last executing test programs:

1.036861939s ago: executing program 1 (id=9625):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce)
bind$ax25(r0, &(0x7f0000000080)={{0x3, @default, 0x8}, [@null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$ax25(r0, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6}, [@bcast, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null]}, 0x48)
socket$igmp(0x2, 0x3, 0x2)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c065}, 0x4008000)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x6, 0x3, "02b5"}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000280000000000069078ac1414bbac14142efa6ae43caf8f7ba6634ecccd589dad74ed730ebd11fca8ef6602cee2edd5beb60c0c02d0bf63fb4f1ca3725eef826eb12000"/96, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0)
r9 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4)
r10 = socket(0x2a, 0x2, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6tnl0\x00'}]}}]}, 0x48}}, 0x24000000)
socket$netlink(0x10, 0x3, 0x0)

898.870308ms ago: executing program 1 (id=9627):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfa, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004800}, 0x20040040)
r4 = socket$isdn(0x22, 0x2, 0x22)
close(r4)

820.247189ms ago: executing program 1 (id=9631):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000d600000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e000701000000000000000002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

759.821031ms ago: executing program 1 (id=9633):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r1, 0x0, 0x1}, 0x18)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x20000004)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40004880}, 0x20004000)

688.793681ms ago: executing program 1 (id=9636):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10)
sendmsg$tipc(r0, &(0x7f0000001e40)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x40, 0x4}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x30799af3943473a5}, 0x880)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000005400010026bd70010000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01050000ac1414bb004000008000000000fdffffff"], 0x38}}, 0x4040)

