last executing test programs:

1.659015143s ago: executing program 1 (id=5704):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r1)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xb, 0xf}, {0x4, 0xe}, {0x7, 0xa}}, [""]}, 0x24}}, 0x4044000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000280)={'syztnl1\x00', r5, 0x10, 0x700, 0x9, 0x6, {{0x1a, 0x4, 0x1, 0x2, 0x68, 0x65, 0x0, 0x1, 0x29, 0x0, @empty, @remote, {[@noop, @ssrr={0x89, 0x17, 0xb4, [@loopback, @loopback, @multicast1, @empty, @multicast2]}, @generic={0x94, 0x4, "5ba0"}, @timestamp_addr={0x44, 0x2c, 0xe8, 0x1, 0x1, [{@multicast2, 0x8000}, {@loopback, 0x3}, {@broadcast, 0xffffffff}, {@private=0xa010100, 0xcc2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40000000}]}, @noop, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000073e7ddc3a4b4c11e6055", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100330000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r7)
write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128876340860600702c1ffe8000000000"], 0xffdd)
r8 = socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg$unix(r9, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/68, 0x44}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/13, 0xd}], 0x1}}], 0x2, 0x220, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000000600)={<r10=>0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x100, 0x5, 0x401, 0x7fffffff, 0x7}, &(0x7f0000000340)=0x98)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f00000006c0)={r10, 0x81, "b7521af8168ccf0ddbb2a14a3861c84ce1b223f2f6385fe5f4f3a20184dfcde41257dfd305afdf28185207e6c60606764601beafc3c21762dd63e7c6494f7726d66c7b3b4197324aa5bf4eef6f0d70761fba900223fc54485fa109d94e4a5b7437565144f73421bfeeb71aa9d3b6d5299baaca4a8f00272610f63ee632693cee24"}, &(0x7f0000000380)=0x89)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000140))
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000044)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013200000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)

1.529601952s ago: executing program 1 (id=5706):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x15, 0x301, 0x0, 0x25dfdbf8, {0x5}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x22024800)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r1)
getsockopt(0xffffffffffffffff, 0x1, 0xe, 0x0, &(0x7f0000000080))
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="e40000006d0001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0010000008090000c40018"], 0xe4}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newsa={0x13c, 0x10, 0x100, 0x70bd29, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2f}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x1, 0x81, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20000080)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000740)=0xc)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000004c0)="81bb79bc8768d34af93740f83f2fd0d081e2d97662fa542e1d7dad28f99a0ea4f51d9a9066071de1c413518c3b9633bfc0d702a8c48df3c6bce6846df69c271eb06ad32e955686d638d733a70a943721e67675f83aa35105281911ac43fb93dfccadb7bc45199650478279416465348a15fa9b07bf6c0c3cf314bcd58172437be1978de51accae17774765f3985770bd0a1a6c7fb8fef66435a4b13bc2867ddf95d0fc621e9ee29e14c5a3cbcc7f8fc57177a8cef9220eaaeb6fd15c96b9cc71703914e2a05da9910ff338df18", 0xcd}, {&(0x7f00000005c0)="64ef16240f374685b7f4b9f1242c6324b6b0ee672342e3e77dacd17600eaccd6a42a6661ab782c7bc3e4171ff8765b017a903b7c064ac904f9eefd45c47087fbe0f8840344a3a2e6636e5cfdc09ac9c0aff0adae3d4bcb4d6a31e7a418ec01c90f0e5db5d6184d56257ca67a5f490d7899", 0x71}, {&(0x7f0000000640)="9926ed68edd368c799fd138bfd9148972bf02fc50081c3e709372d5e6357a387c248c46cead024e570", 0x29}, {&(0x7f0000000680)="45710bddfb6cbd180c4c2ebba7364d1951e9575d553f6aa2fbec1686", 0x1c}], 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="00000400817e918681ad98ae916a322d321c0000000000000001006b625ae077", @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x85}}, {{&(0x7f0000000840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000008c0)="37ed01425b31ca08d93858dd607298b4b9734557634e2eb16bd8c850254b67e723006bb45b9da9568dc49765c7b9b46d3c7845db542875b0c2719adc76fbdc8205b4ca685f96a3062c0cde1434de0b4d580187a9774c927293b88935f7ce9378ab1a2119f37d1d0fc4df9eb721029ede5b89a70664f364295dd7f7f17bb5c13724017d75035d64a547f22c338de72af396d415561b6906914bd5804ac93ade9c6ef6c98bc885d3ddf5b435d8c0f1f64e53c7b6da276cd21152ab2a887c19f04a12c924f9910baae73583f671d6dc7c7f7efa65b1def1c154c502aa6bbe2c4c24d7d8d75da09a66d2ea", 0xe9}], 0x1, 0x0, 0x0, 0x800}}], 0x2, 0x5)

1.240551855s ago: executing program 2 (id=5707):
r0 = socket$inet(0x2, 0x6000000000000001, 0x0)
ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f00000004c0)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null]}, 0x48)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, 0x0}, 0x108)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
unshare(0x22020600)
poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x2}], 0x1, 0x7f)
epoll_pwait(r4, &(0x7f0000001800), 0x0, 0xa52, 0x0, 0x0)
epoll_create1(0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @broadcast})
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
listen(r1, 0x1ad72f7)
accept4(r1, 0x0, 0x0, 0x800)
r7 = accept4$netrom(r1, 0x0, 0x0, 0x80000)
writev(r7, &(0x7f00000001c0), 0x7)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'geneve1\x00', <r9=>0x0})
setsockopt$packet_int(r8, 0x107, 0x10, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r8, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511", 0x41, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)
mmap(&(0x7f00000c1000/0x4000)=nil, 0x4000, 0x2000001, 0x20010, r0, 0x0)

1.000146403s ago: executing program 0 (id=5708):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r1, {0x1d}, {0xffff, 0xffff}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x3000c81c)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0)

910.005422ms ago: executing program 0 (id=5709):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000060}, 0x20040080)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, r1, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x5a2e16d1198c3a83}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)={0x444, 0x3f3, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x28, [0x40, 0x7ff, 0xc79, 0x5a, 0xdd9, 0x8, 0xffffffff, 0x1, 0x5, 0x1, 0x59, 0x81, 0x7, 0x97, 0xde16, 0x8, 0x4, 0x5, 0xd, 0x0, 0xe000, 0x8, 0x96db, 0xc060000, 0x3, 0xe, 0xffff, 0x0, 0xeb27, 0x400, 0xfffffffd, 0xffffffff, 0xffff, 0x5, 0xffffffff, 0x9, 0x5, 0x3, 0x5, 0x9, 0x10, 0xa0, 0x101, 0x1, 0x9, 0xca, 0x0, 0x400, 0x2, 0x9ba, 0x762, 0x3ff, 0x101, 0x4, 0x2, 0x10000, 0x4, 0xd9cba56, 0xfffffffc, 0x9, 0x6, 0x9, 0x1, 0x100], [0x6c3, 0x9, 0x4, 0xffffffff, 0xe073, 0x7, 0x5, 0x9915, 0xffffff01, 0x80000001, 0x4, 0x8, 0x2, 0x6, 0x7, 0x8001, 0xb, 0x8001, 0x9, 0xfd8, 0x0, 0x7, 0xf, 0xca, 0x9, 0x101, 0x1, 0x8, 0xa, 0x6, 0xfff, 0x87c, 0x5, 0x3ff, 0x1841, 0x4, 0x0, 0xd26d, 0x2, 0x2, 0xb, 0x3ff, 0x8, 0x9, 0x8d94, 0x3, 0x5, 0x6a08, 0x67, 0x8, 0x3, 0x8001, 0x6, 0x0, 0x73, 0xeb2, 0xc, 0x1, 0x1, 0x6, 0x3ff, 0xfffffff8, 0xb7e, 0x6], [0xd, 0x5, 0xff, 0x9, 0x6, 0x8, 0x1, 0x9, 0x800, 0x7ff, 0x7, 0xfffffe43, 0x5, 0x9a5, 0xa8b3, 0x4, 0x5, 0x8, 0x4, 0x4c454637, 0x9, 0x76, 0xfffff574, 0x0, 0x3, 0x7, 0x7, 0xfffffff8, 0x1, 0xd, 0x6, 0x9, 0x2, 0x5, 0x6, 0x80000001, 0xff, 0x1000, 0x400, 0xfffff801, 0x62eb, 0x3ff, 0x1ee3, 0xc8, 0x1, 0x9, 0x9, 0x9, 0x8, 0xb6, 0x1, 0x1000, 0x8, 0x38d3, 0xe, 0x5, 0x5, 0xffffff74, 0x401, 0x2, 0x59, 0x0, 0x0, 0xf91a], [0x4, 0x2, 0x21ee, 0xc4, 0x8, 0x9, 0x7, 0x2d, 0x9, 0xffffffff, 0xfffffff8, 0x76, 0x357, 0x350, 0x0, 0x3, 0x0, 0xa, 0x1, 0x2, 0x1ff, 0x8, 0xb, 0x1, 0x8, 0x9, 0x7f, 0x401, 0x401, 0x9, 0x3, 0x2, 0x100, 0x7, 0x101, 0x3, 0x7, 0x6, 0x8, 0x0, 0x9, 0x2603, 0x8, 0x185, 0x6, 0x9, 0x7ff, 0x2, 0xfffff000, 0x9, 0x0, 0x6, 0x10, 0x4527bbc2, 0x101, 0x6, 0x4, 0x8, 0x80000000, 0x7, 0x81, 0x2, 0xfffffff1, 0x6], 0x23, ['wpan4\x00', '\'^$\x00', '*.\x00', '**$-@&+[^#\'+^,,\x00', 'wpan4\x00']}, ["", "", "", "", "", ""]}, 0x444}, 0x1, 0x0, 0x0, 0x24044481}, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
bind$unix(r4, &(0x7f00000009c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x40010, r3, 0xe5291000)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r3)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000ac0)={@initdev, <r6=>0x0}, &(0x7f0000000b00)=0x14)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x60, r5, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000001100)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000010c0)={&(0x7f0000000c80)={0x414, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x284fbabe}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50e27207}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e25e587}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41f58f06}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a031ef2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x471db09a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d3eb3a5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1be4cd89}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x230fcf7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cac8510}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7293f12e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65bb1404}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9074}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe2d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x643f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b6ceffe}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa9bb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3db2a06c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfcd5}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60ce61e3}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4399260d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ae0541e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf65}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x778aa9a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7592a952}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c6f4875}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31520c21}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b32084b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x2c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ddadec6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19fe6623}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x462def1c}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x144, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c502a2e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27b096cc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcaf2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x368d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1152abb7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe34b6ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x136da4d3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xae56}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a98}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe635}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2eb43db3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6665}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e34}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f57}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6943ddfe}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x86e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x463d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47ad9a8d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d47}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc9e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e9fbf94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f09}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c579e0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x999}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x143d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x313a}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b32431e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x663}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a43}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54efdbd1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d33}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ab64ca2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3fd1}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x114, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70b623ff}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30de9283}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7871b9d3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1978c8eb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b37e827}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x379d0c70}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28ca7182}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x652aa29b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26c1b78f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22e939bd}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59d2d64a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cd13d94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65018ec0}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x39640d5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}]}]}]}, 0x414}, 0x1, 0x0, 0x0, 0x4044091}, 0x48044)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001140)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)=@deltclass={0x9c, 0x29, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xa, 0xffe0}, {0xffe0, 0xb}, {0xd, 0xffff}}, [@tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0xff, 0xd8}}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_qfq={{0x8}, {0x34, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x23}, @TCA_QFQ_LMAX={0x8}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000010)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001340)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000013c0)={'syzkaller0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8805}, 0x8000)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001500)={'wg1\x00'})
pselect6(0x40, &(0x7f0000001540)={0xf7b2, 0x3, 0x5, 0xfffffffffffffffa, 0x7f, 0x2, 0x5, 0xffffffffffffffff}, &(0x7f0000001580)={0x7fffffff, 0x5, 0x5, 0x100000000, 0x8, 0x8, 0x100000001, 0x9}, &(0x7f00000015c0)={0x2, 0xbba8, 0x6c, 0x23, 0x9, 0xa1f6, 0x8001}, &(0x7f0000001600)={0x0, 0x989680}, &(0x7f0000001680)={&(0x7f0000001640)={[0x3]}, 0x8})
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f00000016c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001740)=""/11, 0xb}], 0x1}, 0x100)
r12 = socket(0x2b, 0x6, 0x9)
setsockopt$CAN_RAW_ERR_FILTER(r12, 0x65, 0x2, &(0x7f0000001800)=0x6, 0x4)
ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f0000001840)={<r13=>0x0, "ed4b7468bd36e0a740af11b41fedde7d"})
ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000002840)={r13, 0x4, 0x7})
sendmsg$unix(0xffffffffffffffff, &(0x7f0000002e80)={&(0x7f0000002c80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000002d00)="7ce8a2a849aa0bef8b880ee2b70e4a812db05a890a4956f43378d7b6118c643491504681d031d45c31fdd7f42a726f79501a4d9afa139fd0a0f8aaa030fe2f3e59b2cedfc5f8062c0b06fddb9ebf79d9885188142d96799f981f6565f9b6a213116391738a06f2ee3475880b80578e7a784c9b096ce4944023ad099929ab3980c79e4bb5430379654ba8ce48ed7dd54d2754e5287cbca719fb7f2c25226a6b7e145dde5e8749c3753f3230bb87c9c1cd2827b4088e17a3decda6676288c8fc32f780f22bf41667c251f1e1a3c9cbe59472062fa61e1d148a426d7bd345880a4d8e3b38ed6b415faf3301441ca83a886a61fa", 0xf2}, {&(0x7f0000002e00)="b794854f03bb3274211ae79b54fa1ff42351b748c70bb8e75eeeb248fa4f", 0x1e}], 0x2, 0x0, 0x0, 0x41}, 0x8000)

841.304683ms ago: executing program 0 (id=5710):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x4, 0x61, 0x11, 0x34}, [@ldst={0x1, 0x1, 0x3, 0x6, 0x3, 0x80, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x54}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x4, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x4, 0x61, 0x11, 0x34}, [@ldst={0x1, 0x1, 0x3, 0x6, 0x3, 0x80, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x54}, 0x94) (async)

772.827045ms ago: executing program 0 (id=5711):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x1, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x400000, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'hsr0\x00'})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})

683.078531ms ago: executing program 0 (id=5712):
r0 = socket$kcm(0x2, 0x3, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x3, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004081}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000007c0)={'netdevsim0\x00', @broadcast})

604.462705ms ago: executing program 1 (id=5713):
r0 = socket$inet6(0xa, 0x3, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x71, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0xfffffee7}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)
setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f00000000c0)='v', 0x1)
recvmsg(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x40)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\r'], 0x10da)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x2000000000}}, {{@in6=@mcast1, 0x4d5}, 0x0, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0xe8)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xa, 0xb}, {0xd, 0xd}}}, 0x24}}, 0x4008000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="98010000", @ANYRES16=r10, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="2b000e001c"], 0x198}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r11, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x838, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r11, 0x2}, 0x50)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0)

500.558423ms ago: executing program 0 (id=5714):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_emit_ethernet(0x14d, &(0x7f0000000500)={@multicast, @remote, @val={@void}, {@ipv6={0x86dd, @generic={0xd, 0x6, "4f022c", 0x113, 0x0, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@dstopts={0x6, 0x21, '\x00', [@generic={0x4, 0xf9, "b55cd0c9d1cdebccff4d23e8cd050e32d9568e97fc744f63bccad46eccd89229d530bd1100d408ea65cb1ab270490064480e9df6314f70ae36f03850f80d3fbf367eec2442c07838f8f12d2c3e69fd273c6a95aeb711c3e4635d2cc9633a29362ea531381b87b520a148d86f541b0535fd6b34493127cb95bd6e6682fa273edb7e19418020330d67963ab1264c9942b4ca77af863fa61033b90e73b95b10abb07fc23117c0c532d0925bdbaf9ca10bc7623d8fee61cb55725a5730a739a0d24ca1024e0312426aa34c76c07a4aef592af87eba40b757b3d502232e4044569b48f07f4f5a10218af89de23b22af32eb776c114771d01ec796ac"}, @ra, @pad1, @jumbo={0xc2, 0x4, 0x7}]}], "a51a8d"}}}}}, 0x0)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000200)={0x0, 'veth0_to_bond\x00', {0x2}, 0x6})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r5=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', r5, 0x29, 0x8, 0x2, 0x4, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x7, 0x10, 0x5, 0xffa}})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0xc01, 0x3, 0x490, 0x300, 0x5002004a, 0x6, 0x300, 0x3, 0x3f8, 0x3c8, 0x3c8, 0x3f8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'sit0\x00', 'bridge0\x00', {}, {0xff}, 0x0, 0x0, 0x20}, 0x0, 0x2a0, 0x300, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x1, 0x3, 0x7, 0x3, 0x2], 0x6, 0x4}, {0x4, [0x3, 0x0, 0x3, 0x1, 0x0, 0x6], 0x4, 0x1}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0xe3, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6ba06d3126df", 0x0, 0x0, [0x0, 0x0, 0x21, 0x2000, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe13], 0x0, 0x0, 0xfffffffffffffffc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000015c0)={0x18, r1, 0x10, 0x0, 0x4, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, 0x0, 0x0)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r8, 0x0)
accept(r8, &(0x7f0000000240)=@qipcrtr, &(0x7f00000001c0)=0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
bind$unix(r10, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
setsockopt$inet6_tcp_int(r8, 0x6, 0x19, &(0x7f0000000080), 0x4)

