last executing test programs:

2.018764263s ago: executing program 0 (id=9008):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x2000}]}, {[{0x0, 0x2}]}, {[{}, {}, {}, {}, {}, {0x1ff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68)

1.936962932s ago: executing program 0 (id=9011):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140))
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="341b00f841ea39813f12e6d3275b3081b8e1ff9d6698fe66d1aa751457b4207b425816e37f76bebf6a1f0ea4946009d4e0c36250e51760c780ac", @ANYRES16=r2, @ANYBLOB="200000000000000000000100000008000100fcffffff080001000300000008000100000000000400088004000c80"], 0x34}}, 0x8804)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r3, 0x0, 0x2a, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f00000028c0)={&(0x7f0000002700)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002880)=[{&(0x7f0000002740)="2e2800a464a9", 0x6}, {0x0}], 0x2}, 0xd4)
sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000200))
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r4, 0x8947, &(0x7f00000000c0)={'bond0\x00', 0x10004})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x54, r9, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6a281c1c}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x884}, 0x600060c0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00'})
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x48b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'nat\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1, 0xd, 0xa11, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0)

1.089601271s ago: executing program 2 (id=9012):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001600010000000000000000200a0000000400000014000100"], 0x44}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00001455380010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYRES8=r0], 0x4c}, 0x1, 0x0, 0x0, 0x240480a0}, 0x0)

1.089099582s ago: executing program 1 (id=9013):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xffffffd9}, 0x0)

1.000351492s ago: executing program 2 (id=9014):
socket(0x1e, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110003"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32f5ffffff0900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003405700004a08000640000000", @ANYRES64=r0], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)

999.724614ms ago: executing program 1 (id=9015):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x30, 0x60, 0x54, 0xfffff01c}, {0x6, 0x8, 0x8, 0x6}]}, 0x10) (async)
r1 = socket$inet6(0xa, 0x2, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f0000000200)="03", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) (async)
shutdown(r4, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000180)=0x90)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0xa, 0x81, @private0, 0x4b}]}, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000380)=@assoc_value={<r7=>0x0}, &(0x7f00000000c0)=0xe05a43a61b583a5d)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) (async)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="4e68903b45513ace5e12c453ad4835acc35877e3b674689c4d02453d269f46a331b1df094195b94704006bcb8538f549f8775b96c77291b21c98655811f360dda18b336836445189950aab59899b67a30d12e3d457a5763eee5597b8765abb0ee9d13ce9806b6fcc2fa7ecb3ad38b66807794d9a343e751c300d7b277a", @ANYRES32=r4, @ANYRESHEX=r4], 0x4c}}, 0x44005)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000540)={r7, 0xfffe}, &(0x7f0000000600)=0x8) (async)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) (async)
r10 = socket$kcm(0x2, 0x1000000000000005, 0x0)
sendmsg$inet(r10, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x20, @rand_addr=0xa9fe0000}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="11000000000000000040030011000000000000000000001ddf6b81f39eea0afb1ebcc5952ca60010000000000000008400000007000000"], 0x28}, 0x0) (async)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14)
close(r1)
setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0x6, &(0x7f0000000340)={0x81, 0x3, 0x8f7, 0x8}, 0x10)

974.884978ms ago: executing program 0 (id=9016):
socket$alg(0x26, 0x5, 0x0)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100f8000000000000002d0000000e0001006e657464657673696d0000000f0002106e657464657673696d30000012ff8e000000000002008f0000000000000000000c009000000000000000000049edf29c1ca25442d0aa297d951c8a3ad3f6f789e37af004dcb16e4cf419a476618a3ddb7e0a36dde70759c7d12446a9bccb233e7656bef7"], 0xa0}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={0x1d, 0x0, 0x2, {0x0, 0xf0}, 0xc295a7c9ee09b05c}, 0x18)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x6c}}, 0x20000000)

879.880045ms ago: executing program 2 (id=9017):
r0 = socket$key(0xf, 0x3, 0x2)
close(r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@ba={{}, {0x9}, @device_a, @broadcast, @basic={{0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x80}, "a4d1222859b87210f35210f16763e0d9f33dec61b5a5cb5076bbb85d05622286dd5a19d11a3ba373bd5e2f89daac7038ffc54c55a4a5cf23c505aa71dcdf401efa7643f4b37c3d1872c509afe24463555283567e0338086f0d86cf040a31964aec6cf45d3b9ebb42126bbc379fe6aff6d48f8b8088c403d3dc03a47c75a854dc"}}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x13, 0x4, 0x0, 0xd, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x2, 0x800, 0x2, 0x25, 0x5}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0xd83c, @mcast2, 0x401}, @in={0x2, 0x4e23, @remote}}]}, 0x68}}, 0x40000)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', <r4=>r3, 0x29, 0x8, 0x6, 0x1, 0x2, @local, @private0, 0x10, 0x8000, 0xfffffffd, 0x40}})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x28000, 0x0)
nanosleep(&(0x7f0000000380), 0x0)
socketpair(0x5, 0x4, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCGIFMTU(r6, 0x8921, &(0x7f0000000400)={'gretap0\x00'})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5, <r9=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x108, 0x108, 0x3, [@struct={0x6, 0x1, 0x0, 0x4, 0x0, 0x6, [{0x0, 0x4, 0xbb}]}, @func={0x3, 0x0, 0x0, 0xc, 0x2}, @struct={0x7, 0x7, 0x0, 0x4, 0x1, 0xfffffff7, [{0x2, 0x5, 0x7}, {0x6, 0x5, 0x5}, {0x6, 0x1, 0x9721}, {0xe, 0x5, 0x3}, {0x1, 0x3, 0x2c59}, {0x3, 0x3, 0xfffffffe}, {0x10, 0x5, 0x9}]}, @volatile={0x3, 0x0, 0x0, 0x9, 0x2}, @enum={0x5, 0x9, 0x0, 0x6, 0x4, [{0x9, 0xe14}, {0x2, 0xffffffff}, {0xe, 0x10000}, {0x7, 0x5}, {0x6, 0x1dc9}, {0x9, 0x176}, {0x4, 0xe0}, {0x80, 0x800}, {0x3, 0x7}]}, @ptr={0x8, 0x0, 0x0, 0x2, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x5}}]}, {0x0, [0x0]}}, &(0x7f00000008c0)=""/148, 0x123, 0x94, 0x1, 0x1}, 0x28)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x1d, &(0x7f00000005c0)=@raw=[@generic={0xf, 0x1, 0x7, 0x2, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x7, 0x6, 0x2, 0x6, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}], &(0x7f00000006c0)='syzkaller\x00', 0x5, 0x51, &(0x7f0000000700)=""/81, 0x41000, 0x29, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000009c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0xe, 0xd}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)=[{0x5, 0x5, 0xb, 0x5}], 0x10, 0x3}, 0x94)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r6)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r12, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x68, r13, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x7e931eb407846d85}, 0x20000091)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000dc0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=""/108, 0x6c, 0x0, &(0x7f0000000d40)=""/84, 0x54}, &(0x7f0000000e00)=0x40)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x11, &(0x7f0000000e40)=@raw=[@ldst={0x3, 0x3, 0x4, 0xb, 0x8, 0x40}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000f00)='syzkaller\x00', 0x400, 0xe4, &(0x7f0000000f40)=""/228, 0x41100, 0x45, '\x00', r4, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001040)={0x4, 0x5, 0xc5f, 0x401}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001080)=[{0x0, 0x1, 0x9, 0x8}, {0x2, 0x4, 0xb, 0x5}, {0x5, 0x3, 0x0, 0x8}, {0x5, 0x3, 0xd, 0x6}], 0x10, 0xac3}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r6)
bind$rose(r7, &(0x7f00000011c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x1, @null}, 0x1c)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), r7)
mkdirat$cgroup(r11, &(0x7f0000001240)='syz1\x00', 0x1ff)
r14 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r14, 0x12, 0x2, &(0x7f0000001280)=""/20, &(0x7f00000012c0)=0x14)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x2c, 0x2, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c051}, 0x40000)

737.382704ms ago: executing program 1 (id=9018):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x70bd25, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0)

735.156708ms ago: executing program 0 (id=9019):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x18c, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x61}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x78}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x11}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffc}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) (async)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1)
sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x60a, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000811)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {0x0, @usage, <r4=>0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='io.stat\x00', 0x0, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000840)=<r7=>0x0)
bind$nfc_llcp(r6, &(0x7f0000000880)={0x27, r7, 0x0, 0x0, 0x80, 0xfd, "ca391343a0190223ec269ec7c2eac9c1e82ebabd9913788fb090b3557921e972e62e33649cd41e2b093404726859698376a3a88f72b20a0e3bf72b3d92df16", 0x1a}, 0x60)
close(r0) (async)
r8 = socket$inet6_icmp(0xa, 0x2, 0x3a)
listen(r0, 0xa) (async)
write$cgroup_subtree(r6, &(0x7f0000000900)={[{0x2b, 'cpu'}, {0x2d, 'cpu'}]}, 0xa) (async)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x3, 0x0, r6, 0x6, '\x00', 0x0, r6, 0x3, 0x1, 0x2}, 0x50) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r6, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r10=>0x0, 0x16, &(0x7f0000000d00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x63, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1f, 0x1b, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @alu={0x4, 0x0, 0xb, 0xe, 0x4, 0x30}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @ldst={0x1, 0x0, 0x4, 0x0, 0x9, 0x6, 0xffffffffffffffff}, @generic={0x6, 0x3, 0x3, 0x7fff, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x2, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0xd, 0xc, 0x3, 0x2, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001040)='GPL\x00', 0x9e, 0x2f, &(0x7f0000001080)=""/47, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0xa, &(0x7f0000001100)=[r6, r6, r6, r6], &(0x7f0000001140)=[{0x0, 0x3, 0xb}, {0x1, 0x3, 0x0, 0xc}, {0x3, 0x3, 0x6, 0x4}, {0x5, 0x3, 0xd}, {0x1, 0x1, 0xa}, {0x5, 0x5, 0x1, 0x1}, {0x3, 0x1, 0x2, 0xb}, {0x5, 0xffffffff, 0x3, 0x7}, {0x2, 0x2, 0x1, 0x5}, {0x3, 0x3, 0xb, 0x8}], 0x10, 0x4d}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x8, 0x1e, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf1a}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0x3, 0xae, &(0x7f0000000b00)=""/174, 0x41100, 0x24, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x2, 0x10, 0x3, 0x7}, 0x10, r10, r11, 0x1, &(0x7f00000012c0)=[r6, r6, r6], &(0x7f0000001300)=[{0x4, 0x4, 0xb, 0x2}], 0x10, 0x2}, 0x94) (async)
bind$nfc_llcp(r6, &(0x7f0000001400)={0x27, r7, 0x0, 0x3, 0xa, 0x8, "c1d6c3d0b012ec2e61153e921338a0c82fac8221b3aa113c9259c3b97be429a8be2ef82eb483ff19ed89300ae86a00590cd7fe858be3c378bd4c5c0a9e17af", 0xe}, 0x60) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000001480), r0) (async)
getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f00000014c0)=0xfffff801, &(0x7f0000001500)=0x4)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001540)={'wpan3\x00'}) (async)
sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x40, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c000}, 0x1) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000001680)={0x3, 'netdevsim0\x00', {0x9}, 0x8}) (async)
setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f00000016c0), 0x4)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8982, &(0x7f0000001700)={0x8, 'macvlan0\x00', {'team_slave_1\x00'}, 0x9})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000001740)={"4287924f17c981b8b171fbd8f886d23f", <r12=>0x0, 0x0, {0x9, 0x9de9}, {0x401, 0x10001}, 0x2, [0x40, 0x401, 0x2, 0x0, 0x0, 0x2, 0x7, 0x7fffffff, 0x8, 0x4, 0x8, 0x8, 0x15, 0x3, 0xffffffffffffffff, 0x8001]})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f00000018c0)={{r11}, r12, 0x4, @inherit={0x70, &(0x7f0000001840)={0x1, 0x5, 0x1, 0x200, {0x8, 0x1, 0xffffffffffffffff, 0xffffffffffffff5c, 0x4}, [0x2, 0x6, 0x7, 0x10, 0x8]}}, @devid=r4})

629.771623ms ago: executing program 0 (id=9020):
r0 = socket$nl_route(0x10, 0x3, 0x0)
unshare(0x4020400)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d0000008ec40000040000000100000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000000000a4f499e08a52649e0000f50d60234934e7fe464b76c72a77c2c0ab4aa9ced9d246fddda3d77f155c192ac6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0x4, 0x6, 0xff, 0x21000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r4}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r3}, 0x38)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newchain={0x24, 0x1e, 0x1, 0x8000, 0x3, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0x4, 0x3}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x14004004}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x18, 0x0, &(0x7f0000000040), &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0)=[r2, r4, r3, r2], &(0x7f0000000f40)=[{0x2, 0x5, 0x0, 0x4}, {0x4, 0x4, 0xc, 0x1}, {0x0, 0x3, 0x3, 0xb}, {0x0, 0x5, 0xc, 0x7}, {0x0, 0x2, 0x3}, {0x5, 0x2, 0xb, 0x5}, {0x0, 0x3, 0x4, 0x4}, {0x3, 0x3, 0xc, 0xc}, {0x0, 0x4, 0x0, 0xa}], 0x10, 0x5}, 0x94)

576.868638ms ago: executing program 1 (id=9021):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xffffffea}, 0x0)

575.468049ms ago: executing program 0 (id=9022):
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x300)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), &(0x7f0000000200)=0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12812, r1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'rose0\x00', 0x2})
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4, r2}, 0x18)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={<r4=>0x0, 0x7, 0x30}, &(0x7f0000000240)=0xc)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000002c0)={r4, 0xdc, "1dbb56ea03c219edf485d053e96c2009a978f923cca91f226a1765abf3cb276d812bdc0021d1359987cbcc95bd010730a3075db8b4e54fe6237cc7752c05485d03dc0b3cd71022ce795c4a10c0912cbdbe1a63a0b96165109d431e7751105e444961ebc7188cb1e2c5e6db49ceee898a1f02c4e4798a1c7bfdaca3681eca2731f1a8d24f293f9ff912b358d47ac2aba542a2b5d84bb39733a630d4b7fd3bed73cdf8b52a491d93ae9fb52efd1ecbe35e7bee8e130f6591aec9f31fc31034c00518c29adc91e1ce6cedcc6f9aa84aa7d75523938cdd2817c0c6d15c9d"}, &(0x7f00000003c0)=0xe4)
write$tun(r2, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0x3, 0x73, 0x0, @rand_addr=0x64010120, @broadcast, {[@ra={0x94, 0x4}]}}, "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"}}, 0xfce)

500.436761ms ago: executing program 1 (id=9023):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @local, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000041c0), 0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5}]}, 0x10)
r5 = socket(0x10, 0x803, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @mcast2, 0x9}}, 0x2, 0x9, 0xe7, 0x2, 0x2}, &(0x7f00000004c0)=0x98)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, 0x0, &(0x7f0000003f80))
sendmmsg$inet_sctp(r5, &(0x7f0000004080), 0x0, 0x400c001)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0)
sendto$packet(r1, &(0x7f0000000000)='1', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @local}, 0x14)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x0)

498.378812ms ago: executing program 1 (id=9024):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x4c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "d830c0c64f689f832d4b576947dd47df"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5f}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
getuid()
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r0, r3, &(0x7f0000001040)=0x8000, 0x8)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280080004000000000004001200080005"], 0x48}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_DELSET={0x28, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_DELRULE={0xb4, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x888e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8808}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x50, 0x18, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x3c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x90, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_USERDATA={0x4a, 0xd, 0x1, 0x0, "2e21f99c631e6014134dd79610201ff26a6cff224397fe3bfba653035c163a5c2a25fd3822801d2776bd7a53a539d57578e28b29f6cbb1bee51a3a90aaceb34d10a96ff65b17"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14}}, 0x2b8}}, 0x0)

100.328058ms ago: executing program 2 (id=9025):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0xc0, 0x2, 0x1, 0x103, 0x0, 0x0, {0xd, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0xac, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2b}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000002c0)=r1}, 0x64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)=r0, 0x12}, 0x20)

99.341235ms ago: executing program 2 (id=9026):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x10)
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x120, 0x1170, 0x1398, 0x0, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private0, @loopback}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x4000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}], 0x20}, 0x0)
syz_open_procfs$namespace(r5, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000)

