last executing test programs:

1m18.009270626s ago: executing program 1 (id=6365):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macvtap0\x00', 0x600})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0)

1m8.639544326s ago: executing program 1 (id=6365):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macvtap0\x00', 0x600})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0)

1m2.162607014s ago: executing program 1 (id=6365):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macvtap0\x00', 0x600})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0)

54.757405406s ago: executing program 1 (id=6365):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macvtap0\x00', 0x600})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0)

7.168721624s ago: executing program 1 (id=6365):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macvtap0\x00', 0x600})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0)

3.785053656s ago: executing program 0 (id=6839):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, &(0x7f00000000c0))
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', <r2=>0x0, 0x29, 0xa, 0x1, 0x90b, 0x3, @empty, @empty, 0x7800, 0x7800, 0x9db, 0x8}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x58}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0x100, '\x00', r2, r1, 0x5, 0x4, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94)

3.657998147s ago: executing program 0 (id=6841):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x18}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r5, 0x0, 0x5, 0x0, &(0x7f0000000100))
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xffff, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdbd, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
ioctl$SIOCSIFHWADDR(r3, 0x401c5820, 0x0)
socket$key(0xf, 0x3, 0x2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
sendmsg$TIPC_NL_MON_SET(r3, 0x0, 0x8000)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x10, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x800}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e)
r8 = socket$pppoe(0x18, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000880000000400000000"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0xbb428eaf468c6595, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0)
ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000040)=0x2)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001030000000000000000020000000000000002ff000005001600890000004849ac"], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000380))
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r12, 0x23, 0x70bd2a, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x4040050)

3.523262009s ago: executing program 0 (id=6842):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@volatile={0x10, 0x0, 0x0, 0x9, 0x1}, @func={0xd, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x30, 0x30, 0x30, 0x5f, 0x30, 0x0]}}, &(0x7f0000000200)=""/159, 0x39, 0x9f, 0x1, 0xfffffffe}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r4}, 0x10)
r5 = socket(0x840000000002, 0x3, 0xf8)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)
sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x14, r1, 0x307, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x20004800)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={<r8=>0x0}, &(0x7f00000002c0)=0xc)
sendmsg$netlink(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)={0x10, 0x26, 0x100, 0x70bd28, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee00, 0xee01}}}], 0x20, 0x40801}, 0x40)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='jbd2_shrink_checkpoint_list\x00', r4, 0x0, 0xfffffffffffff000}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r8, r9, 0x0, 0x3, &(0x7f0000000340)=']@\x00'}, 0x30)
close(r0)

2.994735566s ago: executing program 0 (id=6846):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x24, 0xf, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x80) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async, rerun: 32)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (rerun: 32)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4)
sendmsg$unix(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="18edee9b205a361c0000000203010400000000000000000000000e4000000004000019"], 0x1c}}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000002030108000023cda986034d00030200"/38], 0x20}}, 0x0) (async)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) (async)
r6 = socket$igmp6(0xa, 0x3, 0x2)
getpeername$netrom(0xffffffffffffffff, &(0x7f00000003c0)={{0x3, @default}, [@netrom, @netrom, @rose, @remote, @null, @rose, @default]}, &(0x7f0000000340)=0x48) (async)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, 0x0, 0x810) (async, rerun: 64)
r7 = socket$inet6(0xa, 0x3, 0x1) (rerun: 64)
socket(0x10, 0x3, 0x0) (async, rerun: 32)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}}, 0x0) (async, rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (async, rerun: 64)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r8, 0x8923, 0x0)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

2.994211281s ago: executing program 2 (id=6847):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
syz_emit_ethernet(0x2aa, &(0x7f0000000580)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "80fec9", 0x274, 0x3a, 0x1, @empty, @private1, {[@fragment={0x0, 0x0, 0x4, 0x1, 0x0, 0x1, 0x64}, @dstopts={0x89, 0xe, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0xe0, 0x5, [0x0, 0x4, 0xa0]}}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x48, {0x1, 0x10, 0x8, 0x7a1, [0x6, 0x3, 0x4, 0x9, 0x2727, 0x2, 0x7, 0x8]}}, @jumbo={0xc2, 0x4, 0x8000}]}, @dstopts={0x84, 0x7, '\x00', [@pad1, @calipso={0x7, 0x30, {0x2, 0xa, 0x6, 0x7, [0x0, 0x0, 0x3, 0xffffffff, 0x2]}}, @ra={0x5, 0x2, 0x8}, @enc_lim]}, @fragment={0x3c, 0x0, 0xb, 0x1, 0x0, 0xe, 0x64}, @dstopts={0x2b, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo, @pad1]}, @hopopts={0x32, 0x9, '\x00', [@ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0xf0, 0x80, [0x2, 0x7f, 0x1, 0x7]}}]}, @routing={0x2e, 0x8, 0x2, 0x4, 0x0, [@private0, @mcast2, @local, @empty]}], @echo_request={0x80, 0x0, 0x0, 0x3, 0x7, "5ac8ac26303926420b32ae246cb95fa9b3769419b6bbf23cd9b3e9120b0e3ac996e2c6beab0e4320345fb3df9537df05923087b71b49b6b636b44fd79475b31ba3eb286a7c772137807f101f8f459325197870a398fc9e2c9e94bcc2ef84bcce353d507a81558eb82ad4bc58508e2b96daba108ccf48ba06612251b2bf9d2adeff9b040ac3129cadbfeb4abbd2044f3aa207bcfb281635fcbada7f34f2129d5eb6dd5d0415cf54cc5208335a6c28cec84dd7a34bce2603b6062499fe77b872918a28ec95f2ae5273a509b81e3f54f1599e83dbc5358768630f82c9ed"}}}}}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}}, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c8, 0x1a0, 0x358, 0x0, 0x98, 0x270, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1_macvtap\x00', 'batadv_slave_0\x00', {}, {}, 0x90, 0x0, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010101, @multicast1, 0xffffffff, 0x0, 'veth1_to_bond\x00', 'dummy0\x00', {0xff}, {0xff}, 0x62, 0x1, 0x48}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x8, 0x142}}, @common=@set={{0x40}, {{0x0, [0x7, 0x1, 0x1, 0x4, 0x1], 0x0, 0x6}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x0, 0x3}}}, {{@ip={@multicast1, @multicast1, 0x0, 0x0, 'macvlan1\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x0, 0x0, 0x5, 0x4, 0x2], 0x5}, {0x4, [0x4, 0xc, 0x7, 0x7, 0x4, 0x3], 0x6}}}}, {{@ip={@local, @multicast2, 0xffffffff, 0xff000000, 'pim6reg0\x00', 'gre0\x00', {0xff}, {0xff}, 0x88, 0x3}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x29}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x0, "cd658164fd73fbb6b4ecc0d220630e065f3f48d42d7d6f7c05d6214363ad"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528)

2.854088341s ago: executing program 2 (id=6848):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, &(0x7f00000000c0))
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', <r2=>0x0, 0x29, 0xa, 0x1, 0x90b, 0x3, @empty, @empty, 0x7800, 0x7800, 0x9db, 0x8}})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x58}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0x100, '\x00', r2, r1, 0x5, 0x4, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94)

2.746001535s ago: executing program 2 (id=6849):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xa)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}]}}]}, 0x5c}}, 0x4040004)
writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c94305", 0xe}, {&(0x7f0000000740)="23020000e3ff0000000000000000000000000000f4b443c4", 0x18}], 0x2)

2.485937931s ago: executing program 0 (id=6850):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000fcffffff000000008000000085000000d200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x60, r3, 0x100, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffffc, 0x7e}}}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfdb7}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="367c0fd656ddbd55f111f087c312f6f0160c55df98f00d71"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0)

2.411669611s ago: executing program 2 (id=6851):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0))
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r3=>0x0})
r4 = socket(0x10, 0x3, 0x0)
connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc)
sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
socket$packet(0x11, 0x3, 0x300) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) (async)
socket(0x10, 0x3, 0x0) (async)
connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) (async)
sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async)

2.306552637s ago: executing program 0 (id=6852):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@volatile={0x10, 0x0, 0x0, 0x9, 0x1}, @func={0xd, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0, 0x30, 0x30, 0x30, 0x5f, 0x30, 0x0]}}, &(0x7f0000000200)=""/159, 0x39, 0x9f, 0x1, 0xfffffffe}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r4}, 0x10)
r5 = socket(0x840000000002, 0x3, 0xf8)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)
sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x14, r1, 0x307, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x20004800)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={<r8=>0x0}, &(0x7f00000002c0)=0xc)
sendmsg$netlink(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)={0x10, 0x26, 0x100, 0x70bd28, 0x25dfdbfe}, 0x10}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee00, 0xee01}}}], 0x20, 0x40801}, 0x40)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='jbd2_shrink_checkpoint_list\x00', r4, 0x0, 0xfffffffffffff000}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r8, r9, 0x0, 0x3, &(0x7f0000000340)=']@\x00'}, 0x30)
close(r0)

2.306037713s ago: executing program 2 (id=6853):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x15)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={<r2=>r1, 0x46, 0x8001, 0x8000000000000001})
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x368, 0x0, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xa}, [0xff, 0xcde9cd8154f568d9, 0xff0000ff, 0xff], [0xffffff, 0xffffff00, 0xffffffff, 0xff], 'vxcan1\x00', 'geneve0\x00', {0xff}, {}, 0xe0, 0x9, 0x3, 0x20}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x12, 0x80, 0x1}}, @common=@unspec=@mark={{0x30}, {0x0, 0x7}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x246e, 0x9, 0x1000, 0x9, 0x1, 0x8, 0xc, 0x3f9e]}}}, {{@uncond, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, "b332"}}, @inet=@rpfilter={{0x28}, {0x39871d0a76353ad2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [0xff000000, 0xff, 0xffffff, 0xff000000], 0x4e20, 0x4e21, 0x4e22, 0x4e23, 0x4c6, 0x3e12, 0xbb, 0x9, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x114, r4, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}]}, 0x114}}, 0x8800)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000008400128009000100766c616e00000000740002800600010002000000340004800c00010005000000090000000c0001003a00000002000000060001"], 0xac}}, 0x0)

2.126400506s ago: executing program 2 (id=6854):
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x5, <r0=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10, r0}, 0x94) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="a000000003080101000000000000000003000002340004800800014000005163e6b9537868ac000408000140ffffffff0800014000000004080001400000003d08000140000000050900010073797a30000000002c0004800800034000000002080008400000000108000840000007de080009400000000308000440000061060900010073797a31000000000900010073797a31000000000500030021000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4009090}, 0x20000000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000440)={0x1d, r5, 0x1, {0x1, 0x1, 0x4}, 0x1}, 0x18)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000040)={0xa0000004}) (async)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000000100)={0x2}) (async)
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000000140)={0xa0000000}) (async)
epoll_pwait(r6, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0) (async)
getsockopt$inet_tcp_int(r2, 0x6, 0xc, 0x0, &(0x7f0000000040)) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000380)=0x7, 0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b0000000400008000000000ff00100004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xffc3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xff}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x44}}, 0x0) (async)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000240)={0x7, {{0x2, 0x4e23, @multicast1}}}, 0x88) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r8)

0s ago: executing program 1 (id=6365):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macvtap0\x00', 0x600})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

