last executing test programs:

19.688855622s ago: executing program 0 (id=4778):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
close(r0) (async)
epoll_create1(0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0xfffffffffffffff2}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb8}}, 0x800)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000020c0), 0x4) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(r0, 0x0)

18.794720988s ago: executing program 0 (id=4784):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, r1, 0x20, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0)

18.794306704s ago: executing program 0 (id=4785):
syz_emit_ethernet(0x27, &(0x7f00000007c0)={@link_local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x32, 0x19, 0x4068, 0x0, 0xd2, 0x89, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "8f84e8eb39"}}}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0x140, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800)
r1 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19)

18.793786341s ago: executing program 0 (id=4786):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffe5d, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x4040000)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="1e1f4ae2c804003843f8eb7ee784f9d7750fe552120bb799bc92edea2cddc94ea254396607d0cdcaec9b6748092d14596a62135e9377b3b24bbd9129a6ce23f53c7fe948999bb3bafc3b37e8ec6187d4a4d8a1e18e08057d34a7b8372a56ad60bb8e2d6fffe27e2cd030583129d5eb8aef5a17206c48c8a0e3d11a4080941bc48c5d46d9e5751ed0f7b7c1af11d6737be79a8d86e2bab10eab483f260b772f09bfa29beb477d16fb78be908bdceee152", @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf25010000001400020077673200000000000000000000000000060006"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x80804)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000600)={'sit0\x00', r3, 0x8, 0x7, 0x10001, 0x8, {{0xf, 0x4, 0x2, 0x7, 0x3c, 0x68, 0x0, 0x5, 0x4, 0x0, @multicast1, @private=0xa010102, {[@end, @timestamp_prespec={0x44, 0xc, 0xe7, 0x3, 0xc, [{@private=0xa010101, 0x1}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x84, [@rand_addr=0x64010102, @multicast2, @remote, @multicast2, @private=0xa010102]}]}}}}})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='$', 0x1}, {0x0}], 0x2}, 0x40014)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x400}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

18.726709009s ago: executing program 0 (id=4787):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000))
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000000900010073797a3000000000140000001100010000000000000000000000000a0d55cf5c7db072d5f2d5c50d36e777e59078a5148336ac9c97232178a1576293a50567bdba813616760140ced1bf745b03fbfaa8e63934acc736b4502ef4f1c86b1422e9"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050)

18.723212843s ago: executing program 0 (id=4788):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_emit_ethernet(0x10f, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8c0c00", 0xd9, 0x6, 0x0, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0xb, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x7, @multicast2, 0x4}, @generic={0x22, 0xb, "ef17d2a889e30ab8b8"}]}}, {"8921a5654ceeb9065815238c5939da8aa6f1c1772e0554cb7b577dfc1761ebc5f7515df456503cc193c051bc278a1cd76cc8faa5c6dc8f0ea8fc9ee59900a24aa932763edb8f9b6f9b25aa3c6313d28efe600bf931d4c730a6af62009f9bcf553e522f454e9ae118865763835e2bc756260f0dec96650321513a296bdbd2ebb1bf3afa98418e205d014e05ee780d9365fd648a694055d421db3cc865116f53b2d08beb52bcf45817b028fd741f"}}}}}}}, 0x0)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = socket(0xa, 0x3, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x6, 0x0, &(0x7f0000000180))
getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000340)=0x5, &(0x7f0000000380)=0x4)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = socket$igmp6(0xa, 0x3, 0x2)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000780)=ANY=[], 0x0, 0x2, 0x4b, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x9, 0x0, 0x80000001}, 0xc)
getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x2)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2000000000000137, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0xd76}, 0x18)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$sock_timeval(r8, 0x1, 0x42, 0x0, &(0x7f0000001c80))
r9 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)="2e00000010008188040f46ecdb4cb9ccf5960ef42b000000e3bd6efb010511000b0002000d000010ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8800)

15.346324684s ago: executing program 1 (id=4826):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000100010000400000000007000000"], 0x10}}], 0x1, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

15.341075672s ago: executing program 1 (id=4828):
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x400c084}, 0x4000)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000)
getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r1 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf102, 0x0, 0x0, 0x0, 0x2000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000400)='GPL\x00', 0x1, 0xd8, &(0x7f0000000440)=""/216}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf102, 0x0, 0x0, 0x0, 0x2000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000400)='GPL\x00', 0x1, 0xd8, &(0x7f0000000440)=""/216}, 0x94)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)

15.340423s ago: executing program 2 (id=4829):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x7, 0x3, 0xa6, 0x84, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5, 0x8}, 0x50) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r0=>0x0}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r0, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r0}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@bloom_filter={0x1e, 0xfb00, 0x3, 0xe, 0x60284, r2, 0x7fffffff, '\x00', r0, r2, 0x3, 0x3, 0x3, 0xa}, 0x50) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0)

15.274410625s ago: executing program 1 (id=4830):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x42000400)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x10000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x10}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x24}}, 0x0)
r4 = accept4(r2, &(0x7f0000000000)=@tipc=@name, &(0x7f0000000080)=0x80, 0x80800)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="08002600b409000008002700"], 0x34}}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x44)
socket$packet(0x11, 0x2, 0x300)

15.273747939s ago: executing program 2 (id=4831):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x10c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1a}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0x4}, @NFTA_SET_EXPR={0xbc, 0x11, 0x0, 0x1, @cmp={{0x8}, @val={0xb0, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x60, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_DATA={0x44, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x40, 0x1, "9407656f236f9881b1f5235c5107f1fd4680c65216dbf6f442930301842877d01b70f8df9dd9d966562012ea213e3e0787e3470c1d06a5aa1f5bcdde"}]}]}}}]}, @NFT_MSG_DELTABLE={0x1e0, 0x2, 0xa, 0x600, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xdc, 0x6, "978f1112829c87c656a4a990907d1f24d06adfe5464ab752b9ffe63bf4f6565bd811ee4a3d08c479c445456bb7d0d4c2bc429bd83a7f30710902a1167292c3017654a65e1d0f7177ada646d80e9e02bda1a6f79d0f3d0d2f41f14048f3ee310b8b247cc492bf88ed7223dd7a4ffee29a2f4d8774f1ca57579612ab932073cad3eb8eb531de29363c8edb9189061ed369c32414c92b837ef4136961a22af4f71301a6029e2f30b6b12579d2e53152cfd92256aa0f8af48c91ac5cfe3149b7546eb2a5a9fbb36528569005d58000031cbaf5de881b7945f721"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xe7, 0x6, "463309a5fbaac6df6b50e30a5d1825a4a5a40e3aeb713618fe1472968bcf33f15dd718cd39487b9485b6375dfbfd888890d6bae1baa4a929a4ee0fc2ef8a379fc9b4e1ed3f08366cb51febfce9043cffb2c87b21ce5ee95177469f52e7e4d3ca319069f12841edef3f7a629184fd8980380209f5520663e36522235929b04808eb22888b3b9d266e8ea705421cc4b57c76b054ed0758b793467bbe098c68cc85d739145d7e08fed6729c78c7bcba39ce8ea460afd238f1c54b07b19e583008a30e4014c8d3a2884cda6f0dcaa68963953945cbd761a559f11bd123696c1f9eef82a0af"}]}, @NFT_MSG_NEWCHAIN={0xa0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0x6b, 0xc, "646c2dfc3da0a5fcafe1e398ec463b9a12a9e47c1a978843dd92536d953a44b7248f712e31480f48452d8465294b11fd0a94d4b892575da302bc497d3d9980f6830cfbbe12f2daab7b20f1cf064236e6848390faf0c40bc6ad3061a0440ec226895e008039546f"}]}], {0x14}}, 0x3b4}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)
write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xa)
close(r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x174, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xff, 0x7, 0x1, 0x0, "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"}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}]}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}]}, @NFT_MSG_NEWSET={0xf4, 0x9, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xbb, 0xd, 0x1, 0x0, "47e64a21d7d0c27630d4c384bcf4ab688b1f21d5810e922acf2235a579cd111c6c2ef8513876aa043e23f5630afb295dd457e03fc74bd2978eaf0b690ce1f10f9f354bebf2d0d4fe5cc194015c4c570dbd5cbc3b84032d1476def6bd5a6666b7d6f52b7b08aca82995824641546884c2149bb42d6fab38c36c2def13ab53453601dfca092d9f6649ef48d0c6a0288120130a6ce195f7836c7837249a49accb48329801ee691dc8bef1fd22551587b8a66349f8e8b33a3a"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xf0}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0xd8, 0x0, 0xa, 0x301, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x55, 0x6, "785d962eb862c06ad7c4e728b427aca4c554393f2c595af5348520d2047318a254779ae0c83dc139dcc139ffba66409841f05c1c484a9b048b722996f8263872dbd713ba06974f77ac30e6913181e5bb58"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x2e, 0x6, "954b53c64465584b301e16059caef7848d6776f215f05b364bde73c5bb925e3754fdb82ff6af3dc53150"}]}, @NFT_MSG_NEWTABLE={0x64, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x1b, 0x6, "9c75e4da3be4625d18408037c12ecca438d8e8324ec94f"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x480}, 0x1, 0x0, 0x0, 0x20008090}, 0x10)
close(r6)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x6, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_LAST_SET={0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}}, 0x0)

15.196283152s ago: executing program 2 (id=4832):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x840, 0x1}, 0x48)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x100, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68520, 0x10044}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x40008000}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}, @IFLA_MASTER={0x8}]}, 0x68}}, 0x4040)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r8, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="24005a8020000180140003000000060006000200010007000120fb"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x44, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xd, 0x6f}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000)
sendmsg$nl_route_sched(r5, 0x0, 0x10040000)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4804)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0)
openat$cgroup_ro(r2, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)=0x1c)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c00000010000304000009000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r11, @ANYBLOB="08000500", @ANYRES32=r11], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0)

15.125235234s ago: executing program 2 (id=4833):
r0 = socket(0x15, 0x800, 0x6)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={<r1=>0x0, @in6={{0xa, 0x4e24, 0x0, @mcast2}}}, &(0x7f00000000c0)=0x84)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e20, 0x10, @mcast1}}}, 0x84)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={<r2=>0x0, @dev, @dev}, &(0x7f0000000300)=0xc)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x8, [@struct={0xa, 0x8, 0x0, 0x4, 0x0, 0x9, [{0x6, 0x5, 0x4}, {0x3, 0x5, 0x8}, {0x1, 0x0, 0x1000}, {0xa, 0x3, 0x1}, {0xf, 0x2, 0xfffffff8}, {0x3, 0x2, 0x1}, {0x0, 0x0, 0x5}, {0x7, 0x1, 0x7}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x4}]}, @volatile={0xe, 0x0, 0x0, 0x9, 0x3}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0x7}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x5, 0x1}]}, {0x0, [0x61, 0x0, 0x0, 0x30, 0x30, 0x0]}}, &(0x7f0000000440)=""/149, 0xcc, 0x95, 0x0, 0xa13}, 0x28)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x46}], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x5d, &(0x7f0000000240)=""/93, 0x41000, 0x28, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000540)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x9, 0x2, 0x4}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f00000005c0)=[{0x3, 0x1, 0x8, 0x6}, {0x4, 0x4, 0xe, 0xc}, {0x5, 0x4, 0x1, 0x4}, {0x1, 0x5, 0x2, 0xd}, {0x4, 0x5, 0x3}, {0x2, 0x3, 0x9, 0x1}, {0x2, 0x3, 0x9, 0x9}, {0x0, 0x2, 0x0, 0x2}, {0x3, 0x4, 0x0, 0xe}, {0x5, 0x2, 0x3, 0x2}], 0x10, 0xfffffffe}, 0x94)
r5 = accept$nfc_llcp(r0, &(0x7f0000000740), &(0x7f00000007c0)=0x60)
clock_gettime(0x0, &(0x7f0000007dc0)={<r6=>0x0, <r7=>0x0})
recvmmsg(r5, &(0x7f0000007b40)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)}, {&(0x7f0000000840)=""/231, 0xe7}, {&(0x7f0000000940)=""/251, 0xfb}], 0x3}, 0x9}, {{&(0x7f0000000a80)=@ax25={{0x3, @null}, [@rose, @netrom, @remote, @null, @default, @rose, @default, @rose]}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b00)=""/129, 0x81}, {&(0x7f0000000bc0)=""/251, 0xfb}, {&(0x7f0000000cc0)=""/94, 0x5e}, {&(0x7f0000000d40)=""/176, 0xb0}], 0x4, &(0x7f0000000e40)=""/123, 0x7b}, 0x400}, {{&(0x7f0000000ec0)=@phonet, 0x80, &(0x7f0000001080)=[{&(0x7f0000000f40)=""/145, 0x91}, {&(0x7f0000001000)=""/27, 0x1b}, {&(0x7f0000001040)=""/24, 0x18}], 0x3, &(0x7f00000010c0)=""/4096, 0x1000}, 0xffff0001}, {{&(0x7f00000020c0)=@x25, 0x80, &(0x7f0000003200)=[{&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/168, 0xa8}], 0x2, &(0x7f0000003240)=""/80, 0x50}, 0x3}, {{&(0x7f00000032c0)=@un=@abs, 0x80, &(0x7f0000003800)=[{&(0x7f0000003340)=""/214, 0xd6}, {&(0x7f0000003440)=""/97, 0x61}, {&(0x7f00000034c0)=""/241, 0xf1}, {&(0x7f00000035c0)=""/87, 0x57}, {&(0x7f0000003640)=""/238, 0xee}, {&(0x7f0000003740)=""/165, 0xa5}], 0x6, &(0x7f0000003880)=""/202, 0xca}, 0x8001}, {{&(0x7f0000003980)=@isdn, 0x80, &(0x7f0000004000)=[{&(0x7f0000003a00)=""/197, 0xc5}, {&(0x7f0000003b00)=""/100, 0x64}, {&(0x7f0000003b80)=""/250, 0xfa}, {&(0x7f0000003c80)=""/92, 0x5c}, {&(0x7f0000003d00)=""/114, 0x72}, {&(0x7f0000003d80)=""/238, 0xee}, {&(0x7f0000003e80)=""/104, 0x68}, {&(0x7f0000003f00)=""/240, 0xf0}], 0x8, &(0x7f0000004080)=""/210, 0xd2}, 0x200}, {{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000004180)=""/243, 0xf3}, {&(0x7f0000004280)=""/59, 0x3b}, {&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/16, 0x10}], 0x4, &(0x7f0000005340)=""/43, 0x2b}, 0x8}, {{&(0x7f0000005380)=@hci, 0x80, &(0x7f0000006640)=[{&(0x7f0000005400)=""/90, 0x5a}, {&(0x7f0000005480)=""/250, 0xfa}, {&(0x7f0000005580)=""/70, 0x46}, {&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000006600)=""/42, 0x2a}], 0x5, &(0x7f00000066c0)=""/227, 0xe3}, 0xdee2}, {{&(0x7f00000067c0)=@nfc, 0x80, &(0x7f00000079c0)=[{&(0x7f0000006840)=""/76, 0x4c}, {&(0x7f00000068c0)=""/102, 0x66}, {&(0x7f0000006940)=""/4096, 0x1000}, {&(0x7f0000007940)=""/112, 0x70}], 0x4}, 0x1}, {{0x0, 0x0, &(0x7f0000007ac0)=[{&(0x7f0000007a00)=""/187, 0xbb}], 0x1, &(0x7f0000007b00)=""/44, 0x2c}, 0x80f}], 0xa, 0x2040, &(0x7f0000007e00)={r6, r7+60000000})
sendmsg$nl_route_sched_retired(r0, &(0x7f0000007f40)={&(0x7f0000007e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000007f00)={&(0x7f0000007e80)=@delchain={0x44, 0x65, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0xfff1, 0xffff}, {0x4, 0xb}}, [@f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0x3b33}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x20004001)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r8, &(0x7f0000007f80)="836ea253bb8592a3469498bddaad87e5a2c2eb59876943481dce52fca48c39bc909c470bb2196c9a1331ab5bb537b7a811e41f71692ea4c8a004c9a04a1b6a33876bfb6f9a044c160d828f3aae3776b914434d3f1f", 0x55, 0x1, &(0x7f0000008000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000008040))
connect$qrtr(r0, &(0x7f0000008080)={0x2a, 0x2, 0xfffffffe}, 0xc)
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f00000080c0)={0x1})
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000008180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x260, 0x2f8, 0xc8, 0xc8, 0x2f8, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f0000008100), {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, 0xff, 0xffffffff, 'sit0\x00', 'ipvlan0\x00', {}, {}, 0x67, 0x2, 0x11}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x1, @loopback, 0x4e21}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2e}, @loopback, 0xffffffff, 0xff, 'veth0_macvtap\x00', 'macvlan0\x00', {}, {0xff}, 0xc, 0x0, 0x4}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x1, 0x6, 0x4, 0x1, 0x2], 0x6, 0x7}}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x6}}}, {{@ip={@broadcast, @loopback, 0x0, 0xff, 'team0\x00', 'pim6reg0\x00', {}, {0xff}, 0x6c, 0x2, 0x10}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x7f, 0x4}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x3e}, 0xff000000, 0xffffff00, 'erspan0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x1, 0x2}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x708, 0x9f, 0x0, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000008680), r0)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000008740)={&(0x7f0000008640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000008700)={&(0x7f00000086c0)={0x1c, r9, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000)
bind$alg(r0, &(0x7f0000008780)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000008800)={<r10=>r5, 0x3, 0x6, 0xffffffffffffbcf1})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000009b40)={r3, 0x20, &(0x7f0000009b00)={&(0x7f0000008a40)=""/182, 0xb6, <r11=>0x0, &(0x7f0000008b00)=""/4096, 0x1000}}, 0x10)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000009b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r2, r4, 0x4, 0x2, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000009cc0)={0x15, 0x10, &(0x7f0000008840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd3}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000088c0)='GPL\x00', 0x2, 0xae, &(0x7f0000008900)=""/174, 0x41000, 0x20, '\x00', 0x0, @fallback=0x20, r3, 0x8, &(0x7f00000089c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000008a00)={0x1, 0x6, 0x0, 0x8}, 0x10, r11, r4, 0x8, &(0x7f0000009c00)=[0x1, r12, r4], &(0x7f0000009c40)=[{0x2, 0x5, 0x1, 0xa}, {0x5, 0x4, 0xc, 0x8}, {0x0, 0x5, 0x5, 0x6}, {0x0, 0x3, 0x2, 0x3}, {0x2, 0x3}, {0x5, 0x2, 0x6, 0x1}, {0x1, 0x4, 0xb}, {0x3, 0x3, 0x2}], 0x10, 0xd}, 0x94)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000009e40)={&(0x7f0000009d80)={0x10, 0x0, 0x0, 0x18802000}, 0xc, &(0x7f0000009e00)={&(0x7f0000009dc0)={0x38, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa99}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4048050)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r10, 0x84, 0x7, &(0x7f0000009e80)={0x60f}, 0x4)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000009f00), r0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r10, &(0x7f0000009fc0)={&(0x7f0000009ec0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000009f80)={&(0x7f0000009f40)={0x20, r13, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7d068d91}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000811}, 0x40040)
ioctl(r5, 0x8, &(0x7f000000a000)="e8281960c7fd788ced68d0f807f0522fe0b4fa8909e3bb604cae919301516b919e1b11e969a5d4dbeab7768b298eedafd0e3d9bdd7088927471369e84155ab2ee438b876632bcb3f8c04af5f1011a4e730b045a013183d897719ff76b2dda39e31ae5be133e639307335feccb84cf7f4a17437f368155092ccf8304199d2d61c3e1e6fa6c3ff5c968c5a967fd5530c14e8e7e9b05a9e69dada431c455b79ef4cc2380f2ab0eaafa89fbb4cec1464d25b9fc5")
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f000000a0c0)="6657f17a301d2c47b3c95cc9148306f2", 0x10)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f000000a100)=""/46, &(0x7f000000a140)=0x2e)