0s ago: executing program 2 (id=9027):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket(0x11, 0x3, 0x8)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=<r4=>r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=<r5=>r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80"], 0x4c}}, 0x0)
close(0x4)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRES8=r4, @ANYRESOCT=r5], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r8}, 0x10)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d0001000000000000000000040000800400"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x700, 0x1, 0x9, 0x800, {{0x15, 0x4, 0x1, 0x22, 0x54, 0x61, 0x0, 0x6, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x24, 0xf3, 0x1, 0xc, [{@local, 0x400}, {@loopback}, {@rand_addr=0x64010100, 0x7}, {@remote, 0x9}]}, @noop, @end, @rr={0x7, 0xf, 0xe0, [@private=0xa010102, @local, @empty]}, @rr={0x7, 0x3, 0x46}, @noop, @noop, @end, @noop, @timestamp={0x44, 0x4, 0x98}]}}}}})
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r11, &(0x7f0000000040), 0x2, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r13, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)

kernel console output (not intermixed with test programs):

e bridge21): Enslaving as an active interface with an up link
[  410.306342][T25205] macvlan0: entered promiscuous mode
[  410.308252][T25205] macvlan0: entered allmulticast mode
[  410.310627][T25205] bond17: (slave macvlan0): Error -98 calling set_mac_address
[  410.376791][T25205] _Z`Ԁ@: entered promiscuous mode
[  410.522832][T25211] nbd0: detected capacity change from 0 to 127
[  410.527581][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  410.596814][   T57] block nbd0: Receive control failed (result -104)
[  410.675318][T25223] x_tables: duplicate underflow at hook 1
[  410.729415][T25228] netlink: 'syz.2.6328': attribute type 3 has an invalid length.
[  410.733632][T25228] netlink: 'syz.2.6328': attribute type 6 has an invalid length.
[  410.745082][T25230] netlink: 'syz.0.6327': attribute type 11 has an invalid length.
[  411.147050][T25265] tipc: Resetting bearer <eth:syzkaller0>
[  411.175735][T25265] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  411.179118][T25265] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  411.182229][T25265] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  411.185740][T25265] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  411.194515][T25269] can: request_module (can-proto-0) failed.
[  411.200602][   T47] C speed is unknown, defaulting to 1000
[  411.203170][   T47] syz2: Port: 1 Link DOWN
[  411.277690][T25263] syzkaller0: entered promiscuous mode
[  411.281109][T25263] syzkaller0: entered allmulticast mode
[  413.285627][   T47] C speed is unknown, defaulting to 1000
[  413.401594][T25276] __nla_validate_parse: 155 callbacks suppressed
[  413.401614][T25276] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6340'.
[  413.418425][T25276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6340'.
[  413.605678][T25294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6347'.
[  413.608705][T25294] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  413.647423][T25298] veth0: entered promiscuous mode
[  413.650655][T25298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6349'.
[  413.683539][T25298] veth0 (unregistering): left promiscuous mode
[  413.693039][T25300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6346'.
[  413.698944][T25300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6346'.
[  413.716191][T25300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6346'.
[  413.722329][T25295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6348'.
[  413.892531][T25312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6355'.
[  413.906844][T25313] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  414.004715][T25320] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6358'.
[  414.175607][T25330] netlink: 'syz.0.6362': attribute type 1 has an invalid length.
[  414.203188][T25330] 8021q: adding VLAN 0 to HW filter on device bond18
[  414.220034][T25330] 8021q: adding VLAN 0 to HW filter on device bond18
[  414.223032][T25330] bond18: (slave vxcan3): The slave device specified does not support setting the MAC address
[  414.228398][T25330] bond18: (slave vxcan3): Error -95 calling set_mac_address
[  414.272021][T11653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.274856][T11653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.413675][T25342] bridge17: entered promiscuous mode
[  414.415955][T25342] bridge17: entered allmulticast mode
[  414.440052][T25342] team0: Port device bridge17 added
[  414.466778][T25344] netlink: 'syz.2.6368': attribute type 1 has an invalid length.
[  414.903116][T25359] netlink: 'syz.2.6373': attribute type 1 has an invalid length.
[  414.989152][T25361] netlink: 'syz.2.6374': attribute type 11 has an invalid length.
[  414.992742][T25361] netlink: 'syz.2.6374': attribute type 11 has an invalid length.
[  415.396137][T25394] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  415.399366][T25394] netlink: 'syz.0.6387': attribute type 12 has an invalid length.
[  415.895884][T25415] bond47: left allmulticast mode
[  415.897948][T25415] bond47: left promiscuous mode
[  415.900083][T25415] bridge0: port 1(bond47) entered disabled state
[  415.919176][T25415] team0: Port device bridge17 removed
[  416.273403][T25439] netlink: 'syz.1.6402': attribute type 1 has an invalid length.
[  417.208647][T25490] xfrm0: entered promiscuous mode
[  417.210744][T25490] xfrm0: entered allmulticast mode
[  417.274696][T25497] macsec0: entered promiscuous mode
[  417.276517][T25497] dummy0: entered promiscuous mode
[  417.278297][T25497] macsec0: entered allmulticast mode
[  417.280124][T25497] dummy0: entered allmulticast mode
[  417.283382][T25497] dummy0: left allmulticast mode
[  417.285114][T25497] dummy0: left promiscuous mode
[  417.370622][T25501] netlink: 'syz.1.6425': attribute type 1 has an invalid length.
[  417.376356][T25501] netlink: 'syz.1.6425': attribute type 1 has an invalid length.
[  417.387410][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.414979][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.458580][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.493441][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.519469][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.554153][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.602733][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.629470][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.665285][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.697006][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.721641][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.748069][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.785373][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.806124][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.829966][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.855727][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.893002][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.916541][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.944667][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.960252][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  417.980148][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  418.003725][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  418.026898][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  418.048653][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  418.065329][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  418.083241][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  418.101406][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  418.120614][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  418.141074][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  418.158977][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  418.177553][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  418.199089][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  418.214726][T25504] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  418.258376][T25556] openvswitch: netlink: IP tunnel dst address not specified
[  419.381270][T25573] nbd3: detected capacity change from 0 to 127
[  419.388091][   T57] block nbd3: Receive control failed (result -104)
[  419.489005][T25578] __nla_validate_parse: 23 callbacks suppressed
[  419.489021][T25578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6441'.
[  419.674246][T25590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6446'.
[  419.704874][T25590] netlink: 'syz.1.6446': attribute type 1 has an invalid length.
[  419.736953][T25595] netlink: 'syz.2.6443': attribute type 7 has an invalid length.
[  419.797323][T25598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6448'.
[  419.803873][T25598] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6448'.
[  419.808371][T25602] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6449'.
[  420.124593][T25615] netlink: 'syz.1.6452': attribute type 7 has an invalid length.
[  420.505885][T25619] xt_bpf: check failed: parse error
[  420.887296][T25633] netlink: 'syz.2.6459': attribute type 7 has an invalid length.
[  421.009242][T25637] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.6460'.
[  421.119059][T25648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6464'.
[  421.405125][T25669] netlink: 'syz.0.6471': attribute type 7 has an invalid length.
[  421.429250][T25670] netlink: 596 bytes leftover after parsing attributes in process `syz.1.6470'.
[  421.479345][T25673] netlink: 'syz.0.6472': attribute type 1 has an invalid length.
[  421.483995][T25673] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6472'.
[  421.487748][T25673] netlink: 'syz.0.6472': attribute type 1 has an invalid length.
[  421.493600][T25673] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6472'.
[  421.654808][T25680] netlink: 'syz.0.6474': attribute type 4 has an invalid length.
[  421.666111][T25680] netlink: 'syz.0.6474': attribute type 4 has an invalid length.
[  421.672253][ T5884] C speed is unknown, defaulting to 1000
[  421.674736][ T5884] syz2: Port: 1 Link ACTIVE
[  421.676837][ T5884] C speed is unknown, defaulting to 1000
[  422.098418][T25692] netlink: 'syz.2.6478': attribute type 7 has an invalid length.
[  422.802468][T25746] xt_ipcomp: unknown flags F7
[  424.174257][T25801] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  425.169496][T25863] validate_nla: 6 callbacks suppressed
[  425.169514][T25863] netlink: 'syz.1.6539': attribute type 3 has an invalid length.
[  425.181031][T25863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  425.187090][T25863] __nla_validate_parse: 13 callbacks suppressed
[  425.187101][T25863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6539'.
[  425.195401][T25863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6539'.
[  425.198415][T25859] C speed is unknown, defaulting to 1000
[  425.396421][T25876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6542'.
[  425.824178][T25902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6551'.
[  425.827486][T25905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6551'.
[  426.045428][T25916] dvmrp0: entered allmulticast mode
[  426.067188][T25917] openvswitch: netlink: Message has 20 unknown bytes.
[  426.070075][T25917] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  426.364466][T25923] netlink: 324 bytes leftover after parsing attributes in process `syz.2.6559'.
[  426.439164][T25925] xt_ecn: cannot match TCP bits for non-tcp packets
[  426.445995][T25925] : renamed from bridge_slave_0
[  426.547216][T25928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6560'.
[  426.898496][T25938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6564'.
[  426.944143][T25942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6567'.
[  426.991201][T25945] xt_time: invalid argument - start or stop time greater than 23:59:59
[  427.016033][T25945] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6568'.
[  427.307030][T25959] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  427.368734][T25964] batadv_slave_1: entered promiscuous mode
[  427.385995][T25963] batadv_slave_1: left promiscuous mode
[  427.727722][T25986] bond19: entered promiscuous mode
[  427.730339][T25986] 8021q: adding VLAN 0 to HW filter on device bond19
[  427.846541][T25986] bond19 (unregistering): Released all slaves
[  428.137497][T26002] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  428.168903][T26003] vlan1: entered allmulticast mode
[  428.170762][T26003] bridge_slave_0: entered allmulticast mode
[  428.249103][T26009] netlink: 'syz.0.6591': attribute type 29 has an invalid length.
[  428.253815][T26010] netlink: 'syz.0.6591': attribute type 29 has an invalid length.
[  428.492997][T26027] netlink: 'syz.2.6596': attribute type 7 has an invalid length.
[  428.654722][T26039] netlink: 'syz.2.6603': attribute type 2 has an invalid length.
[  428.664866][T26039] syzkaller1: entered promiscuous mode
[  428.666721][T26039] syzkaller1: entered allmulticast mode
[  428.951512][ T5862] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  428.958067][ T5862] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  428.983981][   T10] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  429.041387][   T10] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  429.046145][T26065] netlink: 'syz.0.6613': attribute type 1 has an invalid length.
[  429.080523][T26067] netlink: 'syz.0.6615': attribute type 7 has an invalid length.
[  429.310982][T23352] Bluetooth: hci2: command 0x0419 tx timeout
[  429.355800][T26093] netlink: 'syz.1.6623': attribute type 1 has an invalid length.
[  429.434138][T26099] x_tables: ip6_tables: udplite match: only valid for protocol 136
[  429.716779][   T10] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  430.728170][T26166] netlink: 'syz.2.6650': attribute type 1 has an invalid length.
[  430.731765][T26166] __nla_validate_parse: 23 callbacks suppressed
[  430.731779][T26166] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6650'.
[  430.795791][T26168] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  430.854172][T26170] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6652'.
[  430.860376][T26170] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6652'.
[  430.873807][T26170] netlink: 'syz.2.6652': attribute type 83 has an invalid length.
[  430.992640][T26174] Unsupported ieee802154 address type: 0
[  431.125466][T26179] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6656'.
[  431.129903][T26179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6656'.
[  431.157807][T26179] netlink: 'syz.2.6656': attribute type 1 has an invalid length.
[  431.209042][T26189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6659'.
[  431.374334][T26203] netlink: 'syz.1.6664': attribute type 1 has an invalid length.
[  431.377531][T26203] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6664'.
[  431.489250][T26209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6666'.
[  431.510213][T26212] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6667'.
[  431.559114][T26215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6670'.
[  431.778023][T26228] netlink: 'syz.1.6674': attribute type 11 has an invalid length.
[  432.076023][T26258] netlink: 'syz.0.6685': attribute type 5 has an invalid length.
[  432.648390][T26314] 8021q: adding VLAN 0 to HW filter on device bond61
[  432.663248][T26317] macvlan1: entered promiscuous mode
[  432.665080][T26317] macvlan1: entered allmulticast mode
[  432.667679][T26317] bond61: entered promiscuous mode
[  432.669866][T26317] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  432.699507][T26317] bond61: left promiscuous mode
[  432.751461][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  433.132253][T26341] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  433.258627][T26348] netlink: 'syz.1.6708': attribute type 4 has an invalid length.
[  433.338983][T26355] netlink: 'syz.2.6711': attribute type 1 has an invalid length.
[  433.478685][T26368] netlink: 'syz.2.6718': attribute type 2 has an invalid length.
[  433.559640][T26378] netlink: 'syz.0.6721': attribute type 1 has an invalid length.
[  433.687893][T26393] Unsupported ieee802154 address type: 0
[  433.745189][T26393] pim6reg: entered allmulticast mode
[  433.799872][T26400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  433.802673][T26400] IPv6: NLM_F_CREATE should be set when creating new route
[  433.851563][T26404] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  433.854767][T26404] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  433.857676][T26404] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  433.860592][T26404] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  433.865635][T26404] bond50: (slave geneve4): making interface the new active one
[  433.870396][T26404] bond50: (slave geneve4): Enslaving as an active interface with an up link
[  433.882549][T26404] bond50: (slave ip6gretap3): Enslaving as an active interface with an up link
[  433.926822][T26404] syz.1.6731 (26404) used greatest stack depth: 18968 bytes left
[  434.484244][T26432] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  434.492749][T26432] tipc: Enabled bearer <udp:syz1>, priority 6
[  435.591325][T26504] bpq0: left promiscuous mode
[  435.746471][T26512] __nla_validate_parse: 41 callbacks suppressed
[  435.746484][T26512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6774'.
[  435.786887][T26516] validate_nla: 12 callbacks suppressed
[  435.786900][T26516] netlink: 'syz.2.6775': attribute type 1 has an invalid length.
[  435.792354][T26516] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6775'.
[  435.829205][T26519] netlink: 'syz.2.6776': attribute type 9 has an invalid length.
[  435.834751][T26519] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.6776'.
[  435.838382][T26519] netlink: 'syz.2.6776': attribute type 9 has an invalid length.
[  435.841563][T26519] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.6776'.
[  435.845932][T26519] netlink: 'syz.2.6776': attribute type 9 has an invalid length.
[  435.849164][T26519] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.6776'.
[  435.859065][T26519] netlink: 'syz.2.6776': attribute type 9 has an invalid length.