lid length.
[  332.257618][T21180] netlink: 'syz.0.5279': attribute type 29 has an invalid length.
[  332.260355][T21178] netlink: 'syz.1.5278': attribute type 1 has an invalid length.
[  332.321298][T21184] bond10: (slave gretap5): making interface the new active one
[  332.324191][T21184] bond10: (slave gretap5): Enslaving as an active interface with an up link
[  332.335490][T21183] macvlan5: entered promiscuous mode
[  332.360205][T21183] hsr0: entered promiscuous mode
[  332.361983][T21183] macvlan5: entered allmulticast mode
[  332.363656][T21183] hsr0: entered allmulticast mode
[  332.365281][T21183] hsr_slave_0: entered allmulticast mode
[  332.367047][T21183] hsr_slave_1: entered allmulticast mode
[  332.442747][T21190] C: entered allmulticast mode
[  332.452180][T21190] C: left allmulticast mode
[  333.106583][T21235] xt_ipcomp: unknown flags F7
[  333.444665][T21249] dvmrp1: left allmulticast mode
[  333.816248][T21264] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  334.247017][T21311] __nla_validate_parse: 91 callbacks suppressed
[  334.247036][T21311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5318'.
[  334.248868][T21306] 8021q: adding VLAN 0 to HW filter on device bond11
[  334.295976][T21314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5316'.
[  334.302608][T21314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5316'.
[  334.399853][T21322] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  334.411741][T21324] sctp: [Deprecated]: syz.2.5322 (pid 21324) Use of int in max_burst socket option deprecated.
[  334.411741][T21324] Use struct sctp_assoc_value instead
[  334.450359][T21327] netlink: 216 bytes leftover after parsing attributes in process `syz.1.5324'.
[  334.480900][T21331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5325'.
[  334.502874][T21328] xt_CT: No such helper "syz0"
[  334.510385][T21328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5322'.
[  334.516664][T21333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5326'.
[  334.550926][T21328] macsec2: entered allmulticast mode
[  334.553448][T21328] syz_tun: entered allmulticast mode
[  334.558979][T21328] syz_tun: left allmulticast mode
[  334.576016][T21333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5326'.
[  334.767252][T21342] sock: sock_set_timeout: `syz.1.5328' (pid 21342) tries to set negative timeout
[  335.081079][T21356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5334'.
[  335.168083][T21363] xt_hashlimit: max too large, truncated to 1048576
[  335.170745][T21363] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  335.795349][T21399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  335.816971][T21404] netlink: 'syz.2.5347': attribute type 11 has an invalid length.
[  336.089629][T21426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5355'.
[  336.122564][T21426] C speed is unknown, defaulting to 1000
[  336.188081][   T33] audit: type=1800 audit(1752467469.671:12): pid=21429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5355" name="memory.events" dev="tmpfs" ino=8791 res=0 errno=0
[  336.455998][T21455] C speed is unknown, defaulting to 1000
[  337.024927][T21483] validate_nla: 24 callbacks suppressed
[  337.024938][T21483] netlink: 'syz.0.5366': attribute type 8 has an invalid length.
[  337.025157][T21481] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  337.141606][T21487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.166514][T21493] x_tables: duplicate underflow at hook 1
[  337.195240][T21495] netlink: 'syz.0.5370': attribute type 4 has an invalid length.
[  337.231103][T21499] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  337.234742][T21499] : renamed from syzkaller0 (while UP)
[  337.240190][T21499] tipc: Disabling bearer <eth:syzkaller0>
[  337.246919][T21499] netlink: 'syz.0.5372': attribute type 1 has an invalid length.
[  337.435353][T21518] netlink: 'syz.2.5378': attribute type 4 has an invalid length.
[  337.776587][T21562] netlink: 'syz.2.5388': attribute type 4 has an invalid length.
[  338.294039][T21586] netlink: 'syz.1.5395': attribute type 2 has an invalid length.
[  338.334797][T21588] tc_dump_action: action bad kind
[  338.404381][T21594] ieee802154 phy0 wpan0: encryption failed: -22
[  338.407988][T21594] ieee802154 phy0 wpan0: encryption failed: -22
[  338.514980][T21601] netlink: 'syz.2.5400': attribute type 13 has an invalid length.
[  338.522401][T21601] bridge_slave_0: entered promiscuous mode
[  338.525172][T21601] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  338.592447][T21603] veth1: entered promiscuous mode
[  338.594185][T21603] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  338.656555][T21607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.833890][T21618] syzkaller1: entered promiscuous mode
[  338.835757][T21618] syzkaller1: entered allmulticast mode
[  339.184047][T21642] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  339.332488][T21657] __nla_validate_parse: 16 callbacks suppressed
[  339.332505][T21657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5419'.
[  339.571197][T21676] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5424'.
[  339.691427][T21686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5427'.
[  339.755376][T21695] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5429'.
[  340.179918][T21728] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5437'.
[  340.366692][T21738] ip6tnl6: entered promiscuous mode
[  340.369498][T21738] ip6tnl6: entered allmulticast mode
[  340.372369][T21738] team0: Device ip6tnl6 is of different type
[  341.172544][T21753] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  341.188817][T21755] netlink: 'syz.2.5446': attribute type 2 has an invalid length.
[  341.191279][T21755] netlink: 'syz.2.5446': attribute type 1 has an invalid length.
[  341.197723][T21755] netlink: 'syz.2.5446': attribute type 1 has an invalid length.
[  341.226542][T21753] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  341.285642][T21753] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  341.325188][T21768] C speed is unknown, defaulting to 1000
[  341.384541][T21753] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  341.397946][T21776] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5452'.
[  341.400963][T21776] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  341.511746][T21753] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  341.532833][T21753] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  341.564090][T21753] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  341.575847][T21753] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  342.206208][T21803] ip6t_srh: unknown srh match flags  4000
[  342.209372][T21803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5458'.
[  342.212927][T21803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5458'.
[  342.219533][T21812] x_tables: duplicate underflow at hook 4
[  342.325858][   T99] block nbd2: Possible stuck request ffff888020848000: control (read@0,1024B). Runtime 180 seconds
[  342.330426][   T99] block nbd2: Possible stuck request ffff888020848200: control (read@1024,1024B). Runtime 180 seconds
[  342.334801][   T99] block nbd2: Possible stuck request ffff888020848400: control (read@2048,1024B). Runtime 180 seconds
[  342.339311][   T99] block nbd2: Possible stuck request ffff888020848600: control (read@3072,1024B). Runtime 180 seconds
[  342.382745][T21826] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5467'.
[  342.455393][T21832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5468'.
[  342.631020][T21851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  342.633271][T21851] IPv6: NLM_F_CREATE should be set when creating new route
[  342.635574][T21851] IPv6: NLM_F_CREATE should be set when creating new route
[  342.682834][T21857] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  342.687694][T21857] syzkaller0: entered promiscuous mode
[  342.689520][T21857] syzkaller0: entered allmulticast mode
[  342.704526][T21857] xt_hashlimit: size too large, truncated to 1048576
[  342.844616][T21857] tipc: Resetting bearer <eth:syzkaller0>
[  342.852785][T21856] tipc: Resetting bearer <eth:syzkaller0>
[  342.865907][T21856] tipc: Disabling bearer <eth:syzkaller0>
[  343.037265][T21896] validate_nla: 1 callbacks suppressed
[  343.037281][T21896] netlink: 'syz.1.5486': attribute type 5 has an invalid length.
[  343.090502][T21901] netlink: 'syz.0.5489': attribute type 23 has an invalid length.
[  343.093676][T21903] netlink: 'syz.0.5489': attribute type 23 has an invalid length.
[  343.161731][T21909] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  343.166433][T21909] syzkaller0: entered promiscuous mode
[  343.174157][T21909] syzkaller0: entered allmulticast mode
[  343.216607][T21915] xt_hashlimit: size too large, truncated to 1048576
[  343.221984][T21915] xt_hashlimit: overflow, try lower: 3/0
[  343.250929][T21920] tipc: Resetting bearer <eth:syzkaller0>
[  343.535986][T21942] ipvlan5: entered promiscuous mode
[  343.621466][T21941] block nbd4: server does not support multiple connections per device.
[  343.626477][T21941] block nbd4: shutting down sockets
[  343.966030][T21977] 8021q: adding VLAN 0 to HW filter on device bond12
[  343.986272][T21908] tipc: Resetting bearer <eth:syzkaller0>
[  344.002696][T21908] tipc: Disabling bearer <eth:syzkaller0>
[  344.010741][T21982] netlink: 'syz.1.5512': attribute type 58 has an invalid length.
[  344.016075][T21983] netlink: 'syz.1.5512': attribute type 58 has an invalid length.
[  344.328875][T22013] netlink: 'syz.1.5522': attribute type 1 has an invalid length.
[  344.331270][T22013] netlink: 'syz.1.5522': attribute type 4 has an invalid length.
[  344.341900][T22013] __nla_validate_parse: 44 callbacks suppressed
[  344.341912][T22013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5522'.
[  344.346761][T22013] netlink: 'syz.1.5522': attribute type 1 has an invalid length.
[  344.356807][T22013] netlink: 'syz.1.5522': attribute type 2 has an invalid length.
[  344.359614][T22013] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5522'.
[  344.391590][T22005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  344.501295][T22022] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5525'.
[  344.549677][ T5831] Bluetooth: hci2: command 0x0405 tx timeout
[  344.645050][T22035] netlink: 'syz.2.5529': attribute type 1 has an invalid length.
[  344.649972][T22035] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5529'.
[  344.654887][T22035] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  344.671918][T22038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5530'.
[  344.844898][T22056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5537'.
[  345.045466][T22067] sit0: left promiscuous mode
[  345.073395][T22067] 8021q: adding VLAN 0 to HW filter on device team0
[  345.079017][T22067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  345.103085][T22078] C speed is unknown, defaulting to 1000
[  345.187697][T22083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  345.244186][T22067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  345.368672][T22090] netlink: 'syz.1.5548': attribute type 11 has an invalid length.
[  345.413157][T22095] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  345.579217][T22101] openvswitch: netlink: Key type 133 is out of range max 32
[  345.734242][T22105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5553'.
[  345.849185][T22116] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5557'.
[  345.947109][T22118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5558'.
[  346.040828][T22129] lo: entered promiscuous mode
[  346.049962][T22129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5561'.
[  346.143310][T22133] C speed is unknown, defaulting to 1000
[  346.150197][T22127] lo: left promiscuous mode
[  346.301155][T22141] ip6gretap0: entered promiscuous mode
[  346.303350][T22141] macsec2: entered promiscuous mode
[  346.305054][T22141] macsec2: entered allmulticast mode
[  346.419014][T22148] sit2: entered promiscuous mode
[  347.625220][T22219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.698216][T22224] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  347.715918][T22229] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  347.734608][T22228] C speed is unknown, defaulting to 1000
[  347.830785][T22238] erspan0: left promiscuous mode
[  347.880492][T22238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  347.955374][T22244] C speed is unknown, defaulting to 1000
[  348.029586][T22255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  348.091779][T22238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  348.095192][T22228] validate_nla: 11 callbacks suppressed
[  348.095202][T22228] netlink: 'syz.0.5595': attribute type 1 has an invalid length.
[  348.100660][T22261] openvswitch: netlink: IP tunnel dst address not specified
[  348.133428][T22228] bond0: entered promiscuous mode
[  348.135043][T22228] bond0: entered allmulticast mode
[  348.251473][T13612] bond0 (unregistering): Released all slaves
[  348.263329][T22265] netlink: 'syz.2.5603': attribute type 7 has an invalid length.
[  348.269666][T22265] netlink: 'syz.2.5603': attribute type 8 has an invalid length.
[  348.331216][T22280] netlink: 'syz.0.5606': attribute type 4 has an invalid length.
[  348.652292][T22314] netlink: 'syz.2.5613': attribute type 4 has an invalid length.
[  348.732013][   T99] block nbd1: Possible stuck request ffff888020810000: control (read@0,1024B). Runtime 210 seconds
[  348.735284][   T99] block nbd1: Possible stuck request ffff888020810200: control (read@1024,1024B). Runtime 210 seconds
[  348.739261][   T99] block nbd1: Possible stuck request ffff888020810400: control (read@2048,1024B). Runtime 210 seconds
[  348.742596][   T99] block nbd1: Possible stuck request ffff888020810600: control (read@3072,1024B). Runtime 210 seconds
[  349.000021][T22329] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  350.046326][T22372] netlink: 'syz.0.5623': attribute type 13 has an invalid length.
[  350.049727][T22372] netlink: 'syz.0.5623': attribute type 17 has an invalid length.
[  350.092478][T22372] syz_tun: left allmulticast mode
[  350.149894][T22372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  350.172205][T22384] __nla_validate_parse: 19 callbacks suppressed
[  350.172221][T22384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5627'.
[  350.180259][T22384] netlink: 'syz.1.5627': attribute type 2 has an invalid length.
[  350.193496][T22384] macvlan3: entered allmulticast mode
[  350.196042][T22384] veth1_vlan: entered allmulticast mode
[  350.210716][T22381] C speed is unknown, defaulting to 1000
[  350.293322][T22389] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5628'.
[  350.296295][T22389] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5628'.
[  350.353086][T22372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.415120][T22401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5632'.
[  350.443017][T22372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  350.649244][T22413] xt_cgroup: invalid path, errno=-2
[  350.928245][T22445] netlink: 'syz.1.5643': attribute type 1 has an invalid length.
[  350.930713][T22445] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5643'.
[  350.961974][T22450] netlink: 'syz.1.5644': attribute type 4 has an invalid length.
[  351.085132][T22460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5647'.
[  351.097171][T22460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5647'.
[  351.130677][T22463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5648'.
[  351.134104][T22463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5648'.
[  351.144687][T22463] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5648'.
[  351.406454][   T33] audit: type=1800 audit(1752467484.891:13): pid=22465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5647" name="cgroup.controllers" dev="tmpfs" ino=9400 res=0 errno=0
[  351.418332][T22476] syzkaller0: entered promiscuous mode
[  351.420445][T22476] syzkaller0: entered allmulticast mode
[  351.435094][T22476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  351.440117][T22474] tipc: Resetting bearer <eth:syzkaller0>
[  351.453464][T22474] tipc: Disabling bearer <eth:syzkaller0>
[  351.593915][T22488] delete_channel: no stack
[  351.663412][T22497] erspan0: Device is already in use.
[  351.872577][T22519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  351.874884][T22519] IPv6: NLM_F_CREATE should be set when creating new route
[  351.877168][T22519] IPv6: NLM_F_CREATE should be set when creating new route
[  352.180936][T22528] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  352.183855][T22528] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  352.814932][T22551] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  352.842863][T22553] tipc: Disabling bearer <eth:syzkaller0>
[  352.994493][T22573] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  353.184850][T22594] validate_nla: 7 callbacks suppressed
[  353.184860][T22594] netlink: 'syz.1.5689': attribute type 1 has an invalid length.
[  353.382156][T22624] netlink: 'syz.2.5697': attribute type 1 has an invalid length.
[  353.442096][T22635] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  353.906751][T22687] syzkaller0: entered promiscuous mode
[  353.909162][T22687] syzkaller0: entered allmulticast mode
[  353.926607][T22687] netlink: 'syz.2.5722': attribute type 1 has an invalid length.
[  354.014749][T22704] netlink: 'syz.1.5731': attribute type 2 has an invalid length.
[  354.293487][T22739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  354.295860][T22739] IPv6: NLM_F_CREATE should be set when creating new route
[  354.298125][T22739] IPv6: NLM_F_CREATE should be set when creating new route
[  354.301386][T22739] openvswitch: netlink: Message has 8 unknown bytes.
[  354.373607][T22743] netlink: 'syz.0.5740': attribute type 4 has an invalid length.
[  354.625498][T22758] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  354.766232][T22762] netlink: 'syz.0.5747': attribute type 4 has an invalid length.
[  354.810595][T22764] netlink: 'syz.0.5748': attribute type 4 has an invalid length.
[  354.999459][T22770] gretap0: Device is already in use.