15.123407771s ago: executing program 2 (id=4834):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r1, 0x28, 0x27, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xbc, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x24c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x110, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x350}}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000040)={0x8, 'nicvf0\x00', {'veth1_vlan\x00'}, 0x6c})
socket$nl_rdma(0x10, 0x3, 0x14)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x2000}, 0x0)

15.122479565s ago: executing program 1 (id=4835):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16, @ANYRES16=r0], 0x21c}}, 0x0)
getpid()
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x15, 0x0, 0x8, 0x10005, 0x180, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="140100001e00010026bd700000000000010100800c0001"], 0x114}], 0x1}, 0x0)
pipe(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7)
sendmsg$NL80211_CMD_SET_CQM(r3, 0x0, 0x4000)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$xdp(0x2c, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r6, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
getsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000002c0), 0x10)
bind$xdp(r9, &(0x7f0000000280)={0x2c, 0xb, r10, 0x5, r5}, 0x10)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0005"], 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r12=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d0001008a0000000000000007000000", @ANYRES32=r12, @ANYBLOB="080012000a0002"], 0x28}}, 0x10)
sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x20008040)
unshare(0x400)
r13 = socket$nl_route(0x10, 0x3, 0x0)
r14 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r14, 0x0, 0x53, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r13, 0x8982, &(0x7f0000000140)={0x0, 'macsec0\x00', {0x2}, 0xf})
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'wlan0\x00', {0x3}, 0x37})

15.113643623s ago: executing program 1 (id=4836):
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f00000002c0))
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e000000040000"], 0x50)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="19"], 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000ff0300000000000095"], &(0x7f00000000c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x73)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002500)={r4, &(0x7f0000000000), &(0x7f0000000140)=@udp6, 0x1}, 0x20)
r5 = socket$tipc(0x1e, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000500050000000000100007800c00028008000140e00000010500050002000000050001000000004c051c731363c8c5db4ace25991e550b3883bab19995385c2a03a37919bfb966fd1d902f4ced92e6bd1cbfce16879eda9605830188b2f63946a378e6ad41785b344bccc2880a83a567315f3e4116705caf8a6e2356c7a5396d6fc4dd0e774523bb7d4979a6aa763f96c709adfeb1271c2e0105c01c30fb0dafb46c70b265e24e7df7b6d9e120757e9949fb00"], 0x58}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYRES8], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x2045, 0xfffffffd}, 0x10)
r8 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100fe8000000000000000000000000000aafc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa330000000200000002000a0000200000000000000000ffff0000000064010102000000000000000000000000fc0200000000000000000000000000003c0000000000000008000200"/164], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r12 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x9, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b000000000000002143ce554b6df654cb0173677c4e2eaa2eb5035d135958831197684b763f499a2fafc724413afe7af5b53e61532895bae8d3f0f02cc4e729883f078a2552275a1486218834476323059f91a91c500e035c5c70afee9d16b5acd7cd4b94e3600c9c69aeb79e259488e089b1c59bc6fca826d38a7b3229ccd5b1bde01e63f1edd3c0f933e5c02936de55f2a4ee254bbe8aed1d2260c97783b615850d488b7f0c4a80715bed3cf1adb2dafbb7672328e2300fa2623704da7b9889a57e231be318f5eb6d294a302e753e75b741b63e898748f228e6752d15bf99e02c3d366fa091326029d899c493df701ad6c37c55598f3a19e748f58475398fda5f6153cb11a4ffde399dc21f96bed56d31fd6bfa0a75d0df449393", 0x15f}, {&(0x7f0000002540)="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", 0xdf3}], 0x2}, 0x804)

15.089138423s ago: executing program 2 (id=4837):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000140)={0x0, 0xc7}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=<r7=>0x0)
bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x5, 0xff, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000e5ff00f2170e65e3f50327e422000000000000000200800000001100", 0x39}, 0x60)
close(r6)
close(0x4)
r8 = socket$inet(0x2, 0x3, 0x8)
r9 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_DEL(r9, 0x2, r8)
listen(r4, 0x0)
connect$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r10 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r10, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x5c}, 0x1, 0x0, 0x0, 0x2040040}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b00000800"], 0x104}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

15.087948292s ago: executing program 1 (id=4838):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sctp_probe\x00', r1, 0x0, 0x8}, 0x18) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x2c}}, 0x40) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x3, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
writev(r5, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1) (async)
r6 = socket$rxrpc(0x21, 0x2, 0xa) (async)
socket$inet6_udplite(0xa, 0x2, 0x88)
bind$rxrpc(r6, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) (async)
listen(r6, 0x0) (async)
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="120086dd0000120000000000000060ec97000f982900fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xfce)

3.01539364s ago: executing program 32 (id=4788):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_emit_ethernet(0x10f, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8c0c00", 0xd9, 0x6, 0x0, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0xb, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x7, @multicast2, 0x4}, @generic={0x22, 0xb, "ef17d2a889e30ab8b8"}]}}, {"8921a5654ceeb9065815238c5939da8aa6f1c1772e0554cb7b577dfc1761ebc5f7515df456503cc193c051bc278a1cd76cc8faa5c6dc8f0ea8fc9ee59900a24aa932763edb8f9b6f9b25aa3c6313d28efe600bf931d4c730a6af62009f9bcf553e522f454e9ae118865763835e2bc756260f0dec96650321513a296bdbd2ebb1bf3afa98418e205d014e05ee780d9365fd648a694055d421db3cc865116f53b2d08beb52bcf45817b028fd741f"}}}}}}}, 0x0)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = socket(0xa, 0x3, 0x4)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x6, 0x0, &(0x7f0000000180))
getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000340)=0x5, &(0x7f0000000380)=0x4)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = socket$igmp6(0xa, 0x3, 0x2)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000780)=ANY=[], 0x0, 0x2, 0x4b, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa30}, 0x94)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x9, 0x0, 0x80000001}, 0xc)
getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x2)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2000000000000137, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0xd76}, 0x18)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$sock_timeval(r8, 0x1, 0x42, 0x0, &(0x7f0000001c80))
r9 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)="2e00000010008188040f46ecdb4cb9ccf5960ef42b000000e3bd6efb010511000b0002000d000010ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8800)

15.796844ms ago: executing program 33 (id=4838):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sctp_probe\x00', r1, 0x0, 0x8}, 0x18) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x2c}}, 0x40) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x3, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
writev(r5, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1) (async)
r6 = socket$rxrpc(0x21, 0x2, 0xa) (async)
socket$inet6_udplite(0xa, 0x2, 0x88)
bind$rxrpc(r6, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) (async)
listen(r6, 0x0) (async)
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="120086dd0000120000000000000060ec97000f982900fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xfce)

0s ago: executing program 34 (id=4837):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000140)={0x0, 0xc7}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=<r7=>0x0)
bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, r7, 0xffffffffffffffff, 0x5, 0xff, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000e5ff00f2170e65e3f50327e422000000000000000200800000001100", 0x39}, 0x60)
close(r6)
close(0x4)
r8 = socket$inet(0x2, 0x3, 0x8)
r9 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_DEL(r9, 0x2, r8)
listen(r4, 0x0)
connect$unix(r3, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r10 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r10, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1], 0x5c}, 0x1, 0x0, 0x0, 0x2040040}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b00000800"], 0x104}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

kernel console output (not intermixed with test programs):