[  435.862642][T26519] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.6776'.
[  435.866878][T26519] netlink: 'syz.2.6776': attribute type 9 has an invalid length.
[  435.870050][T26519] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.6776'.
[  435.880221][T26519] netlink: 'syz.2.6776': attribute type 9 has an invalid length.
[  435.883168][T26519] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.6776'.
[  435.887706][T26519] netlink: 'syz.2.6776': attribute type 9 has an invalid length.
[  435.890931][T26519] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.6776'.
[  435.894864][T26519] netlink: 'syz.2.6776': attribute type 9 has an invalid length.
[  435.898163][T26519] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.6776'.
[  435.905885][T26519] netlink: 'syz.2.6776': attribute type 9 has an invalid length.
[  435.947233][T26521] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  435.955697][T26521] xt_time: invalid argument - start or stop time greater than 23:59:59
[  436.200039][T26526] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  437.119412][T26555] _Z`Ԁ@: entered promiscuous mode
[  437.237929][T26560] dvmrp0: left allmulticast mode
[  437.286390][T26562] lo speed is unknown, defaulting to 1000
[  437.290227][T26562] lo speed is unknown, defaulting to 1000
[  437.294565][T26562] lo speed is unknown, defaulting to 1000
[  437.349545][T26560] erspan0: left allmulticast mode
[  437.370369][T26560] tipc: Resetting bearer <ib:ip6gre0>
[  437.381782][T26560] tipc: Resetting bearer <ib:ip6gre0>
[  437.386876][T26560] bridge0: left promiscuous mode
[  437.402992][T26560] 8021q: adding VLAN 0 to HW filter on device team0
[  437.421317][T26560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  437.611912][T26562] infiniband syz0: set active
[  437.614515][   T47] lo speed is unknown, defaulting to 1000
[  437.616926][T26562] infiniband syz0: added lo
[  437.682279][T26562] RDS/IB: syz0: added
[  437.684111][T26562] smc: adding ib device syz0 with port count 1
[  437.686826][T26562] smc:    ib device syz0 port 1 has pnetid SYZ0 (user defined)
[  437.692399][T26562] lo speed is unknown, defaulting to 1000
[  437.767631][   T47] lo speed is unknown, defaulting to 1000
[  437.834284][T26562] lo speed is unknown, defaulting to 1000
[  437.953819][T26562] lo speed is unknown, defaulting to 1000
[  438.447351][   T61] block nbd1: Possible stuck request ffff888021df0000: control (read@0,1024B). Runtime 210 seconds
[  438.452032][   T61] block nbd1: Possible stuck request ffff888021e00000: control (read@1024,1024B). Runtime 210 seconds
[  438.456543][   T61] block nbd1: Possible stuck request ffff888021e00200: control (read@2048,1024B). Runtime 210 seconds
[  438.464467][   T61] block nbd1: Possible stuck request ffff888021e00400: control (read@3072,1024B). Runtime 210 seconds
[  439.608557][T26668] C speed is unknown, defaulting to 1000
[  439.717212][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  439.786055][T26668] lo speed is unknown, defaulting to 1000
[  440.197103][T26674] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  440.351075][    C0] ip6_tunnel: ip6gre6 xmit: Local address not yet configured!
[  440.454766][T26680] syzkaller1: entered promiscuous mode
[  440.457828][T26680] syzkaller1: entered allmulticast mode
[  440.777133][T26694] __nla_validate_parse: 38 callbacks suppressed
[  440.777151][T26694] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6833'.
[  440.791214][T26694] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6833'.
[  440.814796][T26694] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6833'.
[  441.019175][   T25] block nbd0: Possible stuck request ffff888021d90000: control (read@0,1024B). Runtime 30 seconds
[  441.030250][   T25] block nbd0: Possible stuck request ffff888021d90200: control (read@1024,1024B). Runtime 30 seconds
[  441.035308][   T25] block nbd0: Possible stuck request ffff888021d90400: control (read@2048,1024B). Runtime 30 seconds
[  441.042024][   T25] block nbd0: Possible stuck request ffff888021d90600: control (read@3072,1024B). Runtime 30 seconds
[  441.237299][T26723] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6841'.
[  441.317857][T26728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6842'.
[  441.404361][T26734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6845'.
[  441.501722][T26741] syzkaller1: entered promiscuous mode
[  441.504268][T26741] syzkaller1: entered allmulticast mode
[  441.518247][T26741] bridge0: port 1(vlan3) entered blocking state
[  441.523632][T26741] bridge0: port 1(vlan3) entered disabled state
[  441.526481][T26741] vlan3: entered allmulticast mode
[  441.528606][T26741] bond0: entered allmulticast mode
[  441.537023][T26741] vlan3: entered promiscuous mode
[  441.539252][T26741] bond0: entered promiscuous mode
[  441.577294][T26737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6846'.
[  441.932931][T26761] 0{X: entered promiscuous mode
[  441.939376][T26761] 0{X: left promiscuous mode
[  442.066877][T26763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6853'.
[  442.226696][T26769] SET target dimension over the limit!
[  442.273552][T26773] bond25: (slave erspan0): Releasing active interface
[  442.276697][T26773] ip6gretap3: entered promiscuous mode
[  442.282916][T26773] tipc: Resetting bearer <ib:ip6gre0>
[  442.287727][T26773] bond23: (slave geneve1): Releasing active interface
[  442.297065][T26773] veth29: left allmulticast mode
[  442.299209][T26773] veth29: left promiscuous mode
[  442.305196][T26773] bridge14: port 1(veth29) entered disabled state
[  442.310111][T26773] bond19: (slave geneve4): Releasing active interface
[  442.314393][T26773] bond25: (slave ip6gretap3): Releasing active interface
[  442.316763][T26773] bond25: (slave ip6gretap3): the permanent HWaddr of slave - 8a:29:53:be:0e:4e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  442.322469][T26773] ip6gretap3: left promiscuous mode
[  442.326917][T26773] bond25: (slave veth31): Releasing active interface
[  442.330344][T26773] vlan3: left allmulticast mode
[  442.332163][T26773] bond0: left allmulticast mode
[  442.334086][T26773] vlan3: left promiscuous mode
[  442.335946][T26773] bond0: left promiscuous mode
[  442.337923][T26773] bridge0: port 1(vlan3) entered disabled state
[  442.342376][   T47] lo speed is unknown, defaulting to 1000
[  442.475874][T26779] validate_nla: 27 callbacks suppressed
[  442.475888][T26779] netlink: 'syz.2.6859': attribute type 11 has an invalid length.
[  442.524371][T26782] netlink: 'syz.2.6860': attribute type 1 has an invalid length.
[  442.526920][T26782] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6860'.
[  442.606800][T26788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6862'.
[  443.176908][T26822] macvlan0: entered allmulticast mode
[  443.330176][T26830] netlink: 'syz.0.6874': attribute type 1 has an invalid length.
[  444.063947][T26845] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  444.160593][T26849] netlink: 'syz.2.6882': attribute type 1 has an invalid length.
[  445.035026][T26889] 8021q: adding VLAN 0 to HW filter on device bond62
[  445.328542][T26911] SET target dimension over the limit!
[  445.611789][T26925] netlink: 'syz.0.6908': attribute type 1 has an invalid length.
[  445.631129][T23352] Bluetooth: hci2: command 0x0419 tx timeout
[  445.912714][T26950] __nla_validate_parse: 42 callbacks suppressed
[  445.912732][T26950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6915'.
[  445.983790][T26957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6917'.
[  446.095139][T26965] tipc: Resetting bearer <eth:syzkaller0>
[  446.179835][   T47] C speed is unknown, defaulting to 1000
[  446.189428][   T47] syz2: Port: 1 Link DOWN
[  446.191364][   T47] C speed is unknown, defaulting to 1000
[  446.331543][T26982] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  446.476920][T26990] netlink: 'syz.2.6925': attribute type 1 has an invalid length.
[  446.480025][T26990] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6925'.
[  446.666053][T27001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6929'.
[  446.764895][T27013] IPv6: NLM_F_CREATE should be specified when creating new route
[  446.811745][T27017] xt_cgroup: xt_cgroup: no path or classid specified
[  446.930007][T27023] netlink: 'syz.0.6936': attribute type 8 has an invalid length.
[  447.079431][T27033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6941'.
[  447.144813][T27035] IPv6: NLM_F_CREATE should be specified when creating new route
[  447.653264][T27061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6950'.
[  447.657707][T27061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6950'.
[  447.711031][   T55] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  447.722205][   T55] Bluetooth: hci2: command 0x0419 tx timeout
[  447.838346][T27075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6954'.
[  447.920420][T27082] netlink: 'syz.2.6957': attribute type 1 has an invalid length.
[  447.923600][T27082] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6957'.
[  447.984006][T27087] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6959'.
[  448.173496][T27100] netlink: 'syz.0.6964': attribute type 1 has an invalid length.
[  448.399566][T27116] SET target dimension over the limit!
[  448.839517][T27132] tipc: Resetting bearer <ib:ip6gre0>
[  448.880361][T27132] mac80211_hwsim hwsim17 wlan0: left promiscuous mode
[  448.889769][T27132] xfrm0: left promiscuous mode
[  448.897306][T27141] ip6t_srh: unknown srh match flags  4000
[  448.912562][   T47] lo speed is unknown, defaulting to 1000
[  448.914938][   T47] syz0: Port: 1 Link DOWN
[  448.920897][T27137] xfrm0: left allmulticast mode
[  448.937900][   T47] lo speed is unknown, defaulting to 1000
[  449.147358][T27153] unknown channel width for channel at 909000KHz?
[  449.150007][T27153] unknown channel width for channel at 909000KHz?
[  449.154075][T27153] unknown channel width for channel at 909000KHz?
[  449.162001][T27153] netlink: 'syz.2.6983': attribute type 2 has an invalid length.
[  449.327264][T27173] netlink: 'syz.2.6989': attribute type 2 has an invalid length.
[  449.333081][T27173] netlink: 'syz.2.6989': attribute type 5 has an invalid length.
[  449.488610][T27188] netlink: 'syz.2.6994': attribute type 12 has an invalid length.
[  449.503480][T27190] netlink: 'syz.1.6996': attribute type 21 has an invalid length.
[  449.567889][T27190] xt_hashlimit: size too large, truncated to 1048576
[  449.604668][T27193] netlink: 'syz.2.6997': attribute type 12 has an invalid length.
[  449.738877][T27199] SET target dimension over the limit!
[  449.866584][T27207] netlink: 'syz.1.7002': attribute type 12 has an invalid length.
[  449.971144][   T25] block nbd3: Possible stuck request ffff888021ea8000: control (read@0,1024B). Runtime 30 seconds
[  449.975217][   T25] block nbd3: Possible stuck request ffff888021ea8200: control (read@1024,1024B). Runtime 30 seconds
[  449.979412][   T25] block nbd3: Possible stuck request ffff888021ea8400: control (read@2048,1024B). Runtime 30 seconds
[  449.983833][   T25] block nbd3: Possible stuck request ffff888021ea8600: control (read@3072,1024B). Runtime 30 seconds
[  450.055313][T27214] netlink: 'syz.2.7005': attribute type 11 has an invalid length.
[  450.058519][T27214] netlink: 'syz.2.7005': attribute type 4 has an invalid length.
[  450.501091][T27253] bond50: (slave geneve4): Releasing active interface
[  450.503825][T27253] bond50: (slave geneve4): the permanent HWaddr of slave - 82:0a:e9:f4:59:90 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  450.514088][T27253] bond50: (slave ip6gretap3): making interface the new active one
[  450.519844][T27253] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  450.523697][T27253] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  450.539984][T27253] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  450.542580][T27253] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  450.562005][T27253] bond50: (slave ip6gretap3): Releasing active interface
[  450.649477][T27267] netlink: zone id is out of range
[  450.652502][T27267] netlink: zone id is out of range
[  450.654808][T27267] netlink: zone id is out of range
[  450.656955][T27267] netlink: zone id is out of range
[  450.659907][T27267] netlink: zone id is out of range
[  450.667740][T27267] netlink: zone id is out of range
[  450.669980][T27267] netlink: zone id is out of range
[  450.673869][T27267] netlink: zone id is out of range
[  450.676237][T27267] netlink: zone id is out of range
[  450.678344][T27267] netlink: zone id is out of range
[  451.113195][T27286] __nla_validate_parse: 57 callbacks suppressed
[  451.113222][T27286] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7028'.
[  451.652948][T27318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7041'.
[  451.790158][T27329] bridge0: failed insert local address into bridge forwarding table
[  451.809135][T27329] xt_CT: You must specify a L4 protocol and not use inversions on it
[  451.881414][T27338] bridge0: entered promiscuous mode
[  452.389924][T27366] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7058'.
[  452.596354][T27385] xt_l2tp: v2 tid > 0xffff: 4294967295
[  452.951779][T27403] validate_nla: 6 callbacks suppressed
[  452.951794][T27403] netlink: 'syz.0.7069': attribute type 1 has an invalid length.
[  452.965630][T27403] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.7069'.
[  453.009852][T27412] x_tables: duplicate underflow at hook 3
[  453.019348][T27418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7072'.
[  453.037769][T27420] netlink: 'syz.2.7073': attribute type 12 has an invalid length.
[  453.129071][T27428] SET target dimension over the limit!
[  453.142452][T27426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7076'.
[  453.146117][T27426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7076'.
[  453.409834][T27448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7082'.
[  453.413293][T27451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7084'.
[  453.438687][T27453] sctp: [Deprecated]: syz.1.7083 (pid 27453) Use of struct sctp_assoc_value in delayed_ack socket option.
[  453.438687][T27453] Use struct sctp_sack_info instead
[  453.446911][T27454] sctp: [Deprecated]: syz.1.7083 (pid 27454) Use of struct sctp_assoc_value in delayed_ack socket option.
[  453.446911][T27454] Use struct sctp_sack_info instead
[  453.622828][T27469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7088'.
[  454.127094][T27509] netlink: 'syz.1.7096': attribute type 1 has an invalid length.
[  454.377220][T27527] C speed is unknown, defaulting to 1000
[  454.565746][T27527] lo speed is unknown, defaulting to 1000
[  454.569944][T27533] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  455.669640][T27583] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  455.724639][T27585] tipc: Invalid UDP bearer configuration
[  455.724692][T27585] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  456.158104][T27618] __nla_validate_parse: 4 callbacks suppressed
[  456.158116][T27618] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7130'.
[  456.213124][T27620] net_ratelimit: 2 callbacks suppressed
[  456.213179][T27620] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  456.225859][T27620] netlink: 17 bytes leftover after parsing attributes in process `syz.1.7131'.
[  456.229951][T27620] netlink: zone id is out of range
[  456.234122][T27620] netlink: zone id is out of range
[  456.237781][T27620] netlink: zone id is out of range
[  456.240130][T27620] netlink: zone id is out of range
[  456.242604][T27620] netlink: zone id is out of range
[  456.244911][T27620] netlink: zone id is out of range
[  456.247127][T27620] netlink: zone id is out of range
[  456.249318][T27620] netlink: zone id is out of range
[  456.251879][T27620] netlink: zone id is out of range
[  456.337884][T27624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7133'.
[  456.643828][T27641] netlink: 'syz.1.7138': attribute type 1 has an invalid length.
[  456.646385][T27641] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7138'.
[  456.758827][T27655] netlink: 'syz.2.7142': attribute type 12 has an invalid length.
[  456.858374][T27659] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7144'.
[  456.881365][T27662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7145'.
[  457.095363][T27667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7147'.
[  457.125499][T27676] netlink: 'syz.0.7150': attribute type 12 has an invalid length.
[  457.192374][T27679] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  457.287858][T27684] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7153'.
[  457.953316][T27695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7157'.
[  458.118399][T27703] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  458.344722][T27723] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  458.358730][T27722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7164'.
[  458.478022][T27732] xt_hashlimit: size too large, truncated to 1048576
[  458.989799][T27766] bridge24: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  459.310778][T27786] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  459.324404][T27782] C speed is unknown, defaulting to 1000
[  459.491879][T27782] lo speed is unknown, defaulting to 1000
[  459.897549][T27815] netlink: 'syz.0.7188': attribute type 21 has an invalid length.
[  459.901614][T27814] netlink: 'syz.1.7190': attribute type 1 has an invalid length.
[  459.933364][T27815] netlink: 'syz.0.7188': attribute type 6 has an invalid length.
[  459.940623][T27810] C speed is unknown, defaulting to 1000
[  460.055129][T27817] netlink: 'syz.1.7191': attribute type 20 has an invalid length.
[  460.060711][T27817] netlink: 'syz.1.7191': attribute type 21 has an invalid length.
[  460.239803][T27810] lo speed is unknown, defaulting to 1000
[  460.720477][T27835] netlink: 'syz.2.7195': attribute type 3 has an invalid length.
[  460.732540][T27835] netlink: 'syz.2.7195': attribute type 1 has an invalid length.
[  461.161532][T27863] __nla_validate_parse: 186 callbacks suppressed
[  461.161555][T27863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7205'.
[  461.213376][T27863] netlink: 'syz.0.7205': attribute type 2 has an invalid length.