330.148368ms ago: executing program 2 (id=5715):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) (async)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async)
pipe(0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0x1, &(0x7f00000002c0)="8cf66d94e47f8d553de1743faeede02fde19868b2cef14a3ae66f283aeef41adf7155c58ce17123cdc0757a83cc841af5ec901aadb0f04c24c1a93bcfbaca874615fdca2860f2448205492218cb89c354760b67451554fdba890553db6df4b537bb52c55f95f160bdcfc523b0e994dc993061129277cb58b4261627b37f5aab89d27ed648850e0365582d6785cfd3180ea1410aa8a8283cd769d30fec3b5acd91fa508775e0840c0a59db546d8913b971dfac833a0e1c0984dffb6658a7974694d989c61cd00c5ef820785beda10dcb1d9dc6be2bd43ed66a96df3d49abaec8e1eb2208f", &(0x7f0000000100)=""/104, 0x4}, 0x20) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async)
pipe(&(0x7f0000000000))
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="388bc5f084e3000000", @ANYRESOCT=0x0, @ANYBLOB="010000000900000000000200000008000300", @ANYRES32=r3, @ANYBLOB="4237af6de858a54c1aba7bceac04a91f80b0d1cdba7d331d59e79df5092893995e26ea40a42522488662733a7c1b87c73fc5d9a4a0361117fdc8eac67fe5b67080633a1b664a77a41b57b7ae07c1e9e7fdfeb6db9bed4af6a10f968d74558fa367688c33c01bdfa132701bca72ce68a6993157acbdc42137275e109953fa4bc22998b4dc301accc3f26ef37d7f2a9fc8aee7371f3eb3be49e5a37e22ea4020fb4f59f2a2c7272bbf9a0f62c02ddb9a02e7ded75bd35e32e6e0be41e59c9ff9ae609f502bc6acbcf76470b2052eccfd038d65cb5996ca0377ff2777f423a4585236d4c5968021cc72edf3f86617d0e6682c6ffe0d"], 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0)

279.356014ms ago: executing program 2 (id=5716):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0xfa82, @loopback, 0xffffffff}, 0x1c)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x6bd14d2bc29e41b6}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8044)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010000000000000000002c00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}}, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x40, 0x1000}, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
getpid()
sendmmsg$unix(r8, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x20, 0xc0}}], 0x2, 0x8000080)
getsockopt$packet_int(r7, 0x107, 0x15, 0x0, &(0x7f0000000040))
ioctl(r3, 0x8b29, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'ip6gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}})

278.704114ms ago: executing program 1 (id=5717):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711273000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={<r1=>r0, 0x6, 0x9d, 0x8000}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000500)=ANY=[@ANYBLOB="f406000002b78e19e5ec7f34c1c51127a46c234202327fa27e40cee7708e62cb3b4dc9a1740a21c833bd6db061b5ae9dddb897", @ANYBLOB="6f1743a646c762a013af71d9c7752d2a612831f06f25a69f878ff4120bd6d522e9f13fa4c9436faf554cfebbc4767759a968f3410fbfa276ee5edcfb8b3f68fbb9e8e5aec705c8e4ca5c1ada45df4cf0c4d3abc3593238b00834f72ced4280ab8e9fc54770be0f066eb079dea596363e9483a59794150cc0f4a4d21e16348db6408f116f72016d68e7", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x11) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x77}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x94) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x200}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @socket={{0xb}, @void}}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DYNSET_SREG_DATA={0x8}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x9}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x40)

169.301163ms ago: executing program 1 (id=5718):
r0 = socket(0x1d, 0x2, 0xff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x3)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x48, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_prespec={0x44, 0x14, 0xfd, 0x3, 0x6, [{@private=0xa010102, 0x80000000}, {@rand_addr=0x64010102, 0xfffffff5}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x3}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x78, 0x1e, 0x109, 0x102, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_mirred={0x34, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, "ab24"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0x2c, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x78}, 0x1, 0x2b1e}, 0x2000c000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38)
getsockname$packet(r0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x120, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x5, 0x4, 0x1ff, 0x2, 0x8001, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x2b, 0xeb, 0x1000, 0x8, 0x0, 0x10009, 0x7, 0x5}}, {0xe, 0x2, [0x101, 0xfe01, 0x2f45, 0x6, 0xa2]}}, {{0x1c, 0x1, {0x4, 0x8, 0x2, 0x9, 0x3, 0xe5, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xe9, 0x8, 0x90a, 0x9, 0x0, 0x0, 0x100, 0x5}}, {0xe, 0x2, [0x1000, 0x4007, 0x9, 0x7e6d, 0xf5]}}, {{0x1c, 0x1, {0x7, 0x2, 0x8001, 0x7, 0x2, 0x1, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x81, 0x1, 0x0, 0x0, 0x1, 0x8, 0x9, 0x5}}, {0xe, 0x2, [0x9, 0x1, 0x1, 0x800, 0xa]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x120}}, 0x40010)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="1000000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000030e8fe92159d13b008af3b32c947ce386b62d10d3492932cc47a5305fef5a619dd7db376f8dbee6be5c57a5f88048f9d4343391a2cb1b91e2fa1970aacf2dbca8078c6e820964f9692ab5dffb6772cb386b6724b0d5037ffd0b7852078ebe280e0390768d849a593371efd9c94eda392613c4a64900b374fb403da09f2135d994fa484e046bb7ee16d5be58e1b3b48cd949563e025ba6cac21c1be2ebe6e6620f1c7b590b561d8"], 0x50)
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f0000000900)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x10}, 0x19}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r10, &(0x7f00000005c0)="dc9b709847", &(0x7f00000003c0)=""/79}, 0x20)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r9)

168.752817ms ago: executing program 2 (id=5719):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000001080)=0x700)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffff0001}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040801}, 0x24040020)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="0a000080976b6408686000000d0001803fb3ebf5f9cbd1185e000000", @ANYRES32=0x0, @ANYBLOB="340000002e000100000000002000000008000000", @ANYRES8=r2, @ANYRESDEC, @ANYRES8=r2], 0x34}], 0x1}, 0x40000)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x3, "f6bb75dd876207bbfae4a10600", "7839c770c63ffccd45633ff12f50e479b6af9696cd5ae0302ca85c505fa0b4b3", "ba255d1364e33235886300871ba12a432aae081fa83684b0b75d0e3f0b356b07", "cdc8b034d728a34cc4bce0b5841bf0a29523cae74325ddc8df308ed2c59f683f", "aeb8bd111c399b64f9c242587e0d3fb316610318f67345d8df995f402d8c79bc", "c6ad7d8e553c85c31ffa52d3", 0x2, 0x1, 0xd, 0xbb5, 0x5}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff})
ioctl$sock_netdev_private(r8, 0x8993, &(0x7f0000000040)="55f1e925f4b10117400fcac4e13a")
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000010000000000000000070000a8218b3300000000"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94)

30.896424ms ago: executing program 2 (id=5720):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='freezer.self_freezing\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/140, 0x8c}], 0x1, 0x4, 0x0)
sendto$inet6(r1, &(0x7f0000000000)="9d1cfcfa674ee4f3a04b1bab656f569c2dda448ab664d2308e11b9e2158394ff360d6355765e5d244084504393be4b9ce776efc8762e00f9f776b2dcb75ed739b879c396bc6c5565910b0afe7c01169fbd3abecf4fbcc0a89b2ddd305d2ef24dd5904b297a09a9cda9a4a1b759d7491dc0a0537164e43b8d659aae5c6150db61eb8bacebcb6eff2878bba5be1e845538a4036806ecb3671e45837a76e713d0ab99167ec4d0d202945563ba46a4d2fc64c41327e9370418d24b10f68c4dcbd8f2add28280ad2035976becc8b99137a81d17257b61af416d2b20cbbb7c6e680e4e6342791b7891615720599117913f0a306dcbe7ddfe4ac3", 0xf7, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb58, @remote}, 0x1c)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0xfffffffe, 0x10000, 0xfffffffe, 0x0, 0x0, 0x20000000}, 0x1c)

30.062092ms ago: executing program 1 (id=5721):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
recvfrom$llc(r0, &(0x7f0000000200)=""/225, 0xe1, 0x10000, &(0x7f0000000040)={0x1a, 0x22e, 0x1, 0x8, 0x20, 0x7}, 0x10)
socket$inet6(0xa, 0x1, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f13736096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe0900"/190], 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240))
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x18)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x10003, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0)
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r4, 0x0, 0x4001)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x10, 0x3, 0x0)

0s ago: executing program 2 (id=5722):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r1, 0x11, 0x4, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xf56}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x54}}, 0x0)
read(r0, &(0x7f0000000080)=""/162, 0xa2)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) (async)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r1, 0x11, 0x4, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xf56}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}}]}, 0x54}}, 0x0) (async)
read(r0, &(0x7f0000000080)=""/162, 0xa2) (async)

kernel console output (not intermixed with test programs):

