643446][ T5646] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  483.652374][ T5646] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  483.656589][ T5646] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  483.890180][T26418] netlink: 'syz.2.6274': attribute type 1 has an invalid length.
[  484.064834][T26437] netlink: 'syz.2.6280': attribute type 64 has an invalid length.
[  484.142173][T26444] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  484.164436][T26446] netlink: 'syz.2.6284': attribute type 8 has an invalid length.
[  484.206404][T26448] netlink: 'syz.1.6283': attribute type 1 has an invalid length.
[  484.209795][T26448] netlink: 'syz.1.6283': attribute type 2 has an invalid length.
[  484.212865][T26448] netlink: 'syz.1.6283': attribute type 2 has an invalid length.
[  484.216088][T26448] netlink: 'syz.1.6283': attribute type 2 has an invalid length.
[  484.282258][T26452] veth1: entered allmulticast mode
[  484.284493][T26452] bridge42: port 1(veth1) entered blocking state
[  484.286739][T26452] bridge42: port 1(veth1) entered disabled state
[  484.293422][T26452] veth1: entered promiscuous mode
[  484.299428][T26452] veth1: left promiscuous mode
[  484.301648][T26452] bridge42: port 1(veth1) entered disabled state
[  484.492044][T26463] 8021q: adding VLAN 0 to HW filter on device bond84
[  484.640125][T26482] bond71: entered promiscuous mode
[  484.643733][T26482] 8021q: adding VLAN 0 to HW filter on device bond71
[  484.664169][T26482] bond71: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  484.669049][T26482] bond71: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  484.672851][T26482] bond71: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  485.443743][T26523] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  485.752777][T26541] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  485.945181][T26553] bond72: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  485.951126][T26553] bond72 (unregistering): Released all slaves
[  486.033927][T26558] openvswitch: netlink: EtherType 0 is less than min 600
[  486.081919][T26560] validate_nla: 7 callbacks suppressed
[  486.081932][T26560] netlink: 'syz.0.6319': attribute type 1 has an invalid length.
[  486.305566][T26572] vlan3: entered allmulticast mode
[  486.307127][T26572] bond0: entered allmulticast mode
[  486.345092][T26576] openvswitch: netlink: EtherType 0 is less than min 600
[  486.746203][T26592] openvswitch: netlink: EtherType 0 is less than min 600
[  486.871860][T26599] __nla_validate_parse: 59 callbacks suppressed
[  486.871873][T26599] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6334'.
[  487.111955][ T6476] lo speed is unknown, defaulting to 1000
[  487.114795][   T32] syz0: Port: 1 Link DOWN
[  487.115997][ T8397] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.118548][ T6476] sqz0: Port: 1 Link DOWN
[  487.128839][ T8397] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.133735][ T8397] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.143055][ T8397] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  487.148593][ T6471] lo speed is unknown, defaulting to 1000
[  487.340406][T26618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6338'.
[  487.350007][T26618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6338'.
[  487.415426][T26620] veth31: entered promiscuous mode
[  487.454175][T26623] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6339'.
[  487.458025][T26623] openvswitch: netlink: EtherType 0 is less than min 600
[  487.466828][T26620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6336'.
[  487.734146][T26648] netlink: 'syz.0.6345': attribute type 21 has an invalid length.
[  487.740804][T26648] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6345'.
[  487.748670][T26648] netlink: 'syz.0.6345': attribute type 1 has an invalid length.
[  487.972199][T26640] lo speed is unknown, defaulting to 1000
[  487.976921][T26663] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6348'.
[  488.008759][T26663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6348'.
[  488.153395][T26640] lo speed is unknown, defaulting to 1000
[  488.177360][T26673] netlink: 'syz.0.6351': attribute type 64 has an invalid length.
[  488.340608][T26676] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6352'.
[  488.606625][T26692] netlink: 'syz.1.6358': attribute type 64 has an invalid length.
[  488.816497][T26703] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.6362'.
[  488.820295][T26703] openvswitch: netlink: EtherType 0 is less than min 600
[  488.889067][T26705] openvswitch: netlink: EtherType 0 is less than min 600
[  489.515473][ T5076] block nbd2: Possible stuck request ffff88810a1b0000: control (read@0,1024B). Runtime 270 seconds
[  489.520121][ T5076] block nbd2: Possible stuck request ffff88810a1b0200: control (read@1024,1024B). Runtime 270 seconds
[  489.526011][ T5076] block nbd2: Possible stuck request ffff88810a1b0400: control (read@2048,1024B). Runtime 270 seconds
[  489.530958][ T5076] block nbd2: Possible stuck request ffff88810a1b0600: control (read@3072,1024B). Runtime 270 seconds
[  489.710177][T26732] netlink: 'syz.0.6370': attribute type 64 has an invalid length.
[  490.467099][T26771] netlink: 'syz.2.6383': attribute type 4 has an invalid length.
[  490.523527][T26777] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  490.592461][T26782] netlink: 'syz.2.6388': attribute type 1 has an invalid length.
[  490.786528][T26801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  490.820137][T26803] xt_hashlimit: size too large, truncated to 1048576
[  491.420899][T26832] bond101: entered promiscuous mode
[  491.804247][ T5622] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  491.809154][ T5622] CPU: 0 UID: 0 PID: 5622 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  491.809168][ T5622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  491.809174][ T5622] Call Trace:
[  491.809178][ T5622]  <TASK>
[  491.809182][ T5622]  dump_stack_lvl+0xe8/0x150
[  491.809198][ T5622]  dump_header+0xd3/0x4c0
[  491.809212][ T5622]  oom_kill_process+0x3ab/0x970
[  491.809226][ T5622]  out_of_memory+0x106c/0x1410
[  491.809235][ T5622]  ? try_charge_memcg+0xbb9/0x1570
[  491.809250][ T5622]  ? __pfx___mutex_lock+0x10/0x10
[  491.809262][ T5622]  ? __pfx_out_of_memory+0x10/0x10
[  491.809271][ T5622]  ? do_raw_spin_unlock+0x4d/0x210
[  491.809289][ T5622]  try_charge_memcg+0xc77/0x1570
[  491.809315][ T5622]  ? __pfx_try_charge_memcg+0x10/0x10
[  491.809325][ T5622]  ? percpu_ref_tryget+0x15/0x180
[  491.809346][ T5622]  ? charge_memcg+0x23/0x2b0
[  491.809358][ T5622]  charge_memcg+0x1a2/0x2b0
[  491.809370][ T5622]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  491.809380][ T5622]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  491.809392][ T5622]  __swap_cache_prepare_and_add+0xdc/0x700
[  491.809406][ T5622]  ? page_rmappable_folio+0x9a/0x170
[  491.809441][ T5622]  swap_cache_alloc_folio+0xf1/0x240
[  491.809454][ T5622]  swap_cluster_readahead+0x355/0x670
[  491.809467][ T5622]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  491.809483][ T5622]  ? get_vma_policy+0x27b/0x3c0
[  491.809519][ T5622]  swapin_readahead+0x196/0xc50
[  491.809531][ T5622]  ? swap_table_get+0x1e/0x260
[  491.809542][ T5622]  ? __pfx_swapin_readahead+0x10/0x10
[  491.809552][ T5622]  ? swap_table_get+0x1e/0x260
[  491.809560][ T5622]  ? swap_table_get+0x1e/0x260
[  491.809567][ T5622]  ? swap_table_get+0x1e/0x260
[  491.809576][ T5622]  ? swap_table_get+0x216/0x260
[  491.809585][ T5622]  ? swap_cache_get_folio+0x2e4/0x2f0
[  491.809597][ T5622]  do_swap_page+0x555/0x5120
[  491.809610][ T5622]  ? __pte_offset_map+0x29/0x240
[  491.809621][ T5622]  ? __pte_offset_map+0x29/0x240
[  491.809635][ T5622]  ? do_swap_page+0x128/0x5120
[  491.809643][ T5622]  ? __pfx_do_swap_page+0x10/0x10
[  491.809651][ T5622]  ? __pte_offset_map+0x1ae/0x240
[  491.809662][ T5622]  ? pte_offset_map_rw_nolock+0xea/0x160
[  491.809673][ T5622]  handle_mm_fault+0x12d2/0x3170
[  491.809689][ T5622]  ? handle_mm_fault+0xee/0x3170
[  491.809701][ T5622]  ? __pfx_handle_mm_fault+0x10/0x10
[  491.809710][ T5622]  ? lock_vma_under_rcu+0x45a/0x500
[  491.809734][ T5622]  do_user_addr_fault+0xa73/0x1340
[  491.809746][ T5622]  ? rcu_is_watching+0x15/0xb0
[  491.809757][ T5622]  ? trace_page_fault_user+0x84/0x1e0
[  491.809766][ T5622]  exc_page_fault+0x6a/0xc0
[  491.809779][ T5622]  asm_exc_page_fault+0x26/0x30
[  491.809787][ T5622] RIP: 0033:0x7f4b9e95d60e
[  491.809797][ T5622] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  491.809804][ T5622] RSP: 002b:00007ffd6ce7e518 EFLAGS: 00010246
[  491.809812][ T5622] RAX: 0000000000000000 RBX: 00005555860f0500 RCX: 00007f4b9e95d60e
[  491.809818][ T5622] RDX: 00007ffd6ce7e570 RSI: 0000000000000000 RDI: 0000000000000000
[  491.809823][ T5622] RBP: 00007ffd6ce7e5dc R08: 0000000000000000 R09: 0000000000000000
[  491.809827][ T5622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  491.809832][ T5622] R13: 00000000000927c0 R14: 0000000000077de6 R15: 00007ffd6ce7e630
[  491.809846][ T5622]  </TASK>
[  491.809880][ T5622] memory: usage 307200kB, limit 307200kB, failcnt 3343
[  491.935195][T26861] __nla_validate_parse: 12 callbacks suppressed
[  491.935209][T26861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6416'.
[  491.952803][ T5622] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0
[  491.955680][ T5622] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0
[  491.964885][T26861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6416'.