 attributes in process `syz.1.2600'.
[  214.825569][T14831] syzkaller1: entered promiscuous mode
[  214.827396][T14831] syzkaller1: entered allmulticast mode
[  215.227800][T14838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2602'.
[  215.260683][T14842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2604'.
[  215.317960][T14850] pim6reg: entered allmulticast mode
[  215.320357][T14850] pim6reg: left allmulticast mode
[  215.358257][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'.
[  215.361015][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'.
[  215.363739][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'.
[  215.367937][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'.
[  215.370725][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'.
[  215.378394][T14842] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2604'.
[  215.499979][T14856] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5)
[  215.558563][T14858] gtp0: entered promiscuous mode
[  215.619513][T14863] bond0: default FDB implementation only supports local addresses
[  215.723203][T14877] netlink: 'syz.2.2615': attribute type 4 has an invalid length.
[  215.752508][T14882] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  215.772849][T14879] lo speed is unknown, defaulting to 1000
[  215.791433][T14884] netlink: 'syz.0.2618': attribute type 4 has an invalid length.
[  215.830626][T14887] netlink: 'syz.0.2619': attribute type 21 has an invalid length.
[  215.875029][T14879] lo speed is unknown, defaulting to 1000
[  216.007985][T14896] netlink: 'syz.2.2621': attribute type 10 has an invalid length.
[  216.010703][T14896] batadv0: left promiscuous mode
[  216.013682][T14896] netlink: 'syz.2.2621': attribute type 10 has an invalid length.
[  216.018507][T14896] batadv0: entered promiscuous mode
[  216.020392][T14896] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  216.066080][T14898] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  216.071379][T14898] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  216.076209][T14898] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  216.533788][T14918] syz0: rxe_newlink: already configured on lo
[  216.541037][T14918] gretap0: entered promiscuous mode
[  216.559422][T14918] 8021q: adding VLAN 0 to HW filter on device bond0
[  216.565745][T14918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.687750][T14926] veth1: entered promiscuous mode
[  216.689577][T14926] netlink: 'syz.0.2630': attribute type 1 has an invalid length.
[  216.692147][T14926] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  216.847601][T14937] vlan0: entered promiscuous mode
[  216.849949][T14937] bridge61: port 1(vlan0) entered blocking state
[  216.852293][T14937] bridge61: port 1(vlan0) entered disabled state
[  216.854517][T14937] vlan0: entered allmulticast mode
[  216.856491][T14937] batadv0: entered allmulticast mode
[  216.860492][T14937] C: renamed from lo (while UP)
[  216.863722][T14937] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  216.927443][T14945] pim6reg: entered allmulticast mode
[  216.929791][T14945] pim6reg: left allmulticast mode
[  217.063247][T14958] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  217.069834][T14958] veth0_to_bond: left allmulticast mode
[  217.072040][T14958] veth0_to_bond: left promiscuous mode
[  217.074221][T14958] bridge23: port 1(veth0_to_bond) entered disabled state
[  217.079741][T14958] bond12: (slave bridge22): Releasing active interface
[  217.083034][T14958] vlan1: left promiscuous mode
[  217.086064][T14958] veth0_to_hsr: left promiscuous mode
[  217.088175][T14958] bridge23: port 2(vlan1) entered disabled state
[  217.095569][T14958] netlink: 'syz.2.2640': attribute type 10 has an invalid length.
[  217.098448][T14958] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  217.103097][T14958] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  217.107798][T14958] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  217.673551][T14965] siw: device registration error -23
[  217.676605][T14965] netlink: 'syz.1.2643': attribute type 1 has an invalid length.
[  217.693512][T14965] bond17: (slave vti0): The slave device specified does not support setting the MAC address
[  217.697894][T14965] bond17: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  217.701946][T14965] bond17: (slave vti0): making interface the new active one
[  217.704589][T14965] bond17: (slave vti0): Enslaving as an active interface with an up link
[  217.799218][T14980] lo speed is unknown, defaulting to 1000
[  217.827959][T14979] netlink: 'syz.0.2647': attribute type 10 has an invalid length.
[  217.898287][T14980] C speed is unknown, defaulting to 1000
[  218.031142][T15006] veth9: entered promiscuous mode
[  218.047143][T15006] 8021q: adding VLAN 0 to HW filter on device bond13
[  218.205368][T15017] netem: incorrect gi model size
[  218.207091][T15017] netem: change failed
[  218.221560][T15019] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  218.268655][T15021] lo speed is unknown, defaulting to 1000
[  218.417542][T15021] C speed is unknown, defaulting to 1000
[  218.538991][T15034] netlink: 'syz.2.2663': attribute type 13 has an invalid length.
[  218.551456][T15034] gretap0: refused to change device tx_queue_len
[  218.554641][T15034] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  218.563267][ T6366] lo speed is unknown, defaulting to 1000
[  218.568120][ T6366] syz1: Port: 1 Link DOWN
[  218.572151][ T5881] lo speed is unknown, defaulting to 1000
[  218.712572][  T793] C speed is unknown, defaulting to 1000
[  218.714869][  T793] syz0: Port: 1 Link DOWN
[  218.731490][T15039] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  218.741020][T12418] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0
[  218.755627][T12418] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.759579][  T793] C speed is unknown, defaulting to 1000
[  218.759927][T12418] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.770060][T12418] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  218.826271][T15047] siw: device registration error -23
[  219.016743][T15069] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  219.057124][T15075] pimreg: entered allmulticast mode
[  219.318234][T15098] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  219.321120][T15098] openvswitch: netlink: Duplicate key (type 0).
[  219.376710][T15104] bridge0: port 1(erspan0) entered blocking state
[  219.379218][T15104] bridge0: port 1(erspan0) entered disabled state
[  219.381482][T15104] erspan0: entered allmulticast mode
[  219.383906][T15104] erspan0: entered promiscuous mode
[  219.764369][T15135] __nla_validate_parse: 126 callbacks suppressed
[  219.764387][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2694'.
[  219.786100][T15135] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  219.789447][T15135] CPU: 0 UID: 0 PID: 15135 Comm: syz.2.2694 Not tainted syzkaller #0 PREEMPT(full) 
[  219.789468][T15135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  219.789477][T15135] Call Trace:
[  219.789485][T15135]  <TASK>
[  219.789492][T15135]  dump_stack_lvl+0x189/0x250
[  219.789517][T15135]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.789535][T15135]  ? __pfx__printk+0x10/0x10
[  219.789554][T15135]  ? kernfs_root+0x1c/0x230
[  219.789572][T15135]  ? kernfs_path_from_node+0x2f/0x290
[  219.789594][T15135]  ? kernfs_path_from_node+0x250/0x290
[  219.789611][T15135]  ? kernfs_path_from_node+0x2f/0x290
[  219.789628][T15135]  sysfs_warn_dup+0x8e/0xa0
[  219.789644][T15135]  sysfs_do_create_link_sd+0xc0/0x110
[  219.789662][T15135]  device_add_class_symlinks+0x1cf/0x240
[  219.789680][T15135]  device_add+0x475/0xb50
[  219.789695][T15135]  wiphy_register+0x1ba6/0x28d0
[  219.789724][T15135]  ? __pfx_wiphy_register+0x10/0x10
[  219.789745][T15135]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  219.789764][T15135]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  219.789782][T15135]  ieee80211_register_hw+0x3425/0x4080
[  219.789799][T15135]  ? preempt_schedule+0xae/0xc0
[  219.789825][T15135]  ? ieee80211_register_hw+0x1481/0x4080
[  219.789842][T15135]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  219.789861][T15135]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  219.789883][T15135]  ? __hrtimer_setup+0x187/0x210
[  219.789897][T15135]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  219.789921][T15135]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  219.789950][T15135]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  219.789967][T15135]  ? trace_kmalloc+0x1f/0xd0
[  219.789985][T15135]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  219.790004][T15135]  ? kstrndup+0xbf/0x160
[  219.790021][T15135]  hwsim_new_radio_nl+0xea4/0x1b10
[  219.790041][T15135]  ? __pfx___nla_validate_parse+0x10/0x10
[  219.790068][T15135]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  219.790091][T15135]  ? __nla_parse+0x40/0x60
[  219.790112][T15135]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  219.790133][T15135]  genl_family_rcv_msg_doit+0x215/0x300
[  219.790152][T15135]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  219.790205][T15135]  ? bpf_lsm_capable+0x9/0x20
[  219.790224][T15135]  ? security_capable+0x7e/0x2e0
[  219.790246][T15135]  genl_rcv_msg+0x60e/0x790
[  219.790264][T15135]  ? __pfx_genl_rcv_msg+0x10/0x10
[  219.790279][T15135]  ? __kasan_slab_alloc+0x6c/0x80
[  219.790297][T15135]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  219.790316][T15135]  ? __netlink_lookup+0xbd/0x810
[  219.790328][T15135]  ? rcu_is_watching+0x15/0xb0
[  219.790345][T15135]  netlink_rcv_skb+0x208/0x470
[  219.790367][T15135]  ? __pfx_genl_rcv_msg+0x10/0x10
[  219.790384][T15135]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  219.790408][T15135]  ? lock_release+0x4b/0x3e0
[  219.790430][T15135]  ? down_read+0x1ad/0x2e0
[  219.790444][T15135]  genl_rcv+0x28/0x40
[  219.790459][T15135]  netlink_unicast+0x82f/0x9e0
[  219.790481][T15135]  ? __pfx_netlink_unicast+0x10/0x10
[  219.790499][T15135]  ? netlink_sendmsg+0x642/0xb30
[  219.790519][T15135]  ? skb_put+0x11b/0x210
[  219.790534][T15135]  netlink_sendmsg+0x805/0xb30
[  219.790558][T15135]  ? __pfx_netlink_sendmsg+0x10/0x10
[  219.790580][T15135]  ? aa_sock_msg_perm+0xf1/0x1d0
[  219.790603][T15135]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  219.790620][T15135]  ? __pfx_netlink_sendmsg+0x10/0x10
[  219.790642][T15135]  __sock_sendmsg+0x21c/0x270
[  219.790664][T15135]  ____sys_sendmsg+0x505/0x830
[  219.790682][T15135]  ? __pfx_____sys_sendmsg+0x10/0x10
[  219.790700][T15135]  ? import_iovec+0x74/0xa0
[  219.790717][T15135]  ___sys_sendmsg+0x21f/0x2a0
[  219.790733][T15135]  ? __pfx____sys_sendmsg+0x10/0x10
[  219.790750][T15135]  ? futex_wake+0x4b2/0x560
[  219.790779][T15135]  ? __fget_files+0x2a/0x420
[  219.790792][T15135]  ? __fget_files+0x3a0/0x420
[  219.790807][T15135]  __x64_sys_sendmsg+0x19b/0x260
[  219.790823][T15135]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  219.790842][T15135]  ? rcu_is_watching+0x15/0xb0
[  219.790856][T15135]  ? rcu_is_watching+0x15/0xb0
[  219.790870][T15135]  do_syscall_64+0xfa/0x3b0
[  219.790886][T15135]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.790900][T15135]  ? exc_page_fault+0x9f/0xf0
[  219.790924][T15135]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.790939][T15135] RIP: 0033:0x7f9bb198ebe9
[  219.790955][T15135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  219.790968][T15135] RSP: 002b:00007f9bb27a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  219.790985][T15135] RAX: ffffffffffffffda RBX: 00007f9bb1bb5fa0 RCX: 00007f9bb198ebe9
[  219.790996][T15135] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[  219.791006][T15135] RBP: 00007f9bb1a11e19 R08: 0000000000000000 R09: 0000000000000000
[  219.791015][T15135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.791024][T15135] R13: 00007f9bb1bb6038 R14: 00007f9bb1bb5fa0 R15: 00007fffaf8e2058
[  219.791041][T15135]  </TASK>
[  220.012213][T15139] sctp: [Deprecated]: syz.2.2695 (pid 15139) Use of int in max_burst socket option deprecated.
[  220.012213][T15139] Use struct sctp_assoc_value instead
[  220.132899][T15146] pimreg: entered allmulticast mode
[  220.297161][T15161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2701'.
[  220.369241][T15167] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2703'.
[  220.373205][T15168] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2703'.
[  220.522974][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2705'.
[  220.571181][T15179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2706'.
[  220.785575][T15186] validate_nla: 3 callbacks suppressed
[  220.785592][T15186] netlink: 'syz.0.2709': attribute type 39 has an invalid length.
[  220.950953][T15192] batadv_slave_1: entered promiscuous mode
[  220.952960][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2711'.
[  220.957768][T15192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2711'.
[  220.961503][T15192] netlink: 'syz.0.2711': attribute type 1 has an invalid length.
[  221.034109][T15194] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2712'.
[  221.147429][T15199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2714'.
[  221.472778][T15244] openvswitch: netlink: Key type 8976 is out of range max 32
[  221.510754][T15251] netlink: 'syz.0.2728': attribute type 4 has an invalid length.
[  221.517460][T15250] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  221.686382][T15263] lo speed is unknown, defaulting to 1000
[  221.857361][T15263] C speed is unknown, defaulting to 1000
[  222.006081][T15292] netlink: 'syz.2.2741': attribute type 1 has an invalid length.
[  222.008955][T15292] netlink: 'syz.2.2741': attribute type 1 has an invalid length.
[  222.011673][T15293] netlink: 'syz.2.2741': attribute type 1 has an invalid length.
[  222.014386][T15293] netlink: 'syz.2.2741': attribute type 1 has an invalid length.
[  222.017735][T15293] netlink: 'syz.2.2741': attribute type 21 has an invalid length.
[  222.017736][T15292] netlink: 'syz.2.2741': attribute type 21 has an invalid length.
[  222.154163][T15300] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.476789][T15316] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  222.614884][T15325] netlink: 'syz.1.2752': attribute type 4 has an invalid length.
[  223.059372][T15345] bond14: (slave bridge25): making interface the new active one
[  223.062072][T15345] bond14: (slave bridge25): Enslaving as an active interface with an up link
[  223.382768][T15380] lo speed is unknown, defaulting to 1000
[  223.729575][T15432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  223.734443][ T6366] lo speed is unknown, defaulting to 1000
[  223.736396][ T6366] syz1: Port: 1 Link ACTIVE
[  223.737844][ T6366] lo speed is unknown, defaulting to 1000
[  224.117798][T15462] tap0: tun_chr_ioctl cmd 1074025680
[  224.120900][T15462] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  224.125408][T15464] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  224.130276][T15462] mac80211_hwsim hwsim5 D: renamed from syzkaller0
[  224.133494][T15462] tipc: Disabling bearer <eth:syzkaller0>
[  224.889724][T15501] __nla_validate_parse: 33 callbacks suppressed
[  224.889739][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2804'.
[  225.022982][T15508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2806'.
[  225.241620][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2808'.
[  225.253839][T15517] openvswitch: netlink: IP tunnel dst address not specified
[  225.309931][T15523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2811'.
[  225.358846][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2813'.
[  225.371961][T15529] syzkaller1: entered allmulticast mode
[  225.428504][T15536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2814'.
[  225.525114][T15554] erspan0: left allmulticast mode
[  225.534065][T15554] erspan0: left promiscuous mode
[  225.536383][T15554] bridge0: port 1(erspan0) entered disabled state
[  225.641676][T15573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2823'.
[  225.670863][T15580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2825'.
[  225.688909][T15580] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2825'.
[  225.710516][T15584] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2827'.
[  225.713633][T15584] pimreg: left allmulticast mode
[  225.838446][T15595] validate_nla: 7 callbacks suppressed
[  225.838457][T15595] netlink: 'syz.1.2830': attribute type 10 has an invalid length.
[  225.976022][T15614] vlan3: entered promiscuous mode
[  225.978122][T15614] hsr_slave_1: entered promiscuous mode
[  225.980127][T15614] vlan3: entered allmulticast mode
[  225.981656][T15614] hsr_slave_1: entered allmulticast mode
[  226.067127][T15624] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  227.083067][T15666] lo speed is unknown, defaulting to 1000
[  227.107069][T15668] vlan0: entered promiscuous mode
[  227.114795][T15668] bond0: entered promiscuous mode
[  227.116796][T15668] vlan0: entered allmulticast mode
[  227.147445][T15671] netlink: 'syz.2.2853': attribute type 4 has an invalid length.
[  227.152501][ T5881] lo speed is unknown, defaulting to 1000
[  227.155033][ T5881] syz1: Port: 1 Link DOWN
[  227.155115][T15671] netlink: 'syz.2.2853': attribute type 4 has an invalid length.
[  227.156483][ T5881] lo speed is unknown, defaulting to 1000
[  227.174866][T13054] lo speed is unknown, defaulting to 1000
[  227.177320][T13054] syz1: Port: 1 Link ACTIVE
[  227.203657][T15666] C speed is unknown, defaulting to 1000
[  227.346919][T15685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.359047][T15685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  227.885456][T15689] tipc: Trying to set illegal importance in message
[  227.919618][T15689] lo speed is unknown, defaulting to 1000
[  228.121768][T15689] C speed is unknown, defaulting to 1000
[  228.274315][T15709] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  228.332968][T15710] netlink: 'syz.0.2865': attribute type 12 has an invalid length.
[  228.456946][T15717] netlink: 'syz.2.2867': attribute type 10 has an invalid length.
[  228.460087][T15717] dummy0: entered allmulticast mode
[  228.462198][T15717] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  228.502195][T15727] syzkaller1: entered promiscuous mode
[  228.504724][T15727] syzkaller1: entered allmulticast mode
[  228.819098][T15746] batman_adv: batadv0: Adding interface: dummy0
[  228.821424][T15746] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  228.828690][T15746] batman_adv: batadv0: Interface activated: dummy0
[  228.834833][T15746] batadv0: mtu less than device minimum
[  228.837301][T15746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  228.841411][T15746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  228.845572][T15746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  228.848946][T15746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  228.852844][T15746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  228.856591][T15746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  228.860499][T15746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  228.864957][T15746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  228.868917][T15746] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0)
[  228.881067][T15746] batman_adv: batadv0: Adding interface: ip6gretap3
[  228.883285][T15746] batman_adv: batadv0: The MTU of interface ip6gretap3 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  228.890992][T15746] batman_adv: batadv0: Interface activated: ip6gretap3
[  229.155998][T15764] netlink: 'syz.2.2882': attribute type 1 has an invalid length.
[  229.282580][T15781] pim6reg: entered allmulticast mode
[  230.068391][T15837] __nla_validate_parse: 20 callbacks suppressed
[  230.068407][T15837] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2901'.
[  230.100967][T15840] netlink: 'syz.1.2903': attribute type 39 has an invalid length.
[  230.142316][T15846] netlink: 'syz.1.2906': attribute type 2 has an invalid length.
[  230.145825][T15846] netlink: 'syz.1.2906': attribute type 8 has an invalid length.
[  230.148898][T15846] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2906'.
[  230.195486][T15848] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2908'.
[  230.309390][T15863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2914'.
[  230.386092][T15866] lo speed is unknown, defaulting to 1000
[  230.522922][T15866] C speed is unknown, defaulting to 1000
[  231.207823][T15882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'.
[  231.241515][T15885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2921'.
[  231.262574][T15887] pim6reg: left allmulticast mode
[  231.356995][T15889] lo speed is unknown, defaulting to 1000
[  231.658058][T15901] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2924'.
[  231.670502][T15889] C speed is unknown, defaulting to 1000
[  231.726529][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2924'.
[  231.729893][T15901] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2924'.
[  231.772979][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2926'.
[  231.851996][T15912] lo speed is unknown, defaulting to 1000
[  232.030444][T15912] C speed is unknown, defaulting to 1000
[  232.193179][T15927] netlink: 'syz.1.2932': attribute type 9 has an invalid length.
[  232.391913][T15938] netlink: 'syz.1.2935': attribute type 5 has an invalid length.
[  232.396098][T15938] netlink: 'syz.1.2935': attribute type 6 has an invalid length.
[  232.445534][T15943] 8021q: adding VLAN 0 to HW filter on device bond1
[  232.983550][T15984] bridge_slave_1: default FDB implementation only supports local addresses
[  232.992658][T15985] batman_adv: batadv0: Adding interface: ip6gretap2
[  232.995985][T15985] batman_adv: batadv0: Interface activated: ip6gretap2
[  233.105408][T16001] macsec1: entered promiscuous mode
[  233.107374][T16001] !: entered promiscuous mode
[  233.109583][T16001] macsec1: entered allmulticast mode
[  233.111367][T16001] !: entered allmulticast mode
[  233.113650][T16001] !: left allmulticast mode
[  233.117350][T16001] !: left promiscuous mode
[  233.208795][T16007] policy can only be matched on NF_INET_PRE_ROUTING
[  233.208807][T16007] unable to load match
[  233.526477][T16034] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  234.001068][T16078] bond4: option mode: unable to set because the bond device has slaves
[  234.007992][T16078] bond0: (slave bond15): Releasing backup interface
[  234.012970][T16078] bond4: (slave ip6gretap1): Releasing backup interface
[  234.220286][T16103] net_ratelimit: 34 callbacks suppressed
[  234.220298][T16103] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.702704][T16113] batman_adv: batadv0: Interface deactivated: dummy0
[  234.706338][T16113] batman_adv: batadv0: Removing interface: dummy0
[  234.711643][T16113] bond14: (slave bridge25): Releasing active interface
[  234.717350][T16113] batman_adv: batadv0: Interface deactivated: ip6gretap3
[  234.719477][T16113] batman_adv: batadv0: Removing interface: ip6gretap3
[  234.746883][T16113] openvswitch: netlink: Flow actions attr not present in new flow.
[  234.801594][T16119] netlink: 'syz.2.2988': attribute type 7 has an invalid length.