[  355.005269][T22770] netlink: 'syz.1.5749': attribute type 4 has an invalid length.
[  355.160427][T22780] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  355.190125][T22782] netlink: 'syz.1.5754': attribute type 4 has an invalid length.
[  355.325924][T22792] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  355.335443][T22792] __nla_validate_parse: 29 callbacks suppressed
[  355.335458][T22792] netlink: 34 bytes leftover after parsing attributes in process `syz.1.5757'.
[  355.341925][T22792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5757'.
[  355.485126][T22801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5759'.
[  355.604006][T22806] netlink: 'syz.2.5762': attribute type 4 has an invalid length.
[  355.662482][T22812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5764'.
[  355.681664][T22812] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  356.028051][T22860] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5773'.
[  356.036882][T22860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5773'.
[  356.040644][T22861] x_tables: duplicate underflow at hook 1
[  356.689216][T22885] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  356.693945][ T5820] C speed is unknown, defaulting to 1000
[  356.695886][ T5820] syz0: Port: 1 Link DOWN
[  356.699995][ T5820] C speed is unknown, defaulting to 1000
[  356.862242][T22896] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5786'.
[  356.918086][T22904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5788'.
[  356.925879][T22906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5786'.
[  356.927900][T22903] pim6reg1: entered allmulticast mode
[  356.946672][T22906] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  356.952825][T22906] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  356.956864][T22906] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  356.962115][T22906] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  357.060246][T22913] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5790'.
[  357.257622][T22927] ip6gre0: mtu less than device minimum
[  357.314727][T22929] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  357.319304][T22929] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  357.395618][T22931] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  357.401611][T22931] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  357.406560][T22931] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  357.409614][T22931] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  357.466123][T22940] pim6reg1: entered promiscuous mode
[  357.468053][T22940] pim6reg1: entered allmulticast mode
[  358.106407][T22950] netlink: 'syz.1.5801': attribute type 11 has an invalid length.
[  358.410753][T22970] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  358.433653][T22974] validate_nla: 3 callbacks suppressed
[  358.433666][T22974] netlink: 'syz.0.5809': attribute type 9 has an invalid length.
[  358.438494][T22973] netlink: 'syz.0.5809': attribute type 9 has an invalid length.
[  358.444373][T22973] macvlan6: entered promiscuous mode
[  358.446306][T22973] macvlan6: entered allmulticast mode
[  358.453968][T22974] macvlan7: entered promiscuous mode
[  358.455929][T22974] macvlan7: entered allmulticast mode
[  358.689731][T22994] pim6reg1: entered promiscuous mode
[  358.691507][T22994] pim6reg1: entered allmulticast mode
[  358.760812][T23001] netlink: 'syz.1.5819': attribute type 1 has an invalid length.
[  358.780773][T23001] 8021q: adding VLAN 0 to HW filter on device bond13
[  358.801995][T23001] 8021q: adding VLAN 0 to HW filter on device bond13
[  358.804475][T23001] bond13: (slave vxcan5): The slave device specified does not support setting the MAC address
[  358.812132][T23001] bond13: (slave vxcan5): Error -95 calling set_mac_address
[  358.817591][T23009] netlink: 'syz.0.5818': attribute type 1 has an invalid length.
[  358.860602][T23010] veth9: entered promiscuous mode
[  358.869171][T23010] bond13: (slave veth9): Enslaving as an active interface with a down link
[  358.888053][T23001] erspan0: entered allmulticast mode
[  358.927330][T23016] netlink: 'syz.1.5820': attribute type 1 has an invalid length.
[  359.038203][T23026] netlink: 'syz.1.5821': attribute type 1 has an invalid length.
[  359.059387][T23026] 8021q: adding VLAN 0 to HW filter on device bond14
[  359.159309][T23026] bond14: (slave veth11): Enslaving as an active interface with a down link
[  359.172449][T23029] vlan0: entered allmulticast mode
[  359.174109][T23029] bond14: entered allmulticast mode
[  359.176896][T23029] bond14: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  359.640714][T23047] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  359.646156][T23047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  359.681230][T23047] team0 (unregistering): Port device C removed
[  359.686565][T23047] team0 (unregistering): Port device team_slave_1 removed
[  359.689941][T23047] team0 (unregistering): Port device bridge2 removed
[  359.693033][T23047] team0 (unregistering): Port device batadv2 removed
[  359.842978][T23059] syzkaller1: entered promiscuous mode
[  359.844871][T23059] syzkaller1: entered allmulticast mode
[  359.964372][T23067] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode
[  359.967178][T23067] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode
[  359.974138][T23072] netlink: 'syz.2.5840': attribute type 22 has an invalid length.
[  359.978570][T23068] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  359.981732][T23067] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  360.610632][T23142] __nla_validate_parse: 12 callbacks suppressed
[  360.610644][T23142] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5857'.
[  360.612969][T23143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5858'.
[  360.695328][T23147] netlink: 'syz.2.5858': attribute type 11 has an invalid length.
[  360.704803][T23149] xt_CT: You must specify a L4 protocol and not use inversions on it
[  360.774564][T23153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5867'.
[  360.883697][T23162] netlink: 'syz.2.5864': attribute type 4 has an invalid length.
[  360.994316][T23173] netlink: 'syz.1.5868': attribute type 39 has an invalid length.
[  362.587615][ T5278] udevd[5278]: worker [10901] /devices/virtual/block/nbd2 timeout; kill it
[  362.592379][ T5278] udevd[5278]: seq 13099 '/devices/virtual/block/nbd2' killed
[  363.228074][   T33] audit: type=1800 audit(1752467496.721:14): pid=23225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5888" name="cgroup.controllers" dev="tmpfs" ino=10505 res=0 errno=0
[  363.486537][T23251] validate_nla: 4 callbacks suppressed
[  363.486550][T23251] netlink: 'syz.0.5897': attribute type 10 has an invalid length.
[  363.731434][T23269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5902'.
[  363.943569][T23285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5907'.
[  363.977552][T23285] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5907'.
[  364.040333][T23291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5909'.
[  364.341363][T23309] netlink: 'syz.1.5916': attribute type 3 has an invalid length.
[  364.345458][T23309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5916'.
[  365.066844][T23340] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  365.211122][T23350] netlink: 212388 bytes leftover after parsing attributes in process `syz.2.5933'.
[  365.223396][T23352] netlink: 212388 bytes leftover after parsing attributes in process `syz.2.5933'.
[  365.357012][T23367] gtp0: entered promiscuous mode
[  365.361083][T23367] gtp0: entered allmulticast mode
[  365.706743][T23403] __nla_validate_parse: 1 callbacks suppressed
[  365.706763][T23403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5946'.
[  365.780670][T23408] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  366.183220][T23441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5958'.
[  366.499528][T23464] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5963'.
[  366.585293][T23466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5964'.
[  366.748918][T23484] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5969'.
[  366.870167][T23495] netlink: 'syz.1.5974': attribute type 10 has an invalid length.
[  366.873305][T23495] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  366.952981][T23503] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5975'.
[  367.107842][ T5830] Bluetooth: hci0: command tx timeout
[  367.781910][T23521] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5977'.
[  368.186043][T23553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5992'.
[  368.186448][T23561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5999'.
[  368.196641][T23561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5999'.
[  368.251816][T23560] netlink: 'syz.0.5992': attribute type 1 has an invalid length.
[  368.366526][T23572] IPv6: syztnl1: Disabled Multicast RS
[  368.659007][T23596] netlink: 'syz.2.6002': attribute type 1 has an invalid length.
[  368.708504][T23599] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  368.711838][T23599] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  368.714846][T23599] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  368.717849][T23599] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  368.726831][T23599] hsr0: left allmulticast mode
[  368.728785][T23599] hsr_slave_0: left allmulticast mode
[  368.730901][T23599] hsr_slave_1: left allmulticast mode
[  368.733219][T23599] hsr0: left promiscuous mode
[  368.831615][T23583] bond8: (slave gretap6): making interface the new active one
[  368.835208][T23583] bond8: (slave gretap6): Enslaving as an active interface with an up link
[  369.260030][T23651] delete_channel: no stack
[  369.372785][T23662] 8021q: adding VLAN 0 to HW filter on device bond15
[  369.376390][T23662] bond0: (slave bond15): Enslaving as an active interface with a down link
[  369.441573][T23676] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  370.804321][T23688] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  370.850685][T23696] netlink: 'syz.1.6031': attribute type 1 has an invalid length.
[  370.853298][T23696] __nla_validate_parse: 12 callbacks suppressed
[  370.853312][T23696] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6031'.
[  370.861253][T23696] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  370.864863][T23696] vxcan1: entered promiscuous mode
[  370.866707][T23696] vxcan1: entered allmulticast mode
[  370.884380][T23698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6032'.
[  370.992684][T23702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6034'.
[  370.996036][T23702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6034'.
[  371.053830][T23710] netlink: del zone limit has 4 unknown bytes
[  371.088274][T23714] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  371.493524][T23748] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  371.496233][T23751] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20004
[  371.766028][T23775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6058'.
[  371.768151][T23774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6060'.
[  371.779397][T23775] netlink: 'syz.1.6058': attribute type 21 has an invalid length.
[  371.782493][T23775] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6058'.
[  371.803906][T23774] netlink: 'syz.2.6060': attribute type 2 has an invalid length.
[  371.811357][T23778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6062'.
[  371.862015][T23780] Unsupported ieee802154 address type: 0
[  371.870119][T23780] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6063'.
[  371.967091][T23791] syzkaller0: entered promiscuous mode
[  371.969569][T23791] syzkaller0: entered allmulticast mode
[  371.977022][T23791] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.984556][T23790] tipc: Resetting bearer <eth:syzkaller0>
[  372.006910][T23790] tipc: Disabling bearer <eth:syzkaller0>
[  372.134195][T23801] set match dimension is over the limit!
[  372.142371][T23802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6070'.
[  372.387748][   T99] block nbd2: Possible stuck request ffff888020848000: control (read@0,1024B). Runtime 210 seconds
[  372.391909][   T99] block nbd2: Possible stuck request ffff888020848200: control (read@1024,1024B). Runtime 210 seconds
[  372.395205][   T99] block nbd2: Possible stuck request ffff888020848400: control (read@2048,1024B). Runtime 210 seconds
[  372.400170][   T99] block nbd2: Possible stuck request ffff888020848600: control (read@3072,1024B). Runtime 210 seconds
[  372.549657][T23836] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  373.353494][T23870] netlink: 'syz.2.6094': attribute type 3 has an invalid length.
[  373.356118][T23870] netlink: 'syz.2.6094': attribute type 1 has an invalid length.
[  373.697070][T23908] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  374.130431][T23942] netlink: 'syz.2.6121': attribute type 1 has an invalid length.
[  374.514914][T23994] netlink: 'syz.2.6138': attribute type 9 has an invalid length.
[  374.518216][T23994] netlink: 'syz.2.6138': attribute type 7 has an invalid length.
[  374.521239][T23994] netlink: 'syz.2.6138': attribute type 8 has an invalid length.
[  374.854048][T24024] netlink: 'syz.1.6150': attribute type 4 has an invalid length.
[  374.902985][T24024] netlink: 'syz.1.6150': attribute type 4 has an invalid length.
[  375.021766][T24032] erspan0: Device is already in use.
[  375.055987][T24031] IPVS: Unknown mcast interface: wg0
[  375.064319][T24031] netlink: 'syz.0.6153': attribute type 1 has an invalid length.
[  375.083237][T24031] can: request_module (can-proto-5) failed.
[  375.087794][T24039] ip6gretap2: entered promiscuous mode
[  375.520348][T24073] netlink: 'syz.2.6166': attribute type 12 has an invalid length.
[  376.021775][T24113] __nla_validate_parse: 22 callbacks suppressed
[  376.021794][T24113] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6178'.
[  376.028346][T24113] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6178'.
[  376.032047][T24113] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  376.308187][T24131] netlink: 'syz.2.6185': attribute type 1 has an invalid length.
[  376.311232][T24131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6185'.
[  376.345393][T24129] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  376.363145][T24137] netlink: 'syz.2.6187': attribute type 1 has an invalid length.
[  376.455879][T24145] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6189'.
[  376.462048][T24147] openvswitch: netlink: Unknown key attributes 2
[  376.561619][T24160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6195'.
[  376.613046][T24167] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6198'.
[  376.659389][T24171] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6200'.
[  376.716526][T24176] C speed is unknown, defaulting to 1000
[  376.753742][T24179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6202'.
[  377.146589][T24200] nbd: must specify a size in bytes for the device
[  377.466838][T24219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6215'.
[  377.757672][T24233] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6218'.
[  377.779525][T24233] xt_CT: You must specify a L4 protocol and not use inversions on it
[  377.821851][T24235] bridge: RTM_NEWNEIGH with invalid ether address
[  377.952016][T24240] C speed is unknown, defaulting to 1000
[  378.162406][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  378.493397][T24253] syzkaller0: Caught tx_queue_len zero misconfig
[  378.729903][T24282] xt_hashlimit: size too large, truncated to 1048576
[  378.839087][   T99] block nbd1: Possible stuck request ffff888020810000: control (read@0,1024B). Runtime 240 seconds
[  378.842927][   T99] block nbd1: Possible stuck request ffff888020810200: control (read@1024,1024B). Runtime 240 seconds
[  378.846288][   T99] block nbd1: Possible stuck request ffff888020810400: control (read@2048,1024B). Runtime 240 seconds
[  378.850080][   T99] block nbd1: Possible stuck request ffff888020810600: control (read@3072,1024B). Runtime 240 seconds
[  379.054692][T24312] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  379.225768][T24327] validate_nla: 3 callbacks suppressed
[  379.225780][T24327] netlink: 'syz.2.6248': attribute type 1 has an invalid length.
[  379.230622][T24327] netlink: 'syz.2.6248': attribute type 1 has an invalid length.
[  379.250817][T24330] netlink: 'syz.1.6249': attribute type 1 has an invalid length.
[  379.452317][T24342] netlink: 'syz.1.6254': attribute type 32 has an invalid length.
[  379.893566][T24353] netlink: 'syz.1.6257': attribute type 7 has an invalid length.
[  379.896649][T24353] netlink: 'syz.1.6257': attribute type 8 has an invalid length.
[  381.013632][T24394] tc_dump_action: action bad kind
[  381.043725][T24398] __nla_validate_parse: 8 callbacks suppressed
[  381.043744][T24398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6273'.
[  381.077861][T24398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6273'.
[  381.139691][T24401] netlink: 'syz.1.6274': attribute type 1 has an invalid length.
[  381.178385][T24407] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6276'.
[  381.259417][T24414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6278'.
[  381.262477][T24414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6278'.
[  381.268051][T24414] netlink: 'syz.1.6278': attribute type 1 has an invalid length.
[  381.270565][T24414] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6278'.
[  381.291462][T24414] nbd: socks must be embedded in a SOCK_ITEM attr
[  381.293771][T24414] block nbd4: shutting down sockets
[  381.694556][T24446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6292'.
[  381.777773][T24451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6294'.
[  382.036186][T24461] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6297'.
[  382.285461][T24466] netlink: 'syz.2.6298': attribute type 9 has an invalid length.
[  382.304615][T24470] netlink: 'syz.1.6300': attribute type 13 has an invalid length.
[  382.307093][T24470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6300'.
[  382.343615][T24470] C speed is unknown, defaulting to 1000