[  491.971312][ T5622] Memory cgroup stats for /syz1:
[  491.974855][ T5622] cache 0
[  491.980500][ T5622] rss 0
[  491.982028][ T5622] rss_huge 0
[  491.983381][ T5622] shmem 0
[  491.990811][ T5622] mapped_file 0
[  492.004561][ T5622] dirty 0
[  492.022276][ T5622] writeback 0
[  492.027038][T26861] bond0: Caught tx_queue_len zero misconfig
[  492.030630][ T5622] workingset_refault_anon 1
[  492.032032][ T5622] workingset_refault_file 0
[  492.033666][ T5622] swap 204800
[  492.035098][ T5622] swapcached 221184
[  492.036767][ T5622] pgpgin 240903
[  492.037909][ T5622] pgpgout 240901
[  492.039759][ T5622] pgfault 425715
[  492.055374][ T5622] pgmajfault 2
[  492.060447][ T5622] inactive_anon 0
[  492.061926][ T5622] active_anon 8192
[  492.063407][ T5622] inactive_file 0
[  492.064897][ T5622] active_file 0
[  492.066424][ T5622] unevictable 0
[  492.069295][ T5622] hierarchical_memory_limit 314572800
[  492.071402][ T5622] hierarchical_memsw_limit 9223372036854771712
[  492.073692][ T5622] total_cache 0
[  492.074820][ T5622] total_rss 0
[  492.075949][ T5622] total_rss_huge 0
[  492.077749][ T5622] total_shmem 0
[  492.079674][ T5622] total_mapped_file 0
[  492.094895][ T5622] total_dirty 0
[  492.097905][ T5622] total_writeback 0
[  492.100096][ T5622] total_workingset_refault_anon 1
[  492.101719][ T5622] total_workingset_refault_file 0
[  492.103275][ T5622] total_swap 204800
[  492.120545][ T5622] total_swapcached 221184
[  492.122248][ T5622] total_pgpgin 240906
[  492.123604][ T5622] total_pgpgout 240904
[  492.124826][ T5622] total_pgfault 425725
[  492.126081][ T5622] total_pgmajfault 2
[  492.127257][ T5622] total_inactive_anon 0
[  492.129318][ T5622] total_active_anon 8192
[  492.141792][ T5622] total_inactive_file 0
[  492.143080][ T5622] total_active_file 0
[  492.154643][ T5622] total_unevictable 0
[  492.156295][ T5622] anon_cost 0
[  492.157424][ T5622] file_cost 0
[  492.159191][ T5622] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6400,pid=26816,uid=0
[  492.180560][T26869] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6417'.
[  492.199044][ T5622] Memory cgroup out of memory: Killed process 26816 (syz.1.6400) total-vm:102292kB, anon-rss:1240kB, file-rss:23136kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  492.348360][T26874] geneve5: entered allmulticast mode
[  492.440744][T26880] netlink: 'syz.1.6422': attribute type 4 has an invalid length.
[  492.447221][T26880] netlink: 'syz.1.6422': attribute type 4 has an invalid length.
[  492.485281][T26883] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6423'.
[  492.499073][T26883] openvswitch: netlink: EtherType 0 is less than min 600
[  492.584925][T26889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6426'.
[  492.605863][T26889] bond29: entered allmulticast mode
[  492.608359][T26889] ip6gre2: entered allmulticast mode
[  492.616903][T26889] dvmrp1: entered allmulticast mode
[  492.622687][T26888] bond29: left allmulticast mode
[  492.628941][T26888] ip6gre2: left allmulticast mode
[  492.714168][T26895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6429'.
[  492.742019][T26899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6430'.
[  492.830911][T26902] bond72: entered allmulticast mode
[  492.874351][T26902] macvlan12: entered promiscuous mode
[  492.876136][T26902] macvlan12: entered allmulticast mode
[  492.878818][T26902] bond72: entered promiscuous mode
[  492.880823][T26902] 8021q: adding VLAN 0 to HW filter on device macvlan12
[  492.886832][T26902] bond72: left promiscuous mode
[  492.900733][T26905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6433'.
[  492.960871][T26911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6433'.
[  492.974353][T26911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6433'.
[  493.008363][T26915] netlink: 'syz.2.6437': attribute type 3 has an invalid length.
[  493.011155][T26915] netlink: 'syz.2.6437': attribute type 3 has an invalid length.
[  493.020453][T26915] siw: device registration error -23
[  493.134354][T26920] veth57: entered promiscuous mode
[  493.440215][T26938] netlink: 'syz.2.6446': attribute type 12 has an invalid length.
[  493.485159][T26943] netlink: 'syz.1.6447': attribute type 1 has an invalid length.
[  493.514854][T26943] bond85: entered promiscuous mode
[  493.517240][T26943] 8021q: adding VLAN 0 to HW filter on device bond85
[  493.527582][T26946] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  493.544321][T26943] 8021q: adding VLAN 0 to HW filter on device bond85
[  493.546990][T26943] bond85: (slave wireguard1): The slave device specified does not support setting the MAC address
[  493.552015][T26943] bond85: (slave wireguard1): Setting fail_over_mac to active for active-backup mode
[  493.563468][T26943] bond85: (slave wireguard1): making interface the new active one
[  493.566261][T26943] wireguard1: entered promiscuous mode
[  493.569500][T26943] bond85: (slave wireguard1): Enslaving as an active interface with an up link
[  493.596197][T26946] syzkaller0: mtu less than device minimum
[  493.646159][T26952] openvswitch: netlink: EtherType 0 is less than min 600
[  493.846640][T26967] netlink: 'syz.2.6454': attribute type 1 has an invalid length.
[  494.009659][T26984] netlink: 'syz.0.6457': attribute type 2 has an invalid length.
[  494.587180][T26998] netlink: 'syz.1.6462': attribute type 1 has an invalid length.
[  494.617145][T26998] 8021q: adding VLAN 0 to HW filter on device bond86
[  494.651681][T26998] bond86: (slave veth59): Enslaving as an active interface with a down link
[  494.661794][T26998] netlink: 'syz.1.6462': attribute type 29 has an invalid length.
[  494.881149][T27008] netlink: 'syz.1.6464': attribute type 11 has an invalid length.
[  495.001876][T27010] xt_hashlimit: size too large, truncated to 1048576
[  496.028813][T27061] syzkaller1: entered promiscuous mode
[  496.030892][T27061] syzkaller1: entered allmulticast mode
[  497.190534][T27094] __nla_validate_parse: 25 callbacks suppressed
[  497.190546][T27094] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.6487'.
[  497.201402][T27094] openvswitch: netlink: EtherType 0 is less than min 600
[  497.252605][T27032] Set syz1 is full, maxelem 65536 reached
[  497.301932][T27098] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6489'.
[  497.305340][T27100] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6490'.
[  497.305534][T27098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6489'.
[  497.314320][T27098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6489'.
[  497.323251][T27098] xt_l2tp: v2 doesn't support IP mode
[  497.339456][T27098] tipc: Enabling <eth:lo> not permitted
[  497.348952][T27098] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  497.359874][T27100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6490'.
[  497.592210][T27113] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.6494'.
[  497.596434][T27113] openvswitch: netlink: EtherType 0 is less than min 600
[  497.713851][T27111] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6495'.
[  497.718059][T27118] validate_nla: 5 callbacks suppressed
[  497.718072][T27118] netlink: 'syz.2.6497': attribute type 1 has an invalid length.
[  497.720566][T27111] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6495'.
[  497.727343][T27111] netlink: 'syz.0.6495': attribute type 5 has an invalid length.
[  497.733006][T27111] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6495'.
[  497.740309][T27116] veth61: entered promiscuous mode
[  497.761163][T27118] bond73: entered promiscuous mode
[  497.766146][T27118] 8021q: adding VLAN 0 to HW filter on device bond73
[  497.806337][T27121] xt_policy: output policy not valid in PREROUTING and INPUT
[  497.806410][T27118] bond73: (slave bridge43): making interface the new active one
[  497.812057][T27118] bridge43: entered promiscuous mode
[  497.816763][T27118] bond73: (slave bridge43): Enslaving as an active interface with an up link
[  497.883412][T27124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  498.042902][T27132] netlink: 'syz.0.6502': attribute type 15 has an invalid length.
[  498.176288][T27146] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  498.274698][T27146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  498.326736][T27160] netlink: 'syz.2.6511': attribute type 1 has an invalid length.
[  498.452148][T27169] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  498.821488][T27197] netlink: 'syz.0.6526': attribute type 18 has an invalid length.
[  498.824928][T27196] netlink: 'syz.0.6526': attribute type 18 has an invalid length.
[  499.062134][T27210] netlink: 'syz.1.6530': attribute type 1 has an invalid length.
[  499.087450][T27210] bond87: entered promiscuous mode
[  499.089714][T27210] 8021q: adding VLAN 0 to HW filter on device bond87
[  499.116874][T27210] bond87: (slave bridge32): making interface the new active one
[  499.125718][T27210] bridge32: entered promiscuous mode
[  499.129568][T27210] bond87: (slave bridge32): Enslaving as an active interface with an up link
[  499.368521][T27208] lo speed is unknown, defaulting to 1000
[  499.488445][T27208] lo speed is unknown, defaulting to 1000
[  499.684810][T27234] openvswitch: netlink: EtherType 0 is less than min 600
[  499.885035][T27251] netlink: 'syz.0.6541': attribute type 1 has an invalid length.
[  500.041253][T27251] bond102: entered promiscuous mode
[  500.061641][T27251] 8021q: adding VLAN 0 to HW filter on device bond102
[  500.154645][T27259] bond102: (slave bridge44): making interface the new active one
[  500.159960][T27259] bridge44: entered promiscuous mode
[  500.164271][T27259] bond102: (slave bridge44): Enslaving as an active interface with an up link
[  500.324700][T27276] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  500.349148][T27278] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  500.351833][T27278] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  500.379511][T27282] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  500.383567][T27281] openvswitch: netlink: EtherType 0 is less than min 600
[  500.516314][T27286] netlink: 'syz.2.6552': attribute type 10 has an invalid length.
[  500.519092][T27286] ieee802154 phy0 wpan0: entered promiscuous mode
[  500.615674][T27303] netlink: 'syz.2.6556': attribute type 1 has an invalid length.
[  500.639216][T27303] 8021q: adding VLAN 0 to HW filter on device bond74
[  500.668503][T27303] bond74: (slave veth33): Enslaving as an active interface with a down link
[  500.685654][T27303] 8021q: adding VLAN 0 to HW filter on device batadv0
[  500.691053][T27303] bond74: (slave batadv0): making interface the new active one
[  500.694884][T27303] batadv0: entered promiscuous mode
[  500.698036][T27303] bond74: (slave batadv0): Enslaving as an active interface with an up link
[  500.786961][T27315] openvswitch: netlink: EtherType 0 is less than min 600
[  500.893624][T27321] bond75: entered promiscuous mode
[  500.895545][T27321] 8021q: adding VLAN 0 to HW filter on device bond75
[  501.222029][T27357] 8021q: adding VLAN 0 to HW filter on device bond76
[  501.234174][T27361] block nbd6: Unsupported socket: should be TCP or UNIX.
[  501.258590][T27365] openvswitch: netlink: Multiple metadata blocks provided
[  501.262025][T27366] openvswitch: netlink: Multiple metadata blocks provided
[  501.287604][T27358] team_slave_1: entered promiscuous mode
[  501.309112][T27358] bond76: (slave team_slave_1): Enslaving as an active interface with an up link
[  501.612196][T27397] can: request_module (can-proto-0) failed.