[  461.388002][T27869] bridge25: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  461.402721][T27867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7207'.
[  461.412032][T27867] netlink: 83 bytes leftover after parsing attributes in process `syz.2.7207'.
[  461.471103][T27871] netlink: 'syz.2.7210': attribute type 1 has an invalid length.
[  461.473942][T27871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7210'.
[  461.582710][T27877] IPVS: set_ctl: invalid protocol: 136 172.30.0.3:20004
[  461.599366][T27881] netlink: 'syz.1.7214': attribute type 1 has an invalid length.
[  461.605531][T27881] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.7214'.
[  461.662337][T27883] C: left promiscuous mode
[  461.664478][T27883] tunl0: left promiscuous mode
[  461.666693][T27883] gre0: left promiscuous mode
[  461.668915][T27883] gretap0: left promiscuous mode
[  461.682956][T27883] erspan0: left promiscuous mode
[  461.685173][T27883] ip_vti0: left promiscuous mode
[  461.687355][T27883] v: left promiscuous mode
[  461.689290][T27883] sit0: left promiscuous mode
[  461.696730][T27883] ip6tnl0: left promiscuous mode
[  461.698662][T27883] ip6gre0: left promiscuous mode
[  461.700583][T27883] ip6gretap0: left promiscuous mode
[  461.704949][T27883] dummy0: left promiscuous mode
[  461.707679][T27883] nlmon0: left promiscuous mode
[  461.710112][T27883] caif0: left promiscuous mode
[  461.715477][T27883] 0: left allmulticast mode
[  461.717443][T27883] hsr_slave_0: left allmulticast mode
[  461.723616][T27883] syzkaller0: left promiscuous mode
[  461.725783][T27883] syzkaller0: left allmulticast mode
[  461.743558][T27883] vlan0: left promiscuous mode
[  461.748875][T27883] vlan1: left promiscuous mode
[  461.751842][T27883] vlan1: left allmulticast mode
[  461.754290][T27883] bond0: left allmulticast mode
[  461.756690][T27883] bridge18: left promiscuous mode
[  461.758692][T27883] bridge18: left allmulticast mode
[  461.846162][T27893] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7217'.
[  461.985182][T27908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7222'.
[  462.013763][T27899] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7219'.
[  462.016639][T27899] netlink: 59 bytes leftover after parsing attributes in process `syz.0.7219'.
[  462.026066][T27899] netlink: 59 bytes leftover after parsing attributes in process `syz.0.7219'.
[  462.774097][T27964] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  463.037198][T27992] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  463.621946][T28032] bond14: (slave bridge17): Releasing active interface
[  463.627812][T28032] bond15: (slave batadv2): Releasing active interface
[  463.638915][T28032] bond17: (slave bridge21): Releasing backup interface
[  463.683838][T28036] bridge17: entered promiscuous mode
[  463.686230][T28036] bridge17: entered allmulticast mode
[  463.703357][T28036] team0: Port device bridge17 added
[  463.918341][T28036] team0 (unregistering): Port device bridge17 removed
[  464.152840][T28056] 8021q: adding VLAN 0 to HW filter on device bond51
[  464.184269][T28062] bond51: (slave bridge18): making interface the new active one
[  464.188983][T28062] bond51: (slave bridge18): Enslaving as an active interface with an up link
[  464.234687][T28056] macvlan4: entered promiscuous mode
[  464.236745][T28056] macvlan4: entered allmulticast mode
[  464.239548][T28056] bond51: entered promiscuous mode
[  464.244793][T28056] bridge18: entered promiscuous mode
[  464.247396][T28056] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  464.250780][T28056] bond51: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  464.256671][T28056] bond51: left promiscuous mode
[  464.258335][T28056] bridge18: left promiscuous mode
[  464.680051][T28085] xt_TCPMSS: Only works on TCP SYN packets
[  465.196368][T28109] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  465.346441][T28115] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  465.431158][T28131] validate_nla: 16 callbacks suppressed
[  465.431173][T28131] netlink: 'syz.2.7296': attribute type 1 has an invalid length.
[  465.587099][T28145] netlink: 'syz.0.7303': attribute type 1 has an invalid length.
[  465.612398][T28147] netlink: 'syz.2.7304': attribute type 1 has an invalid length.
[  466.373216][T28208] __nla_validate_parse: 23 callbacks suppressed
[  466.373230][T28208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7324'.
[  466.434755][T28214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7325'.
[  466.497620][T28222] DL<Y: renamed from lo
[  466.614297][T28222] net_ratelimit: 74 callbacks suppressed
[  466.614319][T28222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.804441][T28240] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7333'.
[  466.861357][T28242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7334'.
[  466.913791][T28244] xt_l2tp: missing protocol rule (udp|l2tpip)
[  466.950278][T28246] netlink: 'syz.1.7336': attribute type 7 has an invalid length.
[  466.953249][T28246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7336'.
[  467.048570][T28249] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  467.170585][T28251] sctp: [Deprecated]: syz.1.7338 (pid 28251) Use of struct sctp_assoc_value in delayed_ack socket option.
[  467.170585][T28251] Use struct sctp_sack_info instead
[  467.181673][T28254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7339'.
[  467.184711][T28254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7339'.
[  467.188011][T28254] netlink: 'syz.0.7339': attribute type 4 has an invalid length.
[  467.249264][T28258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7340'.
[  467.299549][T28261] netlink: 172 bytes leftover after parsing attributes in process `syz.1.7341'.
[  467.359012][T28268] netlink: 'syz.2.7344': attribute type 1 has an invalid length.
[  467.389409][T28268] 8021q: adding VLAN 0 to HW filter on device bond63
[  467.401519][T28272] netlink: 'syz.0.7345': attribute type 1 has an invalid length.
[  467.406780][T28272] netlink: 5624 bytes leftover after parsing attributes in process `syz.0.7345'.
[  467.424889][T28268] 8021q: adding VLAN 0 to HW filter on device bond63
[  467.427853][T28268] bond63: (slave vxcan7): The slave device specified does not support setting the MAC address
[  467.433203][T28268] bond63: (slave vxcan7): Error -95 calling set_mac_address
[  467.485326][T28280] netlink: 'syz.0.7347': attribute type 1 has an invalid length.
[  467.495995][T28274] bond63: (slave bridge18): Enslaving as an active interface with a down link
[  467.524635][T28280] 8021q: adding VLAN 0 to HW filter on device bond21
[  467.622844][T28288] pimreg: entered allmulticast mode
[  467.702842][T28299] netlink: 'syz.0.7352': attribute type 1 has an invalid length.
[  467.746992][T28297] netlink: 'syz.1.7351': attribute type 83 has an invalid length.
[  467.883852][T28310] bond64: (slave bridge19): Enslaving as an active interface with an up link
[  468.473340][T28374] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  468.539359][   T61] block nbd1: Possible stuck request ffff888021df0000: control (read@0,1024B). Runtime 240 seconds
[  468.543785][   T61] block nbd1: Possible stuck request ffff888021e00000: control (read@1024,1024B). Runtime 240 seconds
[  468.548122][   T61] block nbd1: Possible stuck request ffff888021e00200: control (read@2048,1024B). Runtime 240 seconds
[  468.552700][   T61] block nbd1: Possible stuck request ffff888021e00400: control (read@3072,1024B). Runtime 240 seconds
[  468.820397][T28401] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  468.826205][T28401] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  468.829694][T28401] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  468.843319][T28401] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  468.846661][T28401] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  468.849644][T28401] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  468.854864][T28401] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  468.857729][T28401] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  468.861738][T28401] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  469.241901][T28425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  469.245045][T28425] IPv6: NLM_F_CREATE should be set when creating new route
[  469.248155][T28425] IPv6: NLM_F_CREATE should be set when creating new route
[  469.251165][T28425] IPv6: NLM_F_CREATE should be set when creating new route
[  469.255491][T28425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  469.355757][T28429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  469.385843][T28429] syzkaller0: entered promiscuous mode
[  469.387763][T28429] syzkaller0: entered allmulticast mode
[  469.390123][T28429] tipc: Resetting bearer <eth:syzkaller0>
[  469.405700][T28428] tipc: Resetting bearer <eth:syzkaller0>
[  471.072859][   T25] block nbd0: Possible stuck request ffff888021d90000: control (read@0,1024B). Runtime 60 seconds
[  471.077116][   T25] block nbd0: Possible stuck request ffff888021d90200: control (read@1024,1024B). Runtime 60 seconds
[  471.088783][   T25] block nbd0: Possible stuck request ffff888021d90400: control (read@2048,1024B). Runtime 60 seconds
[  471.093340][   T25] block nbd0: Possible stuck request ffff888021d90600: control (read@3072,1024B). Runtime 60 seconds
[  471.619526][T28428] tipc: Disabling bearer <eth:syzkaller0>
[  471.725646][T28455] __nla_validate_parse: 19 callbacks suppressed
[  471.725668][T28455] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7402'.
[  471.733430][T28455] net_ratelimit: 24 callbacks suppressed
[  471.733442][T28455] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  471.738390][T28455] openvswitch: netlink: Message has 1 unknown bytes.
[  471.742633][T28455] validate_nla: 2 callbacks suppressed
[  471.742644][T28455] netlink: 'syz.1.7402': attribute type 7 has an invalid length.
[  471.747325][T28455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7402'.
[  471.769107][T28460] netlink: 'syz.2.7403': attribute type 1 has an invalid length.
[  471.773245][T28460] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7403'.
[  471.866319][T28462] netlink: 'syz.0.7404': attribute type 1 has an invalid length.
[  472.250212][T28495] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  472.293982][T28497] xt_TCPMSS: Only works on TCP SYN packets
[  472.313909][T28497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7414'.
[  472.325293][T28497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7414'.
[  472.459543][T28501] netlink: 'syz.1.7415': attribute type 4 has an invalid length.
[  472.546897][T28521] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7420'.
[  472.595166][T28524] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7421'.
[  472.599124][T28524] netlink: 'syz.2.7421': attribute type 29 has an invalid length.
[  472.690206][T28529] batadv_slave_1: entered promiscuous mode
[  472.698412][T28532] netlink: 'syz.2.7424': attribute type 1 has an invalid length.
[  472.733444][T28532] bond66: (slave gretap4): making interface the new active one
[  472.737328][T28532] bond66: (slave gretap4): Enslaving as an active interface with an up link
[  472.810659][T28541] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  472.898094][T28547] netlink: 'syz.1.7428': attribute type 1 has an invalid length.
[  472.898104][T28549] netlink: 'syz.1.7428': attribute type 1 has an invalid length.
[  472.948573][T28549] 8021q: adding VLAN 0 to HW filter on device bond53
[  472.957567][T28549] bond52: (slave bond53): making interface the new active one
[  472.960390][T28549] bond52: (slave bond53): Enslaving as an active interface with an up link
[  472.996851][T28547] bond52: (slave gretap4): Enslaving as a backup interface with an up link
[  473.009376][T28547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7428'.
[  473.018347][T28556] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.7431'.
[  473.024405][T28556] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.7431'.
[  473.033521][T28547] 8021q: adding VLAN 0 to HW filter on device bond52
[  473.054309][T28549] : entered promiscuous mode
[  473.229091][T28566] C speed is unknown, defaulting to 1000
[  473.352905][T28566] DL<Y speed is unknown, defaulting to 1000
[  473.565721][T28528] batadv_slave_1: left promiscuous mode
[  473.604375][T28584] syzkaller0: entered promiscuous mode
[  473.606190][T28584] syzkaller0: entered allmulticast mode
[  473.888491][T28603] "syz.2.7444" (28603) uses obsolete ecb(arc4) skcipher
[  474.519039][T28649] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  475.577019][T28676] netlink: 'syz.1.7467': attribute type 1 has an invalid length.
[  475.624646][T28677] _Z`Ԁ@: entered promiscuous mode
[  475.685704][T28684] netlink: 'syz.2.7473': attribute type 1 has an invalid length.
[  475.751189][T28691] bridge20: entered promiscuous mode
[  475.753050][T28691] bridge20: entered allmulticast mode
[  476.088531][T28719] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  476.096296][T28719] syzkaller0: MTU too low for tipc bearer
[  476.098481][T28719] tipc: Disabling bearer <eth:syzkaller0>
[  476.257368][T28726] xt_l2tp: v2 tid > 0xffff: 4294967295
[  476.641832][T28743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  476.893770][T28747] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  476.947201][T28751] __nla_validate_parse: 11 callbacks suppressed
[  476.947213][T28751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7495'.
[  477.436424][T28784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7506'.
[  477.438248][T28786] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7507'.
[  477.624243][T28801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7511'.
[  477.631928][T28801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7511'.
[  477.667105][T28803] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  477.678688][T28803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7512'.
[  477.686968][T28803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7512'.
[  477.706019][T28805] netlink: 'syz.2.7513': attribute type 1 has an invalid length.
[  477.709050][T28805] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7513'.
[  477.969953][T28814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7516'.
[  478.103963][T28820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  478.110378][T28833] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.7518'.
[  478.198304][T28839] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  478.599136][T28863] DL<Y: entered promiscuous mode
[  478.608333][T28863] tunl0: entered promiscuous mode
[  478.614959][T28863] gre0: entered promiscuous mode
[  478.618502][T28863] 0{X: entered promiscuous mode
[  478.629176][T28863] erspan0: entered promiscuous mode
[  478.634681][T28863] ip_vti0: entered promiscuous mode
[  478.637819][T28863] ip6_vti0: entered promiscuous mode
[  478.645981][T28863] sit0: entered promiscuous mode
[  478.649431][T28863] ip6tnl0: entered promiscuous mode
[  478.654040][T28863] ip6gre0: entered promiscuous mode
[  478.656987][T28863] tipc: Resetting bearer <ib:ip6gre0>
[  478.659671][T28863] tipc: Resetting bearer <ib:ip6gre0>
[  478.666698][T28863] ip6gretap0: entered promiscuous mode
[  478.670790][T28863] vcan0: entered promiscuous mode
[  478.676905][T28863] dummy0: entered promiscuous mode
[  478.679855][T28863] nlmon0: entered promiscuous mode
[  478.687346][T28863] caif0: entered promiscuous mode
[  478.689577][T28863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  478.697480][   T10] DL<Y speed is unknown, defaulting to 1000
[  478.700246][   T10] syz0: Port: 1 Link ACTIVE
[  478.711232][   T10] DL<Y speed is unknown, defaulting to 1000
[  478.775715][T28866] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  478.897141][T28870] netlink: 'syz.2.7532': attribute type 83 has an invalid length.
[  478.901327][T28874] netlink: 'syz.1.7533': attribute type 3 has an invalid length.
[  478.994742][T28878] erspan0: left allmulticast mode
[  479.007987][T28878] geneve1: left promiscuous mode
[  479.010405][T28878] geneve1: left allmulticast mode
[  479.024781][T28878] macvlan0: left promiscuous mode
[  479.028820][T28878] netdevsim0: left allmulticast mode
[  479.034093][T28878] vlan0: left promiscuous mode
[  479.036091][T28878] bond0: left promiscuous mode
[  479.048430][T28878] bridge12: left promiscuous mode
[  479.053703][T28878] bond45: left promiscuous mode
[  479.055953][T28878] bond45: left allmulticast mode
[  479.076513][T28878] veth29: left promiscuous mode
[  479.102892][T28878] veth31: left allmulticast mode
[  479.105548][T28878] bridge17: left promiscuous mode
[  479.107763][T28878] bridge17: left allmulticast mode
[  479.116811][T28878] vlan1: left allmulticast mode
[  479.118958][T28878] bridge_slave_0: left allmulticast mode
[  479.422928][T28895] netlink: 'syz.1.7538': attribute type 1 has an invalid length.
[  479.453750][T28895] 8021q: adding VLAN 0 to HW filter on device bond54
[  479.488177][T28893] 8021q: adding VLAN 0 to HW filter on device bond54
[  479.495306][T28893] bond54: (slave vxcan1): The slave device specified does not support setting the MAC address
[  479.501082][T28893] bond54: (slave vxcan1): Error -95 calling set_mac_address
[  479.614371][T28903] netlink: 'syz.1.7542': attribute type 5 has an invalid length.
[  479.632724][T28906] netlink: 'syz.1.7542': attribute type 5 has an invalid length.
[  479.866160][T28922] xt_CT: You must specify a L4 protocol and not use inversions on it
[  479.958703][T28927] C speed is unknown, defaulting to 1000
[  479.994557][T28929] ip_vti0: entered promiscuous mode
[  480.032622][   T25] block nbd3: Possible stuck request ffff888021ea8000: control (read@0,1024B). Runtime 60 seconds
[  480.037411][   T25] block nbd3: Possible stuck request ffff888021ea8200: control (read@1024,1024B). Runtime 60 seconds
[  480.042396][   T25] block nbd3: Possible stuck request ffff888021ea8400: control (read@2048,1024B). Runtime 60 seconds
[  480.046834][   T25] block nbd3: Possible stuck request ffff888021ea8600: control (read@3072,1024B). Runtime 60 seconds
[  480.226116][T28927] DL<Y speed is unknown, defaulting to 1000
[  480.484281][T28946] atomic_op ffff8881125ed198 conn xmit_atomic 0000000000000000
[  480.758437][T28958] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  480.951871][T28959] C speed is unknown, defaulting to 1000