[  382.408490][T24475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.424772][T24475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.433456][T24475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.611433][T24494] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  382.614901][T24494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  382.860647][T24519] IPVS: Scheduler module ip_vs_sip not found
[  383.452352][T24573] C speed is unknown, defaulting to 1000
[  384.357207][T24622] xt_recent: hitcount (262143) is larger than allowed maximum (65535)
[  384.531857][T24636] C speed is unknown, defaulting to 1000
[  385.499061][T24688] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  385.504754][T24688] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  385.510648][T24688] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  385.515179][T24688] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  385.519512][T24688] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  385.554984][T24687] C speed is unknown, defaulting to 1000
[  385.750550][T24687] chnl_net:caif_netlink_parms(): no params data found
[  385.843196][T24687] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.845718][T24687] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.848460][T24687] bridge_slave_0: entered allmulticast mode
[  385.858599][T24687] bridge_slave_0: entered promiscuous mode
[  385.862145][T24687] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.864402][T24687] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.866736][T24687] bridge_slave_1: entered allmulticast mode
[  385.869942][T24687] bridge_slave_1: entered promiscuous mode
[  385.904288][T24687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.915254][T24687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.972969][T24687] team0: Port device team_slave_0 added
[  385.980576][T24687] team0: Port device team_slave_1 added
[  386.029080][T24687] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.031918][T24687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.045785][T24687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.052646][T24687] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.055355][T24687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.066057][T24687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.130994][T24687] hsr_slave_0: entered promiscuous mode
[  386.134207][T24687] hsr_slave_1: entered promiscuous mode
[  386.137197][T24687] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  386.140769][T24687] Cannot create hsr debugfs directory
[  386.235699][T24700] validate_nla: 2 callbacks suppressed
[  386.235716][T24700] netlink: 'syz.0.6371': attribute type 2 has an invalid length.
[  386.249510][T24700] netlink: 'syz.0.6371': attribute type 1 has an invalid length.
[  386.263682][T24700] __nla_validate_parse: 16 callbacks suppressed
[  386.263694][T24700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6371'.
[  386.295169][T24700] netlink: 'syz.0.6371': attribute type 10 has an invalid length.
[  386.298684][T24700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6371'.
[  386.302127][T24700] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  386.347060][T24687] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  386.415294][T24687] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  386.462993][T24687] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  386.516644][T24687] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  386.532662][T24720] C speed is unknown, defaulting to 1000
[  386.556472][T24726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6376'.
[  386.642501][T24687] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  386.682889][T24687] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  386.698804][T24687] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  386.703435][T24687] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  386.790163][T24687] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.873579][T24687] 8021q: adding VLAN 0 to HW filter on device team0
[  386.899679][T21284] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.901936][T21284] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.905355][T21284] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.907604][T21284] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.981772][T24743] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20002
[  387.025134][T24743] syzkaller1: entered promiscuous mode
[  387.030800][T24743] syzkaller1: entered allmulticast mode
[  387.138889][T24687] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.173147][T24687] veth0_vlan: entered promiscuous mode
[  387.179960][T24687] veth1_vlan: entered promiscuous mode
[  387.196960][T24687] veth0_macvtap: entered promiscuous mode
[  387.202250][T24687] veth1_macvtap: entered promiscuous mode
[  387.221566][T24687] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.233951][T24687] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.239921][T24687] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.243668][T24687] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.246360][T24687] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.258449][T24687] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.325594][T21284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.334333][T21284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.353658][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.356103][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.470186][T24763] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  387.619528][T24778] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6388'.
[  387.842969][T24791] netlink: 'syz.0.6393': attribute type 10 has an invalid length.
[  387.845844][T24790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  388.546011][T24834] ip6t_srh: unknown srh invflags 4449
[  388.722393][T24844] netlink: 488 bytes leftover after parsing attributes in process `syz.0.6408'.
[  388.729436][T24844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6408'.
[  388.732779][T24844] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6408'.
[  388.766331][T24846] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6409'.
[  388.804112][T24848] SET target dimension over the limit!
[  388.845706][T24853] netlink: 'syz.0.6411': attribute type 21 has an invalid length.
[  388.848731][T24853] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6411'.
[  388.855268][T24853] netlink: 'syz.0.6411': attribute type 33 has an invalid length.
[  388.860288][T24853] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6411'.
[  389.066011][T24861] sctp: [Deprecated]: syz.0.6414 (pid 24861) Use of int in maxseg socket option.
[  389.066011][T24861] Use struct sctp_assoc_value instead
[  389.076209][T24863] sctp: [Deprecated]: syz.0.6414 (pid 24863) Use of int in maxseg socket option.
[  389.076209][T24863] Use struct sctp_assoc_value instead
[  389.173845][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.524437][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  389.528662][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  389.531797][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  389.534788][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  389.538391][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  389.601612][T24912] C speed is unknown, defaulting to 1000
[  389.890681][T24912] chnl_net:caif_netlink_parms(): no params data found
[  389.978589][T24912] bridge0: port 1(bridge_slave_0) entered blocking state
[  389.980930][T24912] bridge0: port 1(bridge_slave_0) entered disabled state
[  389.983381][T24912] bridge_slave_0: entered allmulticast mode
[  389.986217][T24912] bridge_slave_0: entered promiscuous mode
[  389.990358][T24912] bridge0: port 2(bridge_slave_1) entered blocking state
[  389.993060][T24912] bridge0: port 2(bridge_slave_1) entered disabled state
[  389.996339][T24912] bridge_slave_1: entered allmulticast mode
[  389.999585][T24912] bridge_slave_1: entered promiscuous mode
[  390.026544][T24912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  390.031599][T24912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  390.063699][T24912] team0: Port device team_slave_0 added
[  390.067346][T24912] team0: Port device team_slave_1 added
[  390.094552][T24912] batman_adv: batadv0: Adding interface: batadv_slave_0
[  390.097257][T24912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.105310][T24912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  390.110233][T24912] batman_adv: batadv0: Adding interface: batadv_slave_1
[  390.112974][T24912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.121852][T24912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  390.158502][T24912] hsr_slave_0: entered promiscuous mode
[  390.160969][T24912] hsr_slave_1: entered promiscuous mode
[  390.163268][T24912] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  390.165687][T24912] Cannot create hsr debugfs directory
[  390.595916][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.738443][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.853767][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.094884][   T12] bridge_slave_1: left allmulticast mode
[  391.097228][   T12] bridge_slave_1: left promiscuous mode
[  391.112708][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.142875][   T12] bridge_slave_0: left allmulticast mode
[  391.156198][   T12] bridge_slave_0: left promiscuous mode
[  391.166679][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.587702][ T5831] Bluetooth: hci0: command tx timeout
[  391.793054][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  391.799091][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  391.802913][   T12] bond0 (unregistering): Released all slaves
[  392.241901][T24912] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  392.256672][T24912] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  392.272881][T24912] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  392.283063][   T12] hsr_slave_0: left promiscuous mode
[  392.285720][   T12] hsr_slave_1: left promiscuous mode
[  392.294735][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  392.297360][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  392.303386][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  392.306383][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  392.323199][T25038] __nla_validate_parse: 3 callbacks suppressed
[  392.323211][T25038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6429'.
[  392.356169][   T12] veth1_macvtap: left promiscuous mode
[  392.359028][   T12] veth0_macvtap: left promiscuous mode
[  392.360862][   T12] veth1_vlan: left promiscuous mode
[  392.362637][   T12] veth0_vlan: left promiscuous mode
[  392.822076][   T12] team0 (unregistering): Port device team_slave_1 removed
[  392.870311][   T12] team0 (unregistering): Port device team_slave_0 removed
[  393.183399][T24912] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  393.341617][T24912] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.376722][T24912] 8021q: adding VLAN 0 to HW filter on device team0
[  393.400699][T25048] syzkaller0: entered allmulticast mode
[  393.416509][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.420976][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state
[  393.677752][ T5831] Bluetooth: hci0: command tx timeout
[  394.008695][T25068] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6434'.
[  394.076096][T25069] atomic_op ffff8880426a2998 conn xmit_atomic 0000000000000000
[  394.081113][T25069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6434'.
[  394.146871][T25070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6434'.
[  394.934373][T25070] tipc: Disabling bearer <eth:veth0_macvtap>
[  394.944678][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.946964][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state
[  394.990788][T25077] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  395.000388][T25077] syzkaller0: entered promiscuous mode
[  395.002211][T25077] syzkaller0: entered allmulticast mode
[  395.020947][T25080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6437'.
[  395.024701][T25081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6437'.
[  395.034979][T25080] lo: entered promiscuous mode
[  395.043171][T25080] tunl0: entered promiscuous mode
[  395.058827][T25080] gre0: entered promiscuous mode
[  395.063815][T25080] gretap0: entered promiscuous mode
[  395.068282][T25080] erspan0: entered promiscuous mode
[  395.074957][T25080] ip_vti0: entered promiscuous mode
[  395.078680][T25080] ip6_vti0: entered promiscuous mode
[  395.083532][T25080] sit0: entered promiscuous mode
[  395.090434][T25080] ip6tnl0: entered promiscuous mode
[  395.094583][T25080] ip6gre0: entered promiscuous mode
[  395.100781][T25080] dummy0: entered promiscuous mode
[  395.102911][T25080] nlmon0: entered promiscuous mode
[  395.105370][T25080] caif0: entered promiscuous mode
[  395.107061][T25080] veth0: entered promiscuous mode
[  395.109095][T25080] veth1: entered promiscuous mode
[  395.110702][T25080] wg1: entered promiscuous mode
[  395.112251][T25080] wg2: entered promiscuous mode
[  395.113806][T25080] veth0_to_bridge: entered promiscuous mode
[  395.116352][T25080] veth1_to_bridge: entered promiscuous mode
[  395.118603][T25080] bridge_slave_1: entered promiscuous mode
[  395.120544][T25080] veth0_to_bond: entered promiscuous mode
[  395.122346][T25080] bond_slave_0: entered promiscuous mode
[  395.124111][T25080] veth0_to_team: entered promiscuous mode
[  395.126051][T25080] C: entered promiscuous mode
[  395.127655][T25080] veth1_to_team: entered promiscuous mode
[  395.129457][T25080] team_slave_1: entered promiscuous mode
[  395.131289][T25080] veth0_to_batadv: entered promiscuous mode
[  395.133186][T25080] batadv_slave_0: entered promiscuous mode
[  395.135045][T25080] veth1_to_batadv: entered promiscuous mode
[  395.137022][T25080] batadv_slave_1: entered promiscuous mode
[  395.139182][T25080] xfrm0: entered promiscuous mode
[  395.140853][T25080] veth0_to_hsr: entered promiscuous mode
[  395.142697][T25080] hsr_slave_0: entered promiscuous mode
[  395.144473][T25080] veth1_to_hsr: entered promiscuous mode
[  395.146304][T25080] hsr_slave_1: entered promiscuous mode
[  395.148749][T25080] vlan0: entered promiscuous mode
[  395.150532][T25080] vlan1: entered promiscuous mode
[  395.152235][T25080] macvlan0: entered promiscuous mode
[  395.153954][T25080] macvlan1: entered promiscuous mode
[  395.155625][T25080] ipvlan0: entered promiscuous mode
[  395.157237][T25080] ipvlan1: entered promiscuous mode
[  395.160168][T25080] geneve0: entered promiscuous mode
[  395.161901][T25080] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  395.164047][T25080] mac80211_hwsim hwsim10 wlan2: entered promiscuous mode
[  395.166256][T25080] batadv1: entered promiscuous mode
[  395.168017][T25080] geneve2: entered promiscuous mode
[  395.169665][T25080] syztnl0: entered promiscuous mode
[  395.171497][T25080] pim6reg: entered promiscuous mode
[  395.173162][T25080] sit1: entered promiscuous mode
[  395.174746][T25080] mac80211_hwsim hwsim12 wlan3: entered promiscuous mode
[  395.176956][T25080] bridge0: entered promiscuous mode
[  395.178821][T25080] gretap1: entered promiscuous mode
[  395.180498][T25080] ip6tnl1: entered promiscuous mode
[  395.182301][T25080] veth2: entered promiscuous mode
[  395.183960][T25080] veth3: entered promiscuous mode
[  395.185599][T25080] bond1: entered promiscuous mode
[  395.187231][T25080] bridge1: entered promiscuous mode
[  395.189010][T25080] ip6tnl2: entered promiscuous mode
[  395.190675][T25080] bridge2: entered promiscuous mode
[  395.192450][T25080] mac80211_hwsim hwsim14 wlan4: entered promiscuous mode
[  395.194662][T25080] gre1: entered promiscuous mode
[  395.196177][T25080] ip6tnl3: entered promiscuous mode
[  395.198282][T25080] bridge3: entered promiscuous mode
[  395.199986][T25080] ip6erspan0: entered promiscuous mode
[  395.201748][T25080] batadv2: entered promiscuous mode
[  395.203592][T25080] bridge4: entered promiscuous mode
[  395.205279][T25080] vxlan0: entered promiscuous mode
[  395.206927][T25080] vxlan1: entered promiscuous mode
[  395.210607][T25080] veth4: entered promiscuous mode
[  395.212257][T25080] veth5: entered promiscuous mode
[  395.213980][T25080] ip6tnl4: entered promiscuous mode
[  395.215607][T25080] ip6erspan1: entered promiscuous mode
[  395.217280][T25080] gretap2: entered promiscuous mode
[  395.219073][T25080] ipvlan2: entered promiscuous mode
[  395.220761][T25080] sit2: entered promiscuous mode
[  395.222329][T25080] bond2: entered promiscuous mode
[  395.223917][T25080] bond3: entered promiscuous mode
[  395.225616][T25080] ipvlan3: entered promiscuous mode
[  395.227291][T25080] bond0: entered promiscuous mode
[  395.230517][T25080] bridge5: entered promiscuous mode
[  395.232330][T25080] gretap3: entered promiscuous mode
[  395.234025][T25080] veth6: entered promiscuous mode
[  395.236098][T25080] veth7: entered promiscuous mode
[  395.238775][T25080] bridge6: entered promiscuous mode
[  395.240560][T25080] veth8: entered promiscuous mode
[  395.242183][T25080] veth9: entered promiscuous mode
[  395.243799][T25080] veth10: entered promiscuous mode
[  395.245430][T25080] veth11: entered promiscuous mode
[  395.247219][T25080] ipvlan4: entered promiscuous mode
[  395.250554][T25080] geneve3: entered promiscuous mode
[  395.252259][T25080] bond4: entered promiscuous mode
[  395.253895][T25080] bridge7: entered promiscuous mode
[  395.255576][T25080] veth12: entered promiscuous mode
[  395.257504][T25080] veth13: entered promiscuous mode
[  395.259176][T25080] vlan2: entered promiscuous mode
[  395.260901][T25080] bridge8: entered promiscuous mode
[  395.262562][T25080] vxlan2: entered promiscuous mode
[  395.264181][T25080] macvlan2: entered promiscuous mode
[  395.265865][T25080] veth1_to_team.4: entered promiscuous mode
[  395.270631][T25080] bond5: entered promiscuous mode
[  395.272297][T25080] veth14: entered promiscuous mode
[  395.273990][T25080] veth15: entered promiscuous mode
[  395.275623][T25080] bond6: entered promiscuous mode
[  395.277211][T25080] bridge9: entered promiscuous mode
[  395.279246][T25080] gretap4: entered promiscuous mode