[  501.643732][T27405] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  501.651136][T27405] bond101: left promiscuous mode
[  501.659501][T27405] bond102: left promiscuous mode
[  501.662470][T27405] bridge44: left promiscuous mode
[  501.768465][T27410] bond88: entered promiscuous mode
[  501.770508][T27410] 8021q: adding VLAN 0 to HW filter on device bond88
[  501.815766][T27409] bond88: (slave bridge33): making interface the new active one
[  501.819326][T27409] bridge33: entered promiscuous mode
[  501.822808][T27409] bond88: (slave bridge33): Enslaving as an active interface with an up link
[  501.844600][T27410] bond88: (slave bridge34): Enslaving as a backup interface with an up link
[  501.991432][T27431] geneve1: entered promiscuous mode
[  502.286872][T27457] __nla_validate_parse: 114 callbacks suppressed
[  502.286891][T27457] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.6601'.
[  502.336622][T27457] 8021q: adding VLAN 0 to HW filter on device bond77
[  502.389114][T27457] bond77: (slave veth35): Enslaving as an active interface with a down link
[  502.407118][T27457] bond77: entered allmulticast mode
[  502.526207][T27473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6607'.
[  502.544838][T27473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6607'.
[  502.639327][T27482] bond89: entered promiscuous mode
[  502.644287][T27482] 8021q: adding VLAN 0 to HW filter on device bond89
[  502.689654][T27482] bond89: (slave bridge35): making interface the new active one
[  502.692829][T27482] bridge35: entered promiscuous mode
[  502.697396][T27482] bond89: (slave bridge35): Enslaving as an active interface with an up link
[  502.720697][T27487] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6612'.
[  502.884614][T27489] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6613'.
[  502.905397][T27489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6613'.
[  503.091994][T27508] validate_nla: 8 callbacks suppressed
[  503.092015][T27508] netlink: 'syz.0.6620': attribute type 11 has an invalid length.
[  503.204647][T27518] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  503.262922][T27519] netlink: 'syz.2.6621': attribute type 11 has an invalid length.
[  503.492213][T27540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6631'.
[  503.553000][T27547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6632'.
[  503.560847][T27547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6632'.
[  503.564383][T27547] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6632'.
[  504.120269][T27580] netlink: 'syz.2.6644': attribute type 1 has an invalid length.
[  504.127500][T27580] workqueue: Failed to create a rescuer kthread for wq "bond78": -EINTR
[  504.396750][T27604] netlink: 'syz.1.6650': attribute type 1 has an invalid length.
[  504.442675][T27609] openvswitch: netlink: Flow key attr not present in new flow.
[  504.672735][T27625] netlink: 'syz.2.6658': attribute type 4 has an invalid length.
[  504.942438][T27654] netlink: 'syz.1.6664': attribute type 7 has an invalid length.
[  504.947896][T27654] netlink: 'syz.1.6664': attribute type 2 has an invalid length.
[  504.956519][T27654] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) !
[  504.985958][T27658] netlink: 'syz.0.6665': attribute type 6 has an invalid length.
[  505.005419][T27658] netlink: 'syz.0.6665': attribute type 1 has an invalid length.
[  505.024761][T27657] netlink: 'syz.0.6665': attribute type 6 has an invalid length.
[  505.037843][T27657] netlink: 'syz.0.6665': attribute type 1 has an invalid length.
[  505.339563][T27686] erspan0: entered promiscuous mode
[  505.350554][T27686] vlan4: entered promiscuous mode
[  505.407576][T27691] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  505.451108][T27679] lo speed is unknown, defaulting to 1000
[  505.734285][T27679] lo speed is unknown, defaulting to 1000
[  506.504371][T27766] openvswitch: netlink: EtherType 0 is less than min 600
[  506.643105][T27773] bond78: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  506.647690][T27773] bond78 (unregistering): Released all slaves
[  506.904943][T27779] lo speed is unknown, defaulting to 1000
[  507.024730][T27779] lo speed is unknown, defaulting to 1000
[  507.207756][T27791] openvswitch: netlink: EtherType 0 is less than min 600
[  507.273700][T27792] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  507.307367][T27792] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  507.335751][T27794] __nla_validate_parse: 53 callbacks suppressed
[  507.335770][T27794] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6704'.
[  507.464554][T27795] tipc: Resetting bearer <eth:syzkaller0>
[  507.469032][T27800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6704'.
[  507.593140][T27803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6704'.
[  507.596010][T27803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6704'.
[  508.163285][T27818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6710'.
[  508.169464][T27814] vlan0 (unregistering): left allmulticast mode
[  508.171700][T27814] geneve0: left allmulticast mode
[  508.173812][T27814] vlan0 (unregistering): left promiscuous mode
[  508.174562][T27818] validate_nla: 3 callbacks suppressed
[  508.174572][T27818] netlink: 'syz.0.6710': attribute type 10 has an invalid length.
[  508.175939][T27814] geneve0: left promiscuous mode
[  508.189904][T27816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6709'.
[  508.194116][T27814] bridge0: port 1(vlan0) entered disabled state
[  508.271457][T27822] netlink: 'syz.0.6710': attribute type 10 has an invalid length.
[  508.382160][T27822] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6710'.
[  508.386850][T27826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6712'.
[  508.512043][T27818] nbd6: detected capacity change from 0 to 63
[  508.520823][T23003] block nbd6: Receive control failed (result -32)
[  508.522756][   T56] block nbd6: Receive control failed (result -32)
[  508.544087][T13197] block nbd6: Send control failed (result -32)
[  508.546742][T13197] block nbd6: Request send failed, requeueing
[  508.552641][ T5076] block nbd6: Dead connection, failed to find a fallback
[  508.559451][ T5076] block nbd6: shutting down sockets
[  508.562599][ T5076] blk_print_req_error: 138 callbacks suppressed
[  508.562612][ T5076] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.576032][ T5076] buffer_io_error: 138 callbacks suppressed
[  508.576047][ T5076] Buffer I/O error on dev nbd6, logical block 0, async page read
[  508.582709][T13197] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.586596][T13197] Buffer I/O error on dev nbd6, logical block 1, async page read
[  508.589992][T13197] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.593086][T13197] Buffer I/O error on dev nbd6, logical block 2, async page read
[  508.595815][T13197] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.599704][T13197] Buffer I/O error on dev nbd6, logical block 3, async page read
[  508.606028][T13197] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.609248][T13197] Buffer I/O error on dev nbd6, logical block 0, async page read
[  508.612202][T13197] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.615191][T13197] Buffer I/O error on dev nbd6, logical block 1, async page read
[  508.619215][T13197] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.622565][T13197] Buffer I/O error on dev nbd6, logical block 2, async page read
[  508.626130][T13197] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.631254][T13197] Buffer I/O error on dev nbd6, logical block 3, async page read
[  508.633802][T13197] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.638831][T13197] Buffer I/O error on dev nbd6, logical block 0, async page read
[  508.643028][T13197] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  508.648681][T13197] Buffer I/O error on dev nbd6, logical block 1, async page read
[  508.656373][T13197] ldm_validate_partition_table(): Disk read failed.
[  508.661655][T13197] Dev nbd6: unable to read RDB block 0
[  508.664548][T13197]  nbd6: unable to read partition table
[  508.677881][T13197] ldm_validate_partition_table(): Disk read failed.
[  508.686039][T13197] Dev nbd6: unable to read RDB block 0
[  508.690295][T13197]  nbd6: unable to read partition table
[  508.759232][T27843] netlink: 'syz.1.6720': attribute type 1 has an invalid length.
[  508.777526][T27843] bond92: entered promiscuous mode
[  508.779666][T27843] 8021q: adding VLAN 0 to HW filter on device bond92
[  508.794835][T27843] bond92: (slave bridge36): making interface the new active one
[  508.797398][T27843] bridge36: entered promiscuous mode
[  508.800503][T27843] bond92: (slave bridge36): Enslaving as an active interface with an up link
[  508.899018][T27856] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  508.902255][T27856] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  509.057684][T27867] netlink: 'syz.0.6729': attribute type 1 has an invalid length.
[  509.081429][T27867] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6729'.
[  509.134594][T27872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6730'.
[  509.344948][T27895] netlink: 'syz.2.6737': attribute type 1 has an invalid length.
[  509.363303][T27898] netlink: 'syz.0.6738': attribute type 1 has an invalid length.
[  509.379752][T27895] bond78: entered promiscuous mode
[  509.382287][T27895] 8021q: adding VLAN 0 to HW filter on device bond78
[  509.403920][T27898] bond104: entered promiscuous mode
[  509.406351][T27898] 8021q: adding VLAN 0 to HW filter on device bond104
[  509.424052][T27895] bond78: (slave bridge44): making interface the new active one
[  509.427002][T27895] bridge44: entered promiscuous mode
[  509.431508][T27895] bond78: (slave bridge44): Enslaving as an active interface with an up link
[  509.572137][T27907] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  509.579213][T27907] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  509.587121][T27907] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  509.766003][T27909] lo speed is unknown, defaulting to 1000
[  509.821659][T27919] netlink: 'syz.0.6745': attribute type 1 has an invalid length.
[  509.866527][T27919] bond105: entered promiscuous mode
[  509.871366][T27919] 8021q: adding VLAN 0 to HW filter on device bond105
[  509.909518][T27919] bond105: (slave bridge46): making interface the new active one
[  509.912956][T27919] bridge46: entered promiscuous mode
[  509.916989][T27919] bond105: (slave bridge46): Enslaving as an active interface with an up link
[  509.921104][T27922] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode
[  509.926363][T27922] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode
[  510.050327][T27909] lo speed is unknown, defaulting to 1000
[  510.101868][T27933] netlink: 'syz.1.6750': attribute type 22 has an invalid length.
[  510.114568][T27933] netlink: 'syz.1.6750': attribute type 22 has an invalid length.
[  510.654249][T27973] netlink: 'syz.1.6761': attribute type 6 has an invalid length.