[  481.380405][T28981] IPv6: NLM_F_CREATE should be specified when creating new route
[  481.491642][T28959] DL<Y speed is unknown, defaulting to 1000
[  482.434511][T29006] netlink: 'syz.2.7576': attribute type 5 has an invalid length.
[  482.577573][T29020] netlink: 'syz.1.7580': attribute type 1 has an invalid length.
[  482.615298][T29024] __nla_validate_parse: 11 callbacks suppressed
[  482.615312][T29024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7577'.
[  482.640493][T29026] netlink: 'syz.1.7582': attribute type 1 has an invalid length.
[  482.643125][T29026] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7582'.
[  482.731850][T29032] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  482.800572][T29037] netlink: 'syz.1.7585': attribute type 1 has an invalid length.
[  482.810707][T29037] netlink: 'syz.1.7585': attribute type 10 has an invalid length.
[  482.816424][T29037] netlink: 208 bytes leftover after parsing attributes in process `syz.1.7585'.
[  482.942350][T29041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7587'.
[  483.021067][T29054] netlink: 'syz.2.7590': attribute type 1 has an invalid length.
[  483.072456][T29054] bond67: (slave vti1): The slave device specified does not support setting the MAC address
[  483.076825][T29054] bond67: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  483.091046][T29054] bond67: (slave vti1): making interface the new active one
[  483.095148][T29054] bond67: (slave vti1): Enslaving as an active interface with an up link
[  483.269124][T29072] netlink: 288 bytes leftover after parsing attributes in process `syz.0.7597'.
[  483.526098][T29092] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7603'.
[  483.532055][T29092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7603'.
[  483.554637][T29096] netlink: 'syz.0.7605': attribute type 1 has an invalid length.
[  483.583895][T29096] 8021q: adding VLAN 0 to HW filter on device bond22
[  483.614114][T29096] veth23: entered promiscuous mode
[  483.619602][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  483.624109][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.706609][T29103] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  483.710392][T29102] syzkaller0: entered promiscuous mode
[  483.725967][T29102] syzkaller0: entered allmulticast mode
[  483.775015][T29107] tipc: Resetting bearer <eth:syzkaller0>
[  483.787882][T29101] tipc: Resetting bearer <eth:syzkaller0>
[  483.833435][T29101] tipc: Disabling bearer <eth:syzkaller0>
[  483.970722][T29113] tipc: Resetting bearer <ib:ip6gre0>
[  483.978215][T29113] ip6gre0: left promiscuous mode
[  483.984352][T29113] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[  483.990571][T29113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7609'.
[  483.996383][T29113] netlink: 312 bytes leftover after parsing attributes in process `syz.2.7609'.
[  483.999739][T29113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7609'.
[  484.004368][T29123] sock: sock_set_timeout: `syz.1.7613' (pid 29123) tries to set negative timeout
[  484.050743][T29129] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  484.347045][T29150] netlink: 'syz.2.7622': attribute type 1 has an invalid length.
[  484.702526][T29161] netlink: 'syz.2.7626': attribute type 3 has an invalid length.
[  484.813642][T29169] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  484.934516][T29172] IPv6: NLM_F_CREATE should be specified when creating new route
[  485.108986][T29185] netlink: 'syz.2.7635': attribute type 1 has an invalid length.
[  485.199036][T29191] syz.0.7637 (29191) used obsolete PPPIOCDETACH ioctl
[  485.213262][T29190] xt_nat: multiple ranges no longer supported
[  485.228356][T29194] ieee802154 phy0 wpan0: encryption failed: -22
[  485.304450][T29197] netlink: 'syz.2.7641': attribute type 10 has an invalid length.
[  485.406971][T29206] sock: sock_set_timeout: `syz.0.7644' (pid 29206) tries to set negative timeout
[  485.512233][T29214] netlink: 'syz.2.7647': attribute type 1 has an invalid length.
[  485.814826][T29241] netlink: 'syz.0.7653': attribute type 13 has an invalid length.
[  485.906332][T29241] C speed is unknown, defaulting to 1000
[  486.171122][T29241] DL<Y speed is unknown, defaulting to 1000
[  486.531931][T29263] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  487.875759][T29341] __nla_validate_parse: 23 callbacks suppressed
[  487.875773][T29341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7688'.
[  487.883091][T29341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7688'.
[  487.886456][T29341] netlink: 31 bytes leftover after parsing attributes in process `syz.1.7688'.
[  487.894507][T29341] validate_nla: 7 callbacks suppressed
[  487.894520][T29341] netlink: 'syz.1.7688': attribute type 3 has an invalid length.
[  487.899365][T29341] netlink: 'syz.1.7688': attribute type 2 has an invalid length.
[  487.906426][T29341] netlink: 31 bytes leftover after parsing attributes in process `syz.1.7688'.
[  487.910492][T29341] netlink: 'syz.1.7688': attribute type 2 has an invalid length.
[  487.947815][T29354] netlink: 184 bytes leftover after parsing attributes in process `syz.2.7691'.
[  488.013786][T29359] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  488.089454][T29367] bridge0: port 1(gretap0) entered blocking state
[  488.097125][T29367] bridge0: port 1(gretap0) entered disabled state
[  488.099411][T29367] gretap0: entered allmulticast mode
[  488.102753][T29367] gretap0: entered promiscuous mode
[  488.123659][T29367] sctp: [Deprecated]: syz.0.7695 (pid 29367) Use of int in maxseg socket option.
[  488.123659][T29367] Use struct sctp_assoc_value instead
[  488.195141][T29379] netlink: 'syz.0.7695': attribute type 5 has an invalid length.
[  488.207913][T29371] SET target dimension over the limit!
[  488.238566][T29380] C speed is unknown, defaulting to 1000
[  488.333047][T29386] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  488.469236][T29380] DL<Y speed is unknown, defaulting to 1000
[  488.578130][T29394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7704'.
[  488.605602][T29394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7704'.
[  488.609048][T29394] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7704'.
[  488.819125][T29399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7706'.
[  488.885218][T29401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7707'.
[  489.063210][T29406] 8021q: adding VLAN 0 to HW filter on device bond55
[  489.107015][T29411] bond8: (slave macvlan0): Error -22 calling dev_set_mtu
[  489.427885][T29429] netlink: 'syz.2.7717': attribute type 3 has an invalid length.
[  489.430659][T29429] netlink: 'syz.2.7717': attribute type 2 has an invalid length.
[  489.448842][T29429] netlink: 'syz.2.7717': attribute type 2 has an invalid length.
[  489.723891][T29443] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  489.914165][T29453] netlink: 'syz.2.7723': attribute type 1 has an invalid length.
[  490.011635][T29457] netlink: 'syz.2.7725': attribute type 21 has an invalid length.
[  490.015066][T29457] netlink: 'syz.2.7725': attribute type 1 has an invalid length.
[  490.206512][T29467] IPVS: Error connecting to the multicast addr
[  490.339611][T29474] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  491.028959][T29496] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  491.081104][T29498] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  491.086880][T29498] openvswitch: netlink: Actions may not be safe on all matching packets
[  491.357181][T29510] bond51: (slave bridge18): Releasing active interface
[  491.363412][T29510] bond52: (slave bond53): Releasing backup interface
[  491.366384][T29510] bond52: (slave bond53): the permanent HWaddr of slave - 8a:61:1b:02:d5:07 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  491.384843][T29510] bond52: (slave gretap4): making interface the new active one
[  491.393085][T29520] SET target dimension over the limit!
[  491.396266][T29510] bond52: (slave gretap4): Releasing backup interface
[  491.597076][T29535] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  492.567285][T29591] 8021q: adding VLAN 0 to HW filter on device bond57
[  492.600101][T29591] bond57: (slave bridge19): making interface the new active one
[  492.612287][T29591] bond57: (slave bridge19): Enslaving as an active interface with an up link
[  493.022690][T29614] __nla_validate_parse: 31 callbacks suppressed
[  493.022711][T29614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7782'.
[  493.065689][T29616] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  493.135765][T29621] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  493.725983][T29638] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7788'.
[  493.758682][T29639] validate_nla: 7 callbacks suppressed
[  493.758701][T29639] netlink: 'syz.0.7790': attribute type 1 has an invalid length.
[  494.311474][T29641] netlink: 'syz.0.7790': attribute type 1 has an invalid length.
[  494.347102][T29652] syzkaller0: entered promiscuous mode
[  494.349512][T29652] syzkaller0: entered allmulticast mode
[  494.401188][T29654] xt_hashlimit: size too large, truncated to 1048576
[  494.479501][T29657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7794'.
[  494.488182][T29657] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  494.498045][T29657] openvswitch: netlink: Message has 8 unknown bytes.
[  494.508058][T29657] xt_bpf: check failed: parse error
[  494.583193][T29660] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  494.646818][T29662] netlink: 'syz.1.7796': attribute type 1 has an invalid length.
[  494.680274][T29667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7797'.
[  494.683654][T29667] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  494.687197][T29667] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  494.811312][T29680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7803'.
[  494.942357][T29690] netlink: 'syz.0.7807': attribute type 1 has an invalid length.
[  495.001558][T29698] xt_TCPMSS: Only works on TCP SYN packets
[  495.123032][T29704] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  495.144221][T29704] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7810'.
[  495.158105][T29704] sctp: [Deprecated]: syz.0.7810 (pid 29704) Use of int in maxseg socket option.
[  495.158105][T29704] Use struct sctp_assoc_value instead
[  495.178293][T29689] infiniband syz!: set down
[  495.180268][T29689] infiniband syz!: added team_slave_0
[  495.192093][T29689] syz!: rxe_create_cq: returned err = -12
[  495.194008][T29689] infiniband syz!: Couldn't create ib_mad CQ
[  495.195972][T29689] infiniband syz!: Couldn't open port 1
[  495.206944][T29709] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7813'.
[  495.214552][T29712] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7813'.
[  495.218310][T29709] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7813'.
[  495.257206][T29689] RDS/IB: syz!: added
[  495.258661][T29689] smc: adding ib device syz! with port count 1
[  495.260973][T29689] smc:    ib device syz! port 1 has pnetid 
[  495.357119][T29719] sctp: [Deprecated]: syz.1.7815 (pid 29719) Use of int in maxseg socket option.
[  495.357119][T29719] Use struct sctp_assoc_value instead
[  495.411989][T29726] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1294) !
[  495.578065][T29735] x_tables: duplicate underflow at hook 3
[  495.669447][T29741] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  495.764726][T29746] netlink: 'syz.0.7821': attribute type 4 has an invalid length.
[  496.019178][T29758] netlink: 324 bytes leftover after parsing attributes in process `syz.0.7823'.
[  496.058064][T29760] netlink: 'syz.2.7824': attribute type 10 has an invalid length.
[  496.069521][T29760] batman_adv: batadv0: Adding interface: 
[  496.071784][T29760] batman_adv: batadv0: The MTU of interface  is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  496.078239][T29760] batman_adv: batadv0: Interface activated: 
[  496.350030][T29772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  496.464278][T29793] xt_hashlimit: size too large, truncated to 1048576
[  496.467757][T29793] xt_hashlimit: max too large, truncated to 1048576
[  497.022476][T29829] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  497.119141][T29835] syzkaller0: entered promiscuous mode
[  497.121141][T29835] syzkaller0: entered allmulticast mode
[  497.152223][T29824] netlink: 'syz.2.7843': attribute type 1 has an invalid length.
[  497.155670][T29824] nbd: error processing sock list
[  497.159924][T29824] block nbd4: shutting down sockets
[  497.177191][T29836] netlink: 'syz.1.7846': attribute type 3 has an invalid length.
[  497.180191][T29836] netlink: 'syz.1.7846': attribute type 2 has an invalid length.
[  497.189154][T29836] netlink: 'syz.1.7846': attribute type 2 has an invalid length.
[  497.313449][T29825] nbd: error processing sock list
[  497.315579][T29825] block nbd4: shutting down sockets
[  497.406870][T29843] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ0
[  497.430904][T29843] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ0
[  497.549414][T29861] x_tables: duplicate underflow at hook 2
[  497.652281][T29872] x_tables: duplicate underflow at hook 1
[  498.415439][T29937] __nla_validate_parse: 13 callbacks suppressed
[  498.415460][T29937] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7880'.
[  498.593632][   T61] block nbd1: Possible stuck request ffff888021df0000: control (read@0,1024B). Runtime 270 seconds
[  498.597742][   T61] block nbd1: Possible stuck request ffff888021e00000: control (read@1024,1024B). Runtime 270 seconds
[  498.601391][   T61] block nbd1: Possible stuck request ffff888021e00200: control (read@2048,1024B). Runtime 270 seconds
[  498.605364][   T61] block nbd1: Possible stuck request ffff888021e00400: control (read@3072,1024B). Runtime 270 seconds
[  498.717305][T29951] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  498.768063][T29956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7888'.
[  499.012300][T29972] validate_nla: 2 callbacks suppressed
[  499.012323][T29972] netlink: 'syz.2.7891': attribute type 1 has an invalid length.
[  499.029443][T29973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7892'.
[  499.041099][T29973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7892'.
[  499.044668][T29973] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7892'.
[  499.048160][T29973] netlink: 'syz.0.7892': attribute type 3 has an invalid length.
[  499.051841][T29973] netlink: 'syz.0.7892': attribute type 2 has an invalid length.
[  499.054955][T29973] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7892'.
[  499.058498][T29973] netlink: 'syz.0.7892': attribute type 2 has an invalid length.
[  499.164291][T29979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7895'.
[  499.268744][T29986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7896'.
[  499.276007][T29986] dummy0: entered allmulticast mode
[  499.287190][T29980] dummy0: left allmulticast mode
[  499.298359][T29988] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7898'.
[  499.805387][T30020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7911'.
[  499.964979][T30024] netlink: 'syz.2.7912': attribute type 11 has an invalid length.
[  500.402993][   T12] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  501.161086][   T25] block nbd0: Possible stuck request ffff888021d90000: control (read@0,1024B). Runtime 90 seconds
[  501.165312][   T25] block nbd0: Possible stuck request ffff888021d90200: control (read@1024,1024B). Runtime 90 seconds
[  501.170203][   T25] block nbd0: Possible stuck request ffff888021d90400: control (read@2048,1024B). Runtime 90 seconds
[  501.174750][   T25] block nbd0: Possible stuck request ffff888021d90600: control (read@3072,1024B). Runtime 90 seconds
[  501.180256][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  501.388425][T30077] netlink: 'syz.1.7930': attribute type 1 has an invalid length.
[  501.398760][T30080] netlink: 'syz.1.7930': attribute type 1 has an invalid length.
[  501.496809][T30085] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue
[  502.513610][T30120] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  502.581483][T30124] IPv6: NLM_F_CREATE should be specified when creating new route
[  502.641581][T30129] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  502.878395][T30141] netlink: 'syz.1.7954': attribute type 3 has an invalid length.
[  502.999085][T30146] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  503.155142][T30155] netlink: 'syz.2.7959': attribute type 1 has an invalid length.
[  503.158465][T30155] netlink: 'syz.2.7959': attribute type 1 has an invalid length.
[  503.281495][T30162] xt_socket: unknown flags 0xd0
[  503.503720][T30176] netlink: 'syz.1.7966': attribute type 1 has an invalid length.
[  503.530336][T30176] 8021q: adding VLAN 0 to HW filter on device bond58
[  503.544141][T30179] __nla_validate_parse: 11 callbacks suppressed
[  503.544153][T30179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7967'.
[  503.550106][T30179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7967'.
[  503.559912][T30176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7966'.
[  503.718290][T30189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7971'.
[  503.830168][T30200] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7974'.
[  504.199112][T30217] validate_nla: 1 callbacks suppressed
[  504.199130][T30217] netlink: 'syz.2.7982': attribute type 2 has an invalid length.
[  504.216425][T30217] : entered promiscuous mode
[  504.393098][T30233] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  504.517290][T30240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7991'.
[  504.545026][T30243] netlink: 'syz.0.7992': attribute type 2 has an invalid length.
[  504.553119][T30243] : entered promiscuous mode
[  504.584492][T30240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7991'.
[  504.598507][T30247] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  504.606783][T30247] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  504.746206][T30258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7997'.
[  504.925062][T30272] netlink: 9 bytes leftover after parsing attributes in process `syz.0.8001'.
[  504.928018][T30272] 1: renamed from 70