ast mode
[  242.837906][T15094] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.840693][T15094] syzkaller0: entered promiscuous mode
[  242.842651][T15094] syzkaller0: entered allmulticast mode
[  242.862783][T15094] tipc: Resetting bearer <eth:syzkaller0>
[  242.869452][T15091] tipc: Disabling bearer <eth:syzkaller0>
[  242.874648][T15093] tipc: Resetting bearer <eth:syzkaller0>
[  242.887138][T15093] tipc: Disabling bearer <eth:syzkaller0>
[  243.047172][T15103] syzkaller0: entered promiscuous mode
[  243.103896][T15111] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.111657][T15111] syzkaller0: mtu greater than device maximum
[  243.218915][T15114] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  243.377505][T15131] netlink: 'syz.2.3068': attribute type 20 has an invalid length.
[  243.390935][T15131] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  243.393589][T15131] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  243.396276][T15131] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  243.398865][T15131] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  243.410945][T15131] netlink: 'syz.2.3068': attribute type 20 has an invalid length.
[  243.444487][T15137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.448160][T15137] syzkaller0: entered promiscuous mode
[  243.449954][T15137] syzkaller0: entered allmulticast mode
[  243.504385][T15137] syzkaller0: mtu greater than device maximum
[  243.522932][T15136] tipc: Resetting bearer <eth:syzkaller0>
[  243.557342][T15136] tipc: Disabling bearer <eth:syzkaller0>
[  243.623304][T15142] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  243.735869][T15150] netlink: 'syz.1.3075': attribute type 10 has an invalid length.
[  243.737497][T15154] netlink: 'syz.1.3075': attribute type 10 has an invalid length.
[  243.740162][T15150] 8021q: adding VLAN 0 to HW filter on device team0
[  243.745138][T15150] bond0: (slave team0): Enslaving as an active interface with an up link
[  244.092741][T15177] lo speed is unknown, defaulting to 1000
[  244.368343][T15183] netlink: 'syz.1.3081': attribute type 2 has an invalid length.
[  244.653540][T15212] smc: adding net device bond0 with user defined pnetid SYZ2
[  244.729636][T15220] __nla_validate_parse: 16 callbacks suppressed
[  244.729648][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3093'.
[  244.744026][T15220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3093'.
[  245.119197][T15247] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  245.391357][T15252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3102'.
[  245.447379][T15258] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  245.463041][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3102'.
[  245.469898][T15252] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3102'.
[  245.515439][T15261] ip_vti0: Master is either lo or non-ether device
[  245.550876][T15266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3108'.
[  245.749405][T15280] syzkaller1: entered promiscuous mode
[  245.751195][T15280] syzkaller1: entered allmulticast mode
[  246.070156][T15288] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  246.120483][T15290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3117'.
[  246.225306][T15295] openvswitch: netlink: Flow key attr not present in new flow.
[  246.448042][T15307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3123'.
[  246.455390][T15307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3123'.
[  246.633205][T15328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3131'.
[  246.740488][T15335] pim6reg1: entered allmulticast mode
[  246.772699][T15341] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  247.053400][T15363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  247.059934][T15363] syzkaller0: entered promiscuous mode
[  247.061789][T15363] syzkaller0: entered allmulticast mode
[  247.066178][T15363] tipc: Resetting bearer <eth:syzkaller0>
[  247.071160][T15362] tipc: Resetting bearer <eth:syzkaller0>
[  247.086215][T15362] tipc: Disabling bearer <eth:syzkaller0>
[  247.161821][T15373] ip_vti0: Master is either lo or non-ether device
[  247.918986][T15410] netlink: 'syz.1.3165': attribute type 1 has an invalid length.
[  247.953118][T15410] bond15: entered promiscuous mode
[  247.954949][T15410] bond15: entered allmulticast mode
[  247.960133][T15412] kthread_run failed with err -4
[  247.997565][T15416] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.008082][T15416] syzkaller0: entered promiscuous mode
[  248.010367][T15416] syzkaller0: entered allmulticast mode
[  248.039253][T15416] syzkaller0: mtu less than device minimum
[  248.041892][T15415] tipc: Resetting bearer <eth:syzkaller0>
[  248.057849][T15415] tipc: Disabling bearer <eth:syzkaller0>
[  248.061915][T15410] lo speed is unknown, defaulting to 1000
[  248.525723][T15445] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.543965][T15445] syzkaller0: entered promiscuous mode
[  248.547599][T15445] syzkaller0: entered allmulticast mode
[  248.566509][T15445] tipc: Resetting bearer <eth:syzkaller0>
[  248.579242][T15444] tipc: Resetting bearer <eth:syzkaller0>
[  248.646328][T15450] xt_time: invalid argument - start or stop time greater than 23:59:59
[  248.657636][T15444] tipc: Disabling bearer <eth:syzkaller0>
[  249.036859][T15471] netlink: 'syz.1.3184': attribute type 1 has an invalid length.
[  249.041164][T15471] netlink: 'syz.1.3184': attribute type 1 has an invalid length.
[  249.754554][T15490] __nla_validate_parse: 13 callbacks suppressed
[  249.754572][T15490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3187'.
[  249.780827][T15490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3187'.
[  249.858510][T15492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3188'.
[  250.073677][T15502] lo speed is unknown, defaulting to 1000
[  250.113192][T15505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3191'.
[  250.167178][T15508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3193'.
[  250.223436][T15510] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3194'.
[  250.309327][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'.
[  250.312089][T15513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3195'.
[  250.314759][T15513] netlink: 'syz.0.3195': attribute type 13 has an invalid length.
[  250.318941][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'.
[  250.322206][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3195'.
[  250.324352][T15513] netlink: 'syz.0.3195': attribute type 11 has an invalid length.
[  250.328563][T15514] netlink: 'syz.0.3195': attribute type 13 has an invalid length.
[  250.331336][T15514] netlink: 'syz.0.3195': attribute type 11 has an invalid length.
[  250.464533][T15521] erspan0: Device is already in use.
[  250.570684][T15523] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7
[  250.591132][T15525] SET target dimension over the limit!
[  250.674603][T15528] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.685985][T15528] syzkaller0: entered promiscuous mode
[  250.687721][T15528] syzkaller0: entered allmulticast mode
[  250.715054][T15528] syzkaller0: mtu less than device minimum
[  250.718017][T15527] tipc: Resetting bearer <eth:syzkaller0>
[  250.736301][T15527] tipc: Disabling bearer <eth:syzkaller0>
[  250.849138][T15538] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  250.854889][T15538] syzkaller0: entered promiscuous mode
[  250.857252][T15538] syzkaller0: entered allmulticast mode
[  250.862898][T15538] tipc: Resetting bearer <eth:syzkaller0>
[  250.938674][T15535] tipc: Resetting bearer <eth:syzkaller0>
[  250.959855][T15535] tipc: Disabling bearer <eth:syzkaller0>
[  251.105027][T15559] netlink: 'syz.1.3214': attribute type 4 has an invalid length.
[  251.369784][T15577] ip_vti0: Master is either lo or non-ether device
[  251.859195][T15602] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.862523][T15602] syzkaller0: entered promiscuous mode
[  251.875005][T15602] syzkaller0: entered allmulticast mode
[  251.897820][T15606] ip_vti0: Master is either lo or non-ether device
[  251.900676][T15602] syzkaller0: mtu greater than device maximum
[  251.906820][T15601] tipc: Resetting bearer <eth:syzkaller0>
[  251.948445][T15601] tipc: Disabling bearer <eth:syzkaller0>
[  252.407705][T15633] netlink: 'syz.2.3243': attribute type 1 has an invalid length.
[  252.437037][T15633] 8021q: adding VLAN 0 to HW filter on device bond7
[  252.457823][T15637] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  252.680250][   T33] audit: type=1804 audit(1752855569.156:4): pid=15653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3249" name="/newroot/1132/cgroup.controllers" dev="tmpfs" ino=5774 res=1 errno=0
[  252.696303][   T33] audit: type=1800 audit(1752855569.156:5): pid=15653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3249" name="cgroup.controllers" dev="tmpfs" ino=5774 res=0 errno=0
[  252.827510][T15661] netlink: 'syz.2.3251': attribute type 1 has an invalid length.
[  252.917138][T15661] bond8: (slave bridge7): making interface the new active one
[  252.921470][T15661] bond8: (slave bridge7): Enslaving as an active interface with an up link
[  253.026933][T15674] nft_compat: unsupported protocol 0
[  253.112634][T15677] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.119873][T15677] syzkaller0: entered promiscuous mode
[  253.121978][T15677] syzkaller0: entered allmulticast mode
[  253.153296][T15679] xt_CT: No such helper "netbios-ns"
[  253.170197][T15677] syzkaller0: mtu greater than device maximum
[  253.182325][T15676] tipc: Resetting bearer <eth:syzkaller0>
[  253.200621][T15676] tipc: Disabling bearer <eth:syzkaller0>
[  253.286851][T15688] validate_nla: 1 callbacks suppressed
[  253.286875][T15688] netlink: 'syz.1.3258': attribute type 9 has an invalid length.
[  253.589218][T15705] veth13: entered promiscuous mode
[  253.769807][T15722] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  253.811512][T15722] syzkaller0: mtu greater than device maximum
[  253.842641][T15735] netlink: 'syz.1.3272': attribute type 10 has an invalid length.
[  253.850603][T15735] team0: Device ipvlan1 failed to register rx_handler
[  253.905599][T15738] netlink: 'syz.1.3272': attribute type 10 has an invalid length.
[  253.931222][T15738] team0: Device ipvlan1 failed to register rx_handler
[  254.317168][T15783] netlink: 'syz.2.3288': attribute type 4 has an invalid length.
[  254.391310][T15790] sit0: Master is either lo or non-ether device
[  254.571961][T15804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  254.626783][T15810] smc: net device bond0 applied user defined pnetid S
[  254.971185][T15837] __nla_validate_parse: 31 callbacks suppressed
[  254.971198][T15837] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3305'.
[  255.232053][T15843] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  255.648167][T15864] netlink: 'syz.0.3315': attribute type 1 has an invalid length.
[  255.699474][T15864] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  255.711885][ T5860] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  255.719232][T15864] 8021q: adding VLAN 0 to HW filter on device bond7
[  255.724704][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3315'.
[  255.734799][T15864] bridge0: port 3(team0) entered disabled state
[  255.740783][T15864] bridge_slave_0: left allmulticast mode
[  255.743236][T15864] bridge_slave_0: left promiscuous mode
[  255.748795][T15864] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.754304][T15864] bridge_slave_1: left allmulticast mode
[  255.757298][T15864] bridge_slave_1: left promiscuous mode
[  255.760333][T15864] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.771577][T15864] bond0: (slave bond_slave_0): Releasing backup interface
[  255.774916][T15864] bond_slave_0: left promiscuous mode
[  255.780763][T15864] bond0: (slave bond_slave_1): Releasing backup interface
[  255.788312][T15864] bond_slave_1: left promiscuous mode
[  255.796097][T15864] team_slave_0: left promiscuous mode
[  255.800012][T15864] team_slave_0: left allmulticast mode
[  255.815914][T15864] team0: Port device team_slave_0 removed
[  255.818289][T15864] team_slave_1: left promiscuous mode
[  255.820130][T15864] team_slave_1: left allmulticast mode
[  255.828103][T15864] team0: Port device team_slave_1 removed
[  255.832352][T15864] batman_adv: batadv0: Removing interface: batadv_slave_0
[  255.836822][T15864] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.837449][ T5860] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  255.853658][T15864] bond1: (slave gretap1): Releasing active interface
[  255.860430][T15864] bond2: (slave ip6erspan0): Releasing active interface
[  255.867205][T15864] bond3: (slave bridge5): Releasing active interface
[  255.877851][T15864] bond4: (slave bridge9): Releasing backup interface
[  255.884774][T15864] bond7: (slave ip6gretap1): Removing an active aggregator
[  255.892944][T15864] bond7: (slave ip6gretap1): Releasing backup interface
[  255.893090][T15875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3319'.
[  255.898999][T15875] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3319'.
[  255.970365][T15880] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.018579][T15883] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3322'.
[  256.087654][T15886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3322'.
[  256.431926][T15900] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3328'.
[  256.480686][T15902] syzkaller0: entered promiscuous mode
[  256.483015][T15902] syzkaller0: entered allmulticast mode
[  256.620677][T15906] sock: sock_set_timeout: `syz.0.3331' (pid 15906) tries to set negative timeout
[  256.704127][T15910] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  256.714540][T15910] syzkaller0: entered promiscuous mode
[  256.717052][T15910] syzkaller0: entered allmulticast mode
[  256.737467][T15910] tipc: Resetting bearer <eth:syzkaller0>
[  256.741612][T15909] tipc: Resetting bearer <eth:syzkaller0>
[  256.754671][T15909] tipc: Disabling bearer <eth:syzkaller0>
[  256.832489][T15917] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3335'.
[  256.872670][T15917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3335'.
[  256.893522][T15920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3336'.
[  257.158850][T15941] sit7: entered promiscuous mode
[  257.330779][T15957] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  257.717477][T15977] tipc: New replicast peer: 0.0.0.0
[  257.722181][T15977] tipc: Enabled bearer <udp:syz2>, priority 10
[  257.729929][T15977] syzkaller1: entered promiscuous mode
[  257.732028][T15977] syzkaller1: entered allmulticast mode
[  257.924221][T15983] ip_vti0: Master is either lo or non-ether device
[  258.216072][T15992] pimreg3: entered allmulticast mode
[  258.237897][T15992] netlink: 'syz.1.3366': attribute type 1 has an invalid length.
[  258.240562][T15992] netlink: 'syz.1.3366': attribute type 3 has an invalid length.
[  258.425112][T15999] vlan3: entered allmulticast mode
[  258.428784][T15999] veth1: entered allmulticast mode
[  258.835828][    T9] tipc: Node number set to 94306719
[  258.900454][T16022] netlink: 'syz.2.3377': attribute type 33 has an invalid length.
[  259.059135][T16035] macvlan0: entered allmulticast mode
[  259.061316][T16035] netlink: 'syz.1.3382': attribute type 1 has an invalid length.
[  259.064208][T16035] netlink: 'syz.1.3382': attribute type 2 has an invalid length.
[  259.088834][T16037] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  260.617805][T16074] __nla_validate_parse: 14 callbacks suppressed
[  260.617819][T16074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3395'.
[  260.686747][T16076] netlink: 'syz.2.3396': attribute type 10 has an invalid length.
[  260.689842][T16076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3396'.
[  260.694315][T16076] !: entered promiscuous mode
[  260.697370][T16076] !: entered allmulticast mode
[  260.716192][T16076] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  260.772041][T16090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3399'.
[  260.966078][T16103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  260.969958][T16103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  261.198276][T16112] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3407'.
[  261.212790][T16112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3407'.
[  261.600479][T16125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3413'.
[  261.608312][T16123] pimreg: entered allmulticast mode
[  261.624972][T16123] pimreg: left allmulticast mode
[  261.695040][T16128] 8021q: adding VLAN 0 to HW filter on device bond9
[  261.702212][T16128] bond0: (slave bond9): Enslaving as an active interface with a down link
[  261.777188][T16133] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  261.782284][T16133] tipc: Resetting bearer <eth:syzkaller0>
[  261.813500][T16132] tipc: Disabling bearer <eth:syzkaller0>
[  261.842108][T16137] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3418'.
[  261.897678][T16141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3420'.
[  262.194839][T16157] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3425'.
[  262.312673][T16162] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  262.369769][T16164] xt_ecn: cannot match TCP bits for non-tcp packets
[  262.647082][T16176] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  262.902654][T16190] netlink: 'syz.0.3438': attribute type 5 has an invalid length.
[  262.980718][T16196] netlink: 'syz.1.3442': attribute type 23 has an invalid length.
[  262.992031][T16196] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3442'.
[  263.459627][T16229] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  263.702224][T16251] No such timeout policy "syz0"
[  263.739967][T16253] x_tables: unsorted underflow at hook 2
[  263.886096][T16265] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.029924][T16279] ip_vti0: Master is either lo or non-ether device
[  264.094128][T16285] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.280824][T16300] ip_vti0: Master is either lo or non-ether device
[  264.331435][T16304] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  264.362346][T16306] xt_hashlimit: size too large, truncated to 1048576
[  264.791313][T16332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  264.803779][T16332] syzkaller0: entered promiscuous mode
[  264.812585][T16332] syzkaller0: entered allmulticast mode
[  264.823008][T16332] tipc: Resetting bearer <eth:syzkaller0>
[  264.835527][T16331] tipc: Resetting bearer <eth:syzkaller0>
[  264.857625][T16340] xt_nat: multiple ranges no longer supported
[  264.859350][T16331] tipc: Disabling bearer <eth:syzkaller0>
[  265.051335][T16352] smc: removing net device bond0 with user defined pnetid SYZ2
[  265.054547][T16352] bond0 (unregistering): Released all slaves
[  265.254486][T16372] IPVS: Error connecting to the multicast addr
[  265.294480][T16372] netlink: 'syz.2.3501': attribute type 2 has an invalid length.
[  265.784398][T16408] __nla_validate_parse: 17 callbacks suppressed
[  265.784415][T16408] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3511'.
[  265.854461][T16415] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20004
[  266.036731][T16424] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  266.565673][T16455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3526'.
[  266.570777][T16455] IPVS: Error joining to the multicast group
[  267.162177][T16474] vlan2: entered promiscuous mode
[  267.164226][T16474] ip6gretap0: entered promiscuous mode
[  267.447737][T16493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3536'.
[  267.540902][T16495] ip6_vti0: Master is either lo or non-ether device
[  267.574317][T16497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3538'.
[  267.684504][T16503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3541'.
[  267.713398][T16503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3541'.
[  267.773708][T16507] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  267.821910][T16509] ip_vti0: Master is either lo or non-ether device
[  267.837184][T16512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3545'.
[  267.840593][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3545'.
[  267.844806][T16512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3545'.
[  267.849513][T16512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3545'.
[  267.969752][T16525] ip6_vti0: Master is either lo or non-ether device
[  268.077943][T16529] lo speed is unknown, defaulting to 1000
[  268.542007][T16556] netlink: 'syz.1.3559': attribute type 1 has an invalid length.
[  268.564522][T16556] 8021q: adding VLAN 0 to HW filter on device bond16
[  268.662223][T16556] veth21: entered promiscuous mode
[  268.672720][T16556] bond16: (slave veth21): Enslaving as an active interface with a down link
[  268.676501][T16560] erspan0: entered allmulticast mode
[  268.898785][T16570] lo speed is unknown, defaulting to 1000
[  268.939676][T16571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  268.997928][T16571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.058816][T16570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.476036][T16583] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  269.479822][T16583] syzkaller0: entered promiscuous mode
[  269.481515][T16583] syzkaller0: entered allmulticast mode
[  269.491329][T16583] syzkaller0: MTU too low for tipc bearer
[  269.493164][T16583] tipc: Disabling bearer <eth:syzkaller0>
[  269.660097][T16591] lo speed is unknown, defaulting to 1000