[  511.224130][T27986] lo speed is unknown, defaulting to 1000
[  511.392286][T28019] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  511.395547][T28019] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  511.481193][T27986] lo speed is unknown, defaulting to 1000
[  511.541697][T28033] bond93: entered allmulticast mode
[  511.560487][T28033] macvlan6: entered promiscuous mode
[  511.562555][T28033] macvlan6: entered allmulticast mode
[  511.565598][T28033] bond93: (slave macvlan6): Opening slave failed
[  511.791885][   T12] batadv0: left promiscuous mode
[  511.990881][T28067] xt_hashlimit: size too large, truncated to 1048576
[  511.993202][T28066] xt_hashlimit: size too large, truncated to 1048576
[  512.128652][T28076] bond94: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  512.132920][T28076] bond94 (unregistering): Released all slaves
[  512.372501][T28108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  512.541133][T28114] 8021q: adding VLAN 0 to HW filter on device team0
[  512.577543][T28114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  512.581404][T28114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  512.587295][T28114] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  512.592289][ T6477] lo speed is unknown, defaulting to 1000
[  512.594557][ T6477] syz2: Port: 1 Link ACTIVE
[  512.757670][T28138] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  513.010522][T28152] tc_dump_action: action bad kind
[  513.091360][T28162] __nla_validate_parse: 71 callbacks suppressed
[  513.091372][T28162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6809'.
[  513.181898][T28172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6814'.
[  513.225064][T28175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6816'.
[  513.262392][T28180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6814'.
[  513.275470][T28180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6814'.
[  513.284459][T28183] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6817'.
[  513.337760][T28183] sch_tbf: burst 0 is lower than device sit0 mtu (1280) !
[  513.455994][T28202] veth0_virt_wifi: entered allmulticast mode
[  513.478930][T28205] validate_nla: 7 callbacks suppressed
[  513.478941][T28205] netlink: 'syz.2.6821': attribute type 1 has an invalid length.
[  513.592807][T28211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6823'.
[  513.714709][T28236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6831'.
[  513.740957][T28240] netlink: 'syz.2.6832': attribute type 9 has an invalid length.
[  513.745499][T28240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6832'.
[  513.825737][T28253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6833'.
[  513.830587][T28255] openvswitch: netlink: EtherType 0 is less than min 600
[  514.077643][T28280] openvswitch: netlink: EtherType 0 is less than min 600
[  514.125890][T28286] netlink: 'syz.2.6846': attribute type 1 has an invalid length.
[  514.145884][T28286] bond80: entered promiscuous mode
[  514.147570][T28286] bond80: entered allmulticast mode
[  514.149795][T28286] 8021q: adding VLAN 0 to HW filter on device bond80
[  514.176025][T28286] bridge45: entered promiscuous mode
[  514.177880][T28286] bridge45: entered allmulticast mode
[  514.180746][T28286] bond80: (slave bridge45): Enslaving as a backup interface with an up link
[  514.194504][T28286] bridge46: entered promiscuous mode
[  514.196270][T28286] bridge46: entered allmulticast mode
[  514.199266][T28286] bond80: (slave bridge46): Enslaving as a backup interface with a down link
[  514.199941][T28290] netlink: 'syz.0.6847': attribute type 1 has an invalid length.
[  514.268772][T28290] bond106: (slave bridge47): making interface the new active one
[  514.272479][T28290] bond106: (slave bridge47): Enslaving as an active interface with an up link
[  514.278482][ T8414] bond80: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  514.408334][   T12] bond80: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  514.622090][T28309] IPVS: persistence engine module ip_vs_pe_ not found
[  514.686178][T28318] netlink: 'syz.0.6854': attribute type 1 has an invalid length.
[  514.707873][T28318] 8021q: adding VLAN 0 to HW filter on device bond107
[  514.830221][T28318] tipc: Resetting bearer <eth:syzkaller0>
[  514.866698][   T10] lo speed is unknown, defaulting to 1000
[  515.004452][T28324] netlink: 'syz.0.6856': attribute type 1 has an invalid length.
[  515.009341][T28324] sctp: [Deprecated]: syz.0.6856 (pid 28324) Use of struct sctp_assoc_value in delayed_ack socket option.
[  515.009341][T28324] Use struct sctp_sack_info instead
[  515.859740][ T6466] lo speed is unknown, defaulting to 1000
[  515.862090][ T6466] syz2: Port: 1 Link DOWN
[  515.902104][T28366] bridge0: port 1(vlan7) entered blocking state
[  515.907723][T28366] bridge0: port 1(vlan7) entered disabled state
[  515.918751][T28366] vlan7: entered allmulticast mode
[  515.920572][T28366] geneve0: entered allmulticast mode
[  515.923876][T28366] vlan7: entered promiscuous mode
[  515.925567][T28366] geneve0: entered promiscuous mode
[  516.030695][T28375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  516.237636][T28391] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  516.266058][T28372] lo speed is unknown, defaulting to 1000
[  516.347990][T28395] netlink: 'syz.0.6876': attribute type 1 has an invalid length.
[  516.376382][T28395] bond108: entered promiscuous mode
[  516.379169][T28395] 8021q: adding VLAN 0 to HW filter on device bond108
[  516.409041][T28395] bond108: (slave bridge48): making interface the new active one
[  516.417619][T28395] bridge48: entered promiscuous mode
[  516.422109][T28395] bond108: (slave bridge48): Enslaving as an active interface with an up link
[  516.459780][T28372] lo speed is unknown, defaulting to 1000
[  516.633829][T28407] netlink: 'syz.0.6881': attribute type 4 has an invalid length.
[  516.715632][T28413] x_tables: unsorted underflow at hook 4
[  516.723422][T28413] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  516.743166][T28415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.956230][T28423] netlink: 'syz.0.6888': attribute type 4 has an invalid length.
[  516.965657][T28423] netlink: 'syz.0.6888': attribute type 1 has an invalid length.
[  517.196819][T28439] bond109: entered promiscuous mode
[  517.214182][T28439] 8021q: adding VLAN 0 to HW filter on device bond109
[  517.304678][T28439] bond109: (slave bridge49): making interface the new active one
[  517.310981][T28439] bridge49: entered promiscuous mode
[  517.315990][T28439] bond109: (slave bridge49): Enslaving as an active interface with an up link
[  517.570326][T28473] 8021q: adding VLAN 0 to HW filter on device bond110
[  517.581730][T28472] vlan9: entered promiscuous mode
[  517.585053][T28472] bond110: entered promiscuous mode
[  517.586975][T28472] vlan9: entered allmulticast mode
[  517.590742][T28472] bond110: entered allmulticast mode
[  517.603847][T28473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  517.617059][T28473] batadv0: entered promiscuous mode
[  517.619578][T28473] batadv0: entered allmulticast mode
[  517.622689][T28473] bond110: (slave batadv0): Enslaving as an active interface with an up link
[  517.732509][T28485] macvlan12: entered promiscuous mode
[  517.734367][T28485] macvlan12: entered allmulticast mode
[  517.736909][T28485] bond81: entered promiscuous mode
[  517.740814][T28485] 8021q: adding VLAN 0 to HW filter on device macvlan12
[  517.747390][T28485] bond81: left promiscuous mode
[  518.139096][T28518] __nla_validate_parse: 22 callbacks suppressed
[  518.139112][T28518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6914'.
[  518.614760][T28513] tipc: Resetting bearer <eth:syzkaller0>
[  518.662516][T28513] veth22: left promiscuous mode
[  518.822499][T28529] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  518.829814][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  518.835789][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  518.840813][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  518.844048][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  518.946397][T28533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6918'.
[  518.995612][T28540] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6920'.
[  519.001392][T28540] openvswitch: netlink: Message has 8 unknown bytes.
[  519.044291][T28543] validate_nla: 5 callbacks suppressed
[  519.044304][T28543] netlink: 'syz.0.6922': attribute type 142 has an invalid length.
[  519.128883][T28549] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004
[  519.211604][T28555] netlink: 'syz.1.6927': attribute type 1 has an invalid length.
[  519.318778][T28564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6927'.
[  519.424546][T28560] 8021q: adding VLAN 0 to HW filter on device bond95
[  519.439285][T28560] bond94: (slave bond95): making interface the new active one
[  519.449738][T28560] bond94: (slave bond95): Enslaving as an active interface with an up link
[  519.526542][T28573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6931'.
[  519.592791][ T5076] block nbd2: Possible stuck request ffff88810a1b0000: control (read@0,1024B). Runtime 300 seconds
[  519.597054][ T5076] block nbd2: Possible stuck request ffff88810a1b0200: control (read@1024,1024B). Runtime 300 seconds
[  519.601121][ T5076] block nbd2: Possible stuck request ffff88810a1b0400: control (read@2048,1024B). Runtime 300 seconds
[  519.604587][ T5076] block nbd2: Possible stuck request ffff88810a1b0600: control (read@3072,1024B). Runtime 300 seconds
[  519.636030][T28580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6933'.
[  519.671012][T28581] bond96: entered promiscuous mode
[  519.672907][T28581] bond96: entered allmulticast mode
[  519.776980][T28590] syzkaller0: left allmulticast mode
[  519.822376][T28594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6939'.
[  519.830932][T28592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6938'.
[  519.844817][T28592] netlink: 'syz.0.6938': attribute type 5 has an invalid length.
[  519.847332][T28592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6938'.
[  520.044482][T28607] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  520.116779][T28551] Set syz1 is full, maxelem 65536 reached
[  520.208446][T28615] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  520.217280][T28615] netem: change failed
[  520.226977][T28605] lo speed is unknown, defaulting to 1000
[  520.327848][T28619] netlink: 'syz.2.6947': attribute type 178 has an invalid length.
[  520.363406][T28605] lo speed is unknown, defaulting to 1000
[  520.520666][T28626] lo speed is unknown, defaulting to 1000
[  520.616535][T28626] lo speed is unknown, defaulting to 1000
[  520.715749][T28648] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6956'.
[  520.764258][T28649] syzkaller1: entered promiscuous mode
[  520.781546][T28649] syzkaller1: entered allmulticast mode
[  520.809167][T28657] xt_CT: You must specify a L4 protocol and not use inversions on it
[  520.953239][T28669] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  521.229119][T28679] tipc: Resetting bearer <eth:syzkaller0>
[  521.289810][T28679] netlink: 'syz.1.6965': attribute type 1 has an invalid length.
[  521.353410][T28679] 8021q: adding VLAN 0 to HW filter on device bond97
[  521.394904][T28688] bond97: (slave gretap5): making interface the new active one
[  521.402051][T28688] bond97: (slave gretap5): Enslaving as an active interface with an up link
[  521.473653][T28697] netlink: 'syz.0.6971': attribute type 10 has an invalid length.
[  521.522375][T28697] block nbd7: shutting down sockets
[  521.541824][T28697] netlink: 'syz.0.6971': attribute type 10 has an invalid length.