[  235.060321][T16133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  235.068740][T16135] netlink: 'syz.1.2993': attribute type 10 has an invalid length.
[  235.136451][T16147] __nla_validate_parse: 20 callbacks suppressed
[  235.136464][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2997'.
[  235.199999][T16154] pim6reg: entered allmulticast mode
[  235.203129][T16154] pim6reg: left allmulticast mode
[  235.255779][T16157] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3000'.
[  235.846276][T16175] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3005'.
[  235.922301][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'.
[  236.078941][T16201] netlink: 'syz.2.3015': attribute type 3 has an invalid length.
[  236.174403][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3017'.
[  236.178117][T16211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3017'.
[  236.232291][T16214] netlink: 'syz.2.3018': attribute type 83 has an invalid length.
[  236.380307][T16235] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3024'.
[  236.411482][T16241] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  236.416136][T16242] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  236.481434][T16250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'.
[  236.485209][T16250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3028'.
[  236.485260][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3028'.
[  236.501687][T16250] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  236.652834][T16264] lo speed is unknown, defaulting to 1000
[  236.736273][T16264] C speed is unknown, defaulting to 1000
[  236.853785][T16283] netlink: 'syz.2.3035': attribute type 5 has an invalid length.
[  237.007321][T16289] netlink: 'syz.2.3037': attribute type 1 has an invalid length.
[  237.062101][T16298] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.220318][T16319] IPv6: Can't replace route, no match found
[  237.516811][T16357] netlink: 'syz.0.3058': attribute type 2 has an invalid length.
[  237.531496][T16360] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  237.543230][T16358] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  237.582633][T16367] delete_channel: no stack
[  237.702570][T16381] netlink: 'syz.0.3067': attribute type 2 has an invalid length.
[  237.708428][T16381] k*]: entered promiscuous mode
[  238.603337][T16393] lo speed is unknown, defaulting to 1000
[  238.734854][T16393] C speed is unknown, defaulting to 1000
[  239.031113][T16421] netlink: 'syz.2.3075': attribute type 16 has an invalid length.
[  239.035326][T16421] netlink: 'syz.2.3075': attribute type 17 has an invalid length.
[  239.111551][T13054] lo speed is unknown, defaulting to 1000
[  239.113869][T13054] syz1: Port: 1 Link DOWN
[  239.118241][ T5874] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  239.121505][ T5874] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  239.126671][T13054] lo speed is unknown, defaulting to 1000
[  239.128881][ T5874] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  239.132071][ T5874] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  239.491434][T16426] netlink: 'syz.1.3077': attribute type 29 has an invalid length.
[  240.161950][T16466] syzkaller0: mtu less than device minimum
[  240.247860][T16474] __nla_validate_parse: 17 callbacks suppressed
[  240.247877][T16474] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3094'.
[  240.336385][T16484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3097'.
[  240.721169][T16493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3098'.
[  240.758223][T16495] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  240.870013][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3101'.
[  240.882411][T16502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3101'.
[  241.027545][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3106'.
[  241.361780][T16537] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3113'.
[  241.369639][T16537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3113'.
[  241.381808][T16537] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3113'.
[  241.388427][T16537] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3113'.
[  241.393778][T16537] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  242.334157][T16571] bond16: (slave vxcan1): The slave device specified does not support setting the MAC address
[  242.338444][T16571] bond16: (slave vxcan1): Error -95 calling set_mac_address
[  242.385896][T16575] macvlan0: entered promiscuous mode
[  242.387977][T16575] macvlan0: entered allmulticast mode
[  242.390036][T16575] bond16: (slave macvlan0): Error -98 calling set_mac_address
[  242.720058][   T60] block nbd1: Possible stuck request ffff888020c30000: control (read@0,1024B). Runtime 150 seconds
[  242.724935][   T60] block nbd1: Possible stuck request ffff888020c30200: control (read@1024,1024B). Runtime 150 seconds
[  242.729079][   T60] block nbd1: Possible stuck request ffff888020c30400: control (read@2048,1024B). Runtime 150 seconds
[  242.733357][   T60] block nbd1: Possible stuck request ffff888020c30600: control (read@3072,1024B). Runtime 150 seconds
[  244.068541][T16647] sch_tbf: peakrate 11991059854259051624 is lower than or equals to rate 14777727628734448271 !
[  244.180348][T16654] lo speed is unknown, defaulting to 1000
[  244.308327][T16654] C speed is unknown, defaulting to 1000
[  244.797968][T16672] bridge0: port 1(erspan0) entered blocking state
[  244.800811][T16674] openvswitch: netlink: IP tunnel dst address not specified
[  244.804352][T16672] bridge0: port 1(erspan0) entered disabled state
[  244.807279][T16672] erspan0: entered allmulticast mode
[  244.820289][T16672] erspan0: entered promiscuous mode
[  245.169603][T16703] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  245.296747][T16711] netlink: 'syz.0.3169': attribute type 303 has an invalid length.
[  245.368058][T16721] __nla_validate_parse: 13 callbacks suppressed
[  245.368075][T16721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3173'.
[  245.456985][T16733] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3178'.
[  245.461994][T16733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3178'.
[  245.704568][T16752] vlan3: entered allmulticast mode
[  245.706386][T16752] bridge_slave_0: entered allmulticast mode
[  245.873682][T16760] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  245.880592][  T793] lo speed is unknown, defaulting to 1000
[  245.889422][  T793] syz1: Port: 1 Link ACTIVE
[  245.891021][  T793] lo speed is unknown, defaulting to 1000
[  245.905806][T16765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3188'.
[  245.910380][T16765] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3188'.
[  245.972074][T16774] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3191'.
[  245.979813][T16774] macvlan1: entered allmulticast mode
[  246.006789][T16778] sctp: [Deprecated]: syz.1.3192 (pid 16778) Use of struct sctp_assoc_value in delayed_ack socket option.
[  246.006789][T16778] Use struct sctp_sack_info instead
[  246.032494][T16780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3193'.
[  246.037638][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3193'.
[  246.131141][T16798] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3196'.
[  246.134390][T16798] netlink: 'syz.1.3196': attribute type 2 has an invalid length.
[  246.136752][T16798] netlink: 'syz.1.3196': attribute type 8 has an invalid length.
[  246.139064][T16798] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3196'.
[  246.182737][T16806] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  246.212367][T16811] netlink: 'syz.2.3201': attribute type 23 has an invalid length.
[  246.753476][T16824] netlink: 'syz.0.3205': attribute type 1 has an invalid length.
[  246.768266][T16824] bond17: (slave bridge26): making interface the new active one
[  246.771596][T16824] bond17: (slave bridge26): Enslaving as an active interface with an up link
[  246.815915][T16829] openvswitch: netlink: Flow actions attr not present in new flow.
[  246.877946][T16833] vti0: entered promiscuous mode
[  246.880056][T16833] vti0: entered allmulticast mode
[  247.390032][T16858] netlink: 'syz.0.3218': attribute type 1 has an invalid length.
[  247.412395][T16858] bond18: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  247.975968][T16890] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  248.085979][T16900] macsec1: entered promiscuous mode
[  248.088242][T16900] ip6gretap0: entered promiscuous mode
[  248.090589][T16900] macsec1: entered allmulticast mode
[  248.092810][T16900] ip6gretap0: entered allmulticast mode
[  248.097172][T16900] netlink: 'syz.1.3231': attribute type 4 has an invalid length.
[  250.268661][T16965] lo speed is unknown, defaulting to 1000
[  250.532193][T16965] C speed is unknown, defaulting to 1000
[  250.917841][T16970] __nla_validate_parse: 31 callbacks suppressed
[  250.917853][T16970] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3255'.
[  250.924873][T16970] netlink: 'syz.0.3255': attribute type 9 has an invalid length.
[  250.927424][T16970] netlink: 212260 bytes leftover after parsing attributes in process `syz.0.3255'.
[  251.174071][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3260'.
[  251.225700][T16993] bond0: entered promiscuous mode
[  251.228174][T16993] batadv0: entered promiscuous mode
[  251.233819][T16993] batadv0: left promiscuous mode
[  251.237806][T16993] bond0: left promiscuous mode
[  251.260864][T16999] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  251.366767][T17015] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3269'.
[  251.369983][T17014] delete_channel: no stack
[  251.502979][T17026] macsec2: entered promiscuous mode
[  251.505347][T17026] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  251.507564][T17026] macsec2: entered allmulticast mode
[  251.509278][T17026] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  251.538172][T17028] tipc: Failed to remove unknown binding: 66,1,1/1733139176:2941413687/2941413689
[  251.542041][T17028] tipc: Failed to remove unknown binding: 66,1,1/1733139176:2941413687/2941413689
[  251.547195][T17028] tipc: Failed to remove unknown binding: 66,1,1/1733139176:2941413687/2941413689
[  251.550651][T17028] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3272'.
[  251.632606][T17032] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode
[  251.637578][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3274'.
[  251.755115][T17043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3278'.
[  251.805327][T17047] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3279'.
[  251.808472][T17047] batadv_slave_1: entered promiscuous mode
[  252.091120][T17063] netlink: 'syz.1.3285': attribute type 2 has an invalid length.
[  252.093535][T17063] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3285'.
[  252.102241][T17063] syzkaller1: entered promiscuous mode
[  252.105882][T17063] syzkaller1: entered allmulticast mode
[  252.247490][T17072] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3286'.
[  253.053436][T17075] nbd: illegal input index 65508
[  253.063554][T17081] netlink: 'syz.1.3290': attribute type 39 has an invalid length.
[  253.120025][T17086] lo speed is unknown, defaulting to 1000
[  253.403376][T17086] C speed is unknown, defaulting to 1000
[  253.919807][T17103] lo speed is unknown, defaulting to 1000
[  254.119687][T17103] C speed is unknown, defaulting to 1000
[  254.266998][T17125] -: renamed from vlan1
[  254.434758][T17141] netlink: 'syz.1.3309': attribute type 1 has an invalid length.
[  254.448648][T17141] 8021q: adding VLAN 0 to HW filter on device bond18
[  254.458332][T17141] 8021q: adding VLAN 0 to HW filter on device bond18
[  254.460704][T17141] bond18: (slave vxcan1): The slave device specified does not support setting the MAC address
[  254.465213][T17141] bond18: (slave vxcan1): Error -95 calling set_mac_address
[  254.514652][T17141] veth23: entered promiscuous mode
[  254.518021][T17141] bond18: (slave veth23): Enslaving as an active interface with a down link
[  254.524555][T17141] erspan0: left promiscuous mode
[  254.526844][T17141] bridge0: port 1(erspan0) entered disabled state
[  254.533450][T17141] bond18: (slave erspan0): making interface the new active one
[  254.533907][T17144] nbd: must specify at least one socket
[  254.537768][T17141] bond18: (slave erspan0): Enslaving as an active interface with an up link
[  254.539265][T17144] netlink: 'syz.2.3310': attribute type 1 has an invalid length.
[  254.627649][T17149] netlink: 'syz.1.3311': attribute type 4 has an invalid length.
[  254.771926][T17169] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  255.010738][T17186] netlink: 'syz.1.3323': attribute type 1 has an invalid length.
[  255.022326][T17186] bond19: entered promiscuous mode
[  255.025099][T17186] 8021q: adding VLAN 0 to HW filter on device bond19
[  255.036129][T17186] bond19: (slave bridge85): making interface the new active one
[  255.038448][T17186] bridge85: entered promiscuous mode
[  255.040541][T17186] bond19: (slave bridge85): Enslaving as an active interface with an up link
[  255.070044][T17194] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  255.473551][T17218] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  255.643467][T17223] openvswitch: netlink: Flow actions attr not present in new flow.
[  255.678729][T17233] lo speed is unknown, defaulting to 1000
[  255.801963][T17233] C speed is unknown, defaulting to 1000
[  255.962644][T17247] netlink: 'syz.0.3345': attribute type 1 has an invalid length.
[  255.972539][T17247] 8021q: adding VLAN 0 to HW filter on device bond19
[  255.986050][T17247] bond19: (slave veth9): Enslaving as an active interface with a down link
[  255.993594][T17247] 8021q: adding VLAN 0 to HW filter on device batadv2
[  255.998074][T17247] bond19: (slave batadv2): making interface the new active one
[  256.001034][T17247] batadv2: entered promiscuous mode
[  256.003410][T17247] bond19: (slave batadv2): Enslaving as an active interface with an up link
[  256.035835][T17250] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.038380][T17250] syzkaller0: entered promiscuous mode
[  256.040133][T17250] syzkaller0: entered allmulticast mode
[  256.105317][T17249] tipc: Resetting bearer <eth:syzkaller0>
[  256.111354][T17249] tipc: Disabling bearer <eth:syzkaller0>
[  256.178450][T17252] syz_tun: entered promiscuous mode
[  256.181723][T17252] batadv_slave_0: entered promiscuous mode
[  256.184165][T17252] debugfs: 'hsr0' already exists in 'hsr'
[  256.186130][T17252] Cannot create hsr debugfs directory
[  256.188047][T17252] hsr0: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[  256.191316][T17252] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network
[  256.202205][T17252] hsr0: entered allmulticast mode
[  256.204157][T17252] syz_tun: entered allmulticast mode
[  256.206252][T17252] batadv_slave_0: entered allmulticast mode
[  257.008393][T17271] netlink: 'syz.2.3355': attribute type 1 has an invalid length.
[  257.010987][T17271] __nla_validate_parse: 25 callbacks suppressed
[  257.010997][T17271] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3355'.
[  257.128589][T17279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3358'.
[  257.169462][T17283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3360'.
[  257.507649][T17294] lo speed is unknown, defaulting to 1000
[  257.555658][T17295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'.
[  257.560138][T17295] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3363'.
[  257.612126][T17294] C speed is unknown, defaulting to 1000
[  257.890785][T17312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3368'.
[  257.903752][T17312] smc: net device bond0 applied user defined pnetid SYZ
[  257.906919][T17312] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3368'.
[  257.977361][T17319] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3371'.
[  258.123479][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3375'.
[  258.145444][T17331] sctp: [Deprecated]: syz.2.3375 (pid 17331) Use of struct sctp_assoc_value in delayed_ack socket option.
[  258.145444][T17331] Use struct sctp_sack_info instead
[  258.252319][T17352] macsec0: entered promiscuous mode
[  258.264279][T17352] macsec0: entered allmulticast mode
[  258.332612][T17366] veth1: left promiscuous mode
[  258.342108][T17366] mac80211_hwsim hwsim5 D: left promiscuous mode
[  258.344474][T17366] mac80211_hwsim hwsim5 D: left allmulticast mode
[  258.356797][T17366] vti0: left promiscuous mode
[  258.358237][T17366] vti0: left allmulticast mode
[  258.371157][T17366] hsr0: left allmulticast mode
[  258.372881][T17366] syz_tun: left allmulticast mode
[  258.375713][T17366] batadv_slave_0: left allmulticast mode
[  258.429032][T17383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3388'.
[  258.452267][T17377] sctp: [Deprecated]: syz.1.3387 (pid 17377) Use of struct sctp_assoc_value in delayed_ack socket option.
[  258.452267][T17377] Use struct sctp_sack_info instead
[  258.481607][T17392] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  258.504329][T17396] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.521541][T17392] bridge28: entered promiscuous mode
[  258.523511][T17392] bridge28: entered allmulticast mode
[  258.623676][T17400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  258.629979][T17400] tipc: Failed to remove unknown binding: 66,1,1/4257297992:4268270684/4268270686
[  258.636106][T17400] tipc: Failed to remove unknown binding: 66,1,1/4257297992:4268270684/4268270686
[  258.639842][T17400] tipc: Failed to remove unknown binding: 66,1,1/4257297992:4268270684/4268270686
[  258.705820][T17402] lo speed is unknown, defaulting to 1000
[  258.842348][T17402] C speed is unknown, defaulting to 1000
[  258.974678][T17407] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.977410][T17407] syzkaller0: entered promiscuous mode
[  258.979427][T17407] syzkaller0: entered allmulticast mode
[  258.989172][T17407] tipc: Resetting bearer <eth:syzkaller0>
[  258.992764][T17406] tipc: Resetting bearer <eth:syzkaller0>
[  259.006816][T17406] tipc: Disabling bearer <eth:syzkaller0>
[  259.385182][T17424] lo speed is unknown, defaulting to 1000
[  259.536464][T17424] C speed is unknown, defaulting to 1000
[  260.217676][T17489] netlink: 'syz.1.3418': attribute type 5 has an invalid length.
[  260.463910][T17510] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  260.491079][T17512] syzkaller1: tun_chr_ioctl cmd 1074025677
[  260.495487][T17512] syzkaller1: linktype set to 778
[  260.747800][T17540] block nbd0: Unsupported socket: shutdown callout must be supported.
[  260.829999][T17555] netlink: 'syz.1.3437': attribute type 1 has an invalid length.
[  260.850301][T17555] 8021q: adding VLAN 0 to HW filter on device bond20
[  260.866633][T17555] 8021q: adding VLAN 0 to HW filter on device bond20
[  260.875700][T17555] bond20: (slave vxcan1): The slave device specified does not support setting the MAC address
[  260.882314][T17555] bond20: (slave vxcan1): Error -95 calling set_mac_address
[  260.902899][T17564] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  260.907601][T17564] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  260.930866][T17566] veth25: entered promiscuous mode
[  260.935624][T17566] bond20: (slave veth25): Enslaving as an active interface with a down link
[  261.134508][T17589] netlink: 'syz.1.3444': attribute type 21 has an invalid length.
[  261.137841][T17589] netlink: 'syz.1.3444': attribute type 5 has an invalid length.
[  261.326083][T17600] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  261.881242][T17630] netlink: 'syz.0.3459': attribute type 19 has an invalid length.
[  261.884521][T17630] netlink: 'syz.0.3459': attribute type 19 has an invalid length.
[  262.045075][T17641] netlink: 'syz.0.3463': attribute type 9 has an invalid length.
[  262.062552][T17641] netlink: 'syz.0.3463': attribute type 9 has an invalid length.
[  262.146924][T17650] netlink: 'syz.0.3466': attribute type 19 has an invalid length.
[  262.150059][T17650] __nla_validate_parse: 29 callbacks suppressed
[  262.150073][T17650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3466'.
[  262.156876][T17650] netlink: 'syz.0.3466': attribute type 19 has an invalid length.
[  262.160036][T17650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3466'.
[  262.296098][T17659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3469'.
[  262.353797][T17663] netlink: 'syz.0.3471': attribute type 21 has an invalid length.
[  262.358418][T17663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3471'.
[  262.362158][T17663] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3471'.
[  262.397349][T17670] syz_tun: refused to change device tx_queue_len
[  262.433546][T17674] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3475'.
[  262.440410][T17666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3472'.
[  262.449274][T17674] IPVS: length: 209 != 24
[  262.598209][T17683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3477'.
[  262.622745][T17700] lo speed is unknown, defaulting to 1000
[  262.717236][T17704] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  262.720014][T17703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3480'.
[  262.724518][T17703] tipc: Resetting bearer <eth:syzkaller0>
[  262.729395][T17702] tipc: Disabling bearer <eth:syzkaller0>
[  262.808104][T17700] C speed is unknown, defaulting to 1000
[  262.846315][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3481'.
[  263.308950][T17712] ip6tnl0: mtu less than device minimum
[  263.636991][T17736] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  263.650746][T17724] siw: device registration error -23
[  263.685208][T17741] netlink: 'syz.0.3492': attribute type 1 has an invalid length.
[  263.967729][T17759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  264.988041][T17818] syzkaller1: entered promiscuous mode
[  264.990449][T17818] syzkaller1: entered allmulticast mode
[  265.237954][T17833] openvswitch: netlink: Missing valid actions attribute.
[  265.240271][T17833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.245794][T17833] tipc: Failed to remove unknown binding: 66,1,1/1733139176:1727521531/1727521533
[  265.250614][T17833] tipc: Failed to remove unknown binding: 66,1,1/1733139176:1727521531/1727521533
[  265.253625][T17833] tipc: Failed to remove unknown binding: 66,1,1/1733139176:1727521531/1727521533
[  265.559257][T17837] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  265.562874][T17837] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  265.565671][T17837] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  265.961389][T17865] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  266.632453][T17882] validate_nla: 3 callbacks suppressed
[  266.632471][T17882] netlink: 'syz.2.3535': attribute type 4 has an invalid length.
[  266.643411][T13054] lo speed is unknown, defaulting to 1000
[  266.646402][T13054] syz1: Port: 1 Link DOWN
[  266.648391][T13054] lo speed is unknown, defaulting to 1000
[  266.943521][T17908] IPVS: length: 49 != 24
[  266.945165][T17909] IPVS: length: 49 != 24
[  266.977681][T17911] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  267.098631][T17927] "syz.0.3548" (17927) uses obsolete ecb(arc4) skcipher