[  395.281122][T25080] batadv0: entered promiscuous mode
[  395.282841][T25080] ip6tnl5: entered promiscuous mode
[  395.284485][T25080] bridge10: entered promiscuous mode
[  395.286145][T25080] ip6gre1: entered promiscuous mode
[  395.289813][T25080] ip6gretap2: entered promiscuous mode
[  395.292914][T25080] netdevsim netdevsim2 eth0: entered promiscuous mode
[  395.295047][T25080] netdevsim netdevsim2 eth1: entered promiscuous mode
[  395.297114][T25080] netdevsim netdevsim2 eth2: entered promiscuous mode
[  395.299391][T25080] netdevsim netdevsim2 eth3: entered promiscuous mode
[  395.301577][T25080] ip6gre2: entered promiscuous mode
[  395.305697][T25080] macsec2: left allmulticast mode
[  395.308496][T25080] geneve0.0: entered promiscuous mode
[  395.310350][T25080] gretap5: entered promiscuous mode
[  395.312392][T25080] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  395.315112][T25080] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  395.317837][T25080] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  395.320393][T25080] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  395.323197][T25080] geneve1: entered promiscuous mode
[  395.326375][T25080] mac80211_hwsim hwsim2 nicvf0: entered promiscuous mode
[  395.328825][T25080] bond8: entered promiscuous mode
[  395.330358][T25080] gretap6: entered promiscuous mode
[  395.333510][T25080] sit3: entered promiscuous mode
[  395.338106][T25080] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode
[  395.340796][T25080] ip6gre3: entered promiscuous mode
[  395.343948][T25080] bridge11: entered promiscuous mode
[  395.346874][T25080] bond9: entered promiscuous mode
[  395.348956][T25080] bridge12: entered promiscuous mode
[  395.350741][T25080] bridge13: entered promiscuous mode
[  395.359527][T25078] tipc: Resetting bearer <eth:syzkaller0>
[  395.367670][T25076] tipc: Resetting bearer <eth:syzkaller0>
[  395.381162][T25076] tipc: Disabling bearer <eth:syzkaller0>
[  395.456745][T25094] netlink: 'syz.0.6440': attribute type 4 has an invalid length.
[  395.459631][T25094] (unnamed net_device) (uninitialized): option lacp_active: invalid value (18)
[  395.506860][T24912] 8021q: adding VLAN 0 to HW filter on device batadv0
[  395.543845][T24912] veth0_vlan: entered promiscuous mode
[  395.560074][T24912] veth1_vlan: entered promiscuous mode
[  395.574534][T25098] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  395.578667][T25103] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6441'.
[  395.583060][T25098] syzkaller0: entered promiscuous mode
[  395.584771][T25098] syzkaller0: entered allmulticast mode
[  395.615050][T24912] veth0_macvtap: entered promiscuous mode
[  395.622371][T24912] veth1_macvtap: entered promiscuous mode
[  395.651408][T24912] batman_adv: batadv0: Interface activated: batadv_slave_0
[  395.666250][T24912] batman_adv: batadv0: Interface activated: batadv_slave_1
[  395.694870][T24912] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.700544][T24912] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.707741][T24912] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.713999][T24912] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.747626][ T5831] Bluetooth: hci0: command tx timeout
[  395.856145][ T6843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.862401][ T6843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  395.889811][ T6843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  395.892682][ T6843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  395.901238][T25115] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6446'.
[  396.136808][T25127] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  396.416199][T25134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6452'.
[  396.848948][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  396.852595][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  396.856259][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  396.859816][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  396.863265][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  398.092287][ T5842] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.149654][T25136] C speed is unknown, defaulting to 1000
[  398.211968][T25150] netlink: 'syz.0.6456': attribute type 1 has an invalid length.
[  398.360575][T25150] C speed is unknown, defaulting to 1000
[  398.603082][T25136] chnl_net:caif_netlink_parms(): no params data found
[  398.749000][T25136] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.751643][T25136] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.754287][T25136] bridge_slave_0: entered allmulticast mode
[  398.757706][T25136] bridge_slave_0: entered promiscuous mode
[  398.761407][T25136] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.763671][T25136] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.765963][T25136] bridge_slave_1: entered allmulticast mode
[  398.769174][T25136] bridge_slave_1: entered promiscuous mode
[  398.796098][T25136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  398.801040][T25136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.839032][T25136] team0: Port device team_slave_0 added
[  398.849381][T25136] team0: Port device team_slave_1 added
[  398.903084][T25136] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.905352][T25136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.920932][T25136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.927038][T25136] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.929977][T25136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.939888][T25136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.957644][ T5830] Bluetooth: hci0: command tx timeout
[  398.981582][T25136] hsr_slave_0: entered promiscuous mode
[  398.983976][T25136] hsr_slave_1: entered promiscuous mode
[  398.986717][T25136] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  398.989645][T25136] Cannot create hsr debugfs directory
[  398.991728][T25167] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  398.994381][T25167] syzkaller0: entered promiscuous mode
[  398.996336][T25167] syzkaller0: entered allmulticast mode
[  399.021948][T25167] tipc: Resetting bearer <eth:syzkaller0>
[  399.041564][T25166] tipc: Resetting bearer <eth:syzkaller0>
[  399.056612][T25166] tipc: Disabling bearer <eth:syzkaller0>
[  399.113332][ T5842] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.175141][T25180] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  399.193229][T25180] netlink: 'syz.0.6462': attribute type 1 has an invalid length.
[  399.196556][T25180] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6462'.
[  399.210484][T25180] NCSI netlink: No device for ifindex 0
[  399.274780][T25189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6465'.
[  399.514900][ T5842] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.534129][T25196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6467'.
[  399.659998][ T5842] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.837118][ T5842] bridge_slave_1: left allmulticast mode
[  399.839125][ T5842] bridge_slave_1: left promiscuous mode
[  399.840906][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.844779][ T5842] bridge_slave_0: left allmulticast mode
[  399.846562][ T5842] bridge_slave_0: left promiscuous mode
[  399.851154][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.171853][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  400.176562][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  400.182624][ T5842] bond0 (unregistering): Released all slaves
[  400.356888][T25230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6473'.
[  400.678678][T25242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.822610][T25136] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  400.842070][ T5842] hsr_slave_0: left promiscuous mode
[  400.844644][ T5842] hsr_slave_1: left promiscuous mode
[  400.846938][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  400.849589][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  400.858247][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  400.863619][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  400.895238][ T5842] veth1_macvtap: left promiscuous mode
[  400.897266][ T5842] veth0_macvtap: left promiscuous mode
[  400.899284][ T5842] veth1_vlan: left promiscuous mode
[  400.901351][ T5842] veth0_vlan: left promiscuous mode
[  401.027602][ T5830] Bluetooth: hci0: command tx timeout
[  401.437274][T25263] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6480'.
[  401.553214][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  401.596705][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  401.965497][T25136] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  401.971409][T25136] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  402.005867][T25136] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  402.163651][T25283] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6481'.
[  402.259625][T25136] 8021q: adding VLAN 0 to HW filter on device bond0
[  402.324112][T25136] 8021q: adding VLAN 0 to HW filter on device team0
[  402.346217][T23398] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.349120][T23398] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.371143][T23398] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.373993][T23398] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.469951][   T99] block nbd2: Possible stuck request ffff888020848000: control (read@0,1024B). Runtime 240 seconds
[  402.475430][   T99] block nbd2: Possible stuck request ffff888020848200: control (read@1024,1024B). Runtime 240 seconds
[  402.480709][   T99] block nbd2: Possible stuck request ffff888020848400: control (read@2048,1024B). Runtime 240 seconds
[  402.484840][   T99] block nbd2: Possible stuck request ffff888020848600: control (read@3072,1024B). Runtime 240 seconds
[  402.748947][T25307] xt_CT: You must specify a L4 protocol and not use inversions on it
[  402.751601][T25136] 8021q: adding VLAN 0 to HW filter on device batadv0
[  402.812343][T25136] veth0_vlan: entered promiscuous mode
[  402.830817][T25136] veth1_vlan: entered promiscuous mode
[  402.887016][T25136] veth0_macvtap: entered promiscuous mode
[  403.014447][T25136] veth1_macvtap: entered promiscuous mode
[  403.043865][T25136] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.063759][T25136] batman_adv: batadv0: Interface activated: batadv_slave_1
[  403.075189][T25136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.082272][T25136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  403.085394][T25136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  403.090814][T25136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  403.117827][ T5831] Bluetooth: hci0: command tx timeout
[  403.227115][ T6843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.230218][ T6843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.272806][ T5895] page_pool_release_retry() stalled pool shutdown: id 56, 1 inflight 60 sec
[  403.312478][T23398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.315070][T23398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.659533][T25342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6499'.
[  403.686753][T25339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6498'.
[  403.728219][T25347] xt_limit: Overflow, try lower: 0/0
[  403.822227][T25359] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  403.825837][T25359] bridge: RTM_NEWNEIGH with invalid ether address
[  403.833502][T25359] netlink: 'syz.0.6504': attribute type 11 has an invalid length.
[  404.272294][T25383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6514'.
[  404.480952][T25392] xt_CT: No such helper "pptp"
[  404.991885][T25411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6526'.
[  404.995853][T25407] C speed is unknown, defaulting to 1000
[  405.122572][T25419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6528'.
[  405.130770][T25419] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6528'.
[  405.190135][ T5831] Bluetooth: hci0: command 0x0419 tx timeout
[  405.245849][T25425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6530'.
[  405.363599][T25431] C speed is unknown, defaulting to 1000
[  405.543312][T25437] netlink: 'syz.0.6533': attribute type 1 has an invalid length.
[  405.913408][T25453] delete_channel: no stack
[  405.921407][T25063] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.018317][T25063] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.086279][T25063] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.161026][T25063] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  406.261087][T25063] bridge_slave_1: left allmulticast mode
[  406.262892][T25063] bridge_slave_1: left promiscuous mode
[  406.264810][T25063] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.271924][T25063] bridge_slave_0: left allmulticast mode
[  406.273788][T25063] bridge_slave_0: left promiscuous mode
[  406.275685][T25063] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.471501][T25461] netlink: 'syz.2.6541': attribute type 1 has an invalid length.
[  406.605737][T24688] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  406.621926][T24688] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  406.632298][T24688] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  406.644967][T24688] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  406.650346][T24688] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  406.667817][T25063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  406.672427][T25063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  406.676942][T25063] bond0 (unregistering): Released all slaves
[  406.762958][T25474] ip6gre0: left promiscuous mode
[  406.764879][T25474] ip6gre0: entered allmulticast mode
[  406.796870][T25467] C speed is unknown, defaulting to 1000
[  407.544767][T25467] chnl_net:caif_netlink_parms(): no params data found
[  407.595094][T25063] hsr_slave_0: left promiscuous mode
[  407.603510][T25063] hsr_slave_1: left promiscuous mode
[  407.613715][T25063] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  407.616665][T25063] batman_adv: batadv0: Removing interface: batadv_slave_0
[  407.624801][T25063] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  407.627941][T25063] batman_adv: batadv0: Removing interface: batadv_slave_1
[  407.628815][T25510] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6546'.
[  407.654628][T25063] veth1_macvtap: left promiscuous mode
[  407.656464][T25063] veth0_macvtap: left promiscuous mode
[  407.660472][T25063] veth1_vlan: left promiscuous mode
[  407.662536][T25063] veth0_vlan: left promiscuous mode
[  408.044479][T25063] team0 (unregistering): Port device team_slave_1 removed
[  408.081154][T25063] team0 (unregistering): Port device team_slave_0 removed
[  408.568203][T25467] bridge0: port 1(bridge_slave_0) entered blocking state
[  408.572952][T25467] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.575956][T25467] bridge_slave_0: entered allmulticast mode
[  408.588803][T25467] bridge_slave_0: entered promiscuous mode
[  408.613387][T25467] bridge0: port 2(bridge_slave_1) entered blocking state
[  408.616289][T25467] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.631547][T25467] bridge_slave_1: entered allmulticast mode
[  408.657639][T25467] bridge_slave_1: entered promiscuous mode
[  408.699320][T25521] tipc: Enabled bearer <ib:caif0>, priority 10
[  408.707616][ T5830] Bluetooth: hci0: command tx timeout
[  408.754426][T25467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  408.775735][T25467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  408.840233][T25536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6551'.
[  408.843590][T25537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6551'.
[  408.846849][T25536] netlink: 'syz.0.6551': attribute type 29 has an invalid length.
[  408.853442][T25537] netlink: 'syz.0.6551': attribute type 29 has an invalid length.
[  408.856469][T25537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6551'.
[  408.861344][T25467] team0: Port device team_slave_0 added
[  408.867746][   T99] block nbd1: Possible stuck request ffff888020810000: control (read@0,1024B). Runtime 270 seconds
[  408.868657][T25536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6551'.
[  408.871063][   T99] block nbd1: Possible stuck request ffff888020810200: control (read@1024,1024B). Runtime 270 seconds
[  408.882360][   T99] block nbd1: Possible stuck request ffff888020810400: control (read@2048,1024B). Runtime 270 seconds
[  408.887303][   T99] block nbd1: Possible stuck request ffff888020810600: control (read@3072,1024B). Runtime 270 seconds
[  408.891500][T25467] team0: Port device team_slave_1 added
[  408.989610][T25467] batman_adv: batadv0: Adding interface: batadv_slave_0
[  408.992332][T25467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  409.019316][T25467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  409.048843][T25467] batman_adv: batadv0: Adding interface: batadv_slave_1
[  409.051759][T25467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  409.063419][T25467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  409.158959][T25467] hsr_slave_0: entered promiscuous mode
[  409.162136][T25467] hsr_slave_1: entered promiscuous mode
[  409.164998][T25467] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  409.172564][T25467] Cannot create hsr debugfs directory
[  409.187764][T25110] page_pool_release_retry() stalled pool shutdown: id 58, 3329 inflight 60 sec
[  409.389083][T25566] netlink: 'syz.2.6559': attribute type 5 has an invalid length.
[  409.641125][T25581] __nla_validate_parse: 1 callbacks suppressed
[  409.641138][T25581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6563'.
[  409.714456][T25583] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6563'.
[  409.717308][T25583] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6563'.
[  409.723220][T25584] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6563'.
[  409.725968][T25584] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6563'.
[  409.924992][T25595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6566'.