[  270.143301][T16616] openvswitch: netlink: EtherType 10 is less than min 600
[  270.970072][  T128] block nbd2: Possible stuck request ffff8880200e8000: control (read@0,1024B). Runtime 180 seconds
[  270.973562][  T128] block nbd2: Possible stuck request ffff8880200e8200: control (read@1024,1024B). Runtime 180 seconds
[  270.977317][  T128] block nbd2: Possible stuck request ffff8880200e8400: control (read@2048,1024B). Runtime 180 seconds
[  270.980898][  T128] block nbd2: Possible stuck request ffff8880200e8600: control (read@3072,1024B). Runtime 180 seconds
[  271.074186][T16650] __nla_validate_parse: 10 callbacks suppressed
[  271.074207][T16650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3586'.
[  271.111586][T16650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3586'.
[  271.184326][T16662] ip_vti0: Master is either lo or non-ether device
[  271.241504][T16664] xt_TCPMSS: Only works on TCP SYN packets
[  271.322812][T16670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3594'.
[  271.325060][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3595'.
[  271.330137][T16670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3594'.
[  271.338448][T16672] bridge12: the hash_elasticity option has been deprecated and is always 16
[  271.482805][T16687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3598'.
[  271.504102][T16687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3598'.
[  271.528432][T16689] ip_vti0: Master is either lo or non-ether device
[  271.623802][T16693] sctp: [Deprecated]: syz.0.3601 (pid 16693) Use of struct sctp_assoc_value in delayed_ack socket option.
[  271.623802][T16693] Use struct sctp_sack_info instead
[  272.182701][T16722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3610'.
[  272.186527][T16722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3610'.
[  272.301933][T16728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3613'.
[  272.328141][T16728] netlink: 'syz.1.3613': attribute type 30 has an invalid length.
[  272.329852][   T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  272.335914][   T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  272.339743][T16728] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  272.343437][T16728] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  272.355780][    T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  272.433132][T16741] ip_vti0: Master is either lo or non-ether device
[  272.508020][T16747] netlink: 'syz.0.3619': attribute type 1 has an invalid length.
[  272.511913][T16748] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  272.518552][T16748] syzkaller0: entered promiscuous mode
[  272.521059][T16748] syzkaller0: entered allmulticast mode
[  272.527736][T16748] tipc: Resetting bearer <eth:syzkaller0>
[  272.530698][T16746] tipc: Resetting bearer <eth:syzkaller0>
[  272.535459][ T5895] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  272.549587][T16746] tipc: Disabling bearer <eth:syzkaller0>
[  272.690578][T16758] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  272.693370][T16758] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  272.714393][T16758] netlink: 'syz.1.3624': attribute type 1 has an invalid length.
[  272.723623][T16764] ip_vti0: Master is either lo or non-ether device
[  272.723826][T16758] netlink: 'syz.1.3624': attribute type 1 has an invalid length.
[  272.936391][T16786] batadv2: entered promiscuous mode
[  272.938165][T16786] batadv2: entered allmulticast mode
[  273.207938][ T5895] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  273.433716][T16839] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  273.530294][T16848] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  273.534229][T16848] syzkaller0: entered promiscuous mode
[  273.538712][T16848] syzkaller0: entered allmulticast mode
[  273.563289][T16847] tipc: Resetting bearer <eth:syzkaller0>
[  273.583270][T16847] tipc: Disabling bearer <eth:syzkaller0>
[  273.620627][T16852] netlink: 'syz.2.3657': attribute type 1 has an invalid length.
[  273.874113][T16874] netlink: 'syz.2.3664': attribute type 1 has an invalid length.
[  273.880449][T16875] netlink: 'syz.2.3664': attribute type 1 has an invalid length.
[  273.993326][T16881] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  274.002121][T16881] syzkaller0: entered promiscuous mode
[  274.004556][T16881] syzkaller0: entered allmulticast mode
[  274.016236][T16884] IPVS: length: 175 != 24
[  274.018006][T16883] IPVS: length: 175 != 24
[  274.022388][T16881] syzkaller0: mtu greater than device maximum
[  274.025991][T16880] tipc: Resetting bearer <eth:syzkaller0>
[  274.043239][T16880] tipc: Disabling bearer <eth:syzkaller0>
[  274.165951][ T7290] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  275.261151][T16962] team0: Port device dummy0 removed
[  275.318573][T16965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.321749][T16965] syzkaller0: entered promiscuous mode
[  275.330432][T16965] syzkaller0: entered allmulticast mode
[  275.370083][T16965] tipc: Resetting bearer <eth:syzkaller0>
[  275.527786][T16965] netlink: 'syz.2.3700': attribute type 1 has an invalid length.
[  275.531232][T16965] nbd: error processing sock list
[  275.533625][T16965] block nbd0: shutting down sockets
[  275.579945][T16963] tipc: Resetting bearer <eth:syzkaller0>
[  275.611187][T16963] tipc: Disabling bearer <eth:syzkaller0>
[  275.653533][T16992] tc_dump_action: action bad kind
[  275.772821][T16999] team0: left promiscuous mode
[  275.779412][T16999] team0: left allmulticast mode
[  275.788179][T16999] veth0: left promiscuous mode
[  275.790341][T16999] veth0: left allmulticast mode
[  275.794452][T16999] batadv_slave_0: left promiscuous mode
[  275.801492][T16999] xfrm0: left promiscuous mode
[  275.803510][T16999] xfrm0: left allmulticast mode
[  275.813907][T16999] ip6gre1: left allmulticast mode
[  275.821330][T16999] gretap2: left promiscuous mode
[  275.823298][T16999] gretap2: left allmulticast mode
[  275.827501][T16999] geneve2: left promiscuous mode
[  275.830181][T16999] geneve2: left allmulticast mode
[  275.839760][T16999] ip6gre2: left allmulticast mode
[  276.002228][T17013] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  276.035361][T17007] block nbd0: not configured, cannot reconfigure
[  276.045612][T17007] syzkaller0: entered promiscuous mode
[  276.047897][T17007] syzkaller0: entered allmulticast mode
[  276.077546][T17006] tipc: Resetting bearer <eth:syzkaller0>
[  276.114259][T17006] tipc: Disabling bearer <eth:syzkaller0>
[  276.132614][T17019] __nla_validate_parse: 25 callbacks suppressed
[  276.132628][T17019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3716'.
[  276.138919][T17019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3716'.
[  276.455009][T17038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3721'.
[  276.460108][T17047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3723'.
[  276.463462][T17047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3723'.
[  276.485394][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  276.634052][T17064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3728'.
[  276.659447][T17064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3728'.
[  276.693805][T17067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3729'.
[  276.779805][T17069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3730'.
[  276.783581][T17069] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3730'.
[  276.793281][T17071] tap0: tun_chr_ioctl cmd 1074025677
[  276.796208][T17071] tap0: linktype set to 0
[  277.140610][T17086] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  277.181453][T17090] ip_vti0: Master is either lo or non-ether device
[  277.323908][T17102] netlink: 'syz.0.3743': attribute type 1 has an invalid length.
[  277.330270][T17102] openvswitch: netlink: IPv4 tun info is not correct
[  277.872573][T17133] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  277.882379][T17133] syzkaller0: entered promiscuous mode
[  277.884731][T17133] syzkaller0: entered allmulticast mode
[  277.898467][T17133] tipc: Resetting bearer <eth:syzkaller0>
[  277.903396][T17132] tipc: Resetting bearer <eth:syzkaller0>
[  277.923297][T17132] tipc: Disabling bearer <eth:syzkaller0>
[  277.937924][ T5278] udevd[5278]: worker [5839] /devices/virtual/block/nbd2 timeout; kill it
[  277.943508][ T5278] udevd[5278]: seq 11055 '/devices/virtual/block/nbd2' killed
[  278.244406][T17159] netlink: 'syz.1.3766': attribute type 1 has an invalid length.
[  278.449462][T17176] xt_TCPMSS: Only works on TCP SYN packets
[  278.514052][T17190] xt_TCPMSS: Only works on TCP SYN packets
[  278.642371][T17196] openvswitch: netlink: IP tunnel dst address not specified
[  278.657692][T17198] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  278.667110][T17198] syzkaller0: entered promiscuous mode
[  278.669299][T17198] syzkaller0: entered allmulticast mode
[  278.685663][T17198] syzkaller0: mtu greater than device maximum
[  278.690674][T17195] tipc: Resetting bearer <eth:syzkaller0>
[  278.711775][T17195] tipc: Disabling bearer <eth:syzkaller0>
[  279.101462][T17228] netlink: 'syz.1.3787': attribute type 4 has an invalid length.
[  279.161939][T17230] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  279.168828][T17230] syzkaller0: mtu greater than device maximum
[  279.405908][T17236] sctp: [Deprecated]: syz.1.3791 (pid 17236) Use of struct sctp_assoc_value in delayed_ack socket option.
[  279.405908][T17236] Use struct sctp_sack_info instead
[  279.420673][T17236] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  279.425037][T17236] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  279.621252][T17253] team0: Device DL<Y is loopback device. Loopback devices can't be added as a team port
[  279.630446][T17253] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  279.854059][T17271] netlink: 'syz.2.3797': attribute type 1 has an invalid length.
[  280.050044][T17293] ip_vti0: Master is either lo or non-ether device
[  280.172245][T17298] xt_recent: hitcount (262143) is larger than allowed maximum (65535)
[  280.261051][T17302] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  280.827361][T17316] xt_hashlimit: max too large, truncated to 1048576
[  280.854783][T17316] xt_CT: No such helper "syz0"
[  281.025399][T17327] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  281.080896][T17332] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  281.159462][T17337] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.162523][T17337] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.185303][T17337] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.188694][T17337] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.192124][T17337] geneve3: entered promiscuous mode
[  281.293084][T17342] __nla_validate_parse: 24 callbacks suppressed
[  281.293105][T17342] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3818'.
[  281.309159][T17342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3818'.
[  281.449185][T17352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3822'.
[  281.658620][T17365] x_tables: duplicate underflow at hook 3
[  281.719654][T17369] sctp: [Deprecated]: syz.0.3827 (pid 17369) Use of struct sctp_assoc_value in delayed_ack socket option.
[  281.719654][T17369] Use struct sctp_sack_info instead
[  282.146986][T17396] ip_vti0: Master is either lo or non-ether device
[  282.213024][T17401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3839'.
[  282.228778][T17401] xt_TCPMSS: Only works on TCP SYN packets
[  282.329202][T17407] netlink: 'syz.0.3841': attribute type 30 has an invalid length.
[  282.350491][T17407] smc: adding net device bond0 with user defined pnetid SYZ2
[  282.476056][T17419] ip_vti0: Master is either lo or non-ether device
[  282.590439][T17422] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  282.597794][T17422] syzkaller0: entered promiscuous mode
[  282.603036][T17422] syzkaller0: entered allmulticast mode
[  282.611938][T17422] syzkaller0: mtu greater than device maximum
[  282.618261][T17421] tipc: Resetting bearer <eth:syzkaller0>
[  282.641822][T17421] tipc: Disabling bearer <eth:syzkaller0>
[  282.672640][T17425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3848'.
[  282.752840][T17288] syz.2.3800 (17288) used greatest stack depth: 19784 bytes left
[  282.792972][T17429] openvswitch: netlink: Missing key (keys=40, expected=80)
[  282.802922][T17429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3851'.
[  282.811825][T17429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3851'.
[  282.828108][T17433] ip_vti0: Master is either lo or non-ether device
[  282.881986][T17437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  282.884404][T17437] IPv6: NLM_F_CREATE should be set when creating new route
[  282.886873][T17437] IPv6: NLM_F_CREATE should be set when creating new route
[  282.889337][T17437] IPv6: NLM_F_CREATE should be set when creating new route
[  282.892311][T17437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  283.036754][T17449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3859'.
[  283.098035][T17453] nbd: must specify a device to reconfigure
[  283.341186][T17467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3864'.
[  283.652145][T17482] netlink: 'syz.0.3869': attribute type 1 has an invalid length.
[  283.654847][T17482] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3869'.
[  283.827066][T17490] netlink: 'syz.0.3872': attribute type 2 has an invalid length.
[  283.837402][T17490] netlink: 'syz.0.3872': attribute type 1 has an invalid length.
[  283.854458][T17492] xt_limit: Overflow, try lower: 262144/524288
[  283.924060][T17497] xt_addrtype: ipv6 does not support BROADCAST matching
[  284.236426][T17527] veth35: entered promiscuous mode
[  284.374792][T17548] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  284.381563][T17548] netlink: 'syz.1.3890': attribute type 1 has an invalid length.
[  284.407328][T17548] 8021q: adding VLAN 0 to HW filter on device bond18
[  284.419996][T17548] syzkaller1: tun_chr_ioctl cmd 1074025672
[  284.421978][T17548] syzkaller1: ignored: set checksum disabled
[  285.055466][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  301.045798][  T128] block nbd2: Possible stuck request ffff8880200e8000: control (read@0,1024B). Runtime 210 seconds
[  301.050506][  T128] block nbd2: Possible stuck request ffff8880200e8200: control (read@1024,1024B). Runtime 210 seconds
[  301.054747][  T128] block nbd2: Possible stuck request ffff8880200e8400: control (read@2048,1024B). Runtime 210 seconds
[  301.059275][  T128] block nbd2: Possible stuck request ffff8880200e8600: control (read@3072,1024B). Runtime 210 seconds
[  302.325497][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  306.166031][T11627] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  316.701945][T17590] netlink: 'syz.2.3901': attribute type 3 has an invalid length.
[  316.704897][T17590] netlink: 'syz.2.3901': attribute type 6 has an invalid length.
[  316.756761][T17600] lo speed is unknown, defaulting to 1000
[  316.797462][T17606] __nla_validate_parse: 4 callbacks suppressed
[  316.797477][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3905'.
[  316.917691][T17606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3905'.
[  316.991439][T17614] netlink: 'syz.1.3906': attribute type 11 has an invalid length.
[  316.994486][T17614] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3906'.
[  317.142552][T17622] syzkaller0: Caught tx_queue_len zero misconfig
[  317.210316][T17626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3911'.
[  317.266659][T17630] netlink: 'syz.1.3911': attribute type 13 has an invalid length.
[  317.302791][T17630] gretap0: entered promiscuous mode
[  317.380011][T17630] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.384586][T17630] 8021q: adding VLAN 0 to HW filter on device team0
[  317.390588][T17630] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  317.526280][T17647] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3919'.
[  317.689316][T17662] wireguard0: entered promiscuous mode
[  317.691393][T17662] wireguard0: entered allmulticast mode
[  317.754971][T17669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3927'.
[  317.813841][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3930'.
[  317.817596][T17675] openvswitch: netlink: Flow actions attr not present in new flow.
[  317.880517][T17679] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.888437][T17679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3932'.
[  317.904208][T17679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3932'.
[  317.904268][T17682] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3933'.
[  317.920762][T17679] netlink: 'syz.0.3932': attribute type 9 has an invalid length.
[  318.116898][T17695] netlink: 'syz.0.3940': attribute type 3 has an invalid length.
[  318.141692][T17697] xt_nfacct: accounting object `syz1' does not exists
[  318.256263][T17713] netlink: 'syz.0.3944': attribute type 2 has an invalid length.
[  318.368112][T17730] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.394075][T17733] netlink: 'syz.2.3949': attribute type 3 has an invalid length.
[  318.562878][T17754] bond0: (slave rose0): Error: Device can not be enslaved while up
[  318.646340][T17754] netlink: 'syz.0.3952': attribute type 16 has an invalid length.
[  318.649352][T17754] netlink: 'syz.0.3952': attribute type 17 has an invalid length.
[  318.738203][T17754] 8021q: adding VLAN 0 to HW filter on device team0
[  318.747437][T17754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  319.046749][T17777] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  319.061166][T17777] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  319.070359][T17777] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  320.749350][T17800] batadv0: entered promiscuous mode
[  320.755235][T17800] batadv0: entered allmulticast mode
[  321.966832][T17859] __nla_validate_parse: 22 callbacks suppressed
[  321.966851][T17859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3989'.
[  322.036200][T17862] bond1: (slave geneve2): Releasing active interface
[  322.059424][T17862] bond2: (slave ip6gretap1): Releasing backup interface
[  322.062833][T17862] bond2: (slave ip6gretap1): the permanent HWaddr of slave - d2:77:e7:e5:87:ed - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  322.086170][T17862] bond2: (slave veth5): Releasing backup interface
[  322.102310][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3991'.
[  322.106773][T17862] bond4: (slave bridge3): Releasing active interface
[  322.109544][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3991'.
[  322.116940][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3991'.
[  322.121181][T17862] bond8: (slave bridge7): Releasing active interface
[  322.125575][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3991'.
[  322.132821][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3991'.
[  322.140594][T17862] bond0: (slave bond9): Releasing active interface
[  322.162711][T17865] 0{X: left allmulticast mode
[  322.188884][T17865] !: left promiscuous mode
[  322.190878][T17865] !: left allmulticast mode
[  322.201734][T17865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  322.212509][   T95] lo speed is unknown, defaulting to 1000
[  322.221215][   T95] syz0: Port: 1 Link ACTIVE
[  322.228354][   T95] lo speed is unknown, defaulting to 1000
[  322.452816][T17888] syzkaller1: entered promiscuous mode
[  322.454618][T17888] syzkaller1: entered allmulticast mode
[  322.574705][T17896] netlink: 260 bytes leftover after parsing attributes in process `syz.2.4002'.
[  322.610837][T17898] sctp: [Deprecated]: syz.1.4003 (pid 17898) Use of struct sctp_assoc_value in delayed_ack socket option.
[  322.610837][T17898] Use struct sctp_sack_info instead
[  322.654383][T17902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4005'.
[  322.663913][T17905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4006'.
[  322.666451][T17902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4005'.
[  322.720929][T17909] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.724365][T17910] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.051804][T17942] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  323.094274][T17932] netlink: 'syz.2.4016': attribute type 21 has an invalid length.
[  323.429081][T17973] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.479119][T17973] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.553386][T17973] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.595087][T17973] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.650897][T17973] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.663037][T17973] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.681749][T17973] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.691962][T17973] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  324.130920][T18014] netlink: 'syz.0.4041': attribute type 1 has an invalid length.
[  324.164128][T18014] 8021q: adding VLAN 0 to HW filter on device bond9
[  324.384838][T18027] ip_vti0: Master is either lo or non-ether device
[  324.462293][T18024] lo: entered allmulticast mode
[  324.469555][T18024] tunl0: entered allmulticast mode
[  324.473089][T18024] gre0: entered allmulticast mode
[  324.478987][T18024] gretap0: entered allmulticast mode
[  324.484232][T18024] erspan0: entered allmulticast mode
[  324.489553][T18024] ip_vti0: entered allmulticast mode
[  324.492611][T18024] ip6_vti0: entered allmulticast mode
[  324.500617][T18024] sit0: entered allmulticast mode
[  324.514748][T18024] ip6tnl0: entered allmulticast mode