[  267.809614][T17987] netlink: 'syz.2.3555': attribute type 10 has an invalid length.
[  267.812628][T17987] __nla_validate_parse: 23 callbacks suppressed
[  267.812665][T17987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3555'.
[  267.841328][T17989] tipc: Failed to remove unknown binding: 66,1,1/4257297992:882977059/882977061
[  267.847036][T17989] netlink: 'syz.2.3556': attribute type 1 has an invalid length.
[  267.849944][T17989] netlink: 'syz.2.3556': attribute type 2 has an invalid length.
[  267.853278][T17989] tipc: Failed to remove unknown binding: 66,1,1/4257297992:882977059/882977061
[  267.857789][T17989] tipc: Failed to remove unknown binding: 66,1,1/4257297992:882977059/882977061
[  267.937683][T17995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3558'.
[  267.952385][T17995] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3558'.
[  268.091204][T18005] netlink: 'syz.0.3561': attribute type 10 has an invalid length.
[  268.094998][T18005] netlink: 'syz.0.3561': attribute type 10 has an invalid length.
[  269.904451][T18032] netlink: 'syz.2.3569': attribute type 6 has an invalid length.
[  269.908350][T18032] netlink: 'syz.2.3569': attribute type 6 has an invalid length.
[  270.045975][T18043] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  270.112081][T18041] veth13: entered promiscuous mode
[  270.281915][T18044] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3571'.
[  270.381367][T18065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3579'.
[  270.413452][T18070] smc: net device bond0 erased user defined pnetid SYZ
[  270.449178][T18076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3582'.
[  270.460814][T18070] openvswitch: netlink: Tunnel attr 16371 out of range max 16
[  270.466098][T18076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3582'.
[  270.686050][T18091] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3586'.
[  270.702181][T18091] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  270.722096][T13054] lo speed is unknown, defaulting to 1000
[  270.725051][T13054] syz1: Port: 1 Link ACTIVE
[  270.726825][T13054] lo speed is unknown, defaulting to 1000
[  270.753590][T18096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3588'.
[  270.768941][T18096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3588'.
[  270.808054][T18098] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  270.811410][T18099] netlink: 'syz.0.3589': attribute type 7 has an invalid length.
[  270.814762][T18099] netlink: 'syz.0.3589': attribute type 8 has an invalid length.
[  271.435510][T18114] bond21: (slave geneve4): making interface the new active one
[  271.438432][T18114] bond21: (slave geneve4): Enslaving as an active interface with an up link
[  271.441732][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  271.445310][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  271.448710][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  271.451441][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  271.619958][T18132] batadv_slave_1: left promiscuous mode
[  271.627024][T18132] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  271.637816][T18132] veth13: left promiscuous mode
[  271.639888][T18132] vlan2: left promiscuous mode
[  271.641479][T18132] bond14: left promiscuous mode
[  271.643759][T18132] bridge78: left promiscuous mode
[  271.645764][T18132] geneve3: left promiscuous mode
[  271.647941][T18132] vlan3: left promiscuous mode
[  271.649631][T18132] hsr_slave_1: left promiscuous mode
[  271.653431][T18132] macsec1: left promiscuous mode
[  271.657345][T18132] ip6gretap0: left promiscuous mode
[  271.659664][T18132] macsec2: left promiscuous mode
[  271.662524][T18132] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  271.667470][T18132] veth23: left promiscuous mode
[  271.669661][T18132] bond19: left promiscuous mode
[  271.671382][T18132] bridge85: left promiscuous mode
[  271.677337][T18132] veth25: left promiscuous mode
[  271.827097][T18140] lo speed is unknown, defaulting to 1000
[  271.831607][T18147] validate_nla: 1 callbacks suppressed
[  271.831642][T18147] netlink: 'syz.1.3604': attribute type 1 has an invalid length.
[  271.844759][T18147] netlink: 'syz.1.3604': attribute type 1 has an invalid length.
[  271.898922][T18149] lo speed is unknown, defaulting to 1000
[  271.945562][T18154] geneve5: entered allmulticast mode
[  271.949212][T12418] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  271.952414][   T13] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  271.962287][   T13] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  271.965676][   T13] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  271.985887][T18140] C speed is unknown, defaulting to 1000
[  272.081732][T18159] syzkaller0: entered promiscuous mode
[  272.083649][T18159] syzkaller0: entered allmulticast mode
[  272.091011][T18149] C speed is unknown, defaulting to 1000
[  272.302593][T18173] netlink: 'syz.2.3612': attribute type 4 has an invalid length.
[  272.315859][T13054] lo speed is unknown, defaulting to 1000
[  272.317811][T13054] syz1: Port: 1 Link DOWN
[  272.319212][T13054] lo speed is unknown, defaulting to 1000
[  272.437611][T18178] lo speed is unknown, defaulting to 1000
[  272.525899][T18178] C speed is unknown, defaulting to 1000
[  272.806824][   T60] block nbd1: Possible stuck request ffff888020c30000: control (read@0,1024B). Runtime 180 seconds
[  272.811013][   T60] block nbd1: Possible stuck request ffff888020c30200: control (read@1024,1024B). Runtime 180 seconds
[  272.815502][   T60] block nbd1: Possible stuck request ffff888020c30400: control (read@2048,1024B). Runtime 180 seconds
[  272.819645][   T60] block nbd1: Possible stuck request ffff888020c30600: control (read@3072,1024B). Runtime 180 seconds
[  273.236220][T18207] __nla_validate_parse: 6 callbacks suppressed
[  273.236232][T18207] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3621'.
[  273.599710][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3629'.
[  273.602579][T18234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3629'.
[  274.097594][T18248] tipc: Failed to remove unknown binding: 66,1,1/4257297992:4273101511/4273101513
[  274.102146][T18248] tipc: Failed to remove unknown binding: 66,1,1/4257297992:4273101511/4273101513
[  274.105489][T18248] tipc: Failed to remove unknown binding: 66,1,1/4257297992:4273101511/4273101513
[  274.571676][T18256] netlink: 'syz.0.3635': attribute type 2 has an invalid length.
[  274.950032][T18286] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3644'.
[  274.982740][T18278] IPVS: set_ctl: invalid protocol: 58 172.30.1.1:20003
[  274.991482][T18291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3646'.
[  274.995878][T18293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3647'.
[  275.022863][T18296] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3648'.
[  275.075780][T13054] C speed is unknown, defaulting to 1000
[  275.077612][T13054] syz0: Port: 1 Link ACTIVE
[  275.080686][T13054] C speed is unknown, defaulting to 1000
[  275.136179][T18316] tap0: tun_chr_ioctl cmd 1074025678
[  275.138365][T18316] tap0: group set to 0
[  275.217263][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3656'.
[  275.228532][T18324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3656'.
[  275.405154][T18341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3662'.
[  276.117826][T18371] netlink: 'syz.0.3670': attribute type 5 has an invalid length.
[  276.122653][T18371] geneve5: entered promiscuous mode
[  276.125678][T18371] geneve5: entered allmulticast mode
[  276.128742][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  276.132206][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  276.143896][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  276.148783][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  276.368001][T18405] bridge0: port 1(erspan0) entered blocking state
[  276.371657][T18405] bridge0: port 1(erspan0) entered disabled state
[  276.375547][T18405] erspan0: entered allmulticast mode
[  276.378159][T18405] erspan0: entered promiscuous mode
[  276.404933][T18405] erspan0: left allmulticast mode
[  276.406670][T18405] erspan0: left promiscuous mode
[  276.408442][T18405] bridge0: port 1(erspan0) entered disabled state
[  276.822110][T18434] IPVS: set_ctl: invalid protocol: 59 100.1.1.0:20001
[  277.235391][T18472] netlink: 'syz.1.3701': attribute type 4 has an invalid length.
[  277.237673][T18473] netlink: 'syz.1.3701': attribute type 4 has an invalid length.
[  277.243152][T13054] C speed is unknown, defaulting to 1000
[  277.245862][ T6366] C speed is unknown, defaulting to 1000
[  277.248363][T13054] C speed is unknown, defaulting to 1000
[  277.261423][T18472] lo speed is unknown, defaulting to 1000
[  277.372152][T18472] C speed is unknown, defaulting to 1000
[  277.782427][T18495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.968110][T18516] lo speed is unknown, defaulting to 1000
[  278.049971][T18516] C speed is unknown, defaulting to 1000
[  278.418660][T18534] __nla_validate_parse: 8 callbacks suppressed
[  278.418671][T18534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3715'.
[  278.423651][T18534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3715'.
[  278.531737][T18539] netlink: 'syz.2.3715': attribute type 1 has an invalid length.
[  278.534894][T18539] netlink: 161 bytes leftover after parsing attributes in process `syz.2.3715'.
[  278.849266][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3717'.
[  279.363259][T18552] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3721'.
[  279.618254][T18572] batadv_slave_0: entered allmulticast mode
[  280.151776][T18593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3733'.
[  280.154935][T18593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3733'.
[  280.158586][T18593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3733'.
[  280.161807][T18593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3733'.
[  280.242057][T18606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3737'.
[  281.674301][T18667] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  281.942647][T18678] lo speed is unknown, defaulting to 1000
[  282.071501][T18678] C speed is unknown, defaulting to 1000
[  282.135883][ T5874] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  282.138447][ T5874] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  282.141106][ T5874] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  282.143534][ T5874] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  282.200217][T18693] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.285944][T18701] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  282.840995][T18714] netlink: 'syz.1.3770': attribute type 1 has an invalid length.
[  282.998408][T18721] batadv_slave_0: left allmulticast mode
[  283.716248][T18751] lo speed is unknown, defaulting to 1000
[  283.765807][T18754] __nla_validate_parse: 10 callbacks suppressed
[  283.765824][T18754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3784'.
[  283.808727][T18756] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  283.821726][T18751] C speed is unknown, defaulting to 1000
[  283.871499][T18759] netlink: 'syz.0.3787': attribute type 1 has an invalid length.
[  283.879869][T18758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3787'.
[  284.053548][T18777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3792'.
[  284.313627][T18807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3801'.
[  284.325782][T18807] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  284.872793][T18862] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  284.930620][T18863] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  284.933779][T18863] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  285.218915][T18872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3813'.
[  285.288864][T18878] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3814'.
[  285.504393][T18895] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  285.508714][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3820'.
[  285.616853][T18907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3821'.
[  285.710244][T18910] macvlan5: entered allmulticast mode
[  285.712348][T18910] veth1_vlan: entered allmulticast mode
[  285.715795][T18910] bridge57: port 1(macvlan5) entered blocking state
[  285.718172][T18910] bridge57: port 1(macvlan5) entered disabled state
[  285.723879][T18910] macvlan5: entered promiscuous mode
[  286.086779][T18926] netlink: 'syz.1.3832': attribute type 1 has an invalid length.
[  286.089883][T18926] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3832'.
[  286.387661][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3835'.
[  286.394819][ T5849] Bluetooth: hci0: command tx timeout
[  286.744153][T18966] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  286.949505][T18987] siw: device registration error -23
[  287.363201][T19006] rdma_op ffff888128f731f0 conn xmit_rdma 0000000000000000
[  287.366413][T19005] rdma_op ffff888128f769f0 conn xmit_rdma 0000000000000000
[  287.868225][T19056] netlink: 'syz.2.3869': attribute type 1 has an invalid length.
[  288.143807][T19079] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  288.150917][T19079] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  288.882755][T19135] __nla_validate_parse: 10 callbacks suppressed
[  288.882766][T19135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3894'.
[  288.926714][T19137] lo speed is unknown, defaulting to 1000
[  289.046788][T19137] C speed is unknown, defaulting to 1000
[  302.885480][   T60] block nbd1: Possible stuck request ffff888020c30000: control (read@0,1024B). Runtime 210 seconds
[  302.889736][   T60] block nbd1: Possible stuck request ffff888020c30200: control (read@1024,1024B). Runtime 210 seconds
[  302.894280][   T60] block nbd1: Possible stuck request ffff888020c30400: control (read@2048,1024B). Runtime 210 seconds
[  302.898434][   T60] block nbd1: Possible stuck request ffff888020c30600: control (read@3072,1024B). Runtime 210 seconds
[  306.704660][T19151] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3899'.
[  306.715640][T19153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3897'.
[  306.735085][T19153] IPv6: sit4: Disabled Multicast RS
[  306.737630][T19153] sit4: entered allmulticast mode
[  306.744187][T19153] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  306.762516][T19151] bridge_slave_0: entered promiscuous mode
[  306.847790][T19166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3901'.
[  306.857590][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3898'.
[  306.861037][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3898'.
[  306.871565][T19169] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3902'.
[  306.920712][T19177] netlink: 'syz.2.3904': attribute type 1 has an invalid length.
[  306.949058][T19177] 8021q: adding VLAN 0 to HW filter on device bond17
[  306.965445][T19177] veth13: entered promiscuous mode
[  306.970546][T19177] bond17: (slave veth13): Enslaving as a backup interface with a down link
[  306.984358][T19177] bond17: (slave veth13): Releasing backup interface
[  306.996292][T19184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3906'.
[  307.008765][T19184] 8021q: adding VLAN 0 to HW filter on device bond22
[  307.017184][T19184] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  307.020405][T19184] bond4: (slave macvlan2): Enslaving as a backup interface with a down link
[  307.025058][T19190] bridge0: port 1(erspan0) entered blocking state
[  307.027190][T19190] bridge0: port 1(erspan0) entered disabled state
[  307.029298][T19190] erspan0: entered allmulticast mode
[  307.031498][T19190] erspan0: entered promiscuous mode
[  307.037337][T19184] tipc: Resetting bearer <ib:ip6gre0>
[  307.041903][T19184] bond17: (slave bridge26): Releasing active interface
[  307.047270][T19184] bond18: (slave ip6gretap2): Releasing backup interface
[  307.050567][T19184] bond19: (slave veth9): Releasing active interface
[  307.052800][T19184] bond19: (slave veth9): the permanent HWaddr of slave - 4a:19:ec:c3:22:e5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  307.059609][T19184] bond19: (slave batadv2): Releasing active interface
[  307.062143][T19184] batadv2: left promiscuous mode
[  307.065712][T19184] bond4: (slave macvlan2): Releasing backup interface
[  307.070782][T19188] erspan0: left allmulticast mode
[  307.072533][T19188] erspan0: left promiscuous mode
[  307.075233][T19188] bridge0: port 1(erspan0) entered disabled state
[  307.122144][T19198] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3910'.
[  307.128401][T19198] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3910'.
[  307.131815][T19198] netlink: 'syz.0.3910': attribute type 6 has an invalid length.
[  307.135297][T19198] netlink: 'syz.0.3910': attribute type 5 has an invalid length.
[  307.139194][T19198] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3910'.
[  307.157630][T19200] netlink: 'syz.2.3909': attribute type 1 has an invalid length.
[  307.168893][T19202] netlink: 'syz.0.3911': attribute type 2 has an invalid length.
[  307.221566][T19210] netlink: 'syz.0.3913': attribute type 1 has an invalid length.
[  307.750824][T19255] netlink: 'syz.0.3924': attribute type 1 has an invalid length.
[  307.759566][T19255] netlink: 'syz.0.3924': attribute type 1 has an invalid length.
[  307.818712][T19260] lo speed is unknown, defaulting to 1000
[  307.938618][T19270] netlink: 'syz.1.3929': attribute type 11 has an invalid length.
[  308.022003][T19260] C speed is unknown, defaulting to 1000
[  308.180633][T19292] netlink: 'syz.0.3934': attribute type 6 has an invalid length.
[  308.201199][T19294] openvswitch: netlink: Unknown nsh attribute 0
[  308.205496][T19294] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.228238][T19297] netlink: 'syz.2.3937': attribute type 10 has an invalid length.
[  308.382410][T19316] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  308.447348][T19323] tipc: Resetting bearer <ib:ip6gre0>
[  308.493749][T19323] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  308.586730][T19344] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  308.589554][T19344] syzkaller0: entered promiscuous mode
[  308.591900][T19344] syzkaller0: entered allmulticast mode
[  308.603270][T19344] tipc: Resetting bearer <eth:syzkaller0>
[  308.606965][T19343] tipc: Resetting bearer <eth:syzkaller0>
[  308.610349][T19343] tipc: Disabling bearer <eth:syzkaller0>
[  308.898550][T19364] IPv6: sit5: Disabled Multicast RS
[  311.448455][T19435] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  311.515701][T19443] lo speed is unknown, defaulting to 1000
[  311.571411][T19444] pim6reg1: entered promiscuous mode
[  311.573295][T19444] pim6reg1: entered allmulticast mode
[  311.669205][T19443] C speed is unknown, defaulting to 1000
[  311.713851][T19453] lo speed is unknown, defaulting to 1000
[  311.948193][T19453] C speed is unknown, defaulting to 1000
[  311.982668][T19464] __nla_validate_parse: 23 callbacks suppressed
[  311.982680][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3984'.
[  311.988629][T19464] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  311.991284][T19464] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  312.456026][T19476] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3987'.
[  312.537567][T19480] netlink: zone id is out of range
[  312.540163][T19480] netlink: zone id is out of range
[  312.542036][T19480] netlink: zone id is out of range
[  312.543834][T19480] netlink: zone id is out of range
[  312.547827][T19480] netlink: zone id is out of range
[  312.549794][T19480] netlink: zone id is out of range
[  312.551699][T19480] netlink: zone id is out of range
[  312.553514][T19480] netlink: zone id is out of range
[  312.556776][T19480] netlink: del zone limit has 8 unknown bytes
[  312.577964][T19487] validate_nla: 4 callbacks suppressed
[  312.577976][T19487] netlink: 'syz.0.3991': attribute type 10 has an invalid length.
[  312.762317][T19495] lo speed is unknown, defaulting to 1000
[  312.809919][T19497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3993'.
[  312.828583][T19497] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3993'.
[  312.885703][T19495] C speed is unknown, defaulting to 1000
[  313.074677][T19509] ip6gretap0: entered promiscuous mode
[  313.076449][T19509] macsec0: entered promiscuous mode
[  313.078334][T19509] macsec0: entered allmulticast mode
[  313.080265][T19509] ip6gretap0: entered allmulticast mode
[  313.206701][T19516] xt_socket: unknown flags 0xd0
[  313.306207][T19521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4001'.
[  313.306873][T19528] ip6tnl7: entered promiscuous mode
[  313.309330][T19521] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4001'.
[  313.313824][T19528] ip6tnl7: entered allmulticast mode
[  313.376464][T19533] netlink: 'syz.0.4005': attribute type 1 has an invalid length.
[  313.380134][T19533] netlink: 'syz.0.4005': attribute type 1 has an invalid length.
[  313.431214][T19541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4007'.
[  313.566583][T19571] vlan0: entered allmulticast mode
[  313.772363][T19593] netlink: 'syz.0.4019': attribute type 1 has an invalid length.
[  313.782786][T19593] 8021q: adding VLAN 0 to HW filter on device bond23
[  313.788785][T19593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4019'.
[  313.858791][T19610] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4025'.
[  313.896289][T19610] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  313.961306][T19626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4029'.
[  314.050416][T19633] netlink: 'syz.2.4032': attribute type 1 has an invalid length.
[  314.184895][T19642] lo speed is unknown, defaulting to 1000
[  314.306228][T19642] C speed is unknown, defaulting to 1000
[  314.319151][T19645] netlink: 'syz.1.4035': attribute type 1 has an invalid length.
[  314.332489][T19645] 8021q: adding VLAN 0 to HW filter on device bond24
[  314.340497][T19645] bond24 (unregistering): Released all slaves
[  314.979820][T19660] syzkaller1: entered promiscuous mode
[  314.981952][T19660] syzkaller1: entered allmulticast mode
[  315.307490][T19672] netlink: 'syz.0.4043': attribute type 1 has an invalid length.
[  315.467881][T19678] netlink: 'syz.1.4046': attribute type 1 has an invalid length.
[  315.482169][T19678] 8021q: adding VLAN 0 to HW filter on device bond24
[  315.488246][T19679] ipvlan5: entered allmulticast mode
[  315.490103][T19679] bond24: entered allmulticast mode
[  315.499474][T19678] bond24: (slave gretap4): making interface the new active one
[  315.502288][T19678] gretap4: entered allmulticast mode
[  315.505293][T19678] bond24: (slave gretap4): Enslaving as an active interface with an up link
[  315.572822][T19689] bridge0: the hash_elasticity option has been deprecated and is always 16
[  315.576522][T19689] bridge0: entered allmulticast mode
[  315.895158][T19709] lo speed is unknown, defaulting to 1000
[  315.992515][T19709] C speed is unknown, defaulting to 1000
[  316.189485][T19726] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20000
[  316.473357][T19739] bridge86: entered promiscuous mode