[  504.933289][T30272] 1: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  504.941555][T30272] 1: entered allmulticast mode
[  504.943134][T30272] hsr_slave_0: entered allmulticast mode
[  504.951797][T30272] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check.
[  504.972015][T30273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8002'.
[  505.078484][T30280] IPv6: NLM_F_CREATE should be specified when creating new route
[  505.198569][T30285] Timeout policy `syz0' can only be used by L3 protocol number 64507
[  505.313019][T30285] C speed is unknown, defaulting to 1000
[  505.523365][T30303] xt_CT: No such helper "syz0"
[  505.528751][T30285] DL<Y speed is unknown, defaulting to 1000
[  505.717102][T30313] batadv_slave_1: entered promiscuous mode
[  505.913507][T30320] bridge: RTM_NEWNEIGH with invalid state 0x1
[  506.332708][T30342] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  506.705026][T30362] netlink: 'syz.2.8026': attribute type 1 has an invalid length.
[  506.892865][T30377] netlink: 'syz.0.8032': attribute type 3 has an invalid length.
[  506.896128][T30377] netlink: 'syz.0.8032': attribute type 2 has an invalid length.
[  506.899058][T30377] netlink: 'syz.0.8032': attribute type 2 has an invalid length.
[  506.997372][T30380] IPv6: NLM_F_CREATE should be specified when creating new route
[  507.283659][T30392] netlink: 'syz.0.8039': attribute type 3 has an invalid length.
[  507.286619][T30392] netlink: 'syz.0.8039': attribute type 2 has an invalid length.
[  507.289231][T30392] netlink: 'syz.0.8039': attribute type 2 has an invalid length.
[  507.578856][T30408] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  507.658125][T30410] syzkaller1: entered promiscuous mode
[  507.660328][T30410] syzkaller1: entered allmulticast mode
[  507.810084][T30415] sctp: [Deprecated]: syz.0.8046 (pid 30415) Use of int in max_burst socket option.
[  507.810084][T30415] Use struct sctp_assoc_value instead
[  507.965720][T30426] IPv6: NLM_F_CREATE should be specified when creating new route
[  508.223997][T30439] netlink: 'syz.2.8053': attribute type 3 has an invalid length.
[  508.394727][T30443] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  508.479227][T30450] IPv6: NLM_F_REPLACE set, but no existing node found!
[  509.058434][T30468] __nla_validate_parse: 36 callbacks suppressed
[  509.058455][T30468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8064'.
[  509.267765][T30490] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  509.392907][T30498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8073'.
[  509.416717][T30502] validate_nla: 2 callbacks suppressed
[  509.416731][T30502] netlink: 'syz.2.8075': attribute type 1 has an invalid length.
[  509.424653][T30502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8075'.
[  509.429548][T30500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8074'.
[  509.451688][T30500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8074'.
[  509.454804][T30500] netlink: 31 bytes leftover after parsing attributes in process `syz.0.8074'.
[  509.457780][T30500] netlink: 'syz.0.8074': attribute type 3 has an invalid length.
[  509.460182][T30500] netlink: 'syz.0.8074': attribute type 2 has an invalid length.
[  509.469682][T30500] netlink: 31 bytes leftover after parsing attributes in process `syz.0.8074'.
[  509.476578][T30500] netlink: 'syz.0.8074': attribute type 2 has an invalid length.
[  509.481267][T30507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8077'.
[  509.522606][T30510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8078'.
[  509.525814][T30510] netlink: 'syz.2.8078': attribute type 30 has an invalid length.
[  509.549596][T30510] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  509.552827][T30510] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  509.555397][T30510] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  509.557914][T30510] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  509.572838][T30510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8078'.
[  509.575655][T30510] netlink: 'syz.2.8078': attribute type 30 has an invalid length.
[  509.617720][T30514] Cannot find add_set index 3 as target
[  509.727516][ T5280] udevd[5280]: worker [14230] /devices/virtual/block/nbd0 is taking a long time
[  509.730679][ T5280] udevd[5280]: worker [14228] /devices/virtual/block/nbd3 is taking a long time
[  509.739645][T30534] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  509.876593][T30543] syzkaller0: entered promiscuous mode
[  509.878684][T30543] syzkaller0: entered allmulticast mode
[  510.031601][   T47] page_pool_release_retry() stalled pool shutdown: id 94, 1 inflight 60 sec
[  510.117685][   T25] block nbd3: Possible stuck request ffff888021ea8000: control (read@0,1024B). Runtime 90 seconds
[  510.123660][   T25] block nbd3: Possible stuck request ffff888021ea8200: control (read@1024,1024B). Runtime 90 seconds
[  510.128404][   T25] block nbd3: Possible stuck request ffff888021ea8400: control (read@2048,1024B). Runtime 90 seconds
[  510.134383][   T25] block nbd3: Possible stuck request ffff888021ea8600: control (read@3072,1024B). Runtime 90 seconds
[  510.230136][T17940] nci: nci_ntf_packet: unknown ntf opcode 0x206
[  510.963666][T30562] netlink: 'syz.0.8096': attribute type 1 has an invalid length.
[  512.347585][T30561] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  512.489981][T30572] netlink: 'syz.2.8098': attribute type 3 has an invalid length.
[  512.493548][T30572] netlink: 'syz.2.8098': attribute type 2 has an invalid length.
[  512.496162][T30572] netlink: 'syz.2.8098': attribute type 2 has an invalid length.
[  512.505343][T30574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  512.507908][T30574] IPv6: NLM_F_CREATE should be set when creating new route
[  512.510235][T30574] IPv6: NLM_F_CREATE should be set when creating new route
[  512.596560][T30579] sch_tbf: burst 88 is lower than device veth29 mtu (1514) !
[  512.670310][T30586] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  513.944011][T30664] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  513.994310][T30669] IPv6: NLM_F_REPLACE set, but no existing node found!
[  514.088320][T30675] __nla_validate_parse: 20 callbacks suppressed
[  514.088335][T30675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8134'.
[  514.646489][T30712] validate_nla: 6 callbacks suppressed
[  514.646503][T30712] netlink: 'syz.1.8144': attribute type 1 has an invalid length.
[  514.660303][T30712] netlink: 'syz.1.8144': attribute type 4 has an invalid length.
[  514.664276][T30712] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8144'.
[  514.743682][T30717] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  514.771646][T30717] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8145'.
[  514.781627][T30717] macvlan1: entered allmulticast mode
[  514.788555][T30717] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  514.802772][T30721] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  514.806128][T30720] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  514.916700][T30731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8148'.
[  514.980717][T30734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8149'.
[  515.061538][T30737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8150'.
[  515.089904][T30737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8150'.
[  515.454199][T30755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8155'.
[  515.470575][T30755] dvmrp8: left allmulticast mode
[  515.556766][T30755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8155'.
[  515.763460][T30773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8159'.
[  515.954962][T30775] xt_limit: Overflow, try lower: 262144/524288
[  516.074686][T30785] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  516.148708][T30788] syzkaller1: entered promiscuous mode
[  516.151195][T30788] syzkaller1: entered allmulticast mode
[  516.300003][T30795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  516.325090][T30797] tipc: Disabling bearer <eth:syzkaller0>
[  516.443299][T30805] netlink: 'syz.1.8172': attribute type 7 has an invalid length.
[  516.449235][T30805] netlink: 'syz.1.8172': attribute type 3 has an invalid length.
[  516.577763][T30814] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  516.586479][T30814] xt_TCPMSS: Only works on TCP SYN packets
[  516.785930][T30831] batadv4: entered allmulticast mode
[  516.791215][T30831] 8021q: adding VLAN 0 to HW filter on device batadv4
[  516.800301][T30832] xt_hashlimit: size too large, truncated to 1048576
[  518.245496][T30878] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  518.929848][T30900] netlink: 'syz.0.8202': attribute type 1 has an invalid length.
[  519.041864][T30911] netlink: 'syz.0.8205': attribute type 1 has an invalid length.
[  519.177922][T30917] __nla_validate_parse: 22 callbacks suppressed
[  519.177942][T30917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8208'.
[  519.357417][T30927] netlink: 'syz.1.8211': attribute type 4 has an invalid length.
[  519.407590][T30932] veth0_to_bridge: entered promiscuous mode
[  519.421631][T30931] veth0_to_bridge: left promiscuous mode
[  519.560356][T30939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8216'.
[  519.573561][T30939] pim6reg: entered allmulticast mode
[  519.577057][T30939] pim6reg: left allmulticast mode
[  519.579379][T30939] bridge0: left allmulticast mode
[  519.639170][T30943] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.8218'.
[  519.699424][T30946] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8219'.
[  520.055471][T30974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8227'.
[  520.069720][T30979] netlink: 'syz.0.8228': attribute type 1 has an invalid length.
[  520.143521][T30982] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  520.249488][T30996] netlink: 'syz.2.8234': attribute type 1 has an invalid length.
[  520.257934][T30982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8229'.
[  520.262182][T30996] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8234'.
[  520.333943][T30998] bond57: (slave bridge19): Releasing active interface
[  520.355491][T31002] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma?
[  520.427572][T31007] netlink: 'syz.2.8238': attribute type 2 has an invalid length.
[  520.597536][T31023] netlink: 'syz.1.8243': attribute type 1 has an invalid length.
[  520.605006][T31023] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8243'.
[  520.669322][T31029] openvswitch: netlink: Duplicate or invalid key (type 0).
[  520.674342][T31029] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  521.397458][T31049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8250'.
[  521.512052][T31053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8252'.
[  521.514940][T31053] netlink: 'syz.0.8252': attribute type 3 has an invalid length.
[  521.517486][T31053] netlink: 'syz.0.8252': attribute type 2 has an invalid length.
[  521.519879][T31053] netlink: 'syz.0.8252': attribute type 2 has an invalid length.
[  521.860457][T31069] netlink: 'syz.0.8259': attribute type 3 has an invalid length.
[  521.864516][T31069] netlink: 'syz.0.8259': attribute type 2 has an invalid length.
[  521.867816][T31069] netlink: 'syz.0.8259': attribute type 2 has an invalid length.
[  523.006503][T31119] 8021q: adding VLAN 0 to HW filter on device bond25
[  523.016163][T31119] bond25: entered promiscuous mode
[  523.018333][T31119] bond0: (slave bond25): Enslaving as a backup interface with an up link
[  523.099217][T31124] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  523.877322][T31158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  524.252794][T31182] block nbd4: Unsupported socket: shutdown callout must be supported.
[  524.337454][T31188] __nla_validate_parse: 18 callbacks suppressed
[  524.337467][T31188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8295'.
[  524.347249][T31188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8295'.
[  524.350383][T31188] netlink: 31 bytes leftover after parsing attributes in process `syz.1.8295'.
[  524.354102][T31188] netlink: 31 bytes leftover after parsing attributes in process `syz.1.8295'.
[  524.371350][T31186] bpq0: entered promiscuous mode
[  524.373166][T31186] bpq0: entered allmulticast mode
[  524.515735][T31195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8296'.
[  524.684847][T31199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8298'.
[  524.688701][T31199] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  524.695450][T31199] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  524.698444][T31199] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  524.702274][T31199] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  524.711810][T31199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8298'.
[  524.778504][T31202] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8299'.
[  524.987101][T31213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  524.997598][T31213] syzkaller0: entered promiscuous mode
[  525.001046][T31213] syzkaller0: entered allmulticast mode
[  525.025133][T31213] wlan1: mtu greater than device maximum
[  525.027969][T31212] tipc: Resetting bearer <eth:syzkaller0>
[  525.044461][T31212] tipc: Disabling bearer <eth:syzkaller0>
[  525.465261][T31253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8316'.
[  525.521708][T31259] validate_nla: 13 callbacks suppressed
[  525.521723][T31259] netlink: 'syz.1.8319': attribute type 21 has an invalid length.
[  525.526604][T31259] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8319'.
[  525.529614][T31259] netlink: 'syz.1.8319': attribute type 4 has an invalid length.
[  525.538314][T31259] netlink: 'syz.1.8319': attribute type 3 has an invalid length.
[  525.871272][T23352] Bluetooth: hci2: command 0x0419 tx timeout
[  525.924314][T31263] delete_channel: no stack
[  526.153461][T31275] netlink: 'syz.1.8324': attribute type 39 has an invalid length.
[  526.428136][T31290] C speed is unknown, defaulting to 1000
[  526.548477][T31305] netlink: 'syz.1.8332': attribute type 3 has an invalid length.
[  526.551060][T31305] netlink: 'syz.1.8332': attribute type 1 has an invalid length.
[  526.730161][T31290] DL<Y speed is unknown, defaulting to 1000
[  526.835713][T31325] netlink: 'syz.1.8338': attribute type 3 has an invalid length.
[  526.838170][T31325] netlink: 'syz.1.8338': attribute type 2 has an invalid length.
[  526.881564][T31325] netlink: 'syz.1.8338': attribute type 2 has an invalid length.
[  527.010657][T31331] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  527.369879][T31344] C speed is unknown, defaulting to 1000
[  527.441820][T31349] netlink: 'syz.2.8344': attribute type 12 has an invalid length.
[  527.689857][T31344] DL<Y speed is unknown, defaulting to 1000
[  528.245550][T31384] bond0: mtu less than device minimum
[  528.672793][   T61] block nbd1: Possible stuck request ffff888021df0000: control (read@0,1024B). Runtime 300 seconds
[  528.676126][   T61] block nbd1: Possible stuck request ffff888021e00000: control (read@1024,1024B). Runtime 300 seconds
[  528.679443][   T61] block nbd1: Possible stuck request ffff888021e00200: control (read@2048,1024B). Runtime 300 seconds
[  528.683578][   T61] block nbd1: Possible stuck request ffff888021e00400: control (read@3072,1024B). Runtime 300 seconds
[  528.825612][T31394] 8021q: adding VLAN 0 to HW filter on device bond69
[  529.449197][T31441] __nla_validate_parse: 29 callbacks suppressed
[  529.449216][T31441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8375'.
[  529.530506][T31445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8376'.
[  529.565026][T31445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8376'.
[  529.694380][T31453] C speed is unknown, defaulting to 1000
[  529.795108][T31460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8381'.
[  529.802204][T31460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8381'.
[  529.807034][T31460] 8021q: adding VLAN 0 to HW filter on device bond60
[  530.014588][T31474] ip6t_srh: unknown srh match flags  5294
[  530.088218][T31470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8385'.
[  530.110360][T31453] DL<Y speed is unknown, defaulting to 1000
[  530.236330][T31482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8388'.
[  530.407507][T31486] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8390'.
[  530.436492][T31487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8387'.
[  530.580421][T31489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8391'.
[  530.596054][T31489] validate_nla: 8 callbacks suppressed
[  530.596077][T31489] netlink: 'syz.2.8391': attribute type 3 has an invalid length.
[  530.618030][T31489] netlink: 'syz.2.8391': attribute type 2 has an invalid length.
[  530.642824][T31489] netlink: 'syz.2.8391': attribute type 2 has an invalid length.
[  531.133745][T31498] batman_adv: batadv0: Interface deactivated: 
[  531.136441][T31498] batman_adv: batadv0: Removing interface: 
[  531.183629][T31506] netlink: 'syz.2.8394': attribute type 10 has an invalid length.
[  531.204549][T31498] bond63: (slave bridge18): Releasing active interface
[  531.218507][T31498] bond64: (slave bridge19): Releasing backup interface
[  531.226483][T31498] bond66: (slave gretap4): Releasing active interface
[  531.232724][   T25] block nbd0: Possible stuck request ffff888021d90000: control (read@0,1024B). Runtime 120 seconds
[  531.237924][   T25] block nbd0: Possible stuck request ffff888021d90200: control (read@1024,1024B). Runtime 120 seconds
[  531.243149][   T25] block nbd0: Possible stuck request ffff888021d90400: control (read@2048,1024B). Runtime 120 seconds
[  531.247407][   T25] block nbd0: Possible stuck request ffff888021d90600: control (read@3072,1024B). Runtime 120 seconds
[  531.287334][T31498] bond67: (slave vti1): Releasing backup interface
[  531.575760][T31526] xt_CT: No such helper "netbios-ns"
[  531.796057][T31537] netlink: 'syz.1.8403': attribute type 5 has an invalid length.
[  532.122454][T31560] netlink: 'syz.2.8410': attribute type 6 has an invalid length.
[  532.124887][T31560] netlink: 'syz.2.8410': attribute type 7 has an invalid length.
[  532.127194][T31560] netlink: 'syz.2.8410': attribute type 8 has an invalid length.
[  532.191947][T31565] netlink: 'syz.1.8412': attribute type 1 has an invalid length.