[  324.526988][T18024] ip6gre0: entered allmulticast mode
[  324.533739][T18024] ip6gretap0: entered allmulticast mode
[  324.540127][T18024] bridge0: entered allmulticast mode
[  324.543787][T18024] team0: entered allmulticast mode
[  324.547685][T18024] nlmon0: entered allmulticast mode
[  324.550035][T18024] caif0: entered allmulticast mode
[  324.552633][T18024] batadv0: entered allmulticast mode
[  324.554427][T18024] veth0: entered allmulticast mode
[  324.556409][T18024] veth1: entered allmulticast mode
[  324.559820][T18024] wg0: entered allmulticast mode
[  324.561493][T18024] wg1: entered allmulticast mode
[  324.563072][T18024] wg2: entered allmulticast mode
[  324.566036][T18024] veth0_to_bridge: entered allmulticast mode
[  324.568650][T18024] bridge_slave_0: entered allmulticast mode
[  324.570881][T18024] veth1_to_bridge: entered allmulticast mode
[  324.573024][T18024] bridge_slave_1: entered allmulticast mode
[  324.575942][T18024] veth0_to_bond: entered allmulticast mode
[  324.585686][T18024] bond_slave_0: entered allmulticast mode
[  324.588241][T18024] veth1_to_bond: entered allmulticast mode
[  324.591963][T18024] bond_slave_1: entered allmulticast mode
[  324.599825][T18024] veth0_to_team: entered allmulticast mode
[  324.606283][T18024] team_slave_0: entered allmulticast mode
[  324.613618][T18024] veth1_to_team: entered allmulticast mode
[  324.617137][T18024] team_slave_1: entered allmulticast mode
[  324.619597][T18024] veth0_to_batadv: entered allmulticast mode
[  324.621300][T18037] netlink: 'syz.2.4047': attribute type 1 has an invalid length.
[  324.621656][T18024] batadv_slave_0: entered allmulticast mode
[  324.624588][T18037] netlink: 'syz.2.4047': attribute type 11 has an invalid length.
[  324.629186][T18024] veth1_to_batadv: entered allmulticast mode
[  324.632924][T18024] batadv_slave_1: entered allmulticast mode
[  324.634948][T18024] xfrm0: entered allmulticast mode
[  324.637307][T18024] veth0_to_hsr: entered allmulticast mode
[  324.640431][T18024] hsr_slave_0: entered allmulticast mode
[  324.642580][T18024] veth1_to_hsr: entered allmulticast mode
[  324.645128][T18024] hsr_slave_1: entered allmulticast mode
[  324.648135][T18024] hsr0: entered allmulticast mode
[  324.655112][T18024] veth1_virt_wifi: entered allmulticast mode
[  324.660666][T18024] veth0_virt_wifi: entered allmulticast mode
[  324.667915][T18024] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  324.675900][T18024] veth1_vlan: entered allmulticast mode
[  324.679312][T18024] veth0_vlan: entered allmulticast mode
[  324.681775][T18024] vlan0: entered allmulticast mode
[  324.684130][T18024] vlan1: entered allmulticast mode
[  324.689097][T18024] macvlan0: entered allmulticast mode
[  324.691520][T18024] macvlan1: entered allmulticast mode
[  324.693900][T18024] ipvlan0: entered allmulticast mode
[  324.697384][T18024] ipvlan1: entered allmulticast mode
[  324.699766][T18024] geneve0: entered allmulticast mode
[  324.702115][T18024] geneve1: entered allmulticast mode
[  324.704604][T18024] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode
[  324.708966][T18024] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  324.711991][T18024] mac80211_hwsim hwsim3 nicvf0: entered allmulticast mode
[  324.715001][T18024] syztnl0: entered allmulticast mode
[  324.717911][T18024] bond1: entered allmulticast mode
[  324.720268][T18024] gretap1: entered allmulticast mode
[  324.722579][T18024] gre1: entered allmulticast mode
[  324.724813][T18024] bridge_slave_0.: entered allmulticast mode
[  324.732183][T18024] bond_slave_0.0: entered allmulticast mode
[  324.734793][T18024] bridge1: entered allmulticast mode
[  324.737426][T18024] xfrm1: entered allmulticast mode
[  324.739673][T18024] gre2: entered allmulticast mode
[  324.741869][T18024] gtp0: entered allmulticast mode
[  324.744048][T18024] gre3: entered allmulticast mode
[  324.748868][T18024] ip6tnl1: entered allmulticast mode
[  324.751172][T18024] vxcan2: entered allmulticast mode
[  324.753438][T18024] vxcan3: entered allmulticast mode
[  324.756032][T18024] bond2: entered allmulticast mode
[  324.758293][T18024] ip6erspan0: entered allmulticast mode
[  324.760695][T18024] bridge2: entered allmulticast mode
[  324.762943][T18024] vxlan0: entered allmulticast mode
[  324.765593][T18024] ip6gre1: entered allmulticast mode
[  324.767903][T18024] bridge3: entered allmulticast mode
[  324.770247][T18024] mac80211_hwsim hwsim15 wlan2: entered allmulticast mode
[  324.773335][T18024] bridge4: entered allmulticast mode
[  324.778110][T18024] bond3: entered allmulticast mode
[  324.781628][T18024] bridge5: entered allmulticast mode
[  324.783902][T18024] syztnl2: entered allmulticast mode
[  324.786580][T18024] veth2: entered allmulticast mode
[  324.788880][T18024] veth3: entered allmulticast mode
[  324.791199][T18024] sit1: entered allmulticast mode
[  324.793432][T18024] bridge6: entered allmulticast mode
[  324.798337][T18024] veth4: entered allmulticast mode
[  324.800679][T18024] veth5: entered allmulticast mode
[  324.802925][T18024] bridge7: entered allmulticast mode
[  324.807268][T18024] veth6: entered allmulticast mode
[  324.809466][T18024] veth7: entered allmulticast mode
[  324.811752][T18024] bridge8: entered allmulticast mode
[  324.813963][T18024] gretap2: entered allmulticast mode
[  324.819240][T18024] bond4: entered allmulticast mode
[  324.821478][T18024] bridge9: entered allmulticast mode
[  324.824034][T18024] mac80211_hwsim hwsim17 wlan3: entered allmulticast mode
[  324.826528][T18024] vxlan1: entered allmulticast mode
[  324.828484][T18024] sit2: entered allmulticast mode
[  324.830278][T18024] sit3: entered allmulticast mode
[  324.832105][T18024] bridge10: entered allmulticast mode
[  324.833970][T18024] erspan1: entered allmulticast mode
[  324.838049][T18024] tun0: entered allmulticast mode
[  324.839913][T18024] geneve2: entered allmulticast mode
[  324.841743][T18024] sit4: entered allmulticast mode
[  324.843461][T18024] bond5: entered allmulticast mode
[  324.845291][T18024] gretap3: entered allmulticast mode
[  324.847491][T18024] ip6tnl2: entered allmulticast mode
[  324.849388][T18024] team_slave_1.4: entered allmulticast mode
[  324.851410][T18024] ip6gre2: entered allmulticast mode
[  324.853150][T18024] bond6: entered allmulticast mode
[  324.854905][T18024] veth8: entered allmulticast mode
[  324.858696][T18024] veth9: entered allmulticast mode
[  324.860709][T18024] bridge11: entered allmulticast mode
[  324.862519][T18024] veth10: entered allmulticast mode
[  324.864370][T18024] veth11: entered allmulticast mode
[  324.866522][T18024] syztnl1: entered allmulticast mode
[  324.868250][T18024] veth12: entered allmulticast mode
[  324.870002][T18024] veth13: entered allmulticast mode
[  324.871927][T18024] veth14: entered allmulticast mode
[  324.873753][T18024] veth15: entered allmulticast mode
[  324.877811][T18024] ip6_vti1: entered allmulticast mode
[  324.879864][T18024] veth16: entered allmulticast mode
[  324.881819][T18024] veth17: entered allmulticast mode
[  324.883774][T18024] veth18: entered allmulticast mode
[  324.885676][    T9] page_pool_release_retry() stalled pool shutdown: id 108, 1 inflight 60 sec
[  324.888805][T18024] veth19: entered allmulticast mode
[  324.890965][T18024] veth20: entered allmulticast mode
[  324.892990][T18024] veth21: entered allmulticast mode
[  324.894990][T18024] veth22: entered allmulticast mode
[  324.899189][T18024] veth23: entered allmulticast mode
[  324.901398][T18024] veth24: entered allmulticast mode
[  324.903409][T18024] veth25: entered allmulticast mode
[  324.905435][T18024] bond7: entered allmulticast mode
[  324.907514][T18024] ip6gretap1: entered allmulticast mode
[  324.909257][T18024] ip6tnl3: entered allmulticast mode
[  324.911467][T18024] vlan2: entered allmulticast mode
[  324.913589][T18024] veth26: entered allmulticast mode
[  324.918204][T18024] veth27: entered allmulticast mode
[  324.920478][T18024] veth28: entered allmulticast mode
[  324.922639][T18024] veth29: entered allmulticast mode
[  324.924834][T18024] ip6gre3: entered allmulticast mode
[  324.928075][T18024] gre4: entered allmulticast mode
[  324.930183][T18024] veth30: entered allmulticast mode
[  324.932282][T18024] veth31: entered allmulticast mode
[  324.935262][T18024] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.938513][T18024] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.941656][T18024] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.944914][T18024] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.950653][T18024] geneve3: left promiscuous mode
[  324.952229][T18024] geneve3: entered allmulticast mode
[  324.957286][T18024] bond0: entered allmulticast mode
[  324.959214][T18024] veth32: entered allmulticast mode
[  324.961240][T18024] veth33: entered allmulticast mode
[  324.963210][T18024] veth34: entered allmulticast mode
[  324.969533][T18024] veth35: left promiscuous mode
[  324.971521][T18024] veth35: entered allmulticast mode
[  324.974239][T18024] wireguard0: left promiscuous mode
[  324.977505][T18024] veth36: entered allmulticast mode
[  324.979419][T18024] veth37: entered allmulticast mode
[  324.981496][T18024] vti60: entered allmulticast mode
[  324.983674][T18024] veth38: entered allmulticast mode
[  324.988099][T18024] veth39: entered allmulticast mode
[  324.990388][T18024] veth40: entered allmulticast mode
[  324.992554][T18024] veth41: entered allmulticast mode
[  324.994726][T18024] bond8: entered allmulticast mode
[  324.997537][T18024] veth42: entered allmulticast mode
[  324.999768][T18024] veth43: entered allmulticast mode
[  325.002041][T18024] netdevsim netdevsim0 eth0: entered allmulticast mode
[  325.004879][T18024] netdevsim netdevsim0 eth1: entered allmulticast mode
[  325.010248][T18024] netdevsim netdevsim0 eth2: entered allmulticast mode
[  325.013149][T18024] netdevsim netdevsim0 eth3: entered allmulticast mode
[  325.019526][T18024] bond9: entered allmulticast mode
[  325.023542][T18024] veth44: entered allmulticast mode
[  325.028256][T18024] veth45: entered allmulticast mode
[  325.030775][T18024] syzkaller0: entered allmulticast mode
[  325.082282][   T33] audit: type=1107 audit(1752855641.556:6): pid=18044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='\l'
[  325.087610][T18045] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  325.250195][T18059] ip_vti0: Master is either lo or non-ether device
[  327.163262][ T5831] Bluetooth: hci2: link tx timeout
[  327.164975][ T5831] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  327.177921][T18136] __nla_validate_parse: 9 callbacks suppressed
[  327.177932][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4084'.
[  327.550329][T18169] netlink: 'syz.1.4095': attribute type 12 has an invalid length.
[  327.553592][T18169] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.4095'.
[  327.992305][T18195] ip_vti0: Master is either lo or non-ether device
[  328.166313][T18206] vlan3: entered allmulticast mode
[  328.212341][T18207] netlink: 'syz.0.4105': attribute type 1 has an invalid length.
[  328.229439][T18207] 8021q: adding VLAN 0 to HW filter on device bond10
[  328.243977][T18206] veth49: entered promiscuous mode
[  328.248845][T18206] bond10: (slave veth49): Enslaving as an active interface with a down link
[  328.263805][T18207] veth51: entered promiscuous mode
[  328.268734][T18207] bond10: (slave veth51): Enslaving as an active interface with a down link
[  328.330792][T18209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4106'.
[  328.383551][T18221] erspan1: entered promiscuous mode
[  328.396112][T18221] erspan1: entered allmulticast mode
[  328.401283][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4108'.
[  328.404492][T18221] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4108'.
[  328.418909][T18225] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  328.546373][T18236] netlink: 'syz.2.4116': attribute type 1 has an invalid length.
[  328.569601][T18240] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4115'.
[  328.820959][T18257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4122'.
[  328.843678][T18257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4122'.
[  328.870894][T18257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4122'.
[  328.926567][T18262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4123'.
[  329.147001][T18280] netlink: 'syz.0.4127': attribute type 1 has an invalid length.
[  329.209452][ T5838] Bluetooth: hci2: command 0x0406 tx timeout
[  329.900101][T18346] syzkaller0: entered promiscuous mode
[  329.902343][T18346] syzkaller0: entered allmulticast mode
[  331.139003][  T128] block nbd2: Possible stuck request ffff8880200e8000: control (read@0,1024B). Runtime 240 seconds
[  331.142495][  T128] block nbd2: Possible stuck request ffff8880200e8200: control (read@1024,1024B). Runtime 240 seconds
[  331.145998][  T128] block nbd2: Possible stuck request ffff8880200e8400: control (read@2048,1024B). Runtime 240 seconds
[  331.150106][  T128] block nbd2: Possible stuck request ffff8880200e8600: control (read@3072,1024B). Runtime 240 seconds
[  331.548781][T18367] lo speed is unknown, defaulting to 1000
[  331.611552][T18377] ip_vti0: Master is either lo or non-ether device
[  331.805098][T18393] netlink: 'syz.1.4158': attribute type 1 has an invalid length.
[  332.480139][T18449] __nla_validate_parse: 9 callbacks suppressed
[  332.480151][T18449] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4176'.
[  332.496560][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4176'.
[  332.560064][T18454] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4178'.
[  332.673948][T18463] lo speed is unknown, defaulting to 1000
[  332.716350][T18464] xt_limit: Overflow, try lower: 262144/524288
[  333.141165][T18484] xt_limit: Overflow, try lower: 262144/524288
[  333.253472][T18493] sctp: [Deprecated]: syz.2.4187 (pid 18493) Use of int in maxseg socket option.
[  333.253472][T18493] Use struct sctp_assoc_value instead
[  333.373883][T18501] xt_SECMARK: invalid mode: 0
[  333.498610][T18510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4193'.
[  333.543490][T18512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4195'.
[  333.600309][T18523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4197'.
[  333.658384][    T9] lo speed is unknown, defaulting to 1000
[  333.660225][    T9] syz0: Port: 1 Link DOWN
[  333.661691][    T9] lo speed is unknown, defaulting to 1000
[  333.774628][T18544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4203'.
[  333.799537][T18545] 8021q: VLANs not supported on wg0
[  334.821235][T18583] debugfs: Directory 'netdev:nicvf0' with parent 'phy4' already present!
[  334.973217][T18593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4218'.
[  334.986812][T18593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4218'.
[  335.120650][T18606] xt_hashlimit: overflow, try lower: 6/0
[  335.251131][T18615] netlink: 'syz.0.4226': attribute type 4 has an invalid length.
[  335.257516][T18615] netlink: 'syz.0.4226': attribute type 4 has an invalid length.
[  335.437776][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4230'.
[  335.466762][T18625] vti1: entered promiscuous mode
[  335.943713][T18652] netlink: 'syz.2.4238': attribute type 9 has an invalid length.
[  335.998632][T18659] netlink: 'syz.1.4239': attribute type 29 has an invalid length.
[  336.002598][T18659] netlink: 'syz.1.4239': attribute type 29 has an invalid length.
[  336.062615][T18662] ip_vti0: Master is either lo or non-ether device
[  336.213796][T18672] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[  336.245386][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  336.421151][T18682] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  336.424209][T18682] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  336.426302][T18693] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  336.427383][T18682] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  336.434294][T18682] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  336.447733][T18682] veth13: left promiscuous mode
[  336.457506][T18682] erspan1: left promiscuous mode
[  336.459199][T18682] erspan1: left allmulticast mode
[  336.463148][T18682] vti1: left promiscuous mode
[  336.852173][T18715] netlink: 'syz.1.4262': attribute type 4 has an invalid length.
[  337.414037][T18751] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  337.419137][T18753] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  337.689391][T18785] __nla_validate_parse: 7 callbacks suppressed
[  337.689403][T18785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4287'.
[  337.788186][T18790] gretap0: entered allmulticast mode
[  337.798968][T18793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4290'.
[  338.029305][T18820] ip_vti0: Master is either lo or non-ether device
[  338.211618][T18827] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4300'.
[  338.409907][   T33] audit: type=1800 audit(1752855654.886:7): pid=18827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4300" name="cgroup.controllers" dev="tmpfs" ino=7613 res=0 errno=0
[  338.439410][T18846] netlink: 428 bytes leftover after parsing attributes in process `syz.1.4308'.
[  338.445019][T18846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4308'.
[  338.550786][T18851] xt_CT: You must specify a L4 protocol and not use inversions on it
[  338.554169][T18851] xt_CT: You must specify a L4 protocol and not use inversions on it
[  338.658414][T18863] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[  338.665677][T18859] IPVS: stopping backup sync thread 18863 ...
[  338.773827][T18872] syzkaller0: left promiscuous mode
[  338.775939][T18872] syzkaller0: left allmulticast mode
[  338.825647][T18874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4316'.
[  338.919500][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4319'.
[  338.930185][T18883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4319'.
[  338.935007][T18883] netlink: 'syz.2.4319': attribute type 7 has an invalid length.
[  339.057554][T18892] netem: incorrect ge model size
[  339.059586][T18892] netem: change failed
[  339.079558][T18894] netlink: 'syz.2.4321': attribute type 30 has an invalid length.
[  339.134380][T18898] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4323'.
[  339.281652][T18909] ip_vti0: Master is either lo or non-ether device
[  339.691013][T18929] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  339.937310][T18949] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4339'.
[  340.120233][T18957] netlink: 'syz.2.4342': attribute type 1 has an invalid length.
[  340.162336][T18957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.201466][T18957] veth27: entered promiscuous mode
[  340.387600][T18979] A link change request failed with some changes committed already. Interface DL<Y may have been left with an inconsistent configuration, please check.
[  340.406139][ T5831] Bluetooth: hci2: command 0x0406 tx timeout
[  340.409271][T18979] 8021q: VLANs not supported on ip6gre0
[  340.657435][T18995] veth1_macvtap: left allmulticast mode
[  340.677031][T18995] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  340.679991][T18995] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  340.682623][T18995] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  340.685752][T18995] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  340.692621][T18995] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.696448][T18995] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.699163][T18995] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.701826][T18995] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  340.733888][T18995] tipc: Resetting bearer <eth:syzkaller0>
[  340.779676][T18999] netlink: 'syz.2.4356': attribute type 1 has an invalid length.
[  340.786491][T18998] netlink: 'syz.2.4356': attribute type 1 has an invalid length.
[  340.812677][T18995] macsec0: left allmulticast mode
[  341.596242][T19025] netlink: 'syz.2.4365': attribute type 4 has an invalid length.
[  341.637887][T19030] netlink: 'syz.1.4367': attribute type 4 has an invalid length.
[  341.644098][T19030] : renamed from bond0
[  341.759217][T19039] xt_SECMARK: invalid mode: 0
[  342.045005][T19074] 8021q: VLANs not supported on lo
[  342.053010][T19072] 8021q: VLANs not supported on lo
[  342.363022][T19105] ip_vti0: Master is either lo or non-ether device
[  342.664990][T19139] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.671636][T19139] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.674548][T19143] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  342.679261][T19139] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.683940][T19139] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.686964][T19139] geneve4: entered promiscuous mode
[  342.902512][T19165] netlink: 'syz.1.4410': attribute type 2 has an invalid length.
[  343.431372][T19174] netlink: 'syz.2.4412': attribute type 1 has an invalid length.
[  343.457649][T19174] bond13: (slave bridge12): making interface the new active one
[  343.460775][T19174] bond13: (slave bridge12): Enslaving as an active interface with an up link
[  343.863302][T19196] __nla_validate_parse: 18 callbacks suppressed
[  343.863314][T19196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4419'.
[  343.870975][T19196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4419'.
[  343.936980][T19202] rdma_rxe: rxe_newlink: failed to add lo
[  343.943234][T19202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4420'.
[  344.028747][T19205] lo speed is unknown, defaulting to 1000
[  344.064331][T19209] netlink: 'syz.0.4422': attribute type 29 has an invalid length.