[  521.632614][T28707] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  521.636167][T28707] syzkaller0: entered allmulticast mode
[  521.800781][T28709] bond111: invalid ARP target 0.0.0.0 specified for addition
[  521.810521][T28709] bond111: option arp_ip_target: invalid value (0)
[  521.817602][T28709] bond111 (unregistering): Released all slaves
[  521.890942][T28720] syzkaller1: entered promiscuous mode
[  521.893834][T28720] syzkaller1: entered allmulticast mode
[  521.906183][T28720] bond13: left promiscuous mode
[  521.907985][T28720] bond13: left allmulticast mode
[  521.912033][T28720] veth7: left allmulticast mode
[  521.914156][T28720] bond16: left promiscuous mode
[  521.916271][T28720] wireguard0: left promiscuous mode
[  521.932000][T28720] bond17: left promiscuous mode
[  521.939847][T28720] bridge5: left promiscuous mode
[  521.953898][T28720] bond18: left promiscuous mode
[  521.966681][T28720] macsec3: left promiscuous mode
[  521.991066][T28720] ip6gre4: left allmulticast mode
[  521.996100][T28720] bond30: left allmulticast mode
[  522.004403][T28720] team1: left promiscuous mode
[  522.012622][T28720] team1: left allmulticast mode
[  522.016776][T28720] vlan2: left promiscuous mode
[  522.019164][T28720] bond33: left promiscuous mode
[  522.021291][T28720] bridge11: left promiscuous mode
[  522.024459][T28720] vlan2: left allmulticast mode
[  522.026031][T28720] bond33: left allmulticast mode
[  522.040065][T28720] bridge11: left allmulticast mode
[  522.043958][T28720] ipip2: left promiscuous mode
[  522.051637][T28720] veth25: left allmulticast mode
[  522.056555][T28720] bond40: left promiscuous mode
[  522.058542][T28720] bridge16: left promiscuous mode
[  522.061166][T28720] bond41: left promiscuous mode
[  522.063120][T28720] bond41: left allmulticast mode
[  522.064762][T28720] bond42: left promiscuous mode
[  522.066497][T28720] bond43: left promiscuous mode
[  522.068724][T28720] bridge17: left promiscuous mode
[  522.070953][T28728] netlink: 'syz.0.6981': attribute type 1 has an invalid length.
[  522.073480][T28720] tipc: Resetting bearer <eth:syzkaller0>
[  522.076009][T28720] syzkaller0: left promiscuous mode
[  522.077770][T28720] syzkaller0: left allmulticast mode
[  522.085070][T28720] geneve7: left promiscuous mode
[  522.086750][T28720] geneve7: left allmulticast mode
[  522.088838][T28720] bond45: left promiscuous mode
[  522.091995][T28720] xfrm1: left promiscuous mode
[  522.093985][T28720] xfrm1: left allmulticast mode
[  522.095734][T28720] bond47: left promiscuous mode
[  522.097251][T28720] bridge21: left promiscuous mode
[  522.099934][T28720] bond48: left promiscuous mode
[  522.102141][T28720] bond49: left promiscuous mode
[  522.103872][T28720] ip6gre5: left promiscuous mode
[  522.105359][T28720] ip6gre5: left allmulticast mode
[  522.107202][T28720] bond50: left promiscuous mode
[  522.109894][T28720] bond52: left promiscuous mode
[  522.111786][T28720] bond56: left promiscuous mode
[  522.113398][T28720] bond57: left promiscuous mode
[  522.114941][T28720] bond57: left allmulticast mode
[  522.117066][T28720] bond58: left allmulticast mode
[  522.119791][T28720] veth41: left allmulticast mode
[  522.121872][T28720] bond61: left promiscuous mode
[  522.123632][T28720] bond62: left promiscuous mode
[  522.125269][T28720] bond64: left promiscuous mode
[  522.126688][T28720] bridge24: left promiscuous mode
[  522.128525][T28720] mac80211_hwsim hwsim52 wlan0: left promiscuous mode
[  522.130926][T28720] mac80211_hwsim hwsim52 wlan0: left allmulticast mode
[  522.133328][T28720] bond66: left promiscuous mode
[  522.135005][T28720] bond67: left allmulticast mode
[  522.137011][T28720] bond69: left promiscuous mode
[  522.140439][T28720] bond70: left promiscuous mode
[  522.144083][T28720] bond78: left promiscuous mode
[  522.146150][T28720] macvlan4: left promiscuous mode
[  522.147781][T28720] macvlan4: left allmulticast mode
[  522.149946][T28720] bond81: left promiscuous mode
[  522.151742][T28720] bridge30: left promiscuous mode
[  522.155137][T28720] vlan3: left allmulticast mode
[  522.157379][T28720] bond0: left allmulticast mode
[  522.160329][T28720] veth57: left promiscuous mode
[  522.162506][T28720] bond85: left promiscuous mode
[  522.164347][T28720] wireguard1: left promiscuous mode
[  522.167514][T28720] veth61: left promiscuous mode
[  522.170393][T28720] bond87: left promiscuous mode
[  522.172342][T28720] bridge32: left promiscuous mode
[  522.174577][T28720] bond88: left promiscuous mode
[  522.176530][T28720] bridge33: left promiscuous mode
[  522.180446][T28720] bond89: left promiscuous mode
[  522.182359][T28720] bridge35: left promiscuous mode
[  522.185060][T28720] bond92: left promiscuous mode
[  522.187030][T28720] bridge36: left promiscuous mode
[  522.189411][T28720] bond93: left allmulticast mode
[  522.192241][T28720] bond96: left promiscuous mode
[  522.194146][T28720] bond96: left allmulticast mode
[  522.228643][T28720] syzkaller1: left promiscuous mode
[  522.231384][T28720] syzkaller1: left allmulticast mode
[  522.240399][T28724] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[  522.273815][T28728] bond111: entered promiscuous mode
[  522.277529][T28728] 8021q: adding VLAN 0 to HW filter on device bond111
[  522.296188][T28731] bond111: (slave bridge51): making interface the new active one
[  522.298741][T28731] bridge51: entered promiscuous mode
[  522.301215][T28731] bond111: (slave bridge51): Enslaving as an active interface with an up link
[  522.757706][T28756] bond112: entered promiscuous mode
[  522.760353][T28756] 8021q: adding VLAN 0 to HW filter on device bond112
[  522.799900][T28756] 8021q: adding VLAN 0 to HW filter on device bond112
[  522.807979][T28756] bond112: (slave sit6): The slave device specified does not support setting the MAC address
[  522.814395][T28756] bond112: (slave sit6): Error -95 calling set_mac_address
[  522.889217][T28763] IPv6: NLM_F_CREATE should be specified when creating new route
[  522.891672][T28763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  522.894043][T28763] IPv6: NLM_F_CREATE should be set when creating new route
[  522.896996][T28763] IPv6: NLM_F_CREATE should be set when creating new route
[  522.899811][T28763] IPv6: NLM_F_CREATE should be set when creating new route
[  522.906878][T28763] netlink: 'syz.2.6991': attribute type 3 has an invalid length.
[  522.961194][T28754] netlink: 'syz.1.6989': attribute type 1 has an invalid length.
[  522.965598][T28765] veth1_macvtap: entered promiscuous mode
[  522.968471][T28765] veth1_macvtap: entered allmulticast mode
[  523.064573][ T6470] lo speed is unknown, defaulting to 1000
[  523.068410][ T6470] sqz0: Port: 1 Link ACTIVE
[  523.074868][ T6470] lo speed is unknown, defaulting to 1000
[  523.255056][T28789] __nla_validate_parse: 11 callbacks suppressed
[  523.255072][T28789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6998'.
[  523.266632][T28789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6998'.
[  523.271395][T28789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6998'.
[  523.274885][T28789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6998'.
[  523.340261][T28769] lo speed is unknown, defaulting to 1000
[  523.459317][T28803] bond83: entered promiscuous mode
[  523.461182][T28803] 8021q: adding VLAN 0 to HW filter on device bond83
[  523.489120][T28803] bond83: (slave bridge49): making interface the new active one
[  523.491774][T28803] bridge49: entered promiscuous mode
[  523.494663][T28803] bond83: (slave bridge49): Enslaving as an active interface with an up link
[  523.498641][T28769] lo speed is unknown, defaulting to 1000
[  523.582327][T28812] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7004'.
[  523.862131][T28825] 8021q: adding VLAN 0 to HW filter on device team0
[  523.970589][T28825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  523.973693][T28825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  523.979712][T28825] veth0_virt_wifi: left allmulticast mode
[  523.982240][T28825] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  523.987964][ T6482] lo speed is unknown, defaulting to 1000
[  523.993925][ T6482] syz2: Port: 1 Link ACTIVE
[  524.132565][T28829] bond98 (unregistering): Released all slaves
[  524.173743][T28836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7010'.
[  524.227573][T28844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7013'.
[  524.277433][T28854] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.7016'.
[  524.285079][T28854] openvswitch: netlink: EtherType 0 is less than min 600
[  524.369276][T28863] validate_nla: 10 callbacks suppressed
[  524.369288][T28863] netlink: 'syz.0.7019': attribute type 1 has an invalid length.
[  524.373816][T28864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7020'.
[  524.401848][T28863] bond113: (slave vxcan1): The slave device specified does not support setting the MAC address
[  524.405392][T28863] bond113: (slave vxcan1): Error -95 calling set_mac_address
[  524.675283][T28874] netlink: 'syz.1.7021': attribute type 1 has an invalid length.
[  524.717039][T28874] 8021q: adding VLAN 0 to HW filter on device bond98
[  524.736524][T28883] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.7025'.
[  524.739773][T28883] openvswitch: netlink: EtherType 0 is less than min 600
[  524.846062][T28894] nbd: nbd1 already in use
[  524.880520][T28900] sctp: [Deprecated]: syz.1.7029 (pid 28900) Use of struct sctp_assoc_value in delayed_ack socket option.
[  524.880520][T28900] Use struct sctp_sack_info instead
[  525.151732][T28914] openvswitch: netlink: EtherType 0 is less than min 600
[  525.199362][T28916] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  525.516187][T28937] openvswitch: netlink: Invalid VLAN frame
[  525.717479][T28945] bond99: (slave vcan0): refused to change device type
[  526.040884][T28969] block nbd7: shutting down sockets
[  526.123169][T28984] xt_CT: You must specify a L4 protocol and not use inversions on it
[  526.431665][T29002] bond114: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  526.437641][T29002] bond114 (unregistering): Released all slaves
[  526.592080][T29015] netlink: 'syz.0.7070': attribute type 1 has an invalid length.
[  526.595226][T29015] netlink: 'syz.0.7070': attribute type 2 has an invalid length.
[  526.780327][T29027] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  526.797843][T29033] netlink: 'syz.0.7075': attribute type 4 has an invalid length.
[  526.816590][   T32] lo speed is unknown, defaulting to 1000
[  526.818513][   T32] syz2: Port: 1 Link DOWN
[  526.870175][T29038] netlink: 'syz.0.7077': attribute type 11 has an invalid length.