[  532.377354][T31583] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  532.476766][T31587] netlink: 'syz.1.8418': attribute type 3 has an invalid length.
[  533.971160][T31644] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  533.982439][T31644] syzkaller0: entered promiscuous mode
[  533.989423][T31644] syzkaller0: entered allmulticast mode
[  534.023454][T31644] tipc: Resetting bearer <eth:syzkaller0>
[  534.037358][T31643] tipc: Resetting bearer <eth:syzkaller0>
[  534.087284][T31643] tipc: Disabling bearer <eth:syzkaller0>
[  534.374268][T31674] lo: entered promiscuous mode
[  534.387043][T31674] tunl0: entered promiscuous mode
[  534.390119][T31674] gre0: entered promiscuous mode
[  534.395518][T31674] gretap0: entered promiscuous mode
[  534.399329][T31674] erspan0: entered promiscuous mode
[  534.403841][T31674] ip6_vti0: entered promiscuous mode
[  534.416745][T31674] sit0: entered promiscuous mode
[  534.444767][T31674] ip6tnl0: entered promiscuous mode
[  534.454183][T31674] ip6gre0: entered promiscuous mode
[  534.458631][T31674] ip6gretap0: entered promiscuous mode
[  534.484455][T31674] bond0: entered promiscuous mode
[  534.490510][T31674] 8021q: adding VLAN 0 to HW filter on device bond0
[  534.495749][T31674] dummy0: entered promiscuous mode
[  534.498723][T31674] nlmon0: entered promiscuous mode
[  534.507420][T31674] caif0: entered promiscuous mode
[  534.509736][T31674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  534.568057][T31686] __nla_validate_parse: 23 callbacks suppressed
[  534.568076][T31686] netlink: 160 bytes leftover after parsing attributes in process `syz.2.8453'.
[  534.859022][T31714] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8460'.
[  535.265240][T31739] ieee802154 phy0 wpan0: encryption failed: -22
[  535.785224][T31748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8470'.
[  535.832951][T31750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8471'.
[  537.577394][T31752] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode
[  537.656798][T31762] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8475'.
[  537.738347][T31774] validate_nla: 8 callbacks suppressed
[  537.738388][T31774] netlink: 'syz.1.8478': attribute type 1 has an invalid length.
[  537.763897][T31774] 8021q: adding VLAN 0 to HW filter on device bond61
[  537.786246][T31774] bond61: (slave bridge24): making interface the new active one
[  537.789641][T31774] bond61: (slave bridge24): Enslaving as an active interface with an up link
[  537.807082][T31774] macvlan0: entered promiscuous mode
[  537.808836][T31774] macvlan0: entered allmulticast mode
[  537.811605][T31774] bond61: entered promiscuous mode
[  537.813296][T31774] bridge24: entered promiscuous mode
[  537.815482][T31774] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  537.817320][T31778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8480'.
[  537.818510][T31774] bond61: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  537.828398][T31774] bond61: left promiscuous mode
[  537.829971][T31774] bridge24: left promiscuous mode
[  537.844224][T31779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8479'.
[  537.864428][T31779] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  537.867286][T31779] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  537.888167][T31781] xt_hashlimit: size too large, truncated to 1048576
[  538.097177][T31792] unknown channel width for channel at 909000KHz?
[  538.099861][T31792] unknown channel width for channel at 909000KHz?
[  538.177027][T31796] netlink: 'syz.1.8486': attribute type 1 has an invalid length.
[  538.180482][T31796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8486'.
[  538.474636][T31812] syzkaller0: entered promiscuous mode
[  538.477170][T31812] syzkaller0: entered allmulticast mode
[  538.659565][T31821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8494'.
[  538.816432][T31833] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.951709][T31842] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8500'.
[  539.018549][T31846] pim6reg1: entered promiscuous mode
[  539.022183][T31846] pim6reg1: entered allmulticast mode
[  539.070245][T31850] openvswitch: netlink: Flow actions attr not present in new flow.
[  539.354433][T31873] netlink: 'syz.2.8515': attribute type 1 has an invalid length.
[  539.366735][T31871] netlink: zone id is out of range
[  539.368817][T31871] netlink: zone id is out of range
[  539.377587][T31871] netlink: get zone limit has 8 unknown bytes
[  539.395589][T31874] netlink: 'syz.1.8513': attribute type 13 has an invalid length.
[  539.398744][T31874] netlink: 'syz.1.8513': attribute type 17 has an invalid length.
[  539.421271][T31874] lo: left promiscuous mode
[  539.438183][T31874] tunl0: left promiscuous mode
[  539.447546][T31874] gre0: left promiscuous mode
[  539.450299][T31874] gretap0: left promiscuous mode
[  539.486029][T31874] erspan0: left promiscuous mode
[  539.502639][T31874] ip_vti0: left promiscuous mode
[  539.507615][T31874] ip6_vti0: left promiscuous mode
[  539.512532][T31874] sit0: left promiscuous mode
[  539.515310][T31874] ip6tnl0: left promiscuous mode
[  539.519048][T31874] ip6gre0: left promiscuous mode
[  539.531419][T31874] ip6gretap0: left promiscuous mode
[  539.540104][T31874] bond0: left promiscuous mode
[  539.546497][T31874] dummy0: left promiscuous mode
[  539.552499][T31874] nlmon0: left promiscuous mode
[  539.555208][T31874] caif0: left promiscuous mode
[  539.556714][T31874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  539.582945][T31878] C speed is unknown, defaulting to 1000
[  539.880147][T31878] DL<Y speed is unknown, defaulting to 1000
[  539.942119][T31898] __nla_validate_parse: 6 callbacks suppressed
[  539.942138][T31898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8524'.
[  539.956227][T31898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8524'.
[  539.959994][T31898] netlink: 31 bytes leftover after parsing attributes in process `syz.0.8524'.
[  539.966404][T31898] netlink: 'syz.0.8524': attribute type 3 has an invalid length.
[  539.969739][T31898] netlink: 'syz.0.8524': attribute type 2 has an invalid length.
[  539.977305][T31898] netlink: 31 bytes leftover after parsing attributes in process `syz.0.8524'.
[  539.983784][T31898] netlink: 'syz.0.8524': attribute type 2 has an invalid length.
[  540.205597][   T25] block nbd3: Possible stuck request ffff888021ea8000: control (read@0,1024B). Runtime 120 seconds
[  540.209934][   T25] block nbd3: Possible stuck request ffff888021ea8200: control (read@1024,1024B). Runtime 120 seconds
[  540.214990][   T25] block nbd3: Possible stuck request ffff888021ea8400: control (read@2048,1024B). Runtime 120 seconds
[  540.219424][   T25] block nbd3: Possible stuck request ffff888021ea8600: control (read@3072,1024B). Runtime 120 seconds
[  540.370433][T31906] netlink: 'syz.0.8527': attribute type 21 has an invalid length.
[  540.373774][T31906] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8527'.
[  540.377201][T31906] netlink: 'syz.0.8527': attribute type 5 has an invalid length.
[  540.381024][T31906] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8527'.
[  540.573274][T31919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8531'.
[  540.880748][T31926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8533'.
[  540.887235][T31926] openvswitch: netlink: IP tunnel TTL not specified.
[  541.232573][T31935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8536'.
[  541.311816][T31939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8537'.
[  541.926327][T31957] Failed to register nexthop notifier
[  542.198653][T31977] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  542.244511][T31983] delete_channel: no stack
[  542.412097][T31999] 8021q: adding VLAN 0 to HW filter on device bond62
[  542.453303][T31999] 8021q: adding VLAN 0 to HW filter on device bond62
[  542.462351][T31999] bond62: (slave vxcan1): The slave device specified does not support setting the MAC address
[  542.470537][T31999] bond62: (slave vxcan1): Error -95 calling set_mac_address
[  542.505661][T32010] macvlan0: entered promiscuous mode
[  542.507548][T32010] macvlan0: entered allmulticast mode
[  542.509989][T32010] bond62: entered promiscuous mode
[  542.513134][T32010] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  542.518676][T32010] bond62: left promiscuous mode
[  542.562980][T32012] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  542.566841][T32012] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  542.962222][T32042] validate_nla: 6 callbacks suppressed
[  542.962242][T32042] netlink: 'syz.1.8572': attribute type 2 has an invalid length.
[  542.968537][T32042] openvswitch: netlink: Flow key attribute not present in set flow.
[  543.338813][T32065] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  543.531331][T32074] tap0: tun_chr_ioctl cmd 1074025677
[  543.533635][T32074] tap0: linktype set to 0
[  543.778170][T32088] tipc: Resetting bearer <ib:ip6gre0>
[  543.787382][T32080] netlink: 'syz.2.8585': attribute type 1 has an invalid length.
[  543.790218][T32080] netlink: 'syz.2.8585': attribute type 1 has an invalid length.
[  543.810503][T32087] netlink: 'syz.0.8586': attribute type 3 has an invalid length.
[  543.815233][T32087] netlink: 'syz.0.8586': attribute type 2 has an invalid length.
[  543.817899][T32087] netlink: 'syz.0.8586': attribute type 2 has an invalid length.
[  543.856506][T32091] netlink: 'syz.2.8587': attribute type 6 has an invalid length.
[  543.859680][T32091] netlink: 'syz.2.8587': attribute type 5 has an invalid length.
[  544.528099][T32111] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  545.190241][T32178] __nla_validate_parse: 29 callbacks suppressed
[  545.190254][T32178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8610'.
[  545.236940][T32182] openvswitch: netlink: Key type 4624 is out of range max 32
[  545.336294][T32181] netlink: zone id is out of range
[  545.338024][T32181] netlink: zone id is out of range
[  545.340089][T32181] netlink: zone id is out of range
[  545.348803][T32181] netlink: zone id is out of range
[  545.352317][T32181] netlink: zone id is out of range
[  545.356904][T32181] netlink: zone id is out of range
[  545.395714][T32181] netlink: set zone limit has 4 unknown bytes
[  545.405951][T32181] openvswitch: netlink: IP tunnel TTL not specified.
[  545.599927][T32200] netpci0: tun_chr_ioctl cmd 1074025681
[  545.919260][T32226] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8627'.
[  545.978624][T32226] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  545.984930][T32226] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  545.995937][T32239] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.8628'.
[  546.083406][T32248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8627'.
[  546.829288][T32279] netlink: 'syz.2.8631': attribute type 10 has an invalid length.
[  546.842807][T32279] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8631'.
[  546.860582][T32279] netlink: 'syz.2.8631': attribute type 64 has an invalid length.
[  546.880680][T32282] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8633'.
[  546.986926][T32286] 8021q: adding VLAN 0 to HW filter on device bond63
[  547.306519][T32304] syzkaller0: entered promiscuous mode
[  547.310765][T32304] syzkaller0: entered allmulticast mode
[  547.468661][T32306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8639'.
[  547.625606][T32310] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8641'.
[  547.817589][T32324] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8646'.
[  547.850185][T32327] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8647'.
[  548.135032][T32342] C speed is unknown, defaulting to 1000
[  548.222355][T32349] validate_nla: 2 callbacks suppressed
[  548.222376][T32349] netlink: 'syz.1.8654': attribute type 1 has an invalid length.
[  548.281513][T32342] DL<Y speed is unknown, defaulting to 1000
[  548.556638][T32361] netlink: 'syz.1.8659': attribute type 11 has an invalid length.
[  548.559831][T32361] netlink: 'syz.1.8659': attribute type 11 has an invalid length.
[  548.891095][T32372] netlink: 'syz.2.8664': attribute type 1 has an invalid length.
[  549.152092][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  549.167523][T32378] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  549.181154][T32388] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  549.838862][T32431] IPVS: persistence engine module ip_vs_pe_ not found
[  550.100023][T32449] netlink: 'syz.2.8687': attribute type 1 has an invalid length.
[  550.103373][T32449] netlink: 'syz.2.8687': attribute type 3 has an invalid length.
[  550.493712][T32481] __nla_validate_parse: 11 callbacks suppressed
[  550.493730][T32481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8695'.
[  550.519542][T32481] bridge0: failed insert local address into bridge forwarding table
[  550.546932][T32481] veth43: entered promiscuous mode
[  550.549121][T32481] bridge26: port 1(veth43) entered blocking state
[  550.555698][T32481] bridge26: port 1(veth43) entered disabled state
[  550.558899][T32481] veth43: entered allmulticast mode
[  550.577534][T32481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8695'.
[  550.751367][T32494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8699'.
[  550.761188][T32494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8699'.
[  550.766084][T32494] netlink: 'syz.0.8699': attribute type 7 has an invalid length.
[  551.206920][T32517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  551.218865][T32517] syzkaller0: left promiscuous mode
[  551.242101][T32517] netlink: 'syz.0.8706': attribute type 1 has an invalid length.
[  551.245556][T32517] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8706'.
[  551.405756][T32519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8707'.
[  551.411844][T32519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8707'.
[  551.415481][T32519] netlink: 'syz.0.8707': attribute type 14 has an invalid length.
[  551.528712][T32524] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8709'.
[  551.537868][T32525] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8709'.
[  551.547789][T32524] netlink: 'syz.0.8709': attribute type 1 has an invalid length.
[  551.797172][T32542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8714'.
[  551.807925][T32545] 8021q: VLANs not supported on vcan0
[  551.930124][T32550] 8021q: adding VLAN 0 to HW filter on device bond64
[  551.937628][T32554] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  552.586202][T32579] gretap0: entered promiscuous mode
[  552.601993][T32579] 0{X: renamed from gretap0
[  552.630698][T32579] 0{X: left promiscuous mode
[  552.641799][T32579] 0{X: entered allmulticast mode
[  552.645820][T32579] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  553.254059][T32622] C speed is unknown, defaulting to 1000
[  553.269195][T32624] validate_nla: 2 callbacks suppressed
[  553.269213][T32624] netlink: 'syz.0.8742': attribute type 1 has an invalid length.
[  553.440589][T32631] netlink: 'syz.0.8744': attribute type 4 has an invalid length.
[  553.447362][T32631] netlink: 'syz.0.8744': attribute type 4 has an invalid length.
[  553.467186][   T47] C speed is unknown, defaulting to 1000
[  553.469605][   T47] syz2: Port: 1 Link ACTIVE
[  553.472383][   T47] C speed is unknown, defaulting to 1000
[  553.484519][T32622] DL<Y speed is unknown, defaulting to 1000
[  554.402157][T32674] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  554.777582][T32692] syzkaller1: entered promiscuous mode
[  554.784181][T32692] syzkaller1: entered allmulticast mode
[  555.325313][T32707] bpq0: left promiscuous mode
[  555.327359][T32707] bpq0: left allmulticast mode
[  555.519184][T32711] __nla_validate_parse: 18 callbacks suppressed
[  555.519203][T32711] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8772'.
[  555.528439][T32711] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  555.531309][T32711] IPv6: NLM_F_CREATE should be set when creating new route
[  555.625455][T32719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8774'.
[  555.630034][T32719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8774'.
[  556.160383][T32745] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  556.204759][T32752] netlink: 'syz.1.8781': attribute type 1 has an invalid length.
[  556.207398][T32752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8781'.
[  556.250273][T32758] netlink: 'syz.0.8783': attribute type 1 has an invalid length.
[  556.254442][T32758] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8783'.
[  556.258226][T32758] NCSI netlink: No device for ifindex 0
[  556.308746][T32766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8786'.
[  556.333790][  T302] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  556.658772][  T327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8796'.
[  556.838277][  T339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8799'.
[  556.925053][  T342] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  556.928120][  T342] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  557.027343][  T348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8801'.
[  557.328766][  T361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8806'.
[  557.331952][  T361] netlink: 'syz.0.8806': attribute type 30 has an invalid length.
[  557.382694][  T363] netlink: 'syz.2.8807': attribute type 2 has an invalid length.
[  557.398561][  T363] : entered promiscuous mode
[  557.488582][  T376] netlink: 'syz.0.8810': attribute type 1 has an invalid length.
[  558.755130][   T61] block nbd1: Possible stuck request ffff888021df0000: control (read@0,1024B). Runtime 330 seconds
[  558.758503][   T61] block nbd1: Possible stuck request ffff888021e00000: control (read@1024,1024B). Runtime 330 seconds
[  558.762213][   T61] block nbd1: Possible stuck request ffff888021e00200: control (read@2048,1024B). Runtime 330 seconds
[  558.765642][   T61] block nbd1: Possible stuck request ffff888021e00400: control (read@3072,1024B). Runtime 330 seconds
[  559.899272][  T485] netlink: 'syz.0.8842': attribute type 1 has an invalid length.
[  559.911244][  T489] netlink: 'syz.2.8843': attribute type 4 has an invalid length.
[  559.925777][  T489] netlink: 'syz.2.8843': attribute type 4 has an invalid length.