[  344.067169][T19209] netlink: 'syz.0.4422': attribute type 29 has an invalid length.
[  344.145464][T19216] --map-set only usable from mangle table
[  344.232741][T19219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4426'.
[  344.247307][T19219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4426'.
[  344.273743][T19218] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  344.467003][T19232] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4430'.
[  344.517626][T19233] netlink: 'syz.0.4430': attribute type 10 has an invalid length.
[  344.520228][T19233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4430'.
[  344.523310][T19233] team0: entered promiscuous mode
[  344.528060][T19233] 8021q: adding VLAN 0 to HW filter on device team0
[  344.530605][T19233] bridge0: port 1(team0) entered blocking state
[  344.546807][T19233] bridge0: port 1(team0) entered disabled state
[  345.000976][T19248] netlink: 'syz.1.4432': attribute type 4 has an invalid length.
[  345.150012][T19259] vlan2: entered promiscuous mode
[  345.151830][T19259] bridge0: entered promiscuous mode
[  345.218565][T19259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  345.680593][T19291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4448'.
[  345.708698][T19291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4448'.
[  345.910919][T19319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4459'.
[  346.410904][T19370] lo speed is unknown, defaulting to 1000
[  346.668515][T19392] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  346.679688][T19392] syzkaller0: entered promiscuous mode
[  346.681949][T19392] syzkaller0: entered allmulticast mode
[  346.744640][T19400] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  346.750567][T19400] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  346.909885][T19409] validate_nla: 1 callbacks suppressed
[  346.909898][T19409] netlink: 'syz.0.4489': attribute type 4 has an invalid length.
[  347.027897][T19417] ip_vti0: Master is either lo or non-ether device
[  347.133654][T19415] lo speed is unknown, defaulting to 1000
[  347.170542][T19421] tipc: Cannot configure node identity twice
[  347.212938][T19425] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  347.296439][T19429] xt_socket: unknown flags 0x8
[  347.347645][T19433] ip_vti0: Master is either lo or non-ether device
[  347.403312][T19437] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.407493][T19420] lo speed is unknown, defaulting to 1000
[  348.098337][T19464] netlink: 'syz.0.4508': attribute type 6 has an invalid length.
[  348.276713][T19470] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  348.280579][T19470] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  348.390830][T19477] ip_vti0: Master is either lo or non-ether device
[  349.097118][T19517] __nla_validate_parse: 18 callbacks suppressed
[  349.097129][T19517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4528'.
[  349.115517][T19517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4528'.
[  349.307352][T19537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4534'.
[  349.429743][T19545] xt_ecn: cannot match TCP bits for non-tcp packets
[  349.434882][T19546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4537'.
[  349.586399][T19556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4542'.
[  349.594303][T19556] macvtap0: entered promiscuous mode
[  349.597910][T19556] bridge0: entered promiscuous mode
[  349.599706][T19556] macvtap0: entered allmulticast mode
[  349.606475][T19556] bridge0: left promiscuous mode
[  349.700268][T19562] ip_vti0: Master is either lo or non-ether device
[  349.936882][ T5831] Bluetooth: hci2: command 0x0406 tx timeout
[  349.962072][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4548'.
[  350.003483][T19581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4549'.
[  350.022082][T19581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4549'.
[  350.106918][T19583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4550'.
[  350.110105][T19583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4550'.
[  350.366742][T19589] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  350.369632][T19590] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  351.286146][T19640] netlink: 'syz.2.4570': attribute type 6 has an invalid length.
[  351.314572][T19640] netlink: 'syz.2.4570': attribute type 2 has an invalid length.
[  351.337161][T19642] netlink: 'syz.0.4571': attribute type 3 has an invalid length.
[  351.341512][T19642] netlink: 'syz.0.4571': attribute type 23 has an invalid length.
[  351.859571][T19662] lo speed is unknown, defaulting to 1000
[  351.924816][T19671] netlink: 'syz.0.4576': attribute type 13 has an invalid length.
[  351.929187][T19671] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  351.948638][T19671] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  352.624369][T19706] netlink: 'syz.1.4593': attribute type 1 has an invalid length.
[  352.641465][T19708] lo speed is unknown, defaulting to 1000
[  352.695877][T19714] ip_vti0: Master is either lo or non-ether device
[  353.169957][T19747] ip_vti0: Master is either lo or non-ether device
[  353.278304][T19760] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  353.371869][ T5836] cgroup: fork rejected by pids controller in /syz1
[  353.434461][T19770] netlink: 'syz.0.4608': attribute type 4 has an invalid length.
[  354.158108][T19781] __nla_validate_parse: 16 callbacks suppressed
[  354.158123][T19781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4616'.
[  354.191658][T19784] syzkaller0: entered promiscuous mode
[  354.193378][T19784] syzkaller0: entered allmulticast mode
[  354.197309][T19784] syzkaller0: tun_chr_ioctl cmd 1074025677
[  354.199102][T19784] syzkaller0: Linktype set failed because interface is up
[  354.201370][T19784] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4617'.
[  354.326742][T19790] ip_vti0: Master is either lo or non-ether device
[  354.352104][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  354.358779][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  354.362108][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  354.364996][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  354.369277][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  354.430365][T19792] lo speed is unknown, defaulting to 1000
[  354.629617][T19792] chnl_net:caif_netlink_parms(): no params data found
[  354.697290][T19792] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.700032][T19792] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.702970][T19792] bridge_slave_0: entered allmulticast mode
[  354.710048][T19792] bridge_slave_0: entered promiscuous mode
[  354.717680][T19792] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.720501][T19792] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.723442][T19792] bridge_slave_1: entered allmulticast mode
[  354.730468][T19792] bridge_slave_1: entered promiscuous mode
[  354.770133][T19792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.779802][T19792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.819401][T19792] team0: Port device team_slave_0 added
[  354.826229][T19792] team0: Port device team_slave_1 added
[  354.856476][T19792] batman_adv: batadv0: Adding interface: batadv_slave_0
[  354.859303][T19792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.869474][T19792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.875532][T19792] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.878185][T19792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.888771][T19792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.936238][T19792] hsr_slave_0: entered promiscuous mode
[  354.939361][T19792] hsr_slave_1: entered promiscuous mode
[  354.941755][T19792] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  354.944394][T19792] Cannot create hsr debugfs directory
[  355.050328][T19792] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.101355][T19792] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.160153][T19792] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.219590][T19792] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.349647][T19792] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  355.353485][T19813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4624'.
[  355.357128][T19792] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  355.403063][T19792] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  355.409945][T19792] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  355.430004][T19817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4625'.
[  355.457251][T19792] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.459537][T19792] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.461914][T19792] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.464107][T19792] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.527262][T11627] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.532315][T11627] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.578862][T19792] 8021q: adding VLAN 0 to HW filter on device bond0
[  355.601894][T19792] 8021q: adding VLAN 0 to HW filter on device team0
[  355.609918][T10437] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.612409][T10437] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.638885][T10437] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.641880][T10437] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.859354][T19842] can: request_module (can-proto-0) failed.
[  355.872221][T19792] 8021q: adding VLAN 0 to HW filter on device batadv0
[  355.916324][T19792] veth0_vlan: entered promiscuous mode
[  355.924085][T19792] veth1_vlan: entered promiscuous mode
[  355.949849][T19792] veth0_macvtap: entered promiscuous mode
[  355.954372][T19792] veth1_macvtap: entered promiscuous mode
[  355.967575][T19792] batman_adv: batadv0: Interface activated: batadv_slave_0
[  355.979856][T19792] batman_adv: batadv0: Interface activated: batadv_slave_1
[  355.986716][T19792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.989555][T19792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.992783][T19792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.998027][T19792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.090981][T11627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.098467][T11627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.139263][T11627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  356.142348][T11627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  356.248080][T19863] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  356.257809][T19863] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  356.319511][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4636'.
[  356.408072][ T5838] Bluetooth: hci2: command tx timeout
[  356.427511][T19870] tipc: Started in network mode
[  356.429132][T19870] tipc: Node identity 562ea98ac391, cluster identity 4711
[  356.431296][T19870] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  356.444488][T19870] syzkaller0: entered promiscuous mode
[  356.446592][T19870] syzkaller0: entered allmulticast mode
[  356.476096][T19869] tipc: Resetting bearer <eth:syzkaller0>
[  356.489699][T19869] tipc: Disabling bearer <eth:syzkaller0>
[  356.498442][T19875] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4638'.
[  356.506463][T19875] vlan0: entered allmulticast mode
[  356.904538][T19892] pim6reg1: entered promiscuous mode
[  356.908568][T19892] pim6reg1: entered allmulticast mode
[  357.090409][T19903] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4649'.
[  357.363904][T19918] netlink: 'syz.1.4656': attribute type 10 has an invalid length.
[  357.380906][T19918] team0: Device ipvlan1 failed to register rx_handler
[  357.389596][T19921] sch_tbf: burst 2 is lower than device lo mtu (230) !
[  357.462453][T19928] ip_vti0: Master is either lo or non-ether device
[  357.472557][T19923] lo speed is unknown, defaulting to 1000
[  357.881035][T19956] netlink: 'syz.1.4669': attribute type 7 has an invalid length.
[  358.014842][T19969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  358.017172][T19969] IPv6: NLM_F_CREATE should be set when creating new route
[  358.019404][T19969] IPv6: NLM_F_CREATE should be set when creating new route
[  358.021657][T19969] IPv6: NLM_F_CREATE should be set when creating new route
[  358.029781][T19970] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4673'.
[  358.034085][T19970] netlink: 'syz.2.4673': attribute type 39 has an invalid length.
[  358.037003][T19969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  358.089615][T19973] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4673'.
[  358.121182][T19969] bridge0: port 2(macvlan2) entered blocking state
[  358.123467][T19969] bridge0: port 2(macvlan2) entered disabled state
[  358.125695][T19969] macvlan2: entered allmulticast mode
[  358.130262][T19969] macvlan2: left allmulticast mode
[  358.495066][ T5838] Bluetooth: hci2: command tx timeout
[  359.197030][T20049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4698'.
[  359.247906][T20049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4698'.
[  359.580347][T20059] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4701'.
[  360.023873][T20066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  360.533913][T20089] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4714'.
[  360.544948][T20089] syzkaller0: entered promiscuous mode
[  360.548417][T20089] syzkaller0: entered allmulticast mode
[  360.565562][ T5838] Bluetooth: hci2: command tx timeout
[  360.584194][T20091] ip_vti0: Master is either lo or non-ether device
[  360.630707][T20093] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4716'.
[  360.964878][T20109] netlink: 'syz.2.4721': attribute type 10 has an invalid length.
[  361.020443][T20111] ip_vti0: Master is either lo or non-ether device
[  361.216171][  T128] block nbd2: Possible stuck request ffff8880200e8000: control (read@0,1024B). Runtime 270 seconds
[  361.220734][  T128] block nbd2: Possible stuck request ffff8880200e8200: control (read@1024,1024B). Runtime 270 seconds
[  361.224966][  T128] block nbd2: Possible stuck request ffff8880200e8400: control (read@2048,1024B). Runtime 270 seconds
[  361.229879][  T128] block nbd2: Possible stuck request ffff8880200e8600: control (read@3072,1024B). Runtime 270 seconds
[  361.292808][T20126] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4728'.
[  361.379802][T20130] netlink: 'syz.0.4730': attribute type 3 has an invalid length.
[  361.398278][T20134] netlink: 'syz.0.4730': attribute type 3 has an invalid length.
[  361.568356][T20132] lo speed is unknown, defaulting to 1000
[  361.623321][T20158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.631998][T20157] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  361.651448][T20154] tipc: Disabling bearer <eth:syzkaller0>
[  361.749384][T20165] ip_vti0: Master is either lo or non-ether device
[  361.983968][T20187] ip_vti0: Master is either lo or non-ether device
[  362.059498][T20191] netlink: 'syz.2.4749': attribute type 7 has an invalid length.
[  362.645460][ T5838] Bluetooth: hci2: command tx timeout
[  362.724945][T20197] delete_channel: no stack
[  362.845022][T20204] netlink: 'syz.2.4756': attribute type 10 has an invalid length.
[  363.092829][T20225] ip_vti0: Master is either lo or non-ether device
[  363.149063][T20232] netlink: 'syz.2.4768': attribute type 1 has an invalid length.
[  363.152084][T20232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  363.169196][T20232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4768'.
[  363.181588][T20232] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4768'.
[  363.424737][T20247] netlink: 165 bytes leftover after parsing attributes in process `syz.0.4775'.
[  363.763931][T20278] netlink: 'syz.2.4784': attribute type 6 has an invalid length.
[  363.951012][T20284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4787'.
[  363.964498][T20288] macsec0: entered allmulticast mode
[  364.111617][T20303] ip_vti0: Master is either lo or non-ether device
[  364.215544][T20310] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.218316][T20310] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.220823][T20310] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.223664][T20310] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.231924][T20310] geneve0: entered promiscuous mode
[  364.254999][T20310] netlink: 'syz.2.4797': attribute type 21 has an invalid length.
[  364.264276][T20310] __nla_validate_parse: 1 callbacks suppressed
[  364.264292][T20310] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4797'.
[  364.384571][T20327] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4802'.
[  364.400741][T20324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4801'.
[  364.419924][T20331] netlink: 'syz.0.4803': attribute type 22 has an invalid length.
[  364.422503][T20331] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4803'.
[  364.666910][T20356] netlink: 'syz.1.4811': attribute type 1 has an invalid length.
[  364.683746][T20358] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4811'.
[  364.851216][T20371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4817'.
[  364.864194][T20371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4817'.
[  365.164609][T20390] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4825'.
[  365.182035][T20390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4825'.
[  365.190323][T20393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4825'.
[  365.538837][T20420] Set syz0 is full, maxelem 0 reached
[  365.548279][T20421] netlink: 'syz.0.4836': attribute type 7 has an invalid length.
[  365.689448][T20431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  365.693049][T20431] syzkaller0: entered promiscuous mode
[  365.695378][T20431] syzkaller0: entered allmulticast mode
[  365.716550][T20431] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  365.723891][T20431] tipc: Resetting bearer <eth:syzkaller0>
[  365.729702][T20430] tipc: Resetting bearer <eth:syzkaller0>
[  365.760511][T20430] tipc: Disabling bearer <eth:syzkaller0>
[  365.769205][T20436] 8021q: VLANs not supported on vxcan1
[  365.843609][T20440] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  366.221721][T20465] bond13: (slave bridge12): Releasing active interface
[  366.404730][T20465] vlan0: entered promiscuous mode
[  366.450493][T20482] unknown channel width for channel at 909000KHz?
[  366.462005][T20482] unknown channel width for channel at 909000KHz?
[  366.629292][T20500] pimreg: entered allmulticast mode
[  366.633184][T20500] pimreg: left allmulticast mode
[  366.717697][T20505] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.772079][T20513] geneve2: entered promiscuous mode
[  366.810164][T20505] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.867246][T20505] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.919949][T20523] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  366.964277][T20505] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.067683][T20505] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  367.071583][T20539] xt_CT: You must specify a L4 protocol and not use inversions on it
[  367.079511][T20505] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  367.091151][T20505] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  367.099808][T20539] netlink: 'syz.0.4875': attribute type 10 has an invalid length.
[  367.106908][T20505] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.111327][T20539] bridge_slave_1: left allmulticast mode
[  367.283658][T20557] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  367.289528][T20557] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  367.292812][T20557] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  367.298739][T20557] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  367.707323][T20590] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  367.711065][T20590] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  367.774778][T20594] netlink: 'syz.1.4896': attribute type 1 has an invalid length.
[  367.804190][T20594] bond1: (slave gretap1): making interface the new active one
[  367.807750][T20594] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  367.932006][T20606] ip_vti0: Master is either lo or non-ether device
[  368.058882][T20611] xt_hashlimit: size too large, truncated to 1048576
[  368.061696][T20611] xt_hashlimit: max too large, truncated to 1048576
[  368.268734][T20630] ip_vti0: Master is either lo or non-ether device
[  368.411375][T20645] x_tables: duplicate underflow at hook 3
[  368.414524][T20640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  368.429943][T20640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  368.437490][T20640] bond0 (unregistering): Released all slaves
[  369.138132][T20697] tun1: tun_chr_ioctl cmd 1074025677
[  369.139946][T20697] tun1: linktype set to 804
[  369.632757][T20708] __nla_validate_parse: 30 callbacks suppressed
[  369.632778][T20708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4936'.
[  369.649066][T20711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4935'.
[  369.817621][T20719] bond0: entered promiscuous mode
[  369.984332][ T5698] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  370.006056][T20732] netlink: 'syz.1.4942': attribute type 11 has an invalid length.
[  370.011736][T20733] macsec0: entered promiscuous mode
[  370.013920][T20733] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  370.030740][T20733] macsec0: entered allmulticast mode
[  370.037436][T20732] netlink: 'syz.1.4942': attribute type 17 has an invalid length.