[  316.688588][T19768] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  316.691548][T19768] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  316.898205][T19786] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  316.904237][T19785] tipc: Disabling bearer <eth:syzkaller0>
[  316.916862][T19790] pim6reg: entered allmulticast mode
[  316.919121][T19790] pim6reg: left allmulticast mode
[  317.075077][T19796] __nla_validate_parse: 15 callbacks suppressed
[  317.075094][T19796] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4078'.
[  317.538123][T19798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4079'.
[  317.650531][T19804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4081'.
[  317.722507][T19808] netlink: 'syz.2.4083': attribute type 10 has an invalid length.
[  317.770298][T19812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4084'.
[  317.900300][T19822] netlink: 'syz.1.4087': attribute type 10 has an invalid length.
[  317.951098][T19829] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  318.058031][T19834] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4092'.
[  318.086627][T19847] mac80211_hwsim hwsim58 wlan1: entered allmulticast mode
[  318.096284][T19847] bond18: (slave erspan0): Releasing active interface
[  318.103187][T19847] vlan0: left allmulticast mode
[  318.106522][T19847] batadv0: left allmulticast mode
[  318.108423][T19847] vlan0: left promiscuous mode
[  318.110199][T19847] bridge61: port 1(vlan0) entered disabled state
[  318.121204][T19847] bond17: (slave vti0): Releasing backup interface
[  318.124907][T19847] batman_adv: batadv0: Interface deactivated: ip6gretap2
[  318.127330][T19847] batman_adv: batadv0: Removing interface: ip6gretap2
[  318.129341][T19851] netlink: 'syz.0.4096': attribute type 10 has an invalid length.
[  318.132393][T19851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4096'.
[  318.136299][T19847] bond18: (slave veth23): Releasing active interface
[  318.141505][T19847] bond19: (slave bridge85): Releasing backup interface
[  318.149865][T19847] bond20: (slave veth25): Releasing active interface
[  318.155725][T19847] bond21: (slave geneve4): Releasing active interface
[  318.161239][T19847] macvlan5: left promiscuous mode
[  318.163719][T19847] bridge57: port 1(macvlan5) entered disabled state
[  318.171669][T19847] bond24: (slave gretap4): Releasing active interface
[  318.174979][T19847] gretap4: left allmulticast mode
[  318.180829][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  318.186305][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  318.190348][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  318.199237][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  318.231441][T19847] netlink: 'syz.1.4094': attribute type 10 has an invalid length.
[  318.236415][T19847] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  318.239882][T19847] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  318.935118][T19870] tipc: Enabling of bearer <et:g> rejected, media not registered
[  319.088568][T19885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4106'.
[  319.115582][T19890] pim6reg1: entered promiscuous mode
[  319.117802][T19890] pim6reg1: entered allmulticast mode
[  319.202477][T19890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4107'.
[  319.207839][T19890] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  319.212311][T19890] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  319.229935][T19890] bond25 (unregistering): Released all slaves
[  319.370766][T19907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4111'.
[  319.395856][T19912] netlink: 'syz.1.4112': attribute type 1 has an invalid length.
[  319.398772][T19912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4112'.
[  319.426892][T19915] netlink: 'syz.0.4113': attribute type 1 has an invalid length.
[  319.429754][T19915] netlink: 'syz.0.4113': attribute type 12 has an invalid length.
[  319.507286][T19920] sctp: [Deprecated]: syz.1.4116 (pid 19920) Use of struct sctp_assoc_value in delayed_ack socket option.
[  319.507286][T19920] Use struct sctp_sack_info instead
[  319.818177][T19932] bond19: entered promiscuous mode
[  319.820239][T19932] 8021q: adding VLAN 0 to HW filter on device bond19
[  319.827325][T19932] bond19 (unregistering): Released all slaves
[  319.842811][T19935] netlink: 'syz.1.4119': attribute type 4 has an invalid length.
[  319.849476][T13054] C speed is unknown, defaulting to 1000
[  319.852185][T13054] syz0: Port: 1 Link DOWN
[  319.855913][T13054] C speed is unknown, defaulting to 1000
[  319.975920][T19948] nbd: must specify an index to disconnect
[  320.033595][T19957] bridge32: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  320.091074][T19960] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  320.307563][T19965] netlink: 'syz.0.4130': attribute type 14 has an invalid length.
[  320.341538][T19968] net_ratelimit: 11 callbacks suppressed
[  320.341552][T19968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.589841][T19976] syz_tun (unregistering): left promiscuous mode
[  320.755864][T19979] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  320.759522][T19979] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.882734][T19985] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  320.886796][T19984] IPVS: stopping backup sync thread 19985 ...
[  320.899082][T19984] tap0: tun_chr_ioctl cmd 1074812118
[  321.041318][T20003] bridge86: left promiscuous mode
[  321.045951][T20003] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  321.209721][T20028] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  321.261338][T20030] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  321.346981][T20037] netlink: 'syz.2.4152': attribute type 4 has an invalid length.
[  321.353254][T13054] lo speed is unknown, defaulting to 1000
[  321.359029][T13054] syz1: Port: 1 Link ACTIVE
[  321.367726][T13054] lo speed is unknown, defaulting to 1000
[  321.371045][ T5886] lo speed is unknown, defaulting to 1000
[  321.373292][ T5886] syz1: Port: 1 Link DOWN
[  321.385711][T20037] lo speed is unknown, defaulting to 1000
[  321.405740][T20041] nbd: couldn't find device at index 536870912
[  321.452384][T20041] nbd: couldn't find device at index 536870912
[  321.501767][T20051] k*]: entered promiscuous mode
[  321.517124][T20037] C speed is unknown, defaulting to 1000
[  321.611847][T20060] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  321.672305][T20063] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3
[  321.772182][T20065] ip6tnl0: entered allmulticast mode
[  321.867535][T20064] ip6tnl0: left allmulticast mode
[  322.009897][T20090] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  322.017488][T20090] : renamed from bond_slave_0
[  322.513390][T20128] __nla_validate_parse: 26 callbacks suppressed
[  322.513402][T20128] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4177'.
[  322.522576][T20128] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4177'.
[  322.547091][T20130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4178'.
[  323.071982][T20149] validate_nla: 4 callbacks suppressed
[  323.071993][T20149] netlink: 'syz.2.4183': attribute type 21 has an invalid length.
[  323.204915][T20163] netlink: 576 bytes leftover after parsing attributes in process `syz.0.4186'.
[  323.305040][T20177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4189'.
[  323.375414][T20186] netlink: 'syz.0.4192': attribute type 11 has an invalid length.
[  323.558174][T20200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4198'.
[  323.780824][T20217] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.817603][T20217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4202'.
[  323.876777][T20223] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4206'.
[  323.882761][T20223] netlink: 'syz.2.4206': attribute type 1 has an invalid length.
[  323.899607][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4208'.
[  323.902468][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4208'.
[  323.994735][T20238] nbd: illegal input index 65508
[  324.502158][T20259] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  324.505801][T20261] syzkaller0: entered promiscuous mode
[  324.507883][T20261] syzkaller0: entered allmulticast mode
[  324.528443][T20261] tipc: Resetting bearer <eth:syzkaller0>
[  324.534788][T20261] tipc: Disabling bearer <eth:syzkaller0>
[  325.279184][T20276] netlink: 'syz.2.4222': attribute type 32 has an invalid length.
[  325.281899][T20276] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  325.300797][T20227] Set syz1 is full, maxelem 65536 reached
[  325.551764][T20305] bond0: default FDB implementation only supports local addresses
[  325.640443][T20315] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[  325.911167][T20340] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  325.915985][T20340] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  325.960181][T20340] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  325.965728][T20340] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  326.010903][T20340] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.015018][T20340] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  326.049523][T20340] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  326.053524][T20340] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  326.115359][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  326.118499][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  326.126480][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  326.129647][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  326.139921][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  326.143095][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  326.151145][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  326.154286][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  326.181200][T20362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  326.243638][T20372] lo speed is unknown, defaulting to 1000
[  326.387286][T20372] C speed is unknown, defaulting to 1000
[  326.469486][T20389] veth15: entered promiscuous mode
[  326.594498][T20398] netlink: 'syz.1.4258': attribute type 2 has an invalid length.
[  326.830360][T20412] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  326.847066][T20412] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  326.849908][T20412] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  327.476163][T20432] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  327.480875][T20432] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  327.570633][T20435] tipc: Failed to remove unknown binding: 66,1,1/4134412562:4006652990/4006652992
[  327.576008][T20435] tipc: Failed to remove unknown binding: 66,1,1/4134412562:4006652990/4006652992
[  327.581830][T20435] tipc: Failed to remove unknown binding: 66,1,1/4134412562:4006652990/4006652992
[  327.593834][T20435] __nla_validate_parse: 14 callbacks suppressed
[  327.593853][T20435] netlink: 788 bytes leftover after parsing attributes in process `syz.0.4270'.
[  327.901878][T20454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4277'.
[  328.175704][T20478] netlink: 'syz.0.4283': attribute type 1 has an invalid length.
[  328.178196][T20478] netlink: 'syz.0.4283': attribute type 3 has an invalid length.
[  328.180622][T20478] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4283'.
[  328.863424][T20489] lo speed is unknown, defaulting to 1000
[  328.901347][T20488] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4287'.
[  329.050176][T20489] C speed is unknown, defaulting to 1000
[  329.169519][T20504] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.323371][T20512] netlink: 'syz.1.4292': attribute type 1 has an invalid length.
[  329.340869][T20512] 8021q: adding VLAN 0 to HW filter on device bond25
[  329.385835][T20507] vlan1: entered allmulticast mode
[  329.391009][T20507] veth1: entered allmulticast mode
[  329.394081][T20507] bond25: (slave vlan1): Error -34 calling dev_set_mtu
[  329.523284][T20524] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4298'.
[  329.543795][T20524] netlink: 'syz.1.4298': attribute type 1 has an invalid length.
[  329.573524][T20524] veth29: entered promiscuous mode
[  329.579607][T20524] bond27: (slave veth29): Enslaving as a backup interface with a down link
[  329.590539][T20524] bond27: (slave veth29): Releasing backup interface
[  329.642899][T20532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4300'.
[  329.662836][T20536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4301'.
[  329.676302][T20536] netlink: 'syz.1.4301': attribute type 1 has an invalid length.
[  329.730531][T20541] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  329.744940][T20541] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4303'.
[  329.748646][T20541] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4303'.
[  329.879507][T20559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4307'.
[  329.889273][T20559] netlink: 'syz.1.4307': attribute type 11 has an invalid length.
[  330.187684][T20581] netlink: 'syz.2.4314': attribute type 1 has an invalid length.
[  330.213028][T20581] bond19: (slave geneve3): making interface the new active one
[  330.216336][T20581] bond19: (slave geneve3): Enslaving as an active interface with an up link
[  330.219562][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  330.223329][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  330.228953][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  330.232405][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  330.240962][T20581] 8021q: adding VLAN 0 to HW filter on device bond19
[  330.259056][T20586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.261845][T20581] syz.2.4314 (20581) used greatest stack depth: 17640 bytes left
[  331.362844][T20621] netlink: 'syz.1.4324': attribute type 7 has an invalid length.
[  331.395728][T20634] tap0: tun_chr_ioctl cmd 1074025677
[  331.397608][T20634] tap0: linktype set to 774
[  331.407440][T20626] bridge0: port 1(erspan0) entered blocking state
[  331.409434][T20626] bridge0: port 1(erspan0) entered disabled state
[  331.411808][T20626] erspan0: entered allmulticast mode
[  331.414686][T20626] erspan0: entered promiscuous mode
[  331.418270][T20626] erspan0: left allmulticast mode
[  331.420277][T20626] erspan0: left promiscuous mode
[  331.422357][T20626] bridge0: port 1(erspan0) entered disabled state
[  331.471513][T20639] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  331.475708][T20639] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.605398][T20654] netlink: 'syz.0.4333': attribute type 1 has an invalid length.
[  331.605401][T20653] netlink: 'syz.0.4333': attribute type 1 has an invalid length.
[  331.626069][T20650] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  331.628834][T20650] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  331.698714][T20661] openvswitch: netlink: Flow key attribute not present in set flow.
[  331.711116][T20665] openvswitch: netlink: Flow key attribute not present in set flow.
[  331.816270][T20673] netlink: 'syz.2.4339': attribute type 1 has an invalid length.
[  331.828788][T20673] 8021q: adding VLAN 0 to HW filter on device bond20
[  331.878831][T20681] bridge0: left allmulticast mode
[  332.125226][T20699] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  332.127502][T20699] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  332.130734][T20699] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  332.332913][T20711] lo speed is unknown, defaulting to 1000
[  332.539798][T20737] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  332.622829][T20750] gretap0: left promiscuous mode
[  332.628719][T20750] erspan0: left allmulticast mode
[  332.633182][T20750] ip6gretap0: entered promiscuous mode
[  332.637006][T20750] 8021q: adding VLAN 0 to HW filter on device bond0
[  332.641419][T20750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  332.648339][  T793] C speed is unknown, defaulting to 1000
[  332.650475][  T793] syz0: Port: 1 Link ACTIVE
[  332.654735][  T793] C speed is unknown, defaulting to 1000
[  332.686670][T20755] __nla_validate_parse: 16 callbacks suppressed
[  332.686736][T20755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4360'.
[  332.702252][T20754] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  332.705269][T20754] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  332.861022][T20771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4367'.
[  332.866480][T20771] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4367'.
[  332.878647][T20771] lo speed is unknown, defaulting to 1000
[  332.903058][T20775] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4368'.
[  332.955434][   T60] block nbd1: Possible stuck request ffff888020c30000: control (read@0,1024B). Runtime 240 seconds
[  332.959279][   T60] block nbd1: Possible stuck request ffff888020c30200: control (read@1024,1024B). Runtime 240 seconds
[  332.963328][   T60] block nbd1: Possible stuck request ffff888020c30400: control (read@2048,1024B). Runtime 240 seconds
[  332.967377][   T60] block nbd1: Possible stuck request ffff888020c30600: control (read@3072,1024B). Runtime 240 seconds
[  333.013372][T20771] C speed is unknown, defaulting to 1000
[  333.147830][T20791] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  333.423499][T20806] validate_nla: 4 callbacks suppressed
[  333.423516][T20806] netlink: 'syz.1.4378': attribute type 10 has an invalid length.
[  333.483276][T20813] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.489325][T20813] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  333.528115][T20813] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.531235][T20813] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  333.568499][T20813] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.576996][T20813] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  333.582726][T20818] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  333.629864][T20813] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  333.633336][T20813] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  333.682753][T20825] siw: device registration error -23
[  333.725428][ T7942] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  333.728252][ T7942] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  333.736237][ T7942] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  333.740154][ T7942] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  333.747821][ T7942] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  333.750438][ T7942] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  333.757182][ T7942] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  333.760246][ T7942] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  333.868340][T20849] tipc: Resetting bearer <ib:ip6gre0>
[  333.873577][T20849] netlink: 'syz.0.4392': attribute type 10 has an invalid length.
[  333.880712][T20849] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  333.886967][T20849] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  333.933195][T20856] netlink: 'syz.2.4394': attribute type 1 has an invalid length.
[  333.942503][T20856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4394'.
[  333.950353][T20856] bond21: (slave bridge35): making interface the new active one
[  333.952972][T20856] bond21: (slave bridge35): Enslaving as an active interface with an up link
[  333.973618][T20859] netlink: 360 bytes leftover after parsing attributes in process `syz.2.4395'.
[  334.028539][T20864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4397'.
[  334.031849][T20864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4397'.
[  334.035897][T20864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4397'.
[  334.038806][T20864] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4397'.
[  334.154954][T20871] netlink: 'syz.2.4400': attribute type 4 has an invalid length.
[  334.158658][ T5895] lo speed is unknown, defaulting to 1000
[  334.160902][ T5895] syz1: Port: 1 Link ACTIVE
[  334.162691][ T5895] lo speed is unknown, defaulting to 1000
[  334.424663][T20875] nbd2: detected capacity change from 0 to 127
[  334.428420][ T8508] block nbd2: Receive control failed (result -32)
[  334.430795][ T8510] block nbd2: Receive control failed (result -32)
[  334.453882][T20881] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  334.458666][T20881] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  334.538947][T20890] syzkaller1: entered promiscuous mode
[  334.541099][T20890] syzkaller1: entered allmulticast mode
[  334.631490][T20900] netlink: 'syz.1.4412': attribute type 1 has an invalid length.
[  334.650578][T20900] 8021q: adding VLAN 0 to HW filter on device bond28
[  334.753319][T20913] netlink: 'syz.1.4417': attribute type 30 has an invalid length.
[  334.763177][T20913] netlink: 'syz.1.4417': attribute type 30 has an invalid length.
[  334.763179][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  334.763199][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  334.772888][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  334.779605][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  334.784455][T20919] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  334.787856][T20919] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  334.792846][T20918] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  334.929013][T20924] batman_adv: batadv0: Adding interface: ip6gretap3
[  334.931913][T20924] batman_adv: batadv0: Interface activated: ip6gretap3
[  334.999685][T20928] netlink: 'syz.0.4422': attribute type 83 has an invalid length.
[  335.115048][T20937] lo speed is unknown, defaulting to 1000
[  335.234653][T20937] C speed is unknown, defaulting to 1000
[  335.680980][T20950] bridge0: port 1(erspan0) entered blocking state
[  335.683467][T20950] bridge0: port 1(erspan0) entered disabled state
[  335.686245][T20950] erspan0: entered allmulticast mode
[  335.689172][T20950] erspan0: entered promiscuous mode
[  335.695390][T20950] erspan0: left allmulticast mode
[  335.697345][T20950] erspan0: left promiscuous mode
[  335.699425][T20950] bridge0: port 1(erspan0) entered disabled state
[  336.423702][T20984] lo speed is unknown, defaulting to 1000
[  336.525921][T20984] C speed is unknown, defaulting to 1000
[  336.906770][T20992] netlink: 'syz.1.4440': attribute type 1 has an invalid length.
[  336.909404][T20992] NCSI netlink: No device for ifindex 813332851
[  336.939331][T20997] netlink: 'syz.1.4441': attribute type 21 has an invalid length.
[  337.287542][T21004] tipc: Resetting bearer <ib:ip6gre0>
[  337.290259][T21004] net_ratelimit: 1 callbacks suppressed
[  337.290264][T21004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  337.816396][T21008] __nla_validate_parse: 79 callbacks suppressed
[  337.816407][T21008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4446'.
[  338.091589][T21013] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  338.141338][T21037] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4454'.
[  338.149151][T21037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4454'.
[  338.169060][T21041] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4456'.
[  338.206229][T21046] gretap0: refused to change device tx_queue_len