[  559.929582][T23256] DL<Y speed is unknown, defaulting to 1000
[  559.940086][T23256] DL<Y speed is unknown, defaulting to 1000
[  559.945301][T23256] syz0: Port: 1 Link DOWN
[  559.971346][ T5884] DL<Y speed is unknown, defaulting to 1000
[  559.976020][   T10] DL<Y speed is unknown, defaulting to 1000
[  560.096273][  T498] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  560.213673][  T504] netlink: 'syz.2.8850': attribute type 1 has an invalid length.
[  560.468081][  T526] netlink: 'syz.0.8855': attribute type 1 has an invalid length.
[  560.617866][  T534] __nla_validate_parse: 12 callbacks suppressed
[  560.617882][  T534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8858'.
[  560.762112][  T538] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.8860'.
[  560.849607][  T545] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  560.910351][  T549] netlink: 'syz.1.8865': attribute type 1 has an invalid length.
[  560.915743][  T549] netlink: 'syz.1.8865': attribute type 10 has an invalid length.
[  560.918322][  T549] netlink: 236 bytes leftover after parsing attributes in process `syz.1.8865'.
[  560.926500][  T550] netlink: 'syz.1.8865': attribute type 1 has an invalid length.
[  560.930633][  T550] netlink: 'syz.1.8865': attribute type 10 has an invalid length.
[  560.935633][  T550] netlink: 236 bytes leftover after parsing attributes in process `syz.1.8865'.
[  560.951565][  T553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8866'.
[  561.313198][  T578] openvswitch: netlink: Message has 4 unknown bytes.
[  561.339409][   T25] block nbd0: Possible stuck request ffff888021d90000: control (read@0,1024B). Runtime 150 seconds
[  561.347850][   T25] block nbd0: Possible stuck request ffff888021d90200: control (read@1024,1024B). Runtime 150 seconds
[  561.352670][   T25] block nbd0: Possible stuck request ffff888021d90400: control (read@2048,1024B). Runtime 150 seconds
[  561.357231][   T25] block nbd0: Possible stuck request ffff888021d90600: control (read@3072,1024B). Runtime 150 seconds
[  561.441051][  T585] xt_ecn: cannot match TCP bits for non-tcp packets
[  561.462393][  T585] x_tables: unsorted entry at hook 1
[  561.509952][  T587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8876'.
[  561.518759][  T591] netlink: 'syz.2.8877': attribute type 1 has an invalid length.
[  561.528551][  T591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8877'.
[  561.585207][  T595] 8021q: VLANs not supported on syzkaller0
[  561.894903][  T628] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8889'.
[  562.594299][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  562.746503][  T664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8898'.
[  562.916221][  T670] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0
[  562.976607][  T672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8901'.
[  563.188938][  T682] batman_adv: batadv0: Adding interface: macvlan2
[  563.197236][  T682] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1280) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[  563.206307][  T682] batman_adv: batadv0: Interface activated: macvlan2
[  563.325500][  T688] syzkaller1: entered promiscuous mode
[  563.327957][  T688] syzkaller1: entered allmulticast mode
[  563.608053][  T709] openvswitch: netlink: Key type 12802 is out of range max 32
[  563.778160][  T718] 8021q: adding VLAN 0 to HW filter on device bond26
[  563.812678][  T719] veth33: entered promiscuous mode
[  563.817588][  T719] bond26: (slave veth33): Enslaving as a backup interface with a down link
[  563.838248][  T718] gretap0: left allmulticast mode
[  563.839968][  T718] gretap0: left promiscuous mode
[  563.846313][  T718] bridge0: port 1(gretap0) entered disabled state
[  563.854692][  T718] bond0: (slave bond25): Releasing backup interface
[  563.857723][  T718] bond25: left promiscuous mode
[  563.864821][  T718] bond26: (slave veth33): Releasing backup interface
[  564.304819][  T759] veth34: entered allmulticast mode
[  564.337636][  T759] veth35: entered promiscuous mode
[  564.506947][  T780] pim6reg: left allmulticast mode
[  565.249445][  T854] pim6reg: entered allmulticast mode
[  565.257481][  T856] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  565.264957][  T854] pim6reg: left allmulticast mode
[  565.357750][  T863] nbd: nbd0 already in use
[  565.377384][  T863] validate_nla: 9 callbacks suppressed
[  565.377421][  T863] netlink: 'syz.0.8961': attribute type 1 has an invalid length.
[  565.423575][  T868] openvswitch: netlink: IP tunnel dst address not specified
[  565.456117][  T868] netlink: 'syz.1.8963': attribute type 7 has an invalid length.
[  565.676970][  T886] __nla_validate_parse: 24 callbacks suppressed
[  565.676982][  T886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8969'.
[  565.685923][  T886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8969'.
[  565.728406][  T888] syzkaller0: left allmulticast mode
[  566.094756][  T929] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  566.247759][  T946] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  566.250767][  T948] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  566.331801][  T952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8984'.
[  566.370616][  T956] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  566.521805][  T965] xt_TCPMSS: Only works on TCP SYN packets
[  566.637628][  T975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8992'.
[  567.046758][  T989] netlink: 'syz.1.8997': attribute type 11 has an invalid length.
[  567.175417][ T1003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9001'.
[  567.178809][ T1003] netlink: 34 bytes leftover after parsing attributes in process `syz.1.9001'.
[  567.220578][ T1008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9002'.
[  567.326805][ T1019] netlink: 'syz.0.9004': attribute type 1 has an invalid length.
[  567.357574][ T1022] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  567.383861][ T1025] bond27: entered promiscuous mode
[  567.385659][ T1025] bond27: entered allmulticast mode
[  567.388381][ T1025] 8021q: adding VLAN 0 to HW filter on device bond27
[  567.459610][ T1030] netlink: 'syz.1.9005': attribute type 42 has an invalid length.
[  567.574482][ T1046] x_tables: duplicate underflow at hook 1
[  567.626516][ T1046] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9010'.
[  567.637364][ T1046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9010'.
[  567.723134][ T1052] openvswitch: netlink: Duplicate or invalid key (type 0).
[  567.725775][ T1052] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  568.359097][   T55] Bluetooth: hci2: command 0x0419 tx timeout
[  568.391036][ T1055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9012'.
[  568.419002][ T1059] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  568.770255][ T1101] netlink: 'syz.1.9018': attribute type 11 has an invalid length.
[  568.906878][ T1112] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  569.407319][ T1124] xt_ecn: cannot match TCP bits for non-tcp packets
[  569.631328][   T34] INFO: task udevd:14226 blocked for more than 143 seconds.
[  569.632997][ T1126] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht'
[  569.634719][   T34]       Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0
[  569.647188][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  569.650560][   T34] task:udevd           state:D stack:21928 pid:14226 tgid:14226 ppid:5280   task_flags:0x400140 flags:0x00004006
[  569.666518][   T34] Call Trace:
[  569.670189][   T34]  <TASK>
[  569.682471][   T34]  __schedule+0x16f5/0x4d00
[  569.686512][   T34]  ? schedule+0x165/0x360
[  569.696654][   T34]  ? __pfx___schedule+0x10/0x10
[  569.700214][   T34]  ? schedule+0x91/0x360
[  569.705460][   T34]  schedule+0x165/0x360
[  569.707582][   T34]  io_schedule+0x80/0xd0
[  569.709718][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  569.712694][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  569.718382][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  569.723833][   T34]  ? __filemap_get_folio+0x760/0xaf0
[  569.726291][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  569.728819][   T34]  do_read_cache_folio+0x1aa/0x590
[  569.733903][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  569.737165][   T34]  read_part_sector+0xb6/0x2b0
[  569.739320][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  569.745073][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  569.747574][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  569.750384][   T34]  bdev_disk_changed+0x75f/0x14b0
[  569.755653][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  569.757660][   T34]  ? wait_on_inode+0xc0/0x230
[  569.759510][   T34]  blkdev_get_whole+0x380/0x510
[  569.763692][   T34]  bdev_open+0x31e/0xd30
[  569.765320][   T34]  blkdev_open+0x3a8/0x510
[  569.766886][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  569.768667][   T34]  do_dentry_open+0xdf3/0x1970
[  569.770492][   T34]  vfs_open+0x3b/0x340
[  569.773954][   T34]  ? path_openat+0x2ecd/0x3830
[  569.775814][   T34]  path_openat+0x2ee5/0x3830
[  569.777580][   T34]  ? arch_stack_walk+0xfc/0x150
[  569.779606][   T34]  ? __pfx_path_openat+0x10/0x10
[  569.782233][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.786117][   T34]  do_filp_open+0x1fa/0x410
[  569.787795][   T34]  ? __lock_acquire+0xab9/0xd20
[  569.789835][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  569.796176][   T34]  ? _raw_spin_unlock+0x28/0x50
[  569.798053][   T34]  ? alloc_fd+0x64c/0x6c0
[  569.799728][   T34]  do_sys_openat2+0x121/0x1c0
[  569.804030][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  569.806433][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  569.808463][   T34]  ? rcu_is_watching+0x15/0xb0
[  569.810223][   T34]  __x64_sys_openat+0x138/0x170
[  569.812343][   T34]  do_syscall_64+0xfa/0x3b0
[  569.814451][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  569.816893][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.819694][   T34]  ? exc_page_fault+0x9f/0xf0
[  569.822151][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.824410][   T34] RIP: 0033:0x7f2f44b169a4
[  569.826240][   T34] RSP: 002b:00007ffeffea2440 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  569.839991][   T34] RAX: ffffffffffffffda RBX: 000055c3ea0cdab0 RCX: 00007f2f44b169a4
[  569.843276][   T34] RDX: 00000000000a0800 RSI: 000055c3ea0ae570 RDI: 00000000ffffff9c
[  569.846571][   T34] RBP: 000055c3ea0ae570 R08: 0000000000000001 R09: 7fffffffffffffff
[  569.850338][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  569.867419][   T34] R13: 000055c3ea0c17c0 R14: 0000000000000001 R15: 000055c3ea0ad910
[  569.870024][   T34]  </TASK>
[  569.872885][   T34] 
[  569.872885][   T34] Showing all locks held in the system:
[  569.875393][   T34] 1 lock held by khungtaskd/34:
[  569.876982][   T34]  #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  569.880470][   T34] 2 locks held by getty/5658:
[  569.900963][   T34]  #0: ffff888107e620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  569.904263][   T34]  #1: ffffc900029132f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  569.907538][   T34] 2 locks held by syz-executor/5831:
[  569.909497][   T34] 1 lock held by udevd/14226:
[  569.921346][   T34]  #0: ffff888021cec358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  569.924751][   T34] 1 lock held by udevd/14228:
[  569.926554][   T34]  #0: ffff888021dc4358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  569.930095][   T34] 1 lock held by udevd/14230:
[  569.932014][   T34]  #0: ffff888021ce8358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  569.935385][   T34] 
[  569.936214][   T34] =============================================
[  569.936214][   T34] 
[  569.939232][   T34] NMI backtrace for cpu 1
[  569.939243][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  569.939254][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  569.939260][   T34] Call Trace:
[  569.939266][   T34]  <TASK>
[  569.939274][   T34]  dump_stack_lvl+0x189/0x250
[  569.939289][   T34]  ? __wake_up_klogd+0xd9/0x110
[  569.939305][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  569.939315][   T34]  ? __pfx__printk+0x10/0x10
[  569.939333][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  569.939350][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  569.939361][   T34]  ? _printk+0xcf/0x120
[  569.939376][   T34]  ? __pfx__printk+0x10/0x10
[  569.939392][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  569.939408][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  569.939425][   T34]  watchdog+0xfee/0x1030
[  569.939438][   T34]  ? watchdog+0x1de/0x1030
[  569.939455][   T34]  kthread+0x711/0x8a0
[  569.939472][   T34]  ? __pfx_watchdog+0x10/0x10
[  569.939479][   T34]  ? __pfx_kthread+0x10/0x10
[  569.939492][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  569.939506][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  569.939514][   T34]  ? __pfx_kthread+0x10/0x10
[  569.939526][   T34]  ret_from_fork+0x3fc/0x770
[  569.939539][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  569.939550][   T34]  ? __switch_to_asm+0x39/0x70
[  569.939561][   T34]  ? __switch_to_asm+0x33/0x70
[  569.939571][   T34]  ? __pfx_kthread+0x10/0x10
[  569.939584][   T34]  ret_from_fork_asm+0x1a/0x30
[  569.939602][   T34]  </TASK>
[  569.939606][   T34] Sending NMI from CPU 1 to CPUs 0:
[  569.998749][    C0] NMI backtrace for cpu 0
[  569.998766][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  569.998781][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  569.998790][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  569.998810][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 dd 1a 00 f3 0f 1e fa fb f4 <e9> c8 dd 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  569.998823][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000286
[  569.998835][    C0] RAX: dd2129ee7a401a00 RBX: ffffffff81976c78 RCX: dd2129ee7a401a00
[  569.998846][    C0] RDX: 0000000000000001 RSI: ffffffff8d99603b RDI: ffffffff8be28c40
[  569.998855][    C0] RBP: ffffffff8de07ea8 R08: ffff88804b032f5b R09: 1ffff110096065eb
[  569.998865][    C0] R10: dffffc0000000000 R11: ffffed10096065ec R12: ffffffff8fa1d5f0
[  569.998875][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  569.998885][    C0] FS:  0000000000000000(0000) GS:ffff8880b8626000(0000) knlGS:0000000000000000
[  569.998895][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  569.998904][    C0] CR2: 00007f115c3802d8 CR3: 000000002936c000 CR4: 00000000000006f0
[  569.998939][    C0] Call Trace:
[  569.998948][    C0]  <TASK>
[  569.998954][    C0]  default_idle+0x13/0x20
[  569.998972][    C0]  default_idle_call+0x74/0xb0
[  569.998992][    C0]  do_idle+0x1e8/0x510
[  569.999013][    C0]  ? __pfx_do_idle+0x10/0x10
[  569.999034][    C0]  cpu_startup_entry+0x44/0x60
[  569.999050][    C0]  rest_init+0x2de/0x300
[  569.999111][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  569.999128][    C0]  start_kernel+0x47d/0x500
[  569.999148][    C0]  x86_64_start_reservations+0x24/0x30
[  569.999169][    C0]  x86_64_start_kernel+0x143/0x1c0
[  569.999186][    C0]  common_startup_64+0x13e/0x147
[  569.999214][    C0]  </TASK>
[  570.063838][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  570.066778][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  570.071310][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  570.074475][   T34] Call Trace:
[  570.075713][   T34]  <TASK>
[  570.076899][   T34]  dump_stack_lvl+0x99/0x250
[  570.078686][   T34]  ? __asan_memcpy+0x40/0x70
[  570.080677][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  570.082826][   T34]  ? __pfx__printk+0x10/0x10
[  570.084856][   T34]  panic+0x2db/0x790
[  570.086356][   T34]  ? __pfx_panic+0x10/0x10
[  570.087821][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  570.089822][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  570.091634][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  570.093841][   T34]  watchdog+0x102d/0x1030
[  570.095305][   T34]  ? watchdog+0x1de/0x1030
[  570.096744][   T34]  kthread+0x711/0x8a0
[  570.098168][   T34]  ? __pfx_watchdog+0x10/0x10
[  570.099771][   T34]  ? __pfx_kthread+0x10/0x10
[  570.101348][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  570.103114][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  570.104840][   T34]  ? __pfx_kthread+0x10/0x10
[  570.106335][   T34]  ret_from_fork+0x3fc/0x770
[  570.107979][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  570.109865][   T34]  ? __switch_to_asm+0x39/0x70
[  570.111778][   T34]  ? __switch_to_asm+0x33/0x70
[  570.113683][   T34]  ? __pfx_kthread+0x10/0x10
[  570.115373][   T34]  ret_from_fork_asm+0x1a/0x30
[  570.117082][   T34]  </TASK>
[  570.118796][   T34] Kernel Offset: disabled
[  570.120203][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:55:13  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff888021430237 R9 =1ffff11004286046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee890 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2cf550 CR3=000000010e4a6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0a3020646165725f 6b72616d20302073
XMM06=65746174735f6b61 6570203020736574 XMM07=6174735f6c61746f 742030206e736e69
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007f3250011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000020007 RBX=0000000000000000 RCX=000000000005012e RDX=0000000000000003
RSI=0000000000000000 RDI=ffff8881088e1cc0 RBP=0000000000000000 RSP=ffffc9000fbee738
R8 =0000000000000000 R9 =ffffffff825bdf2c R10=ffff88804a205e58 R11=ffffed1009440bcd
R12=0000000000000000 R13=0000000000000001 R14=ffff8881088e2878 R15=0000000000000002
RIP=ffffffff819e4677 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f115d00e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007faaf0559440 CR3=00000000125fe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=5c3a165c0353a6fb 3bfe974322ff6c6a
XMM02=75d539a5537abd76 271d802238fd252a XMM03=4db3ceaa903a1ae5 beb1cbf6298be278
XMM04=175bf66fa9104db3 ceaa903a1ae5beb1 XMM05=cbf6298be27875d5 39a5537abd76271d
XMM06=802238fd252a5c3a 165c0353a6fb3bfe XMM07=974322ff6c6af21f 201096d74d131460
XMM08=9a10ba4255ae1220 27391197042ae5a5 XMM09=0000000000000000 00007f3250011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