[  370.100551][T20751] bridge_slave_0: invalid flags given to default FDB implementation
[  370.156215][T20753] xt_socket: unknown flags 0xd0
[  370.159526][T20753] netlink: 248 bytes leftover after parsing attributes in process `syz.2.4948'.
[  370.383968][T20772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4954'.
[  370.405287][ T5831] Bluetooth: hci2: command 0x0405 tx timeout
[  370.510296][T20780] IPv6: Can't replace route, no match found
[  370.522704][T20782] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4957'.
[  370.895495][T20795] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4963'.
[  371.245253][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4967'.
[  371.248912][T20806] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  371.251996][T20806] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  371.420646][T20819] ip_vti0: Master is either lo or non-ether device
[  371.822524][T20859] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  371.865590][T20861] lo speed is unknown, defaulting to 1000
[  371.958350][T20868] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  372.414041][T20876] 8021q: adding VLAN 0 to HW filter on device bond11
[  372.728129][ T5831] Bluetooth: hci2: command 0x0405 tx timeout
[  373.311838][T20892] vlan2: entered promiscuous mode
[  373.320600][T20892] syz_tun: entered promiscuous mode
[  373.382068][T20893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4996'.
[  373.500349][T20901] veth0_to_hsr: entered allmulticast mode
[  373.716989][T20909] lo speed is unknown, defaulting to 1000
[  373.874425][T20919] netlink: 'syz.1.5004': attribute type 11 has an invalid length.
[  374.036231][T20922] netlink: 'syz.1.5005': attribute type 13 has an invalid length.
[  374.039758][T20922] netlink: 'syz.1.5005': attribute type 17 has an invalid length.
[  374.124035][T20922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  374.145133][T20927] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5007'.
[  374.193692][T20925] lo speed is unknown, defaulting to 1000
[  374.234321][T20922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5005'.
[  374.257628][T20922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  374.319619][T20930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  374.389114][T20922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  374.410032][T20934] xt_TCPMSS: Only works on TCP SYN packets
[  374.654880][T20946] __nla_validate_parse: 2 callbacks suppressed
[  374.654900][T20946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5014'.
[  375.050092][T20969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5021'.
[  375.261513][T20989] netlink: 'syz.2.5028': attribute type 3 has an invalid length.
[  375.264787][T20989] netlink: 'syz.2.5028': attribute type 3 has an invalid length.
[  375.270669][T20989] netlink: 'syz.2.5028': attribute type 3 has an invalid length.
[  375.273675][T20989] netlink: 'syz.2.5028': attribute type 3 has an invalid length.
[  375.279952][T20991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5027'.
[  375.377450][T20991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5027'.
[  375.610591][T21011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5033'.
[  375.681286][T21018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5038'.
[  375.701349][T21018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5038'.
[  375.775774][T21025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5041'.
[  375.840542][T21025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5041'.
[  376.209746][T21051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5049'.
[  376.527611][   T33] audit: type=1800 audit(1752855693.006:8): pid=21070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5056" name=36FFFF dev="tmpfs" ino=7787 res=0 errno=0
[  376.538771][   T33] audit: type=1800 audit(1752855693.006:9): pid=21069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5056" name=36FFFF dev="tmpfs" ino=7787 res=0 errno=0
[  376.707012][T21079] netlink: 'syz.2.5059': attribute type 1 has an invalid length.
[  377.347214][T21106] block nbd0: shutting down sockets
[  377.609139][T21124] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  377.664435][T21130] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  377.669618][T21129] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  377.716086][T21135] netlink: 'syz.1.5081': attribute type 1 has an invalid length.
[  377.740389][T21135] 8021q: adding VLAN 0 to HW filter on device bond2
[  377.760037][T21135] bond2: (slave ip6erspan0): making interface the new active one
[  377.764068][T21135] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  378.303544][T21171] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  378.307617][T21171] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  378.926306][T21208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.929774][T21210] Bluetooth: MGMT ver 1.23
[  378.932832][T21208] syzkaller0: entered promiscuous mode
[  378.936267][T21208] syzkaller0: entered allmulticast mode
[  378.955276][T21208] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  378.989386][T21208] tipc: Resetting bearer <eth:syzkaller0>
[  379.008479][T21206] tipc: Resetting bearer <eth:syzkaller0>
[  379.031064][T21206] tipc: Disabling bearer <eth:syzkaller0>
[  379.280761][T21230] ksmbd: Unknown IPC event: 3, ignore.
[  379.303086][T21230] bond3: entered promiscuous mode
[  379.306340][T21230] 8021q: adding VLAN 0 to HW filter on device bond3
[  379.320553][T21230] 8021q: adding VLAN 0 to HW filter on device bond3
[  379.323627][T21230] bond3: (slave vcan1): The slave device specified does not support setting the MAC address
[  379.328021][T21230] bond3: (slave vcan1): Error -95 calling set_mac_address
[  379.432587][T21244] lo speed is unknown, defaulting to 1000
[  379.988916][T21279] __nla_validate_parse: 13 callbacks suppressed
[  379.988930][T21279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5128'.
[  380.709052][T21271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  381.030647][ T5880] IPVS: starting estimator thread 0...
[  381.142327][T21305] IPVS: using max 38 ests per chain, 91200 per kthread
[  381.176287][T21315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5138'.
[  381.225070][T21317] 8021q: VLANs not supported on xfrm0
[  381.227658][T21317] netlink: 'syz.2.5137': attribute type 10 has an invalid length.
[  381.412598][T21322] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  381.585860][T21348] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5145'.
[  381.649937][T21350] netlink: 'syz.0.5146': attribute type 15 has an invalid length.
[  381.654211][T21350] netlink: 'syz.0.5146': attribute type 7 has an invalid length.
[  381.660654][T21350] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5146'.
[  381.662022][T21352] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5147'.
[  381.713671][T21352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5147'.
[  381.851267][T21358] syzkaller0: entered promiscuous mode
[  381.854171][T21358] syzkaller0: entered allmulticast mode
[  381.860199][T21360] syz_tun: entered allmulticast mode
[  381.863860][T21360] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5151'.
[  381.871146][T21360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5151'.
[  381.896789][T21359] syz_tun: left allmulticast mode
[  381.962340][T21361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5150'.
[  382.131629][T21376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5158'.
[  383.780597][T21376] ip_vti0: Master is either lo or non-ether device
[  383.858326][T21390] unknown channel width for channel at 909000KHz?
[  383.945857][T21396] sctp: [Deprecated]: syz.0.5164 (pid 21396) Use of int in maxseg socket option.
[  383.945857][T21396] Use struct sctp_assoc_value instead
[  384.392097][T21425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  384.399943][T21424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  384.824894][T21444] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  384.914810][T21451] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  385.024803][T21458] ip_vti0: Master is either lo or non-ether device
[  385.053500][T21456] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  385.295455][T21472] netlink: 'syz.2.5194': attribute type 10 has an invalid length.
[  385.300940][T21472] __nla_validate_parse: 7 callbacks suppressed
[  385.300955][T21472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5194'.
[  385.307246][T21472] !: entered promiscuous mode
[  385.309252][T21472] !: entered allmulticast mode
[  385.312696][T21472] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  385.519226][T21488] netlink: 212 bytes leftover after parsing attributes in process `syz.1.5199'.
[  385.524762][T21488] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  385.793092][T21498] lo speed is unknown, defaulting to 1000
[  385.838495][T21501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5203'.
[  386.071331][T21507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5206'.
[  386.114111][T21507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5206'.
[  386.187122][T21499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5202'.
[  386.348797][T21512] erspan0: entered promiscuous mode
[  386.433005][T21523] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  386.691389][T21534] netlink: 'syz.0.5216': attribute type 13 has an invalid length.
[  386.702743][T21534] netlink: 'syz.0.5216': attribute type 17 has an invalid length.
[  386.709514][T21534] lo: left allmulticast mode
[  386.728922][T21534] tunl0: left allmulticast mode
[  386.736284][T21534] gre0: left allmulticast mode
[  386.760326][T21534] erspan0: left allmulticast mode
[  386.777728][T21534] ip_vti0: left allmulticast mode
[  386.790812][T21534] ip6_vti0: left allmulticast mode
[  386.793200][T21534] sit0: left allmulticast mode
[  386.803242][T21534] ip6tnl0: left allmulticast mode
[  386.813590][T21534] ip6gre0: left allmulticast mode
[  386.820026][T21534] ip6gretap0: left allmulticast mode
[  386.825933][T21534] bridge0: port 1(team0) entered blocking state
[  386.828556][T21534] bridge0: port 1(team0) entered listening state
[  386.833304][T21534] bridge0: left allmulticast mode
[  386.846699][T21534] nlmon0: left allmulticast mode
[  386.854940][T21534] caif0: left allmulticast mode
[  386.857846][T21534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  386.913102][T21551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5220'.
[  386.920060][T21551] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  386.977629][T21551] batman_adv: batadv0: Removing interface: batadv_slave_0
[  387.004557][T21560] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5223'.
[  387.379335][T21581] netlink: 248 bytes leftover after parsing attributes in process `syz.0.5232'.
[  387.383681][T21581] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5232'.
[  387.396280][T21581] rdma_rxe: rxe_newlink: failed to add lo
[  387.427238][T21581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  387.734118][T21617] netlink: 'syz.0.5242': attribute type 10 has an invalid length.
[  387.944489][T21626] netlink: 'syz.0.5246': attribute type 1 has an invalid length.
[  387.951724][T21626] netlink: 'syz.0.5246': attribute type 3 has an invalid length.
[  387.954030][T21626] netlink: 'syz.0.5246': attribute type 1 has an invalid length.
[  387.957788][T21626] NCSI netlink: No device for ifindex 0
[  388.399524][T21647] netlink: 'syz.0.5253': attribute type 12 has an invalid length.
[  388.573266][T21657] netlink: 'syz.0.5257': attribute type 23 has an invalid length.
[  388.696832][T21663] netlink: 'syz.0.5259': attribute type 1 has an invalid length.
[  388.728887][T21663] 8021q: adding VLAN 0 to HW filter on device bond12
[  388.738528][T21670] syzkaller1: entered promiscuous mode
[  388.741382][T21663] netlink: 'syz.0.5259': attribute type 12 has an invalid length.
[  388.748563][T21670] syzkaller1: entered allmulticast mode
[  388.820553][T21679] ipvlan3: entered allmulticast mode
[  388.822211][T21679] bond12: entered allmulticast mode
[  389.058919][T21698] dvmrp1: entered allmulticast mode
[  389.062735][T21698] dvmrp1: left allmulticast mode
[  389.481264][T21726] tunl0: entered allmulticast mode
[  389.842961][T21743] syzkaller0: entered promiscuous mode
[  389.869254][T21743] syzkaller0: entered allmulticast mode
[  390.720695][T21755] __nla_validate_parse: 16 callbacks suppressed
[  390.720711][T21755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5280'.
[  391.288852][  T128] block nbd2: Possible stuck request ffff8880200e8000: control (read@0,1024B). Runtime 300 seconds
[  391.292782][  T128] block nbd2: Possible stuck request ffff8880200e8200: control (read@1024,1024B). Runtime 300 seconds
[  391.297390][  T128] block nbd2: Possible stuck request ffff8880200e8400: control (read@2048,1024B). Runtime 300 seconds
[  391.301974][  T128] block nbd2: Possible stuck request ffff8880200e8600: control (read@3072,1024B). Runtime 300 seconds
[  391.760790][T21761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5283'.
[  391.815425][T21776] validate_nla: 3 callbacks suppressed
[  391.815447][T21776] netlink: 'syz.0.5285': attribute type 9 has an invalid length.
[  391.820512][T21776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5285'.
[  391.826236][T21761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5283'.
[  391.829810][T21761] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5283'.
[  391.833965][T21776] macvlan2: entered promiscuous mode
[  391.836521][T21776] hsr0: entered promiscuous mode
[  391.838530][T21776] macvlan2: entered allmulticast mode
[  392.209298][T21806] ip_vti0: Master is either lo or non-ether device
[  392.271596][T21809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5299'.
[  392.302426][T21809] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5299'.
[  392.308373][T21809] netlink: 1532 bytes leftover after parsing attributes in process `syz.1.5299'.
[  392.311732][T21809] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5299'.
[  392.582978][T21828] IPv6: sit2: Disabled Multicast RS
[  392.761957][T21842] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  392.792630][T21842] bond14: entered promiscuous mode
[  392.794340][T21842] bond14: entered allmulticast mode
[  392.796468][T21842] 8021q: adding VLAN 0 to HW filter on device bond14
[  392.798903][T21844] bridge: RTM_NEWNEIGH with invalid ether address
[  392.800979][T21845] bridge: RTM_NEWNEIGH with invalid ether address
[  392.851067][T21853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5316'.
[  392.881458][T21855] ip_vti0: Master is either lo or non-ether device
[  393.133178][T21875] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.135808][T21875] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.140327][T21883] netlink: 'syz.0.5327': attribute type 5 has an invalid length.
[  393.212262][T21875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  393.296967][T21875] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.300380][T21875] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.303716][T21875] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.308442][T21875] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  393.379202][T21883] ip_vti0: Master is either lo or non-ether device
[  393.400819][T21886] syzkaller1: entered promiscuous mode
[  393.403116][T21886] syzkaller1: entered allmulticast mode
[  393.552516][T21884] infiniband syz2: set down
[  393.554807][T21884] infiniband syz2: added bond_slave_1
[  393.611414][T21884] RDS/IB: syz2: added
[  393.613123][T21884] smc: adding ib device syz2 with port count 1
[  393.617451][T21884] smc:    ib device syz2 port 1 has pnetid 
[  393.693420][T21906] dvmrp0: entered allmulticast mode
[  394.745181][T21935] bridge0: port 1(team0) entered disabled state
[  394.950751][T21953] openvswitch: netlink: Missing key (keys=40, expected=80)
[  395.023801][T21955] netlink: 'syz.0.5350': attribute type 13 has an invalid length.
[  395.033247][T21955] bridge0: port 1(team0) entered blocking state
[  395.035581][T21955] bridge0: port 1(team0) entered listening state
[  395.040856][T21955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  395.118688][T21965] ip_vti0: Master is either lo or non-ether device
[  395.188791][T21969] netlink: 'syz.1.5353': attribute type 3 has an invalid length.
[  395.192214][T21969] netlink: 'syz.1.5353': attribute type 6 has an invalid length.
[  396.022056][T21988] smc: net device bond0 applied user defined pnetid SYZ2
[  396.030855][T21988] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  396.429752][T22018] __nla_validate_parse: 7 callbacks suppressed
[  396.429768][T22018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5371'.
[  396.562217][T22034] ip_vti0: Master is either lo or non-ether device
[  396.683703][T22036] ipt_rpfilter: unknown options
[  396.689679][T22036] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5378'.
[  396.851616][T22059] netlink: 'syz.0.5386': attribute type 5 has an invalid length.
[  396.855879][T22059] ip_vti0: Master is either lo or non-ether device
[  396.939875][T22063] lo speed is unknown, defaulting to 1000
[  396.986946][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5388'.
[  396.991018][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5388'.
[  396.999329][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5388'.
[  397.003011][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5388'.
[  397.008094][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5388'.
[  397.012376][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5388'.
[  397.022883][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5388'.
[  397.026953][T22073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5390'.
[  398.788900][T22121] lo speed is unknown, defaulting to 1000
[  399.380400][T22158] xt_hashlimit: max too large, truncated to 1048576
[  399.382811][T22158] xt_hashlimit: overflow, rate too high: 0
[  399.385077][T22158] netlink: 'syz.1.5421': attribute type 4 has an invalid length.
[  400.002120][T22170] xt_cgroup: xt_cgroup: no path or classid specified
[  400.294037][T22182] netlink: 'syz.1.5429': attribute type 6 has an invalid length.
[  401.160706][T22250] macvlan0: entered promiscuous mode
[  401.162461][T22250] macvlan0: left allmulticast mode
[  401.164226][T22250] netlink: 'syz.0.5448': attribute type 1 has an invalid length.
[  401.555303][T22259] syzkaller0: entered promiscuous mode
[  401.557614][T22259] syzkaller0: entered allmulticast mode
[  403.729215][T22286] __nla_validate_parse: 21 callbacks suppressed
[  403.729227][T22286] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5461'.
[  403.747539][T22288] ip_vti0: Master is either lo or non-ether device
[  403.996135][T22309] syzkaller0: entered promiscuous mode
[  403.998380][T22309] syzkaller0: entered allmulticast mode
[  405.552283][T22319] team0: left allmulticast mode
[  405.553819][T22319] team0: left promiscuous mode
[  405.555773][T22319] bridge0: port 1(team0) entered disabled state
[  405.561345][T22319] bond10: (slave veth49): Releasing active interface
[  405.563405][T22319] bond10: (slave veth49): the permanent HWaddr of slave - 9a:42:19:07:a6:3a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  405.571731][T22319] bond10: (slave veth51): Releasing active interface
[  405.579220][T22323] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5473'.
[  405.662998][T22327] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5474'.
[  405.717638][T22332] netlink: 71 bytes leftover after parsing attributes in process `syz.2.5476'.
[  405.813133][T22342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5480'.
[  405.840040][T22345] netlink: 'syz.2.5481': attribute type 21 has an invalid length.
[  405.842542][T22345] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5481'.
[  405.870745][T22349] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5483'.
[  405.874105][T22349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5483'.
[  405.989322][T22363] ip_vti0: Master is either lo or non-ether device
[  406.166769][T22379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5494'.
[  406.250561][T22379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5494'.
[  406.600721][T22410] netlink: 'syz.1.5504': attribute type 32 has an invalid length.
[  406.757698][T22428] xt_TCPMSS: Only works on TCP SYN packets
[  406.982012][T22437] ip_vti0: Master is either lo or non-ether device
[  407.022281][T22440] xt_policy: neither incoming nor outgoing policy selected
[  407.981298][T22475] ip_vti0: Master is either lo or non-ether device
[  408.291407][T22480] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.295938][T22480] syzkaller0: entered promiscuous mode
[  408.297730][T22480] syzkaller0: entered allmulticast mode
[  408.303192][T22480] tipc: Resetting bearer <eth:syzkaller0>
[  408.310765][T22479] tipc: Resetting bearer <eth:syzkaller0>
[  408.321248][T22479] tipc: Disabling bearer <eth:syzkaller0>
[  408.533684][T22490] xt_socket: unknown flags 0xd0
[  408.540300][T22490] x_tables: duplicate underflow at hook 2
[  408.552475][T22490] netlink: 'syz.0.5529': attribute type 21 has an invalid length.
[  408.557747][T22490] netlink: 'syz.0.5529': attribute type 6 has an invalid length.
[  408.723037][T22501] netlink: 'syz.0.5533': attribute type 12 has an invalid length.
[  408.989355][T22515] __nla_validate_parse: 9 callbacks suppressed
[  408.989369][T22515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5537'.
[  409.513260][T22523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5540'.