[  526.897771][T29038] bond114 (unregistering): Released all slaves
[  526.981218][T29018] lo speed is unknown, defaulting to 1000
[  527.171945][T29018] lo speed is unknown, defaulting to 1000
[  527.277282][T29057] netlink: 'syz.0.7085': attribute type 6 has an invalid length.
[  527.280572][T29057] netlink: 'syz.0.7085': attribute type 6 has an invalid length.
[  527.503800][T29072] syzkaller0: mtu less than device minimum
[  527.576688][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  527.579428][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  527.584843][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  527.593097][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  527.603034][T29076] netlink: 'syz.1.7093': attribute type 2 has an invalid length.
[  527.605780][T29076] netlink: 'syz.1.7093': attribute type 8 has an invalid length.
[  528.045307][T29082] lo speed is unknown, defaulting to 1000
[  528.126897][T29103] netlink: 'syz.2.7102': attribute type 3 has an invalid length.
[  528.207402][T29082] lo speed is unknown, defaulting to 1000
[  528.317360][T29113] __nla_validate_parse: 36 callbacks suppressed
[  528.317371][T29113] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7106'.
[  528.597401][T29124] sit3: entered allmulticast mode
[  528.696551][T29139] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7110'.
[  528.717911][T29139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7110'.
[  528.734193][T29139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7110'.
[  528.778692][T29133] bond84: entered promiscuous mode
[  528.786412][T29133] 8021q: adding VLAN 0 to HW filter on device bond84
[  528.853648][T29138] bond100: entered promiscuous mode
[  528.855940][T29138] 8021q: adding VLAN 0 to HW filter on device bond100
[  528.858862][T29135] batadv0: entered promiscuous mode
[  528.860592][T29135] batadv0: entered allmulticast mode
[  528.869657][T29135] bond74: (slave batadv0): Releasing active interface
[  528.876504][T29135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  528.887851][T29135] bond84: (slave batadv0): Enslaving as a backup interface with an up link
[  528.891535][ T8414] bond84: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  528.987385][T29145] bond100: (slave bridge37): making interface the new active one
[  528.998228][T29145] bridge37: entered promiscuous mode
[  529.001479][T29145] bond100: (slave bridge37): Enslaving as an active interface with an up link
[  529.095803][T29151] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7116'.
[  529.102518][ T5646] bond84: (slave batadv0): link status definitely down, disabling slave
[  529.139433][T29153] bond85 (unregistering): Released all slaves
[  529.216964][T29159] syzkaller0: entered promiscuous mode
[  529.220359][T29159] syzkaller0: entered allmulticast mode
[  529.222756][T29158] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  529.271917][T29164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7120'.
[  529.505545][T29194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7131'.
[  529.509867][T29194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7131'.
[  529.512918][T29194] validate_nla: 3 callbacks suppressed
[  529.512932][T29194] netlink: 'syz.1.7131': attribute type 7 has an invalid length.
[  529.565504][T29197] netlink: 'syz.0.7130': attribute type 13 has an invalid length.
[  529.568544][T29197] netlink: 'syz.0.7130': attribute type 17 has an invalid length.
[  529.867302][T29197] 8021q: adding VLAN 0 to HW filter on device team0
[  529.916220][T29197] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  529.933331][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  529.936281][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  529.939510][ T6482] lo speed is unknown, defaulting to 1000
[  529.944819][ T6482] syz2: Port: 1 Link ACTIVE
[  529.946534][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  529.958433][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  530.015041][T29209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  530.017382][T29209] IPv6: NLM_F_CREATE should be set when creating new route
[  530.024048][T29201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7132'.
[  530.055375][T29212] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  530.062154][T29207] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  530.065262][T29207] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  530.093450][T29201] bond101: (slave vcan0): refused to change device type
[  530.276319][T29231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7141'.
[  530.355297][T29235] openvswitch: netlink: Missing key (keys=40, expected=100)
[  530.590893][T29259] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  530.593871][T29259] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  530.598055][T29261] netlink: 'syz.0.7152': attribute type 1 has an invalid length.
[  530.620071][T29261] bond114: entered promiscuous mode
[  530.622113][T29261] 8021q: adding VLAN 0 to HW filter on device bond114
[  530.626701][T29259] xt_hashlimit: size too large, truncated to 1048576
[  530.657411][T29261] bond114: (slave bridge54): making interface the new active one
[  530.661187][T29261] bridge54: entered promiscuous mode
[  530.664228][T29261] bond114: (slave bridge54): Enslaving as an active interface with an up link
[  530.884818][T29281] netlink: 'syz.0.7160': attribute type 1 has an invalid length.
[  530.916568][T29281] bond115: entered promiscuous mode
[  530.921400][T29281] 8021q: adding VLAN 0 to HW filter on device bond115
[  530.939697][T29281] bond115: (slave bridge55): making interface the new active one
[  530.943211][T29281] bridge55: entered promiscuous mode
[  530.946516][T29281] bond115: (slave bridge55): Enslaving as an active interface with an up link
[  531.006573][T29289] netlink: 'syz.2.7161': attribute type 14 has an invalid length.
[  531.027927][T29289] netlink: 'syz.2.7161': attribute type 11 has an invalid length.
[  531.220381][T29314] netlink: 'syz.2.7166': attribute type 8 has an invalid length.
[  531.224103][T29314] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  531.231047][T29315] netlink: 'syz.0.7168': attribute type 1 has an invalid length.
[  531.256847][T29315] bond116: entered promiscuous mode
[  531.259966][T29315] 8021q: adding VLAN 0 to HW filter on device bond116
[  531.284220][T29315] bond116: (slave bridge56): making interface the new active one
[  531.287334][T29315] bridge56: entered promiscuous mode
[  531.292232][T29315] bond116: (slave bridge56): Enslaving as an active interface with an up link
[  531.512231][T29324] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  531.515658][T29324] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  531.785654][T29339] netlink: 'syz.1.7178': attribute type 64 has an invalid length.
[  531.894255][T29343] 8021q: adding VLAN 0 to HW filter on device bond117
[  531.940127][T29343] bond117 (unregistering): Released all slaves
[  531.974459][T29346] bond102: (slave vxcan1): The slave device specified does not support setting the MAC address
[  531.978932][T29346] bond102: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  531.991170][T29346] bond102: (slave vxcan1): making interface the new active one
[  532.009643][T29346] bond102: (slave vxcan1): Enslaving as an active interface with an up link
[  532.275250][T29364] 8021q: adding VLAN 0 to HW filter on device bond103
[  532.290559][T29360] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  532.296578][T29363] bond117: entered promiscuous mode
[  532.299018][T29363] 8021q: adding VLAN 0 to HW filter on device bond117
[  532.333054][T29360] bond104: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  532.339133][T29360] bond104 (unregistering): Released all slaves
[  532.361966][T29363] bond117: (slave bridge57): making interface the new active one
[  532.365211][T29363] bridge57: entered promiscuous mode
[  532.368666][T29363] bond117: (slave bridge57): Enslaving as an active interface with an up link
[  532.565636][T29381] bond118: (slave vcan0): refused to change device type
[  532.578069][T29385] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001
[  533.253720][T29407] netem: change failed
[  533.395641][T29422] __nla_validate_parse: 17 callbacks suppressed
[  533.395656][T29422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7205'.
[  533.410539][T29422] bond0: entered promiscuous mode
[  533.414221][T29422] bond0: left promiscuous mode
[  533.503809][T29409] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  533.680062][T29431] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7206'.
[  533.741321][T29436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7208'.
[  533.797803][T29438] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7210'.
[  533.968851][T29440] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7211'.
[  533.972562][T29440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7211'.
[  533.976172][T29440] netlink: 31 bytes leftover after parsing attributes in process `syz.2.7211'.
[  533.980462][T29440] netlink: 31 bytes leftover after parsing attributes in process `syz.2.7211'.
[  533.985946][T29440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7211'.
[  534.333228][T29462] tipc: Invalid UDP bearer configuration
[  534.333269][T29462] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  534.590307][T29477] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  534.596416][T29482] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4
[  534.673386][T29485] macvtap0: entered promiscuous mode
[  534.676113][T29485] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  534.679502][T29485] macvtap0: entered allmulticast mode
[  534.681768][T29485] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  534.686245][T29486] validate_nla: 7 callbacks suppressed
[  534.686262][T29486] netlink: 'syz.1.7224': attribute type 12 has an invalid length.
[  534.694101][T29486] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7224'.
[  534.706482][T29485] macvtap1: entered promiscuous mode
[  534.709210][T29485] macvtap1: entered allmulticast mode
[  534.774904][T29486] netlink: 'syz.1.7224': attribute type 39 has an invalid length.
[  534.893887][T29494] RDS: rds_bind could not find a transport for ::ffff:172.20.20.46, load rds_tcp or rds_rdma?
[  534.910938][T29494] bridge0: port 2(vlan8) entered blocking state
[  534.913901][T29494] bridge0: port 2(vlan8) entered disabled state
[  534.917395][T29494] vlan8: entered allmulticast mode
[  534.920873][T29494] bridge0: entered allmulticast mode
[  534.939149][T29494] vlan8: left allmulticast mode
[  534.941156][T29494] bridge0: left allmulticast mode
[  535.079691][T29504] netlink: zone id is out of range
[  535.081785][T29503] netlink: zone id is out of range
[  535.083532][T29504] netlink: zone id is out of range
[  535.085140][T29503] netlink: zone id is out of range
[  535.086852][T29504] netlink: zone id is out of range
[  535.089123][T29503] netlink: zone id is out of range
[  535.091285][T29504] netlink: zone id is out of range
[  535.093231][T29503] netlink: zone id is out of range
[  535.095137][T29504] netlink: zone id is out of range
[  535.096879][T29503] netlink: zone id is out of range
[  535.251238][T29519] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  535.304959][T29529] netlink: 'syz.2.7238': attribute type 29 has an invalid length.
[  535.359440][T29538] netlink: 'syz.2.7240': attribute type 1 has an invalid length.
[  535.380472][T29538] bond85: entered promiscuous mode
[  535.382719][T29538] 8021q: adding VLAN 0 to HW filter on device bond85
[  535.402842][T29538] bond85: (slave bridge50): making interface the new active one
[  535.406007][T29538] bridge50: entered promiscuous mode
[  535.411139][T29538] bond85: (slave bridge50): Enslaving as an active interface with an up link
[  535.507679][T29547] SET target dimension over the limit!
[  535.912324][T29570] batadv3: entered promiscuous mode
[  535.914038][T29570] batadv3: entered allmulticast mode
[  536.215796][T29586] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20001
[  536.503124][T29610] netlink: 'syz.0.7266': attribute type 25 has an invalid length.
[  536.506457][T29610] netlink: 'syz.0.7266': attribute type 3 has an invalid length.
[  536.511481][T29610] netlink: 'syz.0.7266': attribute type 25 has an invalid length.