[  338.208332][T21046] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  338.214272][T21048] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  338.267380][T21056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4462'.
[  338.406447][T21071] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.409887][T21071] syzkaller0: entered promiscuous mode
[  338.412102][T21071] syzkaller0: entered allmulticast mode
[  338.419912][T21071] tipc: Resetting bearer <eth:syzkaller0>
[  338.445670][T21071] tipc: Resetting bearer <eth:syzkaller0>
[  338.451373][T21071] tipc: Disabling bearer <eth:syzkaller0>
[  338.703242][T21092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4472'.
[  338.709129][T21092] ip6gretap0: left allmulticast mode
[  338.711560][T21092] ip6gretap0: left promiscuous mode
[  338.912810][T21098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4473'.
[  338.968291][T21099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4473'.
[  339.145369][T21101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4474'.
[  339.189339][T21103] validate_nla: 5 callbacks suppressed
[  339.189356][T21103] netlink: 'syz.0.4475': attribute type 1 has an invalid length.
[  339.207759][T21103] 8021q: adding VLAN 0 to HW filter on device bond25
[  339.218790][T21103] 8021q: adding VLAN 0 to HW filter on device bond25
[  339.221125][T21103] bond25: (slave vxcan3): The slave device specified does not support setting the MAC address
[  339.227604][T21103] bond25: (slave vxcan3): Error -95 calling set_mac_address
[  339.260444][T21110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4477'.
[  339.282789][T13664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.285973][T13664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.421312][T21128] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  339.672758][T21159] netlink: 'syz.2.4493': attribute type 9 has an invalid length.
[  339.740465][T21165] netlink: 'syz.2.4496': attribute type 3 has an invalid length.
[  339.832613][T21174] lo: entered allmulticast mode
[  339.890553][T21183] 8021q: adding VLAN 0 to HW filter on device bond22
[  339.902197][T21183] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  339.907941][T21183] bond22: (slave macvlan0): Enslaving as a backup interface with a down link
[  339.913441][T21183] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  339.919807][T21183] bond19: (slave geneve3): Releasing active interface
[  339.926060][T21183] bond21: (slave bridge35): Releasing active interface
[  339.930943][T21183] bond22: (slave macvlan0): Releasing backup interface
[  339.937895][ T5693] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  339.940807][ T5693] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  339.943721][ T5693] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  339.946818][ T5693] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  340.103792][T21198] netlink: 'syz.2.4507': attribute type 1 has an invalid length.
[  340.117842][T21198] 8021q: adding VLAN 0 to HW filter on device bond23
[  340.335728][T21206] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  340.756627][T21221] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  340.760065][T13664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.763612][T13664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.771716][T21221] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  340.778002][T21221] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  340.781773][T21221] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  342.183224][T21267] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  342.218484][T21262] netlink: 'syz.2.4523': attribute type 11 has an invalid length.
[  342.224802][T21263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  342.242504][T21278] netlink: 'syz.0.4528': attribute type 2 has an invalid length.
[  342.291558][T21285] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  342.383185][T21304] netlink: 'syz.0.4536': attribute type 12 has an invalid length.
[  342.427803][T21304] netlink: 'syz.0.4536': attribute type 12 has an invalid length.
[  342.455313][T21304] netlink: 'syz.0.4536': attribute type 12 has an invalid length.
[  342.491317][T21304] netlink: 'syz.0.4536': attribute type 12 has an invalid length.
[  342.546860][T21304] netlink: 'syz.0.4536': attribute type 12 has an invalid length.
[  342.827695][T21304] __nla_validate_parse: 25 callbacks suppressed
[  342.827747][T21304] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4536'.
[  342.868511][T21304] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4536'.
[  342.895932][T21304] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4536'.
[  342.925527][T21304] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4536'.
[  342.956185][T21304] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4536'.
[  342.985326][T21304] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4536'.
[  343.016627][T21304] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4536'.
[  343.045905][T21304] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4536'.
[  343.076205][T21304] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4536'.
[  343.107495][T21304] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.4536'.
[  343.151433][T21315] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  343.259604][T21321] syzkaller1: entered promiscuous mode
[  343.266081][T21321] syzkaller1: entered allmulticast mode
[  343.541057][T21352] openvswitch: netlink: Flow actions attr not present in new flow.
[  344.202953][T21382] lo speed is unknown, defaulting to 1000
[  344.294913][T21382] C speed is unknown, defaulting to 1000
[  344.359815][T21381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.713340][T21402] lo speed is unknown, defaulting to 1000
[  344.756195][T21403] bridge0: port 1(erspan0) entered blocking state
[  344.758490][T21403] bridge0: port 1(erspan0) entered disabled state
[  344.760729][T21403] erspan0: entered allmulticast mode
[  344.763151][T21403] erspan0: entered promiscuous mode
[  344.768489][T21403] erspan0: left allmulticast mode
[  344.770472][T21403] erspan0: left promiscuous mode
[  344.772472][T21403] bridge0: port 1(erspan0) entered disabled state
[  344.838521][T21402] C speed is unknown, defaulting to 1000
[  345.138408][T21415] smc: removing ib device syz2
[  345.269784][T21419] syzkaller0: entered promiscuous mode
[  345.272229][T21419] syzkaller0: entered allmulticast mode
[  345.550753][T21434] tipc: Resetting bearer <eth:syzkaller0>
[  345.578920][T21440] validate_nla: 22 callbacks suppressed
[  345.578932][T21440] netlink: 'syz.2.4573': attribute type 1 has an invalid length.
[  345.660598][T21440] veth17: entered promiscuous mode
[  345.663791][T21440] bond24: (slave veth17): Enslaving as a backup interface with a down link
[  345.740932][T21457] netlink: 'syz.1.4577': attribute type 13 has an invalid length.
[  345.844423][T21457] ip6gretap0: left allmulticast mode
[  345.848277][T21457] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  345.870508][T21457] veth1_vlan: left allmulticast mode
[  345.902953][ T6366] C speed is unknown, defaulting to 1000
[  345.905390][ T6366] syz0: Port: 1 Link DOWN
[  345.907203][ T6366] C speed is unknown, defaulting to 1000
[  345.914192][T21465] bridge88: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  345.918402][ T7942] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.922559][ T7942] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0
[  345.925641][ T7942] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.928783][ T7942] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0
[  345.931967][T21468] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  345.937960][ T7942] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.941652][ T7942] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0
[  345.949881][ T7942] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.953355][ T7942] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0
[  345.993240][T21470] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  345.998540][T21470] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  346.803291][T21491] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  346.807825][T21491] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  346.904571][T21496] netlink: 'syz.2.4591': attribute type 1 has an invalid length.
[  346.930865][T21496] bond25: (slave bridge37): making interface the new active one
[  346.933588][T21496] bond25: (slave bridge37): Enslaving as an active interface with an up link
[  347.056807][T21505] Unsupported ieee802154 address type: 0
[  347.059193][T21506] Unsupported ieee802154 address type: 0
[  347.891093][T21561] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20000
[  347.898647][T21561] IPVS: set_ctl: invalid protocol: 47 172.20.20.26:20004
[  348.098548][T21579] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.102729][T21579] __nla_validate_parse: 31 callbacks suppressed
[  348.102739][T21579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4618'.
[  348.256372][T21590] lo speed is unknown, defaulting to 1000
[  348.296651][T21590] C speed is unknown, defaulting to 1000
[  348.466717][T21595] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4622'.
[  348.663820][T21604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4626'.
[  348.700593][T21604] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4626'.
[  348.802500][T21613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4627'.
[  348.806675][T21613] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4627'.
[  348.806737][T21614] netlink: 'syz.2.4627': attribute type 1 has an invalid length.
[  348.822007][T21615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4627'.
[  348.826254][T21613] 8021q: adding VLAN 0 to HW filter on device bond26
[  349.127744][T21637] lo speed is unknown, defaulting to 1000
[  349.193168][T21637] C speed is unknown, defaulting to 1000
[  349.260819][T21645] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  349.297313][T21641] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4634'.
[  349.496605][T21658] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4638'.
[  349.581101][T21666] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4639'.
[  349.751214][T21692] netlink: 'syz.0.4647': attribute type 26 has an invalid length.
[  349.782314][T21697] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  349.880326][T21715] IPVS: length: 163 != 8
[  349.893076][T21715] vlan0: entered allmulticast mode
[  349.894998][T21715] bond0: entered allmulticast mode
[  350.688121][T21735] netlink: 'syz.1.4660': attribute type 1 has an invalid length.
[  350.692465][T21735] netlink: 'syz.1.4660': attribute type 1 has an invalid length.
[  350.733543][T21735] bond30: (slave geneve6): making interface the new active one
[  350.739006][T21735] bond30: (slave geneve6): Enslaving as an active interface with an up link
[  350.742826][T12418] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  350.749082][T12418] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  350.753765][T12418] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  350.759188][T12418] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  350.797852][T21741] siw: device registration error -23
[  350.833428][T21745] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  350.895321][T21748] nbd: couldn't find a device at index 0
[  351.362450][T21778] syzkaller0: entered promiscuous mode
[  351.364957][T21778] syzkaller0: entered allmulticast mode
[  351.376535][T21778] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  352.186682][T21779] tipc: Resetting bearer <eth:syzkaller0>
[  352.196658][T21779] tipc: Disabling bearer <eth:syzkaller0>
[  352.471963][T21840] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  352.477991][T21840] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  352.929836][T21880] lo speed is unknown, defaulting to 1000
[  353.008677][T21880] C speed is unknown, defaulting to 1000
[  353.132488][T21896] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  353.139604][T21897] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  353.326378][T21908] __nla_validate_parse: 24 callbacks suppressed
[  353.326390][T21908] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4710'.
[  353.552965][T21916] bond30: (slave geneve6): Releasing active interface
[  353.558666][T21916] netlink: 'syz.1.4712': attribute type 9 has an invalid length.
[  353.559005][T21921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4713'.
[  353.562002][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  353.570877][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  353.635730][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  353.639055][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  353.725261][T21932] netlink: 'syz.2.4716': attribute type 1 has an invalid length.
[  353.743052][T21936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4718'.
[  353.748726][T21936] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  353.766989][T21938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4719'.
[  353.790865][T21942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4721'.
[  353.859418][T21950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4725'.
[  353.863612][T21950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4725'.
[  353.870022][T21950] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4725'.
[  354.333426][T21957] netlink: 'syz.0.4727': attribute type 4 has an invalid length.
[  354.398163][T21964] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  354.405872][T21964] syzkaller0: entered promiscuous mode
[  354.411192][T21964] syzkaller0: entered allmulticast mode
[  354.415682][T21964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4729'.
[  354.421212][T21964] tipc: Resetting bearer <eth:syzkaller0>
[  354.423761][T21963] tipc: Resetting bearer <eth:syzkaller0>
[  354.427234][T21963] tipc: Disabling bearer <eth:syzkaller0>
[  354.691379][T21974] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4734'.
[  354.878276][T21997] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  355.017450][T22011] syzkaller1: entered promiscuous mode
[  355.019668][T22011] syzkaller1: entered allmulticast mode
[  355.312018][T22025] lo speed is unknown, defaulting to 1000
[  355.363188][T22025] C speed is unknown, defaulting to 1000
[  355.619478][T22031] lo speed is unknown, defaulting to 1000
[  355.688688][T22042] netlink: 'syz.2.4753': attribute type 11 has an invalid length.
[  355.689205][T22031] C speed is unknown, defaulting to 1000
[  355.832942][T22049] netlink: 'syz.1.4755': attribute type 13 has an invalid length.
[  355.838356][T22051] syzkaller1: entered promiscuous mode
[  355.840907][T22051] syzkaller1: entered allmulticast mode
[  355.852156][T22049] bridge90: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  355.968678][T22063] macsec0: entered promiscuous mode
[  355.970506][T22063] macsec0: entered allmulticast mode
[  355.972260][T22063] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  356.213858][T22091] netlink: 'syz.1.4769': attribute type 1 has an invalid length.
[  356.231521][T22091] netlink: 'syz.1.4769': attribute type 30 has an invalid length.
[  356.257555][ T5693] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  356.263500][ T5693] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  356.266323][ T5693] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  356.268914][ T5693] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  356.283735][T22093] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  356.286179][T22093] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  356.290174][T22096] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.293011][T22093] tipc: Resetting bearer <eth:syzkaller0>
[  356.296014][T22096] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.299088][T22096] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.305768][T22096] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.310703][T22096] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.313880][T22096] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.316682][T22096] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.327941][T22096] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.331483][T22099] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.337010][T22096] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  356.340023][T22099] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  356.342716][T22099] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  356.349598][T22100] tipc: Disabling bearer <eth:syzkaller0>
[  356.357320][T22099] batadv1: entered promiscuous mode
[  356.359558][T22099] batadv1: entered allmulticast mode
[  356.421313][T22105] pim6reg1: entered promiscuous mode
[  356.423273][T22105] pim6reg1: entered allmulticast mode
[  356.567292][T22115] vlan1: entered promiscuous mode
[  356.646922][T22130] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  356.650705][T22130] tipc: Failed to remove unknown binding: 66,1,1/4257297992:1803434263/1803434265
[  356.663586][T22130] tipc: Failed to remove unknown binding: 66,1,1/4257297992:1803434263/1803434265
[  356.668002][T22130] tipc: Failed to remove unknown binding: 66,1,1/4257297992:1803434263/1803434265
[  357.570821][T22161] netlink: 'syz.2.4792': attribute type 1 has an invalid length.
[  357.575570][T22161] netlink: 'syz.2.4792': attribute type 2 has an invalid length.
[  358.392980][T22174] netlink: 'syz.1.4795': attribute type 9 has an invalid length.
[  358.397453][T22174] __nla_validate_parse: 25 callbacks suppressed
[  358.397513][T22174] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.4795'.
[  358.561313][T22188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4799'.
[  358.677920][T22194] pim6reg1: entered promiscuous mode
[  358.679734][T22194] pim6reg1: entered allmulticast mode
[  358.770457][T22195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4801'.
[  358.775127][T22195] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  358.778017][T22195] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  359.455374][T22219] netem: change failed
[  359.503731][T22228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4809'.
[  359.509261][T22228] macvlan1: entered promiscuous mode
[  359.511768][T22228] macvlan1: left promiscuous mode
[  359.733585][T22241] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4813'.
[  359.756206][T22243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4814'.
[  359.800206][T22245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4815'.
[  359.802917][T22245] netlink: 'syz.1.4815': attribute type 30 has an invalid length.
[  359.809219][T22245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4815'.
[  359.811859][T22245] netlink: 'syz.1.4815': attribute type 30 has an invalid length.
[  359.856008][T22247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4816'.
[  359.938732][T22250] netlink: 'syz.1.4817': attribute type 10 has an invalid length.
[  359.941446][T22250] netlink: 'syz.1.4817': attribute type 10 has an invalid length.
[  359.945477][T22250] !: entered promiscuous mode
[  359.947548][T22250] bond0: (slave 0!): Enslaving as an active interface with an up link
[  360.502175][T22252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4818'.
[  360.670142][T22263] batadv0: left promiscuous mode
[  360.672863][T22263] veth1_virt_wifi: left promiscuous mode
[  360.677318][T22263] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  360.680132][T22263] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  360.682605][T22263] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  360.687856][T22263] veth3: left promiscuous mode
[  360.689770][T22263] bond8: left promiscuous mode
[  360.691631][T22263] bond8: left allmulticast mode
[  360.695015][T22263] vlan1: left allmulticast mode
[  360.697606][T22263] veth0_to_hsr: left allmulticast mode
[  360.700662][T22263] veth9: left promiscuous mode
[  360.703363][T22263] vlan0: left promiscuous mode
[  360.705729][T22263] bond0: left promiscuous mode
[  360.707736][T22263] vlan0: left allmulticast mode
[  360.710795][T22263] veth13: left promiscuous mode
[  360.712869][T22263] ip6tnl7: left promiscuous mode
[  360.715118][T22263] ip6tnl7: left allmulticast mode
[  360.748613][T22263] veth17: left promiscuous mode
[  360.759606][ T5886] lo speed is unknown, defaulting to 1000
[  360.761370][ T5886] syz1: Port: 1 Link DOWN
[  360.762731][ T5886] lo speed is unknown, defaulting to 1000
[  360.935378][T22288] lo speed is unknown, defaulting to 1000
[  360.961262][T22290] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  360.970299][T22290] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  360.973246][T22290] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  361.008306][T22288] C speed is unknown, defaulting to 1000
[  361.095664][T22300] netlink: 'syz.1.4835': attribute type 1 has an invalid length.
[  361.215620][T22311] netlink: 'syz.1.4838': attribute type 1 has an invalid length.
[  363.044552][   T60] block nbd1: Possible stuck request ffff888020c30000: control (read@0,1024B). Runtime 270 seconds
[  363.048247][   T60] block nbd1: Possible stuck request ffff888020c30200: control (read@1024,1024B). Runtime 270 seconds
[  363.051663][   T60] block nbd1: Possible stuck request ffff888020c30400: control (read@2048,1024B). Runtime 270 seconds
[  363.055315][   T60] block nbd1: Possible stuck request ffff888020c30600: control (read@3072,1024B). Runtime 270 seconds
[  384.634271][T13054] page_pool_release_retry() stalled pool shutdown: id 65, 1 inflight 60 sec
[  393.124523][   T60] block nbd1: Possible stuck request ffff888020c30000: control (read@0,1024B). Runtime 300 seconds
[  393.128188][   T60] block nbd1: Possible stuck request ffff888020c30200: control (read@1024,1024B). Runtime 300 seconds
[  393.132346][   T60] block nbd1: Possible stuck request ffff888020c30400: control (read@2048,1024B). Runtime 300 seconds
[  393.136089][   T60] block nbd1: Possible stuck request ffff888020c30600: control (read@3072,1024B). Runtime 300 seconds
[  423.214145][   T60] block nbd1: Possible stuck request ffff888020c30000: control (read@0,1024B). Runtime 330 seconds
[  423.218303][   T60] block nbd1: Possible stuck request ffff888020c30200: control (read@1024,1024B). Runtime 330 seconds
[  423.222487][   T60] block nbd1: Possible stuck request ffff888020c30400: control (read@2048,1024B). Runtime 330 seconds
[  423.226995][   T60] block nbd1: Possible stuck request ffff888020c30600: control (read@3072,1024B). Runtime 330 seconds
[  453.274311][  T127] block nbd1: Possible stuck request ffff888020c30000: control (read@0,1024B). Runtime 360 seconds
[  453.278195][  T127] block nbd1: Possible stuck request ffff888020c30200: control (read@1024,1024B). Runtime 360 seconds
[  453.282138][  T127] block nbd1: Possible stuck request ffff888020c30400: control (read@2048,1024B). Runtime 360 seconds
[  453.286259][  T127] block nbd1: Possible stuck request ffff888020c30600: control (read@3072,1024B). Runtime 360 seconds
[  483.355635][  T127] block nbd1: Possible stuck request ffff888020c30000: control (read@0,1024B). Runtime 390 seconds
[  483.359722][  T127] block nbd1: Possible stuck request ffff888020c30200: control (read@1024,1024B). Runtime 390 seconds
[  483.364151][  T127] block nbd1: Possible stuck request ffff888020c30400: control (read@2048,1024B). Runtime 390 seconds