[  409.989286][T25467] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  410.001026][T25467] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  410.020411][T25467] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  410.185738][T25467] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  410.331174][T25467] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.334740][T25618] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6570'.
[  410.362920][T25467] 8021q: adding VLAN 0 to HW filter on device team0
[  410.370660][ T6843] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.372917][ T6843] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.387078][ T6843] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.389401][ T6843] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.443365][T25467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  410.446510][T25467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  410.492403][T25628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6572'.
[  410.553211][T25631] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  410.586172][T25467] 8021q: adding VLAN 0 to HW filter on device batadv0
[  410.604284][T25637] netlink: 'syz.0.6574': attribute type 3 has an invalid length.
[  410.651072][T25467] veth0_vlan: entered promiscuous mode
[  410.661236][T25467] veth1_vlan: entered promiscuous mode
[  410.680724][T25648] sctp: [Deprecated]: syz.2.6575 (pid 25648) Use of int in maxseg socket option.
[  410.680724][T25648] Use struct sctp_assoc_value instead
[  410.693666][T25642] netlink: 'syz.2.6575': attribute type 1 has an invalid length.
[  410.746347][T25467] veth0_macvtap: entered promiscuous mode
[  410.780789][T25653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6577'.
[  410.784694][T25467] veth1_macvtap: entered promiscuous mode
[  410.786655][T25653] netlink: 'syz.0.6577': attribute type 2 has an invalid length.
[  410.789835][ T5830] Bluetooth: hci0: command tx timeout
[  410.823520][T25467] batman_adv: batadv0: Interface activated: batadv_slave_0
[  410.831177][T25467] batman_adv: batadv0: Interface activated: batadv_slave_1
[  410.851670][T25467] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  410.855254][T25659] netlink: 'syz.0.6579': attribute type 1 has an invalid length.
[  410.864293][T25467] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  410.868594][T25467] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  410.871561][T25467] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  410.922737][T25661] C speed is unknown, defaulting to 1000
[  410.961171][T25659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6579'.
[  410.984083][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  410.986582][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.012409][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  411.014817][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  411.291166][T25684] netlink: 'syz.2.6583': attribute type 2 has an invalid length.
[  411.444747][T25686] C speed is unknown, defaulting to 1000
[  411.473738][T25696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  411.540282][T25696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  411.601928][T25696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  411.913653][T25719] netlink: 'syz.0.6589': attribute type 13 has an invalid length.
[  412.001576][T25722] C speed is unknown, defaulting to 1000
[  412.692242][ T5842] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.225621][T25749] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  413.310381][T24688] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  413.313836][T25752] bond0: option miimon: invalid value (18446744072166047744)
[  413.316831][T25752] bond0: option miimon: allowed values 0 - 2147483647
[  413.319806][T24688] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  413.323986][T24688] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  413.332572][T24688] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  413.337561][T24688] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  413.379459][T25751] C speed is unknown, defaulting to 1000
[  413.514794][T25757] netlink: 'syz.2.6599': attribute type 4 has an invalid length.
[  413.538121][   T33] audit: type=1804 audit(1752467547.021:15): pid=25758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6598" name="/newroot/2329/cgroup.controllers" dev="tmpfs" ino=11830 res=1 errno=0
[  413.556431][   T33] audit: type=1800 audit(1752467547.021:16): pid=25758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6598" name="cgroup.controllers" dev="tmpfs" ino=11830 res=0 errno=0
[  413.636452][T25766] C speed is unknown, defaulting to 1000
[  413.853631][T25751] chnl_net:caif_netlink_parms(): no params data found
[  413.939886][T25770] C speed is unknown, defaulting to 1000
[  414.215686][ T5842] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.360753][ T5842] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.371469][T25751] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.373728][T25751] bridge0: port 1(bridge_slave_0) entered disabled state
[  414.376097][T25751] bridge_slave_0: entered allmulticast mode
[  414.382829][T25751] bridge_slave_0: entered promiscuous mode
[  414.387974][T25751] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.390400][T25751] bridge0: port 2(bridge_slave_1) entered disabled state
[  414.392713][T25751] bridge_slave_1: entered allmulticast mode
[  414.395613][T25751] bridge_slave_1: entered promiscuous mode
[  414.396000][T25795] validate_nla: 2 callbacks suppressed
[  414.396018][T25795] netlink: 'syz.0.6608': attribute type 1 has an invalid length.
[  414.435421][T25795] 8021q: adding VLAN 0 to HW filter on device bond14
[  414.460198][T25751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  414.465344][T25751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  414.486793][ T5842] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  414.522203][T25795] 8021q: adding VLAN 0 to HW filter on device bond14
[  414.524954][T25795] bond14: (slave vxcan5): The slave device specified does not support setting the MAC address
[  414.534211][T25795] bond14: (slave vxcan5): Error -95 calling set_mac_address
[  414.588244][T25797] veth15: entered promiscuous mode
[  414.595721][T25797] bond14: (slave veth15): Enslaving as an active interface with a down link
[  414.629972][T25751] team0: Port device team_slave_0 added
[  414.638412][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.641587][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.693617][T25751] team0: Port device team_slave_1 added
[  414.785915][T25751] batman_adv: batadv0: Adding interface: batadv_slave_0
[  414.798682][T25751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.820115][T25751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  414.829452][T25751] batman_adv: batadv0: Adding interface: batadv_slave_1
[  414.832228][T25751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.841907][T25751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  414.974412][T25751] hsr_slave_0: entered promiscuous mode
[  414.980638][T25751] hsr_slave_1: entered promiscuous mode
[  414.983038][T25751] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  414.986036][T25751] Cannot create hsr debugfs directory
[  415.042897][ T5842] bridge_slave_1: left allmulticast mode
[  415.044789][ T5842] bridge_slave_1: left promiscuous mode
[  415.046698][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.066321][ T5842] bridge_slave_0: left allmulticast mode
[  415.069265][ T5842] bridge_slave_0: left promiscuous mode
[  415.071502][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.361491][ T5830] Bluetooth: hci0: command tx timeout
[  415.411918][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  415.421847][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  415.428479][ T5842] bond0 (unregistering): Released all slaves
[  415.454280][T25822] __nla_validate_parse: 6 callbacks suppressed
[  415.454298][T25822] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6612'.
[  415.847243][T25856] netlink: 'syz.0.6618': attribute type 10 has an invalid length.
[  415.924386][T25852] wg2: entered allmulticast mode
[  416.101360][ T5842] hsr_slave_0: left promiscuous mode
[  416.104191][ T5842] hsr_slave_1: left promiscuous mode
[  416.106757][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  416.111690][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  416.114686][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  416.117007][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  416.143568][ T5842] veth1_macvtap: left promiscuous mode
[  416.151094][ T5842] veth0_macvtap: left promiscuous mode
[  416.152928][ T5842] veth1_vlan: left promiscuous mode
[  416.155740][ T5842] veth0_vlan: left promiscuous mode
[  416.161200][T25862] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  416.628438][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  416.663083][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  417.166192][T25874] x_tables: duplicate underflow at hook 1
[  417.204400][T25751] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  417.225097][T25751] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  417.262167][T25882] x_tables: duplicate underflow at hook 1
[  417.275685][T25751] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  417.282521][T25751] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  417.374175][T25891] C speed is unknown, defaulting to 1000
[  417.427775][ T5830] Bluetooth: hci0: command tx timeout
[  417.450312][T25751] 8021q: adding VLAN 0 to HW filter on device bond0
[  417.462800][T25751] 8021q: adding VLAN 0 to HW filter on device team0
[  417.473870][  T223] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.476131][  T223] bridge0: port 1(bridge_slave_0) entered forwarding state
[  417.494400][  T223] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.496683][  T223] bridge0: port 2(bridge_slave_1) entered forwarding state
[  417.529609][T25899] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  417.557077][T25751] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  417.575121][T25751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  417.914732][T25751] 8021q: adding VLAN 0 to HW filter on device batadv0
[  417.917925][T25918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  417.995662][T25751] veth0_vlan: entered promiscuous mode
[  418.020958][T25751] veth1_vlan: entered promiscuous mode
[  418.083954][T25751] veth0_macvtap: entered promiscuous mode
[  418.112587][T25924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  418.124366][T25924] syzkaller0: entered promiscuous mode
[  418.137633][T25924] syzkaller0: entered allmulticast mode
[  418.147422][T25751] veth1_macvtap: entered promiscuous mode
[  418.169398][T25924] tipc: Resetting bearer <eth:syzkaller0>
[  418.181480][T25923] tipc: Resetting bearer <eth:syzkaller0>
[  418.205936][T25923] tipc: Disabling bearer <eth:syzkaller0>
[  418.217163][T25751] batman_adv: batadv0: Interface activated: batadv_slave_0
[  418.245444][T25751] batman_adv: batadv0: Interface activated: batadv_slave_1
[  418.254047][T25751] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.256675][T25751] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.262580][T25751] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.265275][T25751] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.343599][T25932] netlink: 'syz.0.6632': attribute type 32 has an invalid length.
[  418.348089][T25932] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6632'.
[  418.364901][ T6837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.368048][ T6837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.418934][ T6837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.421768][ T6837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.571753][T25943] bridge: RTM_NEWNEIGH with invalid ether address
[  418.665834][T25947] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6637'.
[  418.846049][T25960] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6641'.
[  418.853497][T25960] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6641'.
[  418.856354][T25960] netlink: 7 bytes leftover after parsing attributes in process `syz.2.6641'.
[  419.485172][T25994] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6651'.
[  419.601750][   T47] page_pool_release_retry() stalled pool shutdown: id 59, 3329 inflight 60 sec
[  419.637216][T26002] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6655'.
[  419.668361][T26002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6655'.
[  419.800371][T25063] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.571132][T26017] C speed is unknown, defaulting to 1000
[  420.760947][T26031] netlink: 'syz.0.6662': attribute type 1 has an invalid length.
[  420.767252][T24688] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  420.772353][T26031] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6662'.
[  420.773717][T24688] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  420.780559][T24688] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  420.784130][T24688] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  420.785049][T26031] ieee802154 phy0 wpan0: encryption failed: -22
[  420.791135][T24688] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  420.920955][T26029] C speed is unknown, defaulting to 1000
[  420.941708][T26037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6663'.
[  420.953152][T26037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6663'.
[  421.092234][T25063] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.321946][T26052] syzkaller0: entered promiscuous mode
[  421.323701][T26052] syzkaller0: entered allmulticast mode
[  421.370029][T25063] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.391185][T26065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6671'.
[  421.394106][T26065] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  421.396703][T26065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.831077][T25063] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  422.840632][T26029] chnl_net:caif_netlink_parms(): no params data found
[  422.877833][ T5830] Bluetooth: hci0: command tx timeout
[  422.926464][T26029] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.929691][T26029] bridge0: port 1(bridge_slave_0) entered disabled state
[  422.932027][T26029] bridge_slave_0: entered allmulticast mode
[  422.934799][T26029] bridge_slave_0: entered promiscuous mode
[  422.941675][T26029] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.944876][T26029] bridge0: port 2(bridge_slave_1) entered disabled state
[  422.947215][T26029] bridge_slave_1: entered allmulticast mode
[  422.950151][T26029] bridge_slave_1: entered promiscuous mode
[  423.002398][T26080] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  423.021349][T26083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6675'.
[  423.025652][T26029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  423.029810][T26080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6675'.
[  423.034805][T26029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  423.038695][T26080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6675'.
[  423.061457][T26083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6675'.
[  423.078388][T26080] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.103950][T25063] bridge_slave_1: left allmulticast mode
[  423.105744][T25063] bridge_slave_1: left promiscuous mode
[  423.109931][T25063] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.121989][T25063] bridge_slave_0: left allmulticast mode
[  423.123839][T25063] bridge_slave_0: left promiscuous mode
[  423.125708][T25063] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.467779][T25063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.473250][T25063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  423.477331][T25063] bond0 (unregistering): Released all slaves
[  423.498206][T26029] team0: Port device team_slave_0 added
[  423.633450][T26029] team0: Port device team_slave_1 added
[  423.678335][T26029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  423.680709][T26029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.693646][T26029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.698771][T26029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.701069][T26029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.711848][T26029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  423.738821][T26109] netlink: 'syz.0.6681': attribute type 4 has an invalid length.
[  423.796115][T26029] hsr_slave_0: entered promiscuous mode
[  423.798818][T26029] hsr_slave_1: entered promiscuous mode
[  423.800952][T26029] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  423.803289][T26029] Cannot create hsr debugfs directory
[  423.843852][T26112] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  423.847179][T26112] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  423.955303][T26120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6682'.
[  423.958977][T26120] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6682'.
[  424.136066][T25063] hsr_slave_0: left promiscuous mode
[  424.138545][T25063] hsr_slave_1: left promiscuous mode
[  424.140855][T25063] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  424.143274][T25063] batman_adv: batadv0: Removing interface: batadv_slave_0
[  424.146046][T25063] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  424.148648][T25063] batman_adv: batadv0: Removing interface: batadv_slave_1
[  424.169075][T25063] veth1_macvtap: left promiscuous mode
[  424.170990][T25063] veth0_macvtap: left promiscuous mode
[  424.172867][T25063] veth1_vlan: left promiscuous mode
[  424.174617][T25063] veth0_vlan: left promiscuous mode
[  424.475225][T26125] netlink: 'syz.2.6683': attribute type 1 has an invalid length.
[  424.592266][T25063] team0 (unregistering): Port device team_slave_1 removed
[  424.641648][T25063] team0 (unregistering): Port device team_slave_0 removed
[  424.952122][ T5830] Bluetooth: hci0: command tx timeout
[  425.131555][T26137] netlink: 'syz.2.6686': attribute type 3 has an invalid length.
[  425.761205][T26029] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  425.870624][T26174] netlink: 'syz.2.6693': attribute type 1 has an invalid length.
[  425.873122][T26174] __nla_validate_parse: 6 callbacks suppressed