[  409.519747][T22523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5540'.
[  409.654273][T22528] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5542'.
[  409.661048][T22528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5542'.
[  409.675937][T22528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5542'.
[  409.703388][T22528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5542'.
[  409.745804][T22532] syzkaller0: entered promiscuous mode
[  409.747769][T22532] syzkaller0: entered allmulticast mode
[  413.560558][T22568] netlink: 'syz.0.5555': attribute type 12 has an invalid length.
[  413.577829][T22563] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[  413.581448][T22563] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  413.799117][T22583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5563'.
[  413.808899][T22585] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  413.823881][T22585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5562'.
[  413.900043][T22594] ip_vti0: Master is either lo or non-ether device
[  414.016721][T22596] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5568'.
[  414.038019][T22605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5571'.
[  414.207169][T22610] netlink: 'syz.1.5573': attribute type 10 has an invalid length.
[  414.210461][T22610] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5573'.
[  414.214298][T22610] team0: entered promiscuous mode
[  414.221194][T22610] team_slave_0: entered promiscuous mode
[  414.224806][T22610] team_slave_1: entered promiscuous mode
[  414.227867][T22610] team0: entered allmulticast mode
[  414.230040][T22610] team_slave_0: entered allmulticast mode
[  414.232453][T22610] team_slave_1: entered allmulticast mode
[  414.236727][T22610] 8021q: adding VLAN 0 to HW filter on device team0
[  414.240066][T22610] bridge0: port 3(team0) entered blocking state
[  414.242789][T22610] bridge0: port 3(team0) entered disabled state
[  414.266498][T22615] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  414.453309][T22628] x_tables: duplicate underflow at hook 1
[  414.623009][T22637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5580'.
[  414.623350][T22639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5580'.
[  414.629808][T22638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5580'.
[  414.692598][T22641] netlink: 'syz.1.5581': attribute type 12 has an invalid length.
[  414.820925][T22647] netlink: 'syz.1.5584': attribute type 13 has an invalid length.
[  414.823548][T22647] netlink: 'syz.1.5584': attribute type 17 has an invalid length.
[  414.833177][T22647] erspan0: left promiscuous mode
[  414.852456][T22647] bridge0: port 3(team0) entered blocking state
[  414.854910][T22647] bridge0: port 3(team0) entered forwarding state
[  414.869918][T22647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  414.880016][T22649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5585'.
[  414.923002][T22649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5585'.
[  414.928889][T22647] lo speed is unknown, defaulting to 1000
[  415.152311][T22663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5590'.
[  415.298264][T22674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5593'.
[  415.418853][T22683] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  415.423860][T22683] syzkaller0: entered promiscuous mode
[  415.430582][T22683] syzkaller0: entered allmulticast mode
[  415.443432][T22683] tipc: Resetting bearer <eth:syzkaller0>
[  415.531422][T22688] netlink: 'syz.0.5598': attribute type 3 has an invalid length.
[  415.639446][T22699] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  415.672437][T22701] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  415.804676][T22705] netlink: 'syz.0.5602': attribute type 9 has an invalid length.
[  415.844756][T22707] netlink: 'syz.0.5603': attribute type 1 has an invalid length.
[  415.928317][T22707] 8021q: adding VLAN 0 to HW filter on device bond13
[  415.964758][T22707] 8021q: adding VLAN 0 to HW filter on device batadv1
[  415.971684][T22707] bond13: (slave batadv1): making interface the new active one
[  415.977589][T22707] bond13: (slave batadv1): Enslaving as an active interface with an up link
[  416.425397][  T972] tipc: Node number set to 988202224
[  418.131870][   T33] audit: type=1804 audit(1752855734.606:10): pid=22817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5636" name="/newroot/1694/cgroup.controllers" dev="tmpfs" ino=8633 res=1 errno=0
[  418.142888][   T33] audit: type=1800 audit(1752855734.606:11): pid=22817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5636" name="cgroup.controllers" dev="tmpfs" ino=8633 res=0 errno=0
[  418.880009][T22836] xt_l2tp: missing protocol rule (udp|l2tpip)
[  419.133554][T22842] __nla_validate_parse: 5 callbacks suppressed
[  419.133571][T22842] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5645'.
[  419.276395][T22847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5647'.
[  419.472153][T22857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5650'.
[  419.682140][T22877] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5658'.
[  419.684964][T22877] netlink: 15 bytes leftover after parsing attributes in process `syz.2.5658'.
[  419.691404][T22877] netlink: 'syz.2.5658': attribute type 4 has an invalid length.
[  419.697546][T22877] netlink: 'syz.2.5658': attribute type 14 has an invalid length.
[  419.812411][T22885] team0: Mode "ativeback" not found
[  419.919579][T22892] netlink: 504 bytes leftover after parsing attributes in process `syz.2.5662'.
[  419.963180][T22894] 8021q: adding VLAN 0 to HW filter on device bond14
[  419.968742][T22894] bond14: entered allmulticast mode
[  419.971210][T22894] bond0: (slave bond14): Enslaving as an active interface with an up link
[  420.096113][T22905] netlink: 'syz.0.5666': attribute type 1 has an invalid length.
[  420.392693][T22921] x_tables: unsorted entry at hook 3
[  420.398517][T22921] netlink: 'syz.2.5671': attribute type 1 has an invalid length.
[  420.401798][T22921] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5671'.
[  420.586612][T22928] IPv6: addrconf: prefix option has invalid lifetime
[  420.595957][T22928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5673'.
[  420.599413][T22928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5673'.
[  420.709949][T22937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5677'.
[  420.716306][T22932] infiniband syz!: set down
[  420.718779][T22932] infiniband syz!: added team_slave_0
[  420.762297][T22932] RDS/IB: syz!: added
[  420.765967][T22932] smc: adding ib device syz! with port count 1
[  420.769104][T22932] smc:    ib device syz! port 1 has pnetid 
[  421.209319][T22961] lo speed is unknown, defaulting to 1000
[  421.367395][  T128] block nbd2: Possible stuck request ffff8880200e8000: control (read@0,1024B). Runtime 330 seconds
[  421.371855][  T128] block nbd2: Possible stuck request ffff8880200e8200: control (read@1024,1024B). Runtime 330 seconds
[  421.376758][  T128] block nbd2: Possible stuck request ffff8880200e8400: control (read@2048,1024B). Runtime 330 seconds
[  421.381123][  T128] block nbd2: Possible stuck request ffff8880200e8600: control (read@3072,1024B). Runtime 330 seconds
[  421.974692][T22972] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  422.486332][ T5838] Bluetooth: hci2: command 0x0405 tx timeout
[  423.492426][T23035] syzkaller0: entered promiscuous mode
[  423.494825][T23035] syzkaller0: entered allmulticast mode
[  423.666965][T23037] lo speed is unknown, defaulting to 1000
[  423.704894][T23047] ip_vti0: entered promiscuous mode
[  423.710468][T23047] ip_vti0: entered allmulticast mode
[  424.021368][T23051] netlink: 'syz.2.5707': attribute type 10 has an invalid length.
[  424.155768][T23055] __nla_validate_parse: 9 callbacks suppressed
[  424.155790][T23055] netlink: 212924 bytes leftover after parsing attributes in process `syz.0.5708'.
[  424.533545][T23069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5713'.
[  424.538583][T23069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5713'.
[  424.541291][T23069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5713'.
[  424.636509][T23069] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  424.713930][T23074] Cannot find add_set index 2 as target
[  424.984037][T23092] netlink: 'syz.1.5718': attribute type 1 has an invalid length.
[  424.987834][T23092] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5718'.
[  424.992305][T23092] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5718'.
[  425.215515][   T34] INFO: task udevd:5839 blocked for more than 143 seconds.
[  425.217987][   T34]       Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0
[  425.222261][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  425.226582][   T34] task:udevd           state:D stack:20232 pid:5839  tgid:5839  ppid:5278   task_flags:0x400140 flags:0x00004006
[  425.231414][   T34] Call Trace:
[  425.232931][   T34]  <TASK>
[  425.234190][   T34]  __schedule+0x16f5/0x4d00
[  425.236288][   T34]  ? schedule+0x165/0x360
[  425.238057][   T34]  ? __pfx___schedule+0x10/0x10
[  425.239963][   T34]  ? schedule+0x91/0x360
[  425.241712][   T34]  schedule+0x165/0x360
[  425.243552][   T34]  io_schedule+0x80/0xd0
[  425.245326][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  425.247595][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  425.251546][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  425.254042][   T34]  ? __filemap_get_folio+0x760/0xaf0
[  425.256632][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  425.258982][   T34]  do_read_cache_folio+0x1aa/0x590
[  425.261286][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  425.263617][   T34]  read_part_sector+0xb6/0x2b0
[  425.266294][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  425.268675][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  425.269180][T23110] lo speed is unknown, defaulting to 1000
[  425.271031][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  425.275618][   T34]  bdev_disk_changed+0x75f/0x14b0
[  425.277878][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  425.280181][   T34]  ? wait_on_inode+0xc0/0x230
[  425.282181][   T34]  blkdev_get_whole+0x380/0x510
[  425.284230][   T34]  bdev_open+0x31e/0xd30
[  425.286475][   T34]  blkdev_open+0x3a8/0x510
[  425.288466][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  425.290286][   T34]  do_dentry_open+0xdf3/0x1970
[  425.292219][   T34]  vfs_open+0x3b/0x340
[  425.293967][   T34]  ? path_openat+0x2ecd/0x3830
[  425.296161][   T34]  path_openat+0x2ee5/0x3830
[  425.298196][   T34]  ? arch_stack_walk+0xfc/0x150
[  425.300335][   T34]  ? __pfx_path_openat+0x10/0x10
[  425.306543][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.311156][   T34]  do_filp_open+0x1fa/0x410
[  425.313085][   T34]  ? __lock_acquire+0xab9/0xd20
[  425.315110][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  425.317727][   T34]  ? _raw_spin_unlock+0x28/0x50
[  425.319761][   T34]  ? alloc_fd+0x64c/0x6c0
[  425.321694][   T34]  do_sys_openat2+0x121/0x1c0
[  425.323659][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  425.326462][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  425.328710][   T34]  ? rcu_is_watching+0x15/0xb0
[  425.330674][   T34]  __x64_sys_openat+0x138/0x170
[  425.332422][   T34]  do_syscall_64+0xfa/0x3b0
[  425.333995][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.336430][   T34]  ? asm_sysvec_call_function_single+0x1a/0x20
[  425.338594][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.340824][   T34] RIP: 0033:0x7f1f69b169a4
[  425.342391][   T34] RSP: 002b:00007ffe96b000f0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  425.346328][   T34] RAX: ffffffffffffffda RBX: 000055bbb4977970 RCX: 00007f1f69b169a4
[  425.349084][   T34] RDX: 00000000000a0800 RSI: 000055bbb496e5c0 RDI: 00000000ffffff9c
[  425.351801][   T34] RBP: 000055bbb496e5c0 R08: 0000000000000001 R09: 7fffffffffffffff
[  425.354567][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  425.359611][   T34] R13: 000055bbb497ea60 R14: 0000000000000001 R15: 000055bbb496d910
[  425.362667][   T34]  </TASK>
[  425.363914][   T34] 
[  425.363914][   T34] Showing all locks held in the system:
[  425.368183][   T34] 1 lock held by khungtaskd/34:
[  425.370260][   T34]  #0: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  425.373642][   T34] 2 locks held by getty/5657:
[  425.377535][   T34]  #0: ffff888028ee20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  425.381037][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  425.384367][   T34] 1 lock held by udevd/5839:
[  425.387407][   T34]  #0: ffff88801ffaa358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  425.390420][   T34] 1 lock held by syz.1.5721/23103:
[  425.392291][   T34]  #0: ffff88802309bde0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1bd/0x4c0
[  425.397801][   T34] 4 locks held by syz.1.5721/23110:
[  425.399590][   T34] 1 lock held by syz.1.5721/23111:
[  425.401372][   T34] 
[  425.402167][   T34] =============================================
[  425.402167][   T34] 
[  425.404878][   T34] NMI backtrace for cpu 0
[  425.404888][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  425.404899][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  425.404905][   T34] Call Trace:
[  425.404912][   T34]  <TASK>
[  425.404918][   T34]  dump_stack_lvl+0x189/0x250
[  425.404935][   T34]  ? __wake_up_klogd+0xd9/0x110
[  425.404950][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  425.404961][   T34]  ? __pfx__printk+0x10/0x10
[  425.404978][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  425.404994][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  425.405005][   T34]  ? _printk+0xcf/0x120
[  425.405017][   T34]  ? __pfx__printk+0x10/0x10
[  425.405029][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  425.405039][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  425.405052][   T34]  watchdog+0xfee/0x1030
[  425.405062][   T34]  ? watchdog+0x1de/0x1030
[  425.405073][   T34]  kthread+0x711/0x8a0
[  425.405088][   T34]  ? __pfx_watchdog+0x10/0x10
[  425.405094][   T34]  ? __pfx_kthread+0x10/0x10
[  425.405106][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  425.405121][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  425.405144][   T34]  ? __pfx_kthread+0x10/0x10
[  425.405156][   T34]  ret_from_fork+0x3fc/0x770
[  425.405167][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  425.405179][   T34]  ? __switch_to_asm+0x39/0x70
[  425.405193][   T34]  ? __switch_to_asm+0x33/0x70
[  425.405203][   T34]  ? __pfx_kthread+0x10/0x10
[  425.405215][   T34]  ret_from_fork_asm+0x1a/0x30
[  425.405232][   T34]  </TASK>
[  425.453693][   T34] Sending NMI from CPU 0 to CPUs 1:
[  425.455638][    C1] NMI backtrace for cpu 1
[  425.455651][    C1] CPU: 1 UID: 0 PID: 23110 Comm: syz.1.5721 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  425.455662][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  425.455668][    C1] RIP: 0010:down_write+0xd6/0x1f0
[  425.455686][    C1] Code: 00 48 89 df be 08 00 00 00 e8 26 21 b3 f6 4c 89 f7 be 08 00 00 00 e8 19 21 b3 f6 48 8b 44 24 20 b9 01 00 00 00 f0 48 0f b1 0b <0f> 85 c2 00 00 00 48 c7 c0 30 07 a2 8f 48 c1 e8 03 42 0f b6 04 38
[  425.455694][    C1] RSP: 0018:ffffc900037b74c0 EFLAGS: 00000246
[  425.455702][    C1] RAX: 0000000000000000 RBX: ffff88801b2f7918 RCX: 0000000000000001
[  425.455707][    C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc900037b74e0
[  425.455712][    C1] RBP: ffffc900037b7558 R08: ffffc900037b74e7 R09: 1ffff920006f6e9c
[  425.455718][    C1] R10: dffffc0000000000 R11: fffff520006f6e9d R12: 1ffff920006f6e98
[  425.455723][    C1] R13: dffffc0000000000 R14: ffffc900037b74e0 R15: dffffc0000000000
[  425.455729][    C1] FS:  00007f79b2f336c0(0000) GS:ffff8881a3c26000(0000) knlGS:0000000000000000
[  425.455735][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  425.455740][    C1] CR2: 00007f79b2f11fc8 CR3: 0000000039014000 CR4: 00000000000006f0
[  425.455766][    C1] Call Trace:
[  425.455772][    C1]  <TASK>
[  425.455778][    C1]  ? __pfx_down_write+0x10/0x10
[  425.455790][    C1]  ? kernfs_root+0x1c/0x230
[  425.455802][    C1]  ? kernfs_root+0x1c/0x230
[  425.455811][    C1]  ? kernfs_root+0x1ea/0x230
[  425.455856][    C1]  kernfs_add_one+0x41/0x520
[  425.455866][    C1]  __kernfs_create_file+0x22b/0x2e0
[  425.455877][    C1]  sysfs_add_file_mode_ns+0x238/0x300
[  425.455889][    C1]  internal_create_group+0x66d/0x1110
[  425.455899][    C1]  ? kobject_add+0x155/0x220
[  425.455909][    C1]  ? __pfx_internal_create_group+0x10/0x10
[  425.455918][    C1]  ? rcu_is_watching+0x15/0xb0
[  425.455929][    C1]  sysfs_create_groups+0x59/0x120
[  425.455937][    C1]  ib_setup_port_attrs+0xd96/0x2070
[  425.455954][    C1]  ? __pfx_ib_setup_port_attrs+0x10/0x10
[  425.455964][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  425.455976][    C1]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  425.455989][    C1]  ? device_add+0x70b/0xb50
[  425.456007][    C1]  add_one_compat_dev+0x3d6/0x5c0
[  425.456017][    C1]  rdma_dev_init_net+0x1dd/0x270
[  425.456026][    C1]  ? __pfx_rdma_dev_init_net+0x10/0x10
[  425.456037][    C1]  ops_init+0x35c/0x5c0
[  425.456050][    C1]  setup_net+0x219/0x4b0
[  425.456059][    C1]  ? __pfx_setup_net+0x10/0x10
[  425.456068][    C1]  ? copy_net_ns+0x304/0x4d0
[  425.456077][    C1]  ? down_read_killable+0x1d1/0x350
[  425.456087][    C1]  copy_net_ns+0x31b/0x4d0
[  425.456096][    C1]  create_new_namespaces+0x3f3/0x720
[  425.456107][    C1]  ? security_capable+0x7e/0x2e0
[  425.456117][    C1]  unshare_nsproxy_namespaces+0x11c/0x170
[  425.456126][    C1]  ksys_unshare+0x4c8/0x8c0
[  425.456138][    C1]  ? __pfx_ksys_unshare+0x10/0x10
[  425.456151][    C1]  __x64_sys_unshare+0x38/0x50
[  425.456161][    C1]  do_syscall_64+0xfa/0x3b0
[  425.456170][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  425.456178][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.456186][    C1]  ? exc_page_fault+0x9f/0xf0
[  425.456193][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.456200][    C1] RIP: 0033:0x7f79b218e9a9
[  425.456209][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  425.456215][    C1] RSP: 002b:00007f79b2f33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  425.456224][    C1] RAX: ffffffffffffffda RBX: 00007f79b23b6160 RCX: 00007f79b218e9a9
[  425.456230][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200
[  425.456234][    C1] RBP: 00007f79b2210d69 R08: 0000000000000000 R09: 0000000000000000
[  425.456239][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  425.456244][    C1] R13: 0000000000000001 R14: 00007f79b23b6160 R15: 00007fffdc157618
[  425.456253][    C1]  </TASK>
[  425.459340][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  425.459355][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  425.459367][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  425.459373][   T34] Call Trace:
[  425.459378][   T34]  <TASK>
[  425.459383][   T34]  dump_stack_lvl+0x99/0x250
[  425.459401][   T34]  ? __asan_memcpy+0x40/0x70
[  425.459413][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  425.459424][   T34]  ? __pfx__printk+0x10/0x10
[  425.459445][   T34]  panic+0x2db/0x790
[  425.459458][   T34]  ? __pfx_panic+0x10/0x10
[  425.459467][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  425.459481][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  425.459495][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  425.459511][   T34]  watchdog+0x102d/0x1030
[  425.459521][   T34]  ? watchdog+0x1de/0x1030
[  425.459532][   T34]  kthread+0x711/0x8a0
[  425.459547][   T34]  ? __pfx_watchdog+0x10/0x10
[  425.459554][   T34]  ? __pfx_kthread+0x10/0x10
[  425.459567][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  425.459581][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  425.459590][   T34]  ? __pfx_kthread+0x10/0x10
[  425.459602][   T34]  ret_from_fork+0x3fc/0x770
[  425.459613][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  425.459624][   T34]  ? __switch_to_asm+0x39/0x70
[  425.459634][   T34]  ? __switch_to_asm+0x33/0x70
[  425.459644][   T34]  ? __pfx_kthread+0x10/0x10
[  425.459656][   T34]  ret_from_fork_asm+0x1a/0x30
[  425.459673][   T34]  </TASK>
[  425.628131][   T34] Kernel Offset: disabled
[  425.629444][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:22:21  Registers:
info registers vcpu 0

CPU#0
RAX=00000000b92ecdb2 RBX=00007f84d5ae2098 RCX=0000000000000007 RDX=0000000000000116
RSI=0000000000000008 RDI=0000000000000007 RBP=00007ffdd5abbbe0 RSP=00007ffdd5abbbd8
R8 =0000000000000008 R9 =7fffffffffffffff R10=3fffffffffffffff R11=0000000000000246
R12=4000000000000000 R13=0000000000000070 R14=00007f84d5ae2000 R15=00000000000143b4
RIP=00007f84d5ae8f4c RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f84d5982800 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f79b2f53fc8 CR3=000000010e45b000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff888108c50237 R9 =1ffff1102118a046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee886 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6976374a00 CR3=000000003a272000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9d0e386478 00007f9d0e386450 XMM03=00007f9d0e386488 00007f9d0e386480
XMM04=00007f9d0eeed100 00007f9d0e386440 XMM05=00007f9d0e386458 00007f9d0e3864a0
XMM06=00007f9d0e386498 00007f9d0e386490 XMM07=00007f9d0e386488 00007f9d0e386480
XMM08=f35c23a11aca35be f5731df680c500f0 XMM09=0000000000000000 00007f9d0e211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