[  536.514117][T29610] netlink: 'syz.0.7266': attribute type 3 has an invalid length.
[  536.523099][T29610] netlink: 'syz.0.7266': attribute type 25 has an invalid length.
[  536.527140][T29610] netlink: 'syz.0.7266': attribute type 3 has an invalid length.
[  536.559579][T29616] bond104: entered promiscuous mode
[  536.562486][T29616] 8021q: adding VLAN 0 to HW filter on device bond104
[  536.618183][T29616] bond104: (slave bridge38): making interface the new active one
[  536.620755][T29616] bridge38: entered promiscuous mode
[  536.627181][T29616] bond104: (slave bridge38): Enslaving as an active interface with an up link
[  536.834725][T29619] lo speed is unknown, defaulting to 1000
[  536.984472][T29619] lo speed is unknown, defaulting to 1000
[  537.582189][T29676] netlink: 'syz.2.7285': attribute type 11 has an invalid length.
[  537.630447][T29678] bridge51: entered allmulticast mode
[  537.687070][T29680] bond86: entered promiscuous mode
[  537.691380][T29680] 8021q: adding VLAN 0 to HW filter on device bond86
[  537.716786][T29680] bond86: (slave bridge52): making interface the new active one
[  537.724620][T29680] bridge52: entered promiscuous mode
[  537.729809][T29680] bond86: (slave bridge52): Enslaving as an active interface with an up link
[  537.911784][   T33] audit: type=1804 audit(1778410863.845:5): pid=29693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7292" name="/newroot/2398/cgroup.controllers" dev="tmpfs" ino=12246 res=1 errno=0
[  537.920479][   T33] audit: type=1800 audit(1778410863.865:6): pid=29693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7292" name="cgroup.controllers" dev="tmpfs" ino=12246 res=0 errno=0
[  538.002120][T29695] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  538.004543][T29695] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  538.180084][T29708] bond119: (slave bridge59): making interface the new active one
[  538.184366][T29708] bond119: (slave bridge59): Enslaving as an active interface with an up link
[  538.216347][T29705] macvlan11: entered promiscuous mode
[  538.218655][T29705] macvlan11: entered allmulticast mode
[  538.331901][T29716] bond87 (unregistering): Released all slaves
[  538.385403][T29719] bond105: entered promiscuous mode
[  538.389497][T29719] 8021q: adding VLAN 0 to HW filter on device bond105
[  538.457988][T29719] bond105: (slave bridge39): making interface the new active one
[  538.461817][T29719] bridge39: entered promiscuous mode
[  538.466061][T29719] bond105: (slave bridge39): Enslaving as an active interface with an up link
[  538.616730][T29732] __nla_validate_parse: 55 callbacks suppressed
[  538.616757][T29732] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7303'.
[  538.643790][T29732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7303'.
[  538.646868][T29732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7303'.
[  541.924159][T29765] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7312'.
[  541.927128][T29765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7312'.
[  542.525804][T29772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7317'.
[  542.588621][T29773] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  542.924157][T29789] bond106: ARP target 9.0.0.0 is already present
[  542.926878][T29789] bond106: option arp_ip_target: invalid value (9)
[  542.934541][T29789] bond106 (unregistering): Released all slaves
[  542.977087][T29781] lo speed is unknown, defaulting to 1000
[  543.082264][T29796] RDS: rds_bind could not find a transport for ::ffff:172.20.20.46, load rds_tcp or rds_rdma?
[  543.102239][T29781] lo speed is unknown, defaulting to 1000
[  543.166428][T29798] net_ratelimit: 100 callbacks suppressed
[  543.166447][T29798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  543.178753][T29801] validate_nla: 67 callbacks suppressed
[  543.178793][T29801] netlink: 'syz.1.7326': attribute type 1 has an invalid length.
[  543.214173][T29801] bond106: entered promiscuous mode
[  543.217251][T29801] 8021q: adding VLAN 0 to HW filter on device bond106
[  543.256717][T29801] bond106: (slave bridge40): making interface the new active one
[  543.262341][T29801] bridge40: entered promiscuous mode
[  543.267108][T29801] bond106: (slave bridge40): Enslaving as an active interface with an up link
[  543.277524][T29806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.286937][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  543.965918][T29851] netlink: 388 bytes leftover after parsing attributes in process `syz.2.7343'.
[  543.970111][T29851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7343'.
[  544.176359][T29866] netlink: 'syz.0.7347': attribute type 1 has an invalid length.
[  544.186539][T29867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.299366][T29866] bond120: entered promiscuous mode
[  544.306237][T29866] 8021q: adding VLAN 0 to HW filter on device bond120
[  544.351626][T29875] bond120: (slave bridge60): making interface the new active one
[  544.356949][T29875] bridge60: entered promiscuous mode
[  544.362506][T29875] bond120: (slave bridge60): Enslaving as an active interface with an up link
[  544.378875][T29867] ip6tnl6: entered allmulticast mode
[  544.388608][T29867] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  544.434281][T29880] netlink: 'syz.0.7348': attribute type 2 has an invalid length.
[  544.511122][T29886] netlink: 116 bytes leftover after parsing attributes in process `syz.0.7350'.
[  544.786102][T29903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7355'.
[  544.882754][T29910] Cannot find del_set index 2 as target
[  544.897979][T29910] Cannot find del_set index 2 as target
[  545.055173][T29917] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  545.058225][T29917] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  545.197563][T29915] lo speed is unknown, defaulting to 1000
[  545.359289][T29915] lo speed is unknown, defaulting to 1000
[  545.619365][T29925] netlink: 'syz.2.7361': attribute type 30 has an invalid length.
[  545.621954][T29925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7361'.
[  545.666315][T29925] bond87: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[  545.671316][T29928] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7361'.
[  545.691148][T29929] RDS: rds_bind could not find a transport for ::ffff:172.20.20.46, load rds_tcp or rds_rdma?
[  545.696383][T29925] bond87 (unregistering): Released all slaves
[  545.742843][T29931] netlink: 'syz.0.7363': attribute type 1 has an invalid length.
[  545.871982][T29931] bond121: entered promiscuous mode
[  545.874861][T29931] 8021q: adding VLAN 0 to HW filter on device bond121
[  545.909284][T29936] bond121: (slave bridge61): making interface the new active one
[  545.913359][T29936] bridge61: entered promiscuous mode
[  545.917198][T29936] bond121: (slave bridge61): Enslaving as an active interface with an up link
[  545.921671][T29935] tipc: New replicast peer: 255.255.255.255
[  545.924946][T29935] tipc: Enabled bearer <udp:syz2>, priority 5
[  545.946685][T29938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7365'.
[  545.953346][T29938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7365'.
[  546.316136][T29960] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7373'.
[  546.352356][T29960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7373'.
[  546.378970][T29968] can: request_module (can-proto-0) failed.
[  546.404931][T29964] netlink: 'syz.2.7373': attribute type 1 has an invalid length.
[  546.407526][T29966] netlink: 'syz.2.7373': attribute type 1 has an invalid length.
[  546.613891][T29975] lo speed is unknown, defaulting to 1000
[  546.750493][T29975] lo speed is unknown, defaulting to 1000
[  547.020783][T30011] netlink: 'syz.2.7385': attribute type 1 has an invalid length.
[  547.054128][T30011] bond87: entered promiscuous mode
[  547.056920][T30011] 8021q: adding VLAN 0 to HW filter on device bond87
[  547.082014][T30011] bond87: (slave bridge54): making interface the new active one
[  547.085138][T30011] bridge54: entered promiscuous mode
[  547.089211][T30011] bond87: (slave bridge54): Enslaving as an active interface with an up link
[  547.546271][T30033] netlink: 'syz.2.7392': attribute type 1 has an invalid length.
[  547.716887][T30033] bond88: entered promiscuous mode
[  547.719792][T30033] 8021q: adding VLAN 0 to HW filter on device bond88
[  547.771762][T30041] bond88: (slave bridge55): making interface the new active one
[  547.775159][T30041] bridge55: entered promiscuous mode
[  547.782077][T30041] bond88: (slave bridge55): Enslaving as an active interface with an up link
[  547.884470][T30045] bond89: entered promiscuous mode
[  547.886538][T30045] 8021q: adding VLAN 0 to HW filter on device bond89
[  547.951079][T30050] Cannot find set identified by id 3 to match
[  548.052395][T30059] netlink: 'syz.1.7400': attribute type 1 has an invalid length.
[  548.074392][T30059] bond107: entered promiscuous mode
[  548.076333][T30059] 8021q: adding VLAN 0 to HW filter on device bond107
[  548.091956][T30059] bond107: (slave bridge41): making interface the new active one
[  548.094801][T30059] bridge41: entered promiscuous mode
[  548.098737][T30059] bond107: (slave bridge41): Enslaving as an active interface with an up link
[  548.240622][T30074] netlink: 'syz.2.7406': attribute type 1 has an invalid length.
[  548.344385][T30082] syzkaller1: entered promiscuous mode
[  548.346740][T30082] syzkaller1: entered allmulticast mode
[  548.766919][T30110] netlink: 'syz.2.7417': attribute type 5 has an invalid length.
[  548.770447][T30110] netlink: 'syz.2.7417': attribute type 4 has an invalid length.
[  548.866496][T30116] netlink: 'syz.2.7419': attribute type 1 has an invalid length.
[  549.015853][T30118] __nla_validate_parse: 10 callbacks suppressed
[  549.015871][T30118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7420'.
[  549.110423][T30123] netlink: 'syz.2.7421': attribute type 1 has an invalid length.
[  549.149101][T30123] bond90: entered promiscuous mode
[  549.151825][T30123] 8021q: adding VLAN 0 to HW filter on device bond90
[  549.171579][T30123] bond90: (slave bridge57): making interface the new active one
[  549.174639][T30123] bridge57: entered promiscuous mode
[  549.177998][T30123] bond90: (slave bridge57): Enslaving as an active interface with an up link
[  549.297074][T30133] bond16: left allmulticast mode
[  549.302310][T30133] wireguard0: left allmulticast mode
[  549.326771][T30137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7426'.
[  549.336183][T30137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7426'.
[  549.340094][T30137] netlink: 58 bytes leftover after parsing attributes in process `syz.2.7426'.
[  549.476357][T30148] syzkaller1: entered promiscuous mode
[  549.478326][T30148] syzkaller1: entered allmulticast mode
[  549.513884][T30148] bond91 (unregistering): Released all slaves
[  549.668597][ T5076] block nbd2: Possible stuck request ffff88810a1b0000: control (read@0,1024B). Runtime 330 seconds
[  549.671708][T30174] netlink: 'syz.2.7434': attribute type 64 has an invalid length.