[  425.873130][T26174] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6693'.
[  425.885545][T26029] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  425.930167][T26175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6693'.
[  425.932796][T26174] netlink: 'syz.2.6693': attribute type 1 has an invalid length.
[  425.950545][T26175] IPVS: Unknown mcast interface: vcan0
[  425.956117][T26029] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  426.017144][T26178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6694'.
[  426.020441][T26029] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  426.140978][T26191] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6695'.
[  426.169122][T26197] ip6t_srh: unknown srh match flags  5294
[  426.205910][T26029] 8021q: adding VLAN 0 to HW filter on device bond0
[  426.229700][T26029] 8021q: adding VLAN 0 to HW filter on device team0
[  426.245735][T23399] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.248264][T23399] bridge0: port 1(bridge_slave_0) entered forwarding state
[  426.264646][T23399] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.267027][T23399] bridge0: port 2(bridge_slave_1) entered forwarding state
[  426.307856][T26205] netlink: 'syz.0.6699': attribute type 3 has an invalid length.
[  426.314759][T26029] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  426.322972][T26029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  426.403265][T26217] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6700'.
[  426.495880][T26221] smc: net device bond0 applied user defined pnetid SYZ2
[  426.499144][T26221] smc: net device bond0 erased user defined pnetid SYZ2
[  426.503338][T26226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6702'.
[  426.532421][T26029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  426.572813][T26029] veth0_vlan: entered promiscuous mode
[  426.585230][T26029] veth1_vlan: entered promiscuous mode
[  426.619736][T26029] veth0_macvtap: entered promiscuous mode
[  426.629111][T26029] veth1_macvtap: entered promiscuous mode
[  426.649622][T26029] batman_adv: batadv0: Interface activated: batadv_slave_0
[  426.683360][T26029] batman_adv: batadv0: Interface activated: batadv_slave_1
[  426.690898][T26029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  426.705361][T26029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  426.709343][T26029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  426.712101][T26029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  426.813468][  T223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.815934][  T223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.849022][  T223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  426.852316][  T223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  426.952462][T26250] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6707'.
[  427.027965][T24688] Bluetooth: hci0: command tx timeout
[  427.711452][T26295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6716'.
[  427.714257][T26295] netlink: 'syz.0.6716': attribute type 7 has an invalid length.
[  427.716806][T26295] netlink: 'syz.0.6716': attribute type 8 has an invalid length.
[  427.721481][T26295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6716'.
[  427.815722][T26299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6717'.
[  427.909293][T26312] netlink: 'syz.2.6720': attribute type 2 has an invalid length.
[  427.911705][T26312] netlink: 'syz.2.6720': attribute type 1 has an invalid length.
[  428.008042][T26320] x_tables: duplicate underflow at hook 2
[  428.203494][T26335] netlink: 'syz.0.6728': attribute type 1 has an invalid length.
[  428.229230][T26335] 8021q: adding VLAN 0 to HW filter on device bond15
[  428.299313][T26337] erspan0: entered allmulticast mode
[  429.110882][T26351] netlink: 'syz.2.6733': attribute type 10 has an invalid length.
[  429.114062][T26351] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  429.289614][T26369] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.356690][T26373] C speed is unknown, defaulting to 1000
[  429.799446][T26389] x_tables: duplicate underflow at hook 2
[  429.896513][T26390] netlink: 'syz.2.6746': attribute type 26 has an invalid length.
[  429.900303][T26390] x_tables: duplicate underflow at hook 2
[  430.252070][T26407] 8021q: adding VLAN 0 to HW filter on device bond12
[  430.266514][T26407] 8021q: adding VLAN 0 to HW filter on device bond12
[  430.271115][T26407] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address
[  430.275232][T26407] bond12: (slave vxcan3): Error -95 calling set_mac_address
[  430.449602][T26416] ieee802154 phy0 wpan0: encryption failed: -22
[  430.741608][T26435] bridge0: entered allmulticast mode
[  430.892465][T26452] IPVS: length: 139 != 8
[  431.004872][T26464] __nla_validate_parse: 10 callbacks suppressed
[  431.004883][T26464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6767'.
[  431.435225][T26488] validate_nla: 3 callbacks suppressed
[  431.435251][T26488] netlink: 'syz.2.6773': attribute type 4 has an invalid length.
[  431.575272][T26498] netlink: 'syz.2.6775': attribute type 2 has an invalid length.
[  432.174577][T26510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6778'.
[  432.181209][T26510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6778'.
[  432.307063][T26521] vxcan0: entered promiscuous mode
[  432.349770][T26521] netlink: 'syz.0.6782': attribute type 1 has an invalid length.
[  432.506749][T26531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6785'.
[  432.549908][   T99] block nbd2: Possible stuck request ffff888020848000: control (read@0,1024B). Runtime 270 seconds
[  432.554105][   T99] block nbd2: Possible stuck request ffff888020848200: control (read@1024,1024B). Runtime 270 seconds
[  432.558304][   T99] block nbd2: Possible stuck request ffff888020848400: control (read@2048,1024B). Runtime 270 seconds
[  432.561679][   T99] block nbd2: Possible stuck request ffff888020848600: control (read@3072,1024B). Runtime 270 seconds
[  432.599355][T26537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6788'.
[  432.609969][T26537] syzkaller1: tun_chr_ioctl cmd 1074025677
[  432.612029][T26537] syzkaller1: linktype set to 780
[  432.706929][T26540] netlink: 'syz.0.6789': attribute type 10 has an invalid length.
[  432.748394][T26540] netlink: 'syz.0.6789': attribute type 22 has an invalid length.
[  432.754146][T26541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6789'.
[  438.958480][   T99] block nbd1: Possible stuck request ffff888020810000: control (read@0,1024B). Runtime 300 seconds
[  438.962620][   T99] block nbd1: Possible stuck request ffff888020810200: control (read@1024,1024B). Runtime 300 seconds
[  438.966729][   T99] block nbd1: Possible stuck request ffff888020810400: control (read@2048,1024B). Runtime 300 seconds
[  438.971455][   T99] block nbd1: Possible stuck request ffff888020810600: control (read@3072,1024B). Runtime 300 seconds
[  439.268178][   T47] page_pool_release_retry() stalled pool shutdown: id 61, 1 inflight 60 sec
[  439.591390][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  462.630564][   T99] block nbd2: Possible stuck request ffff888020848000: control (read@0,1024B). Runtime 300 seconds
[  462.634813][   T99] block nbd2: Possible stuck request ffff888020848200: control (read@1024,1024B). Runtime 300 seconds
[  462.639802][   T99] block nbd2: Possible stuck request ffff888020848400: control (read@2048,1024B). Runtime 300 seconds
[  462.643994][   T99] block nbd2: Possible stuck request ffff888020848600: control (read@3072,1024B). Runtime 300 seconds
[  465.788258][T26578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6798'.
[  465.791824][T26578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6798'.
[  465.840751][T26587] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  465.872797][T26589] netlink: 45 bytes leftover after parsing attributes in process `syz.0.6801'.
[  465.896511][T26589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6801'.
[  465.901323][T26590] openvswitch: netlink: Key 6 has unexpected len 16 expected 2
[  465.916186][T26590] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6800'.
[  466.089464][T26595] netlink: 'syz.0.6804': attribute type 21 has an invalid length.
[  466.091996][T26595] netlink: 'syz.0.6804': attribute type 1 has an invalid length.
[  466.094389][T26595] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6804'.
[  466.143739][T26600] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6803'.
[  466.443344][T26620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6812'.
[  466.495139][T26620] netlink: 'syz.0.6812': attribute type 1 has an invalid length.
[  466.572718][T26623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6811'.
[  466.575836][T26623] netlink: 'syz.2.6811': attribute type 7 has an invalid length.
[  466.598168][T26623] netlink: 'syz.2.6811': attribute type 8 has an invalid length.
[  466.601172][T26623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6811'.
[  467.065443][T26664] xt_ecn: cannot match TCP bits for non-tcp packets
[  467.452378][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.535873][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.596025][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.674338][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  467.809133][   T12] bridge_slave_1: left allmulticast mode
[  467.811040][   T12] bridge_slave_1: left promiscuous mode
[  467.814240][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.819547][   T12] bridge_slave_0: left allmulticast mode
[  467.821831][   T12] bridge_slave_0: left promiscuous mode
[  467.824268][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.214663][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  468.244776][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  468.260466][   T12] bond0 (unregistering): Released all slaves
[  468.658812][T24688] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  468.662674][T24688] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  468.665795][T24688] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  468.670212][T24688] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  468.695902][T24688] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  468.755646][T26709] C speed is unknown, defaulting to 1000
[  468.915028][   T12] hsr_slave_0: left promiscuous mode
[  468.921408][   T12] hsr_slave_1: left promiscuous mode
[  468.933823][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  468.936343][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  468.949290][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  468.952314][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  469.018708][   T12] veth1_macvtap: left promiscuous mode
[  469.021066][   T12] veth0_macvtap: left promiscuous mode
[  469.025133][   T12] veth1_vlan: left promiscuous mode
[  469.031662][   T12] veth0_vlan: left promiscuous mode
[  469.038713][   T99] block nbd1: Possible stuck request ffff888020810000: control (read@0,1024B). Runtime 330 seconds
[  469.043041][   T99] block nbd1: Possible stuck request ffff888020810200: control (read@1024,1024B). Runtime 330 seconds
[  469.047316][   T99] block nbd1: Possible stuck request ffff888020810400: control (read@2048,1024B). Runtime 330 seconds
[  469.051899][   T99] block nbd1: Possible stuck request ffff888020810600: control (read@3072,1024B). Runtime 330 seconds
[  469.507828][   T47] page_pool_release_retry() stalled pool shutdown: id 58, 3329 inflight 120 sec
[  469.584060][T26746] x_tables: ip_tables: osf match: only valid for protocol 6
[  469.710411][   T12] team0 (unregistering): Port device team_slave_1 removed
[  469.754028][   T12] team0 (unregistering): Port device team_slave_0 removed
[  470.320586][T26746] vti1: entered promiscuous mode
[  470.467749][   T47] page_pool_release_retry() stalled pool shutdown: id 80, 3329 inflight 60 sec
[  470.626164][T26709] chnl_net:caif_netlink_parms(): no params data found
[  470.727927][T26709] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.738583][T26709] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.745568][T26709] bridge_slave_0: entered allmulticast mode
[  470.749484][T26709] bridge_slave_0: entered promiscuous mode
[  470.755577][T26709] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.759990][T26709] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.762514][T26709] bridge_slave_1: entered allmulticast mode
[  470.765517][T26709] bridge_slave_1: entered promiscuous mode
[  470.790090][ T5830] Bluetooth: hci0: command tx timeout
[  470.829601][T26709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  470.836831][T26709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.905158][T26709] team0: Port device team_slave_0 added
[  470.931853][T26709] team0: Port device team_slave_1 added
[  470.971942][T26709] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.974594][T26709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  470.983079][T26709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.988521][T26709] batman_adv: batadv0: Adding interface: batadv_slave_1
[  470.990696][T26709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  470.999193][T26709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  471.052606][T26709] hsr_slave_0: entered promiscuous mode
[  471.055885][T26709] hsr_slave_1: entered promiscuous mode
[  471.062144][T26709] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  471.064684][T26709] Cannot create hsr debugfs directory
[  471.450718][T26791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6845'.
[  471.597336][T26800] Cannot find add_set index 4 as target
[  471.830511][T26812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6849'.
[  472.215457][T26709] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  472.233581][T26709] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  472.242866][T26709] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  472.252422][T26709] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  472.285657][T26830] netlink: 'syz.2.6853': attribute type 1 has an invalid length.
[  472.308627][T26830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6853'.
[  472.313842][T26830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6853'.
[  472.317228][T26830] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6853'.
[  472.403520][T26709] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.443083][T26709] 8021q: adding VLAN 0 to HW filter on device team0
[  472.449657][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.451890][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state
[  472.467004][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.469268][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state
[  472.631973][T26709] 8021q: adding VLAN 0 to HW filter on device batadv0
[  472.669124][T26709] veth0_vlan: entered promiscuous mode
[  472.675294][T26709] veth1_vlan: entered promiscuous mode
[  472.708489][T26709] veth0_macvtap: entered promiscuous mode
[  472.715901][T26709] veth1_macvtap: entered promiscuous mode
[  472.729342][T26709] batman_adv: batadv0: Interface activated: batadv_slave_0
[  472.736372][T26709] batman_adv: batadv0: Interface activated: batadv_slave_1
[  472.746936][T26709] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  472.750712][T26709] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  472.753805][T26709] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  472.758047][T26709] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  472.821682][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.824038][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.851517][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  472.854257][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.878987][ T5830] Bluetooth: hci0: command tx timeout
[  474.559730][ T7647] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.638100][T24688] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  475.643555][T24688] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  475.647159][T24688] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  475.650409][T24688] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  475.653339][T24688] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  475.681959][T26887] C speed is unknown, defaulting to 1000
[  475.860669][ T7647] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.969487][T26887] chnl_net:caif_netlink_parms(): no params data found
[  476.050867][T26887] bridge0: port 1(bridge_slave_0) entered blocking state
[  476.053164][T26887] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.055532][T26887] bridge_slave_0: entered allmulticast mode
[  476.058431][T26887] bridge_slave_0: entered promiscuous mode
[  476.061898][T26887] bridge0: port 2(bridge_slave_1) entered blocking state
[  476.064192][T26887] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.066472][T26887] bridge_slave_1: entered allmulticast mode
[  476.069875][T26887] bridge_slave_1: entered promiscuous mode
[  476.118982][ T7647] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.129721][T26887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  476.134843][T26887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  476.161786][T26887] team0: Port device team_slave_0 added
[  476.166338][T26887] team0: Port device team_slave_1 added
[  476.205222][ T7647] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.223746][T26887] batman_adv: batadv0: Adding interface: batadv_slave_0
[  476.225994][T26887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.237522][T26887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  476.244138][T26887] batman_adv: batadv0: Adding interface: batadv_slave_1
[  476.246849][T26887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.255377][T26887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  476.285863][T26887] hsr_slave_0: entered promiscuous mode
[  476.288665][T26887] hsr_slave_1: entered promiscuous mode
[  476.291359][T26887] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  476.294410][T26887] Cannot create hsr debugfs directory
[  476.448242][ T7647] bridge_slave_1: left allmulticast mode
[  476.450494][ T7647] bridge_slave_1: left promiscuous mode