[  483.368376][  T127] block nbd1: Possible stuck request ffff888020c30600: control (read@3072,1024B). Runtime 390 seconds
[  511.514180][   T34] INFO: task kworker/0:4:5895 blocked for more than 143 seconds.
[  511.516736][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
[  511.518501][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  511.522265][   T34] task:kworker/0:4     state:D stack:21904 pid:5895  tgid:5895  ppid:2      task_flags:0x4208060 flags:0x00004000
[  511.526560][   T34] Workqueue: events rfkill_sync_work
[  511.528237][   T34] Call Trace:
[  511.529346][   T34]  <TASK>
[  511.530351][   T34]  __schedule+0x1798/0x4cc0
[  511.531836][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  511.533899][   T34]  ? __pfx___schedule+0x10/0x10
[  511.536453][   T34]  ? preempt_schedule+0xae/0xc0
[  511.538213][   T34]  ? lock_release+0x4b/0x3e0
[  511.539739][   T34]  schedule+0x165/0x360
[  511.541109][   T34]  schedule_preempt_disabled+0x13/0x30
[  511.542883][   T34]  __mutex_lock+0x7e6/0x1350
[  511.555913][   T34]  ? __mutex_lock+0x5bb/0x1350
[  511.557445][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  511.559096][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  511.560674][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  511.562502][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  511.565683][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  511.567672][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  511.569542][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  511.571416][   T34]  rfkill_set_block+0x1d2/0x440
[  511.573040][   T34]  rfkill_sync_work+0x114/0x200
[  511.574793][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  511.576696][   T34]  process_scheduled_works+0xae1/0x17b0
[  511.578485][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  511.580988][   T34]  worker_thread+0x8a0/0xda0
[  511.582862][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  511.586667][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  511.589052][   T34]  ? __kthread_parkme+0x7b/0x200
[  511.591019][   T34]  kthread+0x711/0x8a0
[  511.592643][   T34]  ? __pfx_worker_thread+0x10/0x10
[  511.595083][   T34]  ? __pfx_kthread+0x10/0x10
[  511.597200][   T34]  ? rcu_is_watching+0x15/0xb0
[  511.598665][   T34]  ? __pfx_kthread+0x10/0x10
[  511.600146][   T34]  ret_from_fork+0x3fc/0x770
[  511.601638][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  511.603252][   T34]  ? __switch_to_asm+0x39/0x70
[  511.605590][   T34]  ? __switch_to_asm+0x33/0x70
[  511.607269][   T34]  ? __pfx_kthread+0x10/0x10
[  511.608745][   T34]  ret_from_fork_asm+0x1a/0x30
[  511.610258][   T34]  </TASK>
[  511.611366][   T34] INFO: task kworker/0:6:6366 blocked for more than 143 seconds.
[  511.613888][   T34]       Not tainted syzkaller #0
[  511.615559][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  511.618411][   T34] task:kworker/0:6     state:D stack:21736 pid:6366  tgid:6366  ppid:2      task_flags:0x4208060 flags:0x00004000
[  511.622559][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  511.625909][   T34] Call Trace:
[  511.627141][   T34]  <TASK>
[  511.628024][   T34]  __schedule+0x1798/0x4cc0
[  511.629606][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  511.631574][   T34]  ? __pfx___schedule+0x10/0x10
[  511.633253][   T34]  ? lock_release+0x4b/0x3e0
[  511.634832][   T34]  ? rcu_is_watching+0x15/0xb0
[  511.636354][   T34]  schedule+0x165/0x360
[  511.637678][   T34]  schedule_preempt_disabled+0x13/0x30
[  511.639374][   T34]  __mutex_lock+0x7e6/0x1350
[  511.640808][   T34]  ? __mutex_lock+0x5bb/0x1350
[  511.642467][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  511.645591][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  511.647430][   T34]  ? lock_acquire+0x5f/0x360
[  511.648950][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  511.650828][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  511.652810][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  511.654843][   T34]  process_scheduled_works+0xae1/0x17b0
[  511.657064][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  511.659445][   T34]  worker_thread+0x8a0/0xda0
[  511.661211][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  511.663219][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  511.665856][   T34]  ? __kthread_parkme+0x7b/0x200
[  511.667437][   T34]  kthread+0x711/0x8a0
[  511.669056][   T34]  ? __pfx_worker_thread+0x10/0x10
[  511.671120][   T34]  ? __pfx_kthread+0x10/0x10
[  511.672667][   T34]  ? rcu_is_watching+0x15/0xb0
[  511.674385][   T34]  ? __pfx_kthread+0x10/0x10
[  511.675946][   T34]  ret_from_fork+0x3fc/0x770
[  511.677532][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  511.679157][   T34]  ? __switch_to_asm+0x39/0x70
[  511.680796][   T34]  ? __switch_to_asm+0x33/0x70
[  511.682356][   T34]  ? __pfx_kthread+0x10/0x10
[  511.685123][   T34]  ret_from_fork_asm+0x1a/0x30
[  511.686812][   T34]  </TASK>
[  511.687847][   T34] INFO: task syz.0.4788:22146 blocked for more than 143 seconds.
[  511.690287][   T34]       Not tainted syzkaller #0
[  511.691964][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  511.694704][   T34] task:syz.0.4788      state:D stack:27048 pid:22146 tgid:22146 ppid:5853   task_flags:0x400040 flags:0x00004004
[  511.698850][   T34] Call Trace:
[  511.699917][   T34]  <TASK>
[  511.700906][   T34]  __schedule+0x1798/0x4cc0
[  511.702342][   T34]  ? kernel_text_address+0xa5/0xe0
[  511.704288][   T34]  ? __kernel_text_address+0xd/0x40
[  511.705923][   T34]  ? unwind_get_return_address+0x4d/0x90
[  511.707663][   T34]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  511.709571][   T34]  ? __pfx___schedule+0x10/0x10
[  511.711232][   T34]  ? schedule+0x91/0x360
[  511.712611][   T34]  ? rcu_is_watching+0x15/0xb0
[  511.715088][   T34]  ? lock_release+0x4b/0x3e0
[  511.716556][   T34]  schedule+0x165/0x360
[  511.717852][   T34]  schedule_timeout+0x9a/0x270
[  511.719353][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  511.721063][   T34]  ? rcu_is_watching+0x15/0xb0
[  511.722561][   T34]  ? rcu_is_watching+0x15/0xb0
[  511.724126][   T34]  ? wait_for_completion+0x267/0x5d0
[  511.725791][   T34]  wait_for_completion+0x2bf/0x5d0
[  511.727449][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  511.729184][   T34]  ? lock_release+0x4b/0x3e0
[  511.730627][   T34]  ? rcu_is_watching+0x15/0xb0
[  511.732328][   T34]  ? __flush_work+0xd2/0xbc0
[  511.733792][   T34]  __flush_work+0x9b9/0xbc0
[  511.735467][   T34]  ? __flush_work+0xd2/0xbc0
[  511.737151][   T34]  ? __pfx___flush_work+0x10/0x10
[  511.738842][   T34]  ? __mutex_lock+0x335/0x1350
[  511.740462][   T34]  ? __pfx_wq_barrier_func+0x10/0x10
[  511.742391][   T34]  ? __pfx___cancel_work+0x10/0x10
[  511.744280][   T34]  ? nfc_genl_device_removed+0x23c/0x330
[  511.746100][   T34]  __cancel_work_sync+0xbe/0x110
[  511.747968][   T34]  rfkill_unregister+0x92/0x220
[  511.749581][   T34]  nfc_unregister_device+0x96/0x2a0
[  511.751347][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  511.753325][   T34]  virtual_ncidev_close+0x56/0x90
[  511.755188][   T34]  __fput+0x44c/0xa70
[  511.756698][   T34]  task_work_run+0x1d4/0x260
[  511.758313][   T34]  ? __pfx_task_work_run+0x10/0x10
[  511.759966][   T34]  ? __pfx___se_sys_close_range+0x10/0x10
[  511.761830][   T34]  ? rcu_is_watching+0x15/0xb0
[  511.763357][   T34]  exit_to_user_mode_loop+0xec/0x110
[  511.765156][   T34]  do_syscall_64+0x2bd/0x3b0
[  511.766772][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.768845][   T34]  ? exc_page_fault+0x9f/0xf0
[  511.770420][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.772425][   T34] RIP: 0033:0x7f130a98ebe9
[  511.773877][   T34] RSP: 002b:00007ffff4385de8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  511.776853][   T34] RAX: 0000000000000000 RBX: 0000000000057400 RCX: 00007f130a98ebe9
[  511.779387][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  511.781955][   T34] RBP: 00007f130abb7da0 R08: 0000000000000001 R09: 0000001ef43860df
[  511.784695][   T34] R10: 0000001b31120000 R11: 0000000000000246 R12: 00007f130abb5fac
[  511.787414][   T34] R13: 00007f130abb5fa0 R14: ffffffffffffffff R15: 00007ffff4385f00
[  511.789959][   T34]  </TASK>
[  511.790986][   T34] INFO: task syz.2.4837:22304 blocked for more than 143 seconds.
[  511.793500][   T34]       Not tainted syzkaller #0
[  511.795245][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  511.798533][   T34] task:syz.2.4837      state:D stack:25192 pid:22304 tgid:22303 ppid:5848   task_flags:0x400140 flags:0x00004004
[  511.803162][   T34] Call Trace:
[  511.804803][   T34]  <TASK>
[  511.805997][   T34]  __schedule+0x1798/0x4cc0
[  511.807858][   T34]  ? __pfx___schedule+0x10/0x10
[  511.809800][   T34]  ? schedule+0x91/0x360
[  511.811505][   T34]  ? rcu_is_watching+0x15/0xb0
[  511.813364][   T34]  ? lock_release+0x4b/0x3e0
[  511.815121][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  511.817041][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  511.819073][   T34]  schedule+0x165/0x360
[  511.820383][   T34]  schedule_preempt_disabled+0x13/0x30
[  511.822107][   T34]  __mutex_lock+0x7e6/0x1350
[  511.823521][   T34]  ? __mutex_lock+0x5bb/0x1350
[  511.825204][   T34]  ? rfkill_register+0x37/0x8e0
[  511.827152][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  511.829187][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  511.831340][   T34]  ? device_initialize+0x24b/0x440
[  511.833363][   T34]  rfkill_register+0x37/0x8e0
[  511.835558][   T34]  nfc_register_device+0x14a/0x320
[  511.837478][   T34]  nci_register_device+0x87f/0x9d0
[  511.839476][   T34]  ? __pfx_nci_register_device+0x10/0x10
[  511.841699][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  511.843727][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  511.845924][   T34]  virtual_ncidev_open+0x129/0x1a0
[  511.847915][   T34]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  511.850027][   T34]  misc_open+0x2bc/0x330
[  511.851648][   T34]  chrdev_open+0x4cc/0x5e0
[  511.853342][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  511.855395][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  511.857882][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  511.859800][   T34]  do_dentry_open+0x953/0x13f0
[  511.861722][   T34]  vfs_open+0x3b/0x340
[  511.863359][   T34]  ? path_openat+0x2ecd/0x3830
[  511.865586][   T34]  path_openat+0x2ee5/0x3830
[  511.867459][   T34]  ? arch_stack_walk+0xfc/0x150
[  511.869398][   T34]  ? stack_depot_save_flags+0x40/0x860
[  511.871545][   T34]  ? __pfx_path_openat+0x10/0x10
[  511.873502][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.876075][   T34]  do_filp_open+0x1fa/0x410
[  511.877912][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  511.879942][   T34]  ? _raw_spin_unlock+0x28/0x50
[  511.881878][   T34]  ? alloc_fd+0x64c/0x6c0
[  511.883604][   T34]  do_sys_openat2+0x121/0x1c0
[  511.885573][   T34]  ? __se_sys_futex+0x36f/0x400
[  511.887544][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  511.889615][   T34]  ? rcu_is_watching+0x15/0xb0
[  511.891541][   T34]  __x64_sys_openat+0x138/0x170
[  511.893491][   T34]  do_syscall_64+0xfa/0x3b0
[  511.895683][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.898088][   T34]  ? exc_page_fault+0x9f/0xf0
[  511.899955][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.902317][   T34] RIP: 0033:0x7f9bb198ebe9
[  511.904165][   T34] RSP: 002b:00007f9bb27a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  511.907413][   T34] RAX: ffffffffffffffda RBX: 00007f9bb1bb5fa0 RCX: 00007f9bb198ebe9
[  511.910510][   T34] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  511.913591][   T34] RBP: 00007f9bb1a11e19 R08: 0000000000000000 R09: 0000000000000000
[  511.916948][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  511.920049][   T34] R13: 00007f9bb1bb6038 R14: 00007f9bb1bb5fa0 R15: 00007fffaf8e2058
[  511.923216][   T34]  </TASK>
[  511.924846][   T34] INFO: task syz.1.4838:22308 blocked for more than 143 seconds.
[  511.928012][   T34]       Not tainted syzkaller #0
[  511.930063][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  511.933525][   T34] task:syz.1.4838      state:D stack:27368 pid:22308 tgid:22307 ppid:5844   task_flags:0x400040 flags:0x00004004
[  511.938518][   T34] Call Trace:
[  511.939929][   T34]  <TASK>
[  511.941112][   T34]  __schedule+0x1798/0x4cc0
[  511.943015][   T34]  ? kasan_save_free_info+0x46/0x50
[  511.945473][   T34]  ? tomoyo_check_open_permission+0x2c2/0x3b0
[  511.948047][   T34]  ? vfs_open+0x3b/0x340
[  511.949827][   T34]  ? path_openat+0x2ee5/0x3830
[  511.951864][   T34]  ? do_sys_openat2+0x121/0x1c0
[  511.954040][   T34]  ? __x64_sys_openat+0x138/0x170
[  511.956110][   T34]  ? do_syscall_64+0xfa/0x3b0
[  511.958005][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.960520][   T34]  ? __pfx___schedule+0x10/0x10
[  511.962469][   T34]  ? schedule+0x91/0x360
[  511.964538][   T34]  ? rcu_is_watching+0x15/0xb0
[  511.966339][   T34]  ? lock_release+0x4b/0x3e0
[  511.968187][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  511.970534][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  511.972968][   T34]  schedule+0x165/0x360
[  511.974578][   T34]  schedule_preempt_disabled+0x13/0x30
[  511.976252][   T34]  __mutex_lock+0x7e6/0x1350
[  511.978077][   T34]  ? __mutex_lock+0x5bb/0x1350
[  511.979988][   T34]  ? misc_open+0x51/0x330
[  511.981718][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  511.983527][   T34]  misc_open+0x51/0x330
[  511.984857][   T34]  chrdev_open+0x4cc/0x5e0
[  511.986524][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  511.988517][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  511.991037][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  511.993049][   T34]  do_dentry_open+0x953/0x13f0
[  511.995326][   T34]  vfs_open+0x3b/0x340
[  511.996971][   T34]  ? path_openat+0x2ecd/0x3830
[  511.998889][   T34]  path_openat+0x2ee5/0x3830
[  512.000780][   T34]  ? arch_stack_walk+0xfc/0x150
[  512.002946][   T34]  ? stack_depot_save_flags+0x40/0x860
[  512.005325][   T34]  ? __pfx_path_openat+0x10/0x10
[  512.007459][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.010036][   T34]  do_filp_open+0x1fa/0x410
[  512.011979][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  512.014152][   T34]  ? _raw_spin_unlock+0x28/0x50
[  512.016302][   T34]  ? alloc_fd+0x64c/0x6c0
[  512.018150][   T34]  do_sys_openat2+0x121/0x1c0
[  512.020148][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  512.022392][   T34]  ? lock_release+0x4b/0x3e0
[  512.024588][   T34]  ? do_user_addr_fault+0xc8a/0x1390
[  512.026787][   T34]  __x64_sys_openat+0x138/0x170
[  512.028812][   T34]  do_syscall_64+0xfa/0x3b0
[  512.030780][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.033368][   T34]  ? exc_page_fault+0x9f/0xf0
[  512.035497][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.038001][   T34] RIP: 0033:0x7f2358d8ebe9
[  512.039843][   T34] RSP: 002b:00007f2359b37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  512.043311][   T34] RAX: ffffffffffffffda RBX: 00007f2358fb5fa0 RCX: 00007f2358d8ebe9
[  512.046737][   T34] RDX: 0000000000040241 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  512.050075][   T34] RBP: 00007f2358e11e19 R08: 0000000000000000 R09: 0000000000000000
[  512.053405][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  512.057078][   T34] R13: 00007f2358fb6038 R14: 00007f2358fb5fa0 R15: 00007ffc6aafb1d8
[  512.060452][   T34]  </TASK>
[  512.061758][   T34] INFO: lockdep is turned off.
[  512.063751][   T34] NMI backtrace for cpu 0
[  512.063765][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  512.063780][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  512.063789][   T34] Call Trace:
[  512.063796][   T34]  <TASK>
[  512.063802][   T34]  dump_stack_lvl+0x189/0x250
[  512.063824][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  512.063845][   T34]  ? __pfx__printk+0x10/0x10
[  512.063867][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  512.063885][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  512.063901][   T34]  ? __pfx__printk+0x10/0x10
[  512.063937][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  512.063960][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  512.063977][   T34]  watchdog+0xf93/0xfe0
[  512.063997][   T34]  ? watchdog+0x1de/0xfe0
[  512.064017][   T34]  kthread+0x711/0x8a0
[  512.064034][   T34]  ? __pfx_watchdog+0x10/0x10
[  512.064051][   T34]  ? __pfx_kthread+0x10/0x10
[  512.064067][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  512.064085][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  512.064103][   T34]  ? __pfx_kthread+0x10/0x10
[  512.064118][   T34]  ret_from_fork+0x3fc/0x770
[  512.064133][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  512.064154][   T34]  ? __switch_to_asm+0x39/0x70
[  512.064170][   T34]  ? __switch_to_asm+0x33/0x70
[  512.064186][   T34]  ? __pfx_kthread+0x10/0x10
[  512.064201][   T34]  ret_from_fork_asm+0x1a/0x30
[  512.064223][   T34]  </TASK>
[  512.122653][   T34] Sending NMI from CPU 0 to CPUs 1:
[  512.125073][    C1] NMI backtrace for cpu 1
[  512.125085][    C1] CPU: 1 UID: 0 PID: 11631 Comm: kworker/u10:65 Not tainted syzkaller #0 PREEMPT(full) 
[  512.125094][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  512.125100][    C1] Workqueue: events_unbound toggle_allocation_gate
[  512.125115][    C1] RIP: 0010:__kasan_check_read+0xa/0x20
[  512.125125][    C1] Code: 31 ed eb cf cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 ef e4 ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00
[  512.125132][    C1] RSP: 0018:ffffc900033c76f8 EFLAGS: 00000246
[  512.125138][    C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff819cd59a
[  512.125144][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8fa38330
[  512.125148][    C1] RBP: ffffc900033c78d0 R08: 0000000000000001 R09: 0000000000000000
[  512.125153][    C1] R10: ffffc900033c7820 R11: fffff52000678f09 R12: ffffffff8dfe6340
[  512.125158][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  512.125163][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  512.125168][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  512.125173][    C1] CR2: 000055734aae5df8 CR3: 000000000df36000 CR4: 00000000000006f0
[  512.125196][    C1] Call Trace:
[  512.125200][    C1]  <TASK>
[  512.125203][    C1]  trace_contention_begin+0x2a/0x120
[  512.125215][    C1]  __mutex_lock+0x198/0x1350
[  512.125223][    C1]  ? lock_release+0x4b/0x3e0
[  512.125233][    C1]  ? smp_text_poke_batch_add+0x7ea/0xa80
[  512.125242][    C1]  ? arch_jump_label_transform_queue+0x5f/0x110
[  512.125253][    C1]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  512.125290][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  512.125299][    C1]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  512.125310][    C1]  ? rcu_is_watching+0x15/0xb0
[  512.125318][    C1]  ? rcu_is_watching+0x15/0xb0
[  512.125326][    C1]  arch_jump_label_transform_queue+0x5f/0x110
[  512.125337][    C1]  __jump_label_update+0x185/0x3a0
[  512.125345][    C1]  static_key_disable_cpuslocked+0xc5/0x1b0
[  512.125357][    C1]  static_key_disable+0x1a/0x20
[  512.125366][    C1]  toggle_allocation_gate+0x1a1/0x240
[  512.125376][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  512.125385][    C1]  ? rcu_is_watching+0x15/0xb0
[  512.125391][    C1]  ? lock_acquire+0x5f/0x360
[  512.125402][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  512.125409][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  512.125416][    C1]  process_scheduled_works+0xae1/0x17b0
[  512.125428][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  512.125438][    C1]  worker_thread+0x8a0/0xda0
[  512.125447][    C1]  ? __kthread_parkme+0x7b/0x200
[  512.125457][    C1]  kthread+0x711/0x8a0
[  512.125465][    C1]  ? __pfx_worker_thread+0x10/0x10
[  512.125472][    C1]  ? __pfx_kthread+0x10/0x10
[  512.125481][    C1]  ? rcu_is_watching+0x15/0xb0
[  512.125487][    C1]  ? __pfx_kthread+0x10/0x10
[  512.125495][    C1]  ret_from_fork+0x3fc/0x770
[  512.125503][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  512.125511][    C1]  ? __switch_to_asm+0x39/0x70
[  512.125520][    C1]  ? __switch_to_asm+0x33/0x70
[  512.125529][    C1]  ? __pfx_kthread+0x10/0x10
[  512.125537][    C1]  ret_from_fork_asm+0x1a/0x30
[  512.125548][    C1]  </TASK>
[  512.126063][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  512.256372][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  512.260098][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  512.264173][   T34] Call Trace:
[  512.265567][   T34]  <TASK>
[  512.266799][   T34]  dump_stack_lvl+0x99/0x250
[  512.268680][   T34]  ? __asan_memcpy+0x40/0x70
[  512.270738][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  512.273004][   T34]  ? __pfx__printk+0x10/0x10
[  512.275021][   T34]  vpanic+0x281/0x750
[  512.276691][   T34]  ? __pfx_vpanic+0x10/0x10
[  512.278553][   T34]  ? preempt_schedule+0xae/0xc0
[  512.280597][   T34]  ? preempt_schedule_common+0x83/0xd0
[  512.282384][   T34]  panic+0xb9/0xc0
[  512.283604][   T34]  ? __pfx_panic+0x10/0x10
[  512.285085][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  512.287380][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  512.289982][   T34]  watchdog+0xfd2/0xfe0
[  512.291774][   T34]  ? watchdog+0x1de/0xfe0
[  512.293630][   T34]  kthread+0x711/0x8a0
[  512.295429][   T34]  ? __pfx_watchdog+0x10/0x10
[  512.297420][   T34]  ? __pfx_kthread+0x10/0x10
[  512.299396][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  512.301612][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  512.303755][   T34]  ? __pfx_kthread+0x10/0x10
[  512.305667][   T34]  ret_from_fork+0x3fc/0x770
[  512.307601][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  512.309802][   T34]  ? __switch_to_asm+0x39/0x70
[  512.311824][   T34]  ? __switch_to_asm+0x33/0x70
[  512.313799][   T34]  ? __pfx_kthread+0x10/0x10
[  512.315522][   T34]  ret_from_fork_asm+0x1a/0x30
[  512.317423][   T34]  </TASK>
[  512.319198][   T34] Kernel Offset: disabled
[  512.320727][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:37:44  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff88801fcc0237 R9 =1ffff11003f98046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afd8e8 R14=ffffffff99df23e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f615ba12822 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f615c6ed6c0 00007f615c6ed6c0 XMM01=00007f615c6ed6b0 00007f615c6ed6b0
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=1ffff11009608341 RCX=ffff888024db5640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000312f700 RSP=ffffc9000312f580
R8 =ffffffff8fa38337 R9 =1ffffffff1f47066 R10=dffffc0000000000 R11=fffffbfff1f47067
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44cd8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f135aee7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f135a3876c3 00007f135a3876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=0000000100000017 6d705f7000000001 XMM07=90030fffffffffff ff04088003010800
XMM08=0100100008800401 000000080606015c XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