[  549.672033][ T5076] block nbd2: Possible stuck request ffff88810a1b0200: control (read@1024,1024B). Runtime 330 seconds
[  549.677939][ T5076] block nbd2: Possible stuck request ffff88810a1b0400: control (read@2048,1024B). Runtime 330 seconds
[  549.683020][ T5076] block nbd2: Possible stuck request ffff88810a1b0600: control (read@3072,1024B). Runtime 330 seconds
[  549.688768][   T34] INFO: task udevd:11717 blocked in I/O wait for more than 143 seconds.
[  549.700836][   T34]       Not tainted syzkaller #0
[  549.703240][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  549.705836][   T34] task:udevd           state:D stack:22424 pid:11717 tgid:11717 ppid:5058   task_flags:0x400140 flags:0x00080002
[  549.712850][   T34] Call Trace:
[  549.713954][   T34]  <TASK>
[  549.714989][   T34]  __schedule+0x17b4/0x5680
[  549.716402][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  549.717867][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  549.719603][   T34]  ? __pfx___schedule+0x10/0x10
[  549.721461][   T34]  ? schedule+0x90/0x360
[  549.723234][   T34]  schedule+0x164/0x360
[  549.724438][   T34]  io_schedule+0x7f/0xd0
[  549.727400][   T34]  folio_wait_bit_common+0x6d8/0xbc0
[  549.729350][   T34]  ? filemap_get_entry+0xcd/0x3f0
[  549.731252][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  549.733187][   T34]  ? filemap_read_folio+0x23e/0x3b0
[  549.735214][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  549.737349][   T34]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[  549.739782][   T34]  do_read_cache_folio+0x1ad/0x590
[  549.742245][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  549.744355][   T34]  read_part_sector+0xb6/0x2b0
[  549.746450][   T34]  adfspart_check_POWERTEC+0x9a/0x7a0
[  549.749416][   T34]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  549.751897][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  549.754203][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  549.756845][   T34]  bdev_disk_changed+0x817/0x1770
[  549.759670][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  549.762137][   T34]  blkdev_get_whole+0x380/0x510
[  549.764119][   T34]  bdev_open+0x31e/0xd30
[  549.765792][   T34]  blkdev_open+0x470/0x610
[  549.767790][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  549.770401][   T34]  do_dentry_open+0x785/0x14e0
[  549.772762][   T34]  vfs_open+0x3b/0x340
[  549.774350][   T34]  ? path_openat+0x2df0/0x3860
[  549.776138][   T34]  path_openat+0x2e08/0x3860
[  549.778035][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  549.780472][   T34]  ? stack_depot_save_flags+0x33/0x810
[  549.782985][   T34]  ? __pfx_path_openat+0x10/0x10
[  549.785005][   T34]  ? __x64_sys_openat+0x138/0x170
[  549.787050][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  549.789670][   T34]  do_file_open+0x23e/0x4a0
[  549.791743][   T34]  ? __pfx_do_file_open+0x10/0x10
[  549.793959][   T34]  ? _raw_spin_unlock+0x28/0x50
[  549.796004][   T34]  ? alloc_fd+0x64b/0x6c0
[  549.797769][   T34]  do_sys_openat2+0x113/0x200
[  549.799850][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  549.802366][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  549.804422][   T34]  ? rcu_is_watching+0x15/0xb0
[  549.806497][   T34]  __x64_sys_openat+0x138/0x170
[  549.808969][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.811673][   T34]  do_syscall_64+0x15f/0xf80
[  549.813593][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.815804][   T34] RIP: 0033:0x7f58f3b169a4
[  549.817676][   T34] RSP: 002b:00007ffe4f7c6390 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  549.821291][   T34] RAX: ffffffffffffffda RBX: 000056128af4f780 RCX: 00007f58f3b169a4
[  549.824851][   T34] RDX: 00000000000a0800 RSI: 000056128af305b0 RDI: 00000000ffffff9c
[  549.827880][   T34] RBP: 000056128af305b0 R08: 0000000000000001 R09: 3fffffffffffffff
[  549.831074][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  549.833794][   T34] R13: 000056128af46950 R14: 0000000000000001 R15: 000056128af2f910
[  549.836315][   T34]  </TASK>
[  549.837362][   T34] 
[  549.837362][   T34] Showing all locks held in the system:
[  549.840532][   T34] 1 lock held by khungtaskd/34:
[  549.842065][   T34]  #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  549.845495][   T34] 2 locks held by getty/5437:
[  549.849396][   T34]  #0: ffff88811307c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  549.858445][   T34]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  549.863455][   T34] 1 lock held by udevd/11717:
[  549.865258][   T34]  #0: ffff888109e9d350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  549.869773][   T34] 
[  549.870758][   T34] =============================================
[  549.870758][   T34] 
[  549.873907][   T34] NMI backtrace for cpu 0
[  549.873926][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  549.873943][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  549.873952][   T34] Call Trace:
[  549.873960][   T34]  <TASK>
[  549.873967][   T34]  dump_stack_lvl+0xe8/0x150
[  549.873989][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  549.874008][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  549.874026][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  549.874046][   T34]  sys_info+0x135/0x170
[  549.874061][   T34]  watchdog+0xfd3/0x1030
[  549.874090][   T34]  ? watchdog+0x1c9/0x1030
[  549.874114][   T34]  kthread+0x388/0x470
[  549.874136][   T34]  ? __pfx_watchdog+0x10/0x10
[  549.874182][   T34]  ? __pfx_kthread+0x10/0x10
[  549.874200][   T34]  ret_from_fork+0x514/0xb70
[  549.874218][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  549.874234][   T34]  ? __switch_to+0xc79/0x1410
[  549.874257][   T34]  ? __pfx_kthread+0x10/0x10
[  549.874274][   T34]  ret_from_fork_asm+0x1a/0x30
[  549.874301][   T34]  </TASK>
[  549.874307][   T34] Sending NMI from CPU 0 to CPUs 1:
[  549.911126][    C1] NMI backtrace for cpu 1
[  549.911172][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  549.911190][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  549.911199][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  549.911227][    C1] Code: cb 7c 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 b1 1f 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  549.911240][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000202
[  549.911255][    C1] RAX: 00000000002d7967 RBX: ffffffff819a91ea RCX: 0000000080000001
[  549.911265][    C1] RDX: 0000000000000001 RSI: ffffffff8dfaad6e RDI: ffffffff8c28ade0
[  549.911275][    C1] RBP: ffffc90000197f10 R08: ffff88823c6339db R09: 1ffff110478c673b
[  549.911286][    C1] R10: dffffc0000000000 R11: ffffed10478c673c R12: 0000000000000001
[  549.911296][    C1] R13: 1ffff1102c09e000 R14: 0000000000000001 R15: 1ffff1102c09e000
[  549.911306][    C1] FS:  0000000000000000(0000) GS:ffff8882a9287000(0000) knlGS:0000000000000000
[  549.911317][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  549.911326][    C1] CR2: 000000110c32a100 CR3: 000000017366a000 CR4: 00000000000006f0
[  549.911361][    C1] Call Trace:
[  549.911369][    C1]  <TASK>
[  549.911375][    C1]  default_idle+0x9/0x20
[  549.911389][    C1]  default_idle_call+0x72/0xb0
[  549.911405][    C1]  do_idle+0x36a/0x5f0
[  549.911423][    C1]  ? __pfx_do_idle+0x10/0x10
[  549.911440][    C1]  ? do_idle+0x5c7/0x5f0
[  549.911454][    C1]  cpu_startup_entry+0x43/0x60
[  549.911469][    C1]  start_secondary+0x101/0x110
[  549.911483][    C1]  common_startup_64+0x13e/0x147
[  549.911509][    C1]  </TASK>
[  549.962102][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  549.964159][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  549.966871][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  549.969773][   T34] Call Trace:
[  549.970762][   T34]  <TASK>
[  549.971645][   T34]  vpanic+0x56c/0xa60
[  549.973021][   T34]  ? __pfx___schedule+0x10/0x10
[  549.974498][   T34]  ? __pfx_vpanic+0x10/0x10
[  549.975813][   T34]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  549.977613][   T34]  panic+0xc5/0xd0
[  549.978729][   T34]  ? __pfx_panic+0x10/0x10
[  549.980036][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  549.981667][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  549.983503][   T34]  watchdog+0x102c/0x1030
[  549.984799][   T34]  ? watchdog+0x1c9/0x1030
[  549.986106][   T34]  kthread+0x388/0x470
[  549.987322][   T34]  ? __pfx_watchdog+0x10/0x10
[  549.988850][   T34]  ? __pfx_kthread+0x10/0x10
[  549.990230][   T34]  ret_from_fork+0x514/0xb70
[  549.991617][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  549.993514][   T34]  ? __switch_to+0xc79/0x1410
[  549.995202][   T34]  ? __pfx_kthread+0x10/0x10
[  549.996754][   T34]  ret_from_fork_asm+0x1a/0x30
[  549.998406][   T34]  </TASK>
[  550.000309][   T34] Kernel Offset: disabled
[  550.001732][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:01:15  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=00007ffd6ce7ded0 RCX=00007f4b9e99e5aa RDX=0000000000000040
RSI=0000000000000029 RDI=0000000000000003 RBP=0000000000000003 RSP=00007ffd6ce7deb0
R8 =00007ffd6ce7decc R9 =ffffff0000000000 R10=00007ffd6ce7ded0 R11=0000000000000246
R12=00007f4b9ebe9b80 R13=00007ffd6ce7decc R14=0000000000000000 R15=00007f4b9ebeafc0
RIP=00007f4b9e855c18 RFL=00000207 [-----PC] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555860f0500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4b9ebe8158 CR3=00000001125ff000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000524f525245 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff82166246 RBX=ffff88816dc847b8 RCX=ffff8881b1a3d880 RDX=0000000000000000
RSI=000000000001ba00 RDI=ffffc90008a87778 RBP=ffffc90008a87690 RSP=ffffc90008a87398
R8 =ffffea00006ebef3 R9 =1ffffd40000dd7de R10=dffffc0000000000 R11=fffff940000dd7df
R12=dffffc0000000000 R13=0000000000000000 R14=1ffff92001150eef R15=ffffea00006ebf00
RIP=ffffffff81c5bf78 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9287000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c37bb8c CR3=000000000e74a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000100000040000c 0001000000014080
XMM02=00007f10163ed5e8 00007f10163ed618 XMM03=00007f10163ed600 00007f10163ed5e0
XMM04=00007f1016f4d020 00007f10163ed5c0 XMM05=00007f10163ed5d0 00007f10163ed610
XMM06=00007f10163ed5f8 00007f10163ed5c8 XMM07=00007f10163ed600 00007f10163ed5e0
XMM08=46f19e100bef520f 2b817ba0f4728e95 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