[  476.453891][ T7647] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.460871][ T7647] bridge_slave_0: left allmulticast mode
[  476.463040][ T7647] bridge_slave_0: left promiscuous mode
[  476.465508][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state
[  476.911859][ T7647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  476.921442][ T7647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  476.926784][ T7647] bond0 (unregistering): Released all slaves
[  477.396596][ T7647] hsr_slave_0: left promiscuous mode
[  477.404824][ T7647] hsr_slave_1: left promiscuous mode
[  477.407933][ T7647] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  477.410812][ T7647] batman_adv: batadv0: Removing interface: batadv_slave_0
[  477.414384][ T7647] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  477.417342][ T7647] batman_adv: batadv0: Removing interface: batadv_slave_1
[  477.448280][ T7647] veth1_macvtap: left promiscuous mode
[  477.450573][ T7647] veth0_macvtap: left promiscuous mode
[  477.452831][ T7647] veth1_vlan: left promiscuous mode
[  477.454960][ T7647] veth0_vlan: left promiscuous mode
[  477.668145][ T5830] Bluetooth: hci0: command tx timeout
[  478.033546][ T7647] team0 (unregistering): Port device team_slave_1 removed
[  478.082282][ T7647] team0 (unregistering): Port device team_slave_0 removed
[  478.816987][T26887] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  478.825012][T26887] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  478.835998][T26887] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  478.851445][T26887] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  479.015011][T26887] 8021q: adding VLAN 0 to HW filter on device bond0
[  479.032112][T26887] 8021q: adding VLAN 0 to HW filter on device team0
[  479.041115][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.043986][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state
[  479.056792][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.059676][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state
[  479.272290][T26887] 8021q: adding VLAN 0 to HW filter on device batadv0
[  479.317072][T26887] veth0_vlan: entered promiscuous mode
[  479.326686][T26887] veth1_vlan: entered promiscuous mode
[  479.356407][T26887] veth0_macvtap: entered promiscuous mode
[  479.362933][T26887] veth1_macvtap: entered promiscuous mode
[  479.379357][T26887] batman_adv: batadv0: Interface activated: batadv_slave_0
[  479.391491][T26887] batman_adv: batadv0: Interface activated: batadv_slave_1
[  479.397963][T26887] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  479.400601][T26887] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  479.403402][T26887] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  479.406098][T26887] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  479.461963][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.464422][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.490294][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.492748][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.908324][   T34] INFO: task udevd:8936 blocked for more than 143 seconds.
[  479.908501][T25110] page_pool_release_retry() stalled pool shutdown: id 59, 3329 inflight 120 sec
[  479.911277][   T34]       Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0
[  479.921301][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  479.924633][   T34] task:udevd           state:D stack:22568 pid:8936  tgid:8936  ppid:5278   task_flags:0x400140 flags:0x00004006
[  479.930412][   T34] Call Trace:
[  479.931708][   T34]  <TASK>
[  479.932887][   T34]  __schedule+0x16f5/0x4d00
[  479.934689][   T34]  ? schedule+0x165/0x360
[  479.936392][   T34]  ? __pfx___schedule+0x10/0x10
[  479.967902][   T34]  ? schedule+0x91/0x360
[  479.969622][   T34]  schedule+0x165/0x360
[  479.971299][   T34]  io_schedule+0x80/0xd0
[  479.972987][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  479.975048][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  479.977361][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  480.000152][   T34]  ? __filemap_get_folio+0x790/0xaf0
[  480.002181][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  480.004213][   T34]  do_read_cache_folio+0x1aa/0x590
[  480.006181][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  480.021177][   T34]  read_part_sector+0xb6/0x2b0
[  480.023119][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  480.025245][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  480.027911][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  480.030295][   T34]  bdev_disk_changed+0x75f/0x14b0
[  480.032310][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  480.034495][   T34]  ? wait_on_inode+0xc0/0x230
[  480.036399][   T34]  blkdev_get_whole+0x380/0x510
[  480.040189][   T34]  bdev_open+0x31e/0xd30
[  480.041957][   T34]  blkdev_open+0x3a8/0x510
[  480.043759][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  480.045732][   T34]  do_dentry_open+0xdf3/0x1970
[  480.048938][   T34]  vfs_open+0x3b/0x340
[  480.050644][   T34]  ? path_openat+0x2ecd/0x3830
[  480.052525][   T34]  path_openat+0x2ee5/0x3830
[  480.054319][   T34]  ? arch_stack_walk+0xfc/0x150
[  480.056193][   T34]  ? __pfx_path_openat+0x10/0x10
[  480.058638][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.060995][   T34]  do_filp_open+0x1fa/0x410
[  480.062723][   T34]  ? __lock_acquire+0xab9/0xd20
[  480.064615][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  480.066587][   T34]  ? _raw_spin_unlock+0x28/0x50
[  480.069142][   T34]  ? alloc_fd+0x64c/0x6c0
[  480.070927][   T34]  do_sys_openat2+0x121/0x1c0
[  480.072835][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  480.075104][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  480.076767][   T34]  ? rcu_is_watching+0x15/0xb0
[  480.078531][   T34]  __x64_sys_openat+0x138/0x170
[  480.080099][   T34]  do_syscall_64+0xfa/0x3b0
[  480.081539][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.083144][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.085395][   T34]  ? exc_page_fault+0x9f/0xf0
[  480.087024][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.090117][   T34] RIP: 0033:0x7f0cebf169a4
[  480.091793][   T34] RSP: 002b:00007fffa46ef050 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  480.094658][   T34] RAX: ffffffffffffffda RBX: 000055ae5410bb20 RCX: 00007f0cebf169a4
[  480.097200][   T34] RDX: 00000000000a0800 RSI: 000055ae54166960 RDI: 00000000ffffff9c
[  480.099747][   T34] RBP: 000055ae54166960 R08: 0000000000000001 R09: 7fffffffffffffff
[  480.102256][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  480.104953][   T34] R13: 000055ae540f1d60 R14: 0000000000000001 R15: 000055ae540e6910
[  480.107855][   T34]  </TASK>
[  480.119998][   T34] 
[  480.119998][   T34] Showing all locks held in the system:
[  480.122372][   T34] 3 locks held by kworker/0:1/10:
[  480.124028][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  480.157702][   T34]  #1: ffffc900000d7bc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  480.161760][   T34]  #2: ffff8880377ee240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180
[  480.165098][   T34] 1 lock held by khungtaskd/34:
[  480.166537][   T34]  #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  480.198947][   T34] 3 locks held by kworker/1:1/47:
[  480.200573][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  480.203939][   T34]  #1: ffffc9000075fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  480.207256][   T34]  #2: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  480.233911][   T34] 2 locks held by getty/5657:
[  480.235923][   T34]  #0: ffff8881081c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  480.257491][   T34]  #1: ffffc900029132f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  480.261463][   T34] 1 lock held by syz-executor/5828:
[  480.263462][   T34] 1 lock held by syz-executor/5832:
[  480.265470][   T34] 1 lock held by udevd/8936:
[  480.267270][   T34]  #0: ffff88802074a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  480.297597][   T34] 1 lock held by udevd/10901:
[  480.299557][   T34]  #0: ffff88802074e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  480.304301][   T34] 3 locks held by kworker/1:0/25022:
[  480.306492][   T34] 3 locks held by kworker/1:5/25110:
[  480.315356][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  480.319450][   T34]  #1: ffffc90004ff7bc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  480.323003][   T34]  #2: ffffffff8e144b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  480.326136][   T34] 1 lock held by syz-executor/26887:
[  480.329610][   T34]  #0: ffffffff8e144b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  480.335937][   T34] 
[  480.336731][   T34] =============================================
[  480.336731][   T34] 
[  480.339423][   T34] NMI backtrace for cpu 0
[  480.339433][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  480.339444][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  480.339450][   T34] Call Trace:
[  480.339455][   T34]  <TASK>
[  480.339460][   T34]  dump_stack_lvl+0x189/0x250
[  480.339477][   T34]  ? __wake_up_klogd+0xd9/0x110
[  480.339491][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  480.339501][   T34]  ? __pfx__printk+0x10/0x10
[  480.339517][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  480.339532][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  480.339541][   T34]  ? _printk+0xcf/0x120
[  480.339552][   T34]  ? __pfx__printk+0x10/0x10
[  480.339563][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  480.339572][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  480.339584][   T34]  watchdog+0xfee/0x1030
[  480.339594][   T34]  ? watchdog+0x1de/0x1030
[  480.339604][   T34]  kthread+0x711/0x8a0
[  480.339618][   T34]  ? __pfx_watchdog+0x10/0x10
[  480.339624][   T34]  ? __pfx_kthread+0x10/0x10
[  480.339635][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  480.339649][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.339660][   T34]  ? __pfx_kthread+0x10/0x10
[  480.339671][   T34]  ret_from_fork+0x3fc/0x770
[  480.339683][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  480.339693][   T34]  ? __switch_to_asm+0x39/0x70
[  480.339703][   T34]  ? __switch_to_asm+0x33/0x70
[  480.339712][   T34]  ? __pfx_kthread+0x10/0x10
[  480.339722][   T34]  ret_from_fork_asm+0x1a/0x30
[  480.339739][   T34]  </TASK>
[  480.339742][   T34] Sending NMI from CPU 0 to CPUs 1:
[  480.391732][    C1] NMI backtrace for cpu 1
[  480.391752][    C1] CPU: 1 UID: 0 PID: 5832 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  480.391768][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  480.391794][    C1] RIP: 0010:check_preemption_disabled+0x63/0x120
[  480.391810][    C1] Code: 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 51 c0 02 00 cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <74> c8 65 4c 8b 3c 25 08 50 a0 92 41 f6 47 2f 04 74 0a 41 83 bf 18
[  480.391818][    C1] RSP: 0018:ffffc900044aee18 EFLAGS: 00000046
[  480.391826][    C1] RAX: 0000000000000001 RBX: 0000000000000202 RCX: 0000000080000000
[  480.391831][    C1] RDX: ffffc900044aef01 RSI: ffffffff8d9ac3d8 RDI: ffffffff8be29dc0
[  480.391837][    C1] RBP: dffffc0000000000 R08: ffffc900044af0b0 R09: 0000000000000000
[  480.391842][    C1] R10: ffffc900044aefd8 R11: fffff52000895dfd R12: ffffc900044af0c0
[  480.391848][    C1] R13: ffffffff8172aae5 R14: ffffffff8e13f160 R15: ffff88801fafb980
[  480.391853][    C1] FS:  0000555576ef9500(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  480.391859][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  480.391864][    C1] CR2: 00007f52172e7d60 CR3: 0000000107168000 CR4: 00000000000006f0
[  480.391887][    C1] Call Trace:
[  480.391893][    C1]  <TASK>
[  480.391898][    C1]  lock_release+0xbc/0x3e0
[  480.391909][    C1]  ? unwind_next_frame+0x19ae/0x2390
[  480.391918][    C1]  ? deref_stack_reg+0x19f/0x230
[  480.391927][    C1]  ? unwind_next_frame+0xa5/0x2390
[  480.391934][    C1]  unwind_next_frame+0x19a9/0x2390
[  480.391944][    C1]  ? unwind_next_frame+0xa5/0x2390
[  480.391952][    C1]  ? stack_trace_save+0x9c/0xe0
[  480.391963][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  480.391973][    C1]  arch_stack_walk+0x11c/0x150
[  480.391989][    C1]  ? kasan_save_track+0x3e/0x80
[  480.391999][    C1]  stack_trace_save+0x9c/0xe0
[  480.392008][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  480.392020][    C1]  kasan_save_track+0x3e/0x80
[  480.392039][    C1]  __kasan_slab_alloc+0x6c/0x80
[  480.392047][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  480.392057][    C1]  ? ext4_free_blocks+0xd0c/0x1b60
[  480.392068][    C1]  ext4_free_blocks+0xd0c/0x1b60
[  480.392077][    C1]  ? jbd2_write_access_granted+0x69/0x310
[  480.392088][    C1]  ? __pfx_ext4_free_blocks+0x10/0x10
[  480.392097][    C1]  ? ext4_inode_journal_mode+0x3a4/0x480
[  480.392107][    C1]  ext4_ext_remove_space+0x1f87/0x42f0
[  480.392126][    C1]  ? ext4_es_remove_extent+0x218/0x420
[  480.392137][    C1]  ? __pfx_ext4_ext_remove_space+0x10/0x10
[  480.392147][    C1]  ? ext4_es_remove_extent+0x263/0x420
[  480.392158][    C1]  ext4_ext_truncate+0x17e/0x300
[  480.392169][    C1]  ext4_truncate+0x9bb/0x1100
[  480.392181][    C1]  ? __pfx_ext4_truncate+0x10/0x10
[  480.392193][    C1]  ext4_evict_inode+0x8cf/0xee0
[  480.392206][    C1]  ? __pfx_ext4_evict_inode+0x10/0x10
[  480.392217][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  480.392228][    C1]  ? __pfx_ext4_evict_inode+0x10/0x10
[  480.392239][    C1]  evict+0x504/0x9c0
[  480.392250][    C1]  ? __pfx_evict+0x10/0x10
[  480.392256][    C1]  ? do_raw_spin_unlock+0x4d/0x240
[  480.392266][    C1]  ? _raw_spin_unlock+0x28/0x50
[  480.392276][    C1]  ? iput+0x6d8/0x9d0
[  480.392287][    C1]  __dentry_kill+0x209/0x660
[  480.392296][    C1]  ? dput+0x37/0x2b0
[  480.392305][    C1]  dput+0x19f/0x2b0
[  480.392313][    C1]  __fput+0x68e/0xa70
[  480.392327][    C1]  task_work_run+0x1d4/0x260
[  480.392338][    C1]  ? __pfx_task_work_run+0x10/0x10
[  480.392349][    C1]  ? kmem_cache_free+0x18f/0x400
[  480.392358][    C1]  do_exit+0x6b5/0x22e0
[  480.392371][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  480.392382][    C1]  ? __pfx_do_exit+0x10/0x10
[  480.392393][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  480.392403][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.392416][    C1]  do_group_exit+0x21c/0x2d0
[  480.392427][    C1]  __x64_sys_exit_group+0x3f/0x40
[  480.392436][    C1]  x64_sys_call+0x21ba/0x21c0
[  480.392447][    C1]  do_syscall_64+0xfa/0x3b0
[  480.392455][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.392465][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.392472][    C1]  ? exc_page_fault+0x9f/0xf0
[  480.392483][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.392490][    C1] RIP: 0033:0x7f1d8618e929
[  480.392497][    C1] Code: Unable to access opcode bytes at 0x7f1d8618e8ff.
[  480.392502][    C1] RSP: 002b:00007ffd409ccda8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  480.392510][    C1] RAX: ffffffffffffffda RBX: 00007f1d8621231f RCX: 00007f1d8618e929
[  480.392515][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  480.392519][    C1] RBP: 00007f1d86212331 R08: 00007ffd409cab47 R09: 00000000000927c0
[  480.392524][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  480.392529][    C1] R13: 00000000000927c0 R14: 0000000000073525 R15: 00007ffd409ccf50
[  480.392537][    C1]  </TASK>
[  480.582470][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  480.585264][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  480.589740][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  480.592862][   T34] Call Trace:
[  480.593912][   T34]  <TASK>
[  480.594836][   T34]  dump_stack_lvl+0x99/0x250
[  480.596273][   T34]  ? __asan_memcpy+0x40/0x70
[  480.597819][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  480.599856][   T34]  ? __pfx__printk+0x10/0x10
[  480.601664][   T34]  panic+0x2db/0x790
[  480.603218][   T34]  ? __pfx_panic+0x10/0x10
[  480.604927][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  480.606656][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  480.608622][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  480.610728][   T34]  watchdog+0x102d/0x1030
[  480.612408][   T34]  ? watchdog+0x1de/0x1030
[  480.614313][   T34]  kthread+0x711/0x8a0
[  480.615851][   T34]  ? __pfx_watchdog+0x10/0x10
[  480.617634][   T34]  ? __pfx_kthread+0x10/0x10
[  480.619419][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  480.621378][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.623391][   T34]  ? __pfx_kthread+0x10/0x10
[  480.625026][   T34]  ret_from_fork+0x3fc/0x770
[  480.626399][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  480.628303][   T34]  ? __switch_to_asm+0x39/0x70
[  480.630097][   T34]  ? __switch_to_asm+0x33/0x70
[  480.631736][   T34]  ? __pfx_kthread+0x10/0x10
[  480.633511][   T34]  ret_from_fork_asm+0x1a/0x30
[  480.635417][   T34]  </TASK>
[  480.637356][   T34] Kernel Offset: disabled
[  480.639053][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:33:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff888107da0237 R9 =1ffff11020fb4046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af9888 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f76cfae8710 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 ffff00ff00000000 XMM05=00000000000001b3 000000360e316c2c
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffff0000000000 XMM09=00000000000001d1 0000003633316c6c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000002 RBX=ffffc900001dfafc RCX=0000000000000003 RDX=0000000000000010
RSI=ffffc900001dfafc RDI=ffffc900001dfb0c RBP=1ffff9200003bf5a RSP=ffffc900001df718
R8 =ffff88801f6d5640 R9 =0000000000000002 R10=0000000000000003 R11=0000000000000100
R12=ffffc900001dfb0c R13=dffffc0000000000 R14=ffffc900001dfad0 R15=ffffc900001dfab0
RIP=ffffffff8b6b30f0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f76cfae86ec CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=0000000000000051 0030003131313038
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ff00ff0000000000 XMM09=696b66722f363479 68702f3131323038
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