686.716731ms ago: executing program 1 (id=9638):
r0 = socket(0x1f, 0x4, 0x5)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x8, 'pim6reg\x00', {'veth1_to_bond\x00'}, 0xfff})
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000f80), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001040)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4004884)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0x90, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x6}, @ETHTOOL_A_COALESCE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x48880}, 0x8000)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x12ded}]}}]}, 0x44}}, 0x4000)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00'})
sendmsg$nl_route(r6, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)=@ipv4_deladdr={0x4c, 0x15, 0x100, 0x70bd28, 0x25dfdbff, {0x2, 0x38, 0x50, 0xfe, r5}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x1000}, @IFA_FLAGS={0x8, 0x8, 0x2e}, @IFA_ADDRESS={0x8, 0x1, @remote}, @IFA_LABEL={0x14, 0x3, 'veth1_macvtap\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x800)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
pipe(&(0x7f0000000200)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
pwritev(r1, &(0x7f0000000bc0)=[{&(0x7f0000000d80)="ec89e6822b967feb6dd231bc14ff2daac83c09060ae46a1e875c519884250b05a38086f0fbaff9b061ea3057a4ed8dbcaa799cbda0e9daec4c22d09da43d5d5deb3566e1610f9f81f9c20e589a7968a8c8d010e34bd583f8ea005d6a5e0bdfe442cd0b0ba3c87ec696fa5ad9a952ea449a64e7fe3377d6657171b6fc61aacd0e4eabccb475aebda49eaf357141a30f5a93e086e2d3e8f0c3cfd61494337c6042ecabb0626c49c61f0cac680542dc263d358e79e1f992c2c661e794b9f0c7499355202a7fab0e004816f7d82431d6fb45000000", 0x8b}, {&(0x7f0000001200)="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", 0xf9}, {&(0x7f0000000ec0)="548ee64c8f512d8b712f95ab64dabfb56ebee9bf9cb3a9ff9555a43bf989d838ec556d1f833a1807b9af6ed245b2e3e86d94efc57ba4615a0f3d9aa5b28159ff2ad2c753f531031734eb3bafa0a508ca228f0893beef58652e1f6900000000104fa382c7e6962ee7740857c208d61251e6c39248e5cfa1e75395486fe880cc2b435524c82b048eac1b6f2d80b3885193b7f9451cbdc2058d09b6da95bb101648c3993548a0e39e8b9e200b1bd5e22ae04df900000000", 0xbd}], 0x3, 0x3, 0x5)
splice(r9, 0x0, r8, 0x0, 0x80000003, 0x5)
r11 = accept4(r9, &(0x7f0000000c80)=@hci, &(0x7f0000000500)=0x80, 0x80800)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000c00), &(0x7f0000000d00)=0x4)
vmsplice(r10, &(0x7f0000000480)=[{&(0x7f00000000c0)="799ec4ef60730db54ba7eb81cdd50b97bca89ccc659604f40b5b797de301a6be6ac46b55ea79409a6416533c203537834d602f6539447b188b45b069318dfe0e67bec1ab000ca6a688400daddf71dca040d97bd49ab721f872efb05db0bf554bcf4d09c190434d57d43ae2fbc5a0b1bd5194125543f0ac961aa97da42c93dfa891a90f9882b125a585f63fc944efcfac2d1d2f1284e92ba2592fc6cfce7944988e3ebcb9cc3ebeeb4a54a44cf1ce89c132988134938a2852765efdbca1e8f64b7ad582242943ad78a4b9931e57336036b47c319283213c9dff0fe05f032650bd21148414161b087cb2b20091a00fa17f0587577346", 0xf5}, {&(0x7f0000000000)="8e9c4b4dceb1f6586168ddf70f36be85544a56aaed3a5c427d13898651404168c5e43c18ebd6725adff05ac2cd4a07fcd7752b4dde7d23a4327f082f7ae4df1efd9e143229ee99", 0x47}, {&(0x7f00000001c0)="22c423c2baa4a1b96cb1ed403a2db8a072e1e87dd8dc6d799405c9c2fc9edc73030cfea90c7ac18cd1562624432d327d1e", 0x31}, {&(0x7f0000000400)="24af31297e0503110db87e40cf93d1cf9c4cf27002d7c6088487b5088ef4450890b377bc93220c3e067d9cfc52822f0d92afe773b4350ec8e7e1877e6008ab42365efaf30f731be2cd4989ffaf26e5c68d65d0a654f135a8bbbb716e58bd41fc908293cdbca944af3dc770dfeb78efd00f170b", 0x73}, {&(0x7f0000000540)="ee926c9c12c5beda0d883e5172900447d19a98485ae115545defdac2467f6dbcf5189323f3e129df203b85cb1ea4e96bc47e3a040f6739101a75434dbf36a619fd498b318025fe4bb0ae530dda25dfc66f0bc112bcc3a0f4834d14c2957324261bdd8c86c3cc07986b7da0373de650de91ba36b3cb7c8fd255f533238359fa62dbd459b946793f69a2039e18d63a0ab557cde3adf19ed209ac080e89c584669f3a3b945a", 0xa4}, {&(0x7f0000000600)="09d84de72791a3da3464c417ec4576b38f01ecaf19f3856a7394e8df465618d0ec395005049e98d065f46414b72e9140f14bf9990a99ddeed414cc9f1fde9b55f216915da70f4e4b808414504c648007db6e67a21579d3960199135b6be4a0f270611b726846d1e1c01d322bfadacf7f8a18cb7389a516dcf5165a5bcbe0db16a8df86425020443b0ea5eb630ef975055222cdb32a85b1c2419e25b5ee8041fabd32561343", 0xa5}, {&(0x7f00000006c0)="a9404e07ac4504391566b92a05c0dab77fd5118ac69a1336e72bdc94a25ee0c1f2d71135eeeea1c416cf2902f58294903d18edfcb3c75402e012975ef808c071e5394e2e39a9a13c0db3aaff758e0288e9337a72152cfacd4dee8c260b28d9b7908dd3cd778c3c72c9cb92f289e1fd55c7759ef1cf8cb8589c0cd9c81d92878a33359087bcb95924ce9645cac79170eef789379147344dc5076470a8cb3417e2f2e621851e5fae2e26c1b2de501812251188099b0654f3754de4ff1a19d10cf5a3409f90f8673722217df4ca59dcfb07ef890513b3793bd82bcc4f2a6e7cb58af8d8e3a4e4ca8f01fc6f6cec13f7753570b760a7d47c5233474fb25047f7415a07f0dcec26cd6bb9ea8d416e1e555044853cacea1a7204df479da50a9d95c52289196e59e4a8af6794d7059edb21cc9db60a6b3529cf1780e45154f420996cff55bc52f10c1b01651c5656e41d2fafd96f2fc47faf5ea8ecedbb06b8d99b6dc8f8f4f58d2ed8cdee509b024fbc7f4c00d26d1a59904493d5dd466cca306f31dce682ab52bd4b1c8aad9240fd4c768dea65078f49cd36f9c3c7d2355ea1019c2646c56ce583e50757720f72fa6e4f9bb71d2d7a7c9fcd04b70674a9da6ff3f24689d69ff6e17d0882763993180d9f3b7f898c1fe6e61038235b7283f869f2ac60fc549ebc4244b92c2324665ac34c6b8a9ec5770283802082188dcd13fc6142f6ba8407ad0b54842da2aef1c8c91b8e42f31a4c48d1c6bfdb1b05ffa9b5f0371162b768a7c5e9f28ef813112eb0b372bb39e4753a3abfbe57461b1955bf1f5cdb42a26e7a2f9fd569a3b1047f7ad25cad9e7b7240714d16be9773699941bdc6581abd3671c4b498bd53a6e60c79b452ec9d097fbb27420fb41a2c30a4ad9c413fd8e3a309473108aaa40749614cc4006ff4d47e5f19114efd9d44f039050ce87223b436c9f36e72067672d1abeca38a8559c13781127db25445fe367e2248062b45f0faf208db3fcd83986632bb6d48babb27c86f8299d5a48f4f01b0ab952a6fb51a13dca0403507baa13d4a89d9e1a4ea34e5e5f1900ac19094cd318edb2f5d70bf4a966231ae4643cb6b1d2b0e86547ec4200d02fecad111a1c90b9ad610328393ab45b008e8e1590fd05985b1f8279a67cb1b2000c11d5b473d7fab663e6a931c895905cac1bac7b2072c4d3554cd92a34942f781d21cb856024c76bb2c639e7a67980edd07004bd8e288ef92014b95c6a850e4c893df5bf8b083a13ed7dc050c626464d6a9a38b1fcb0bc67a3af74a4419ccd85fb2edfbf9fc6afbb9c4552b47c68b7b1a766b53f3290e69b5e657a2e733e5279c5b5fc27d2aab46596b827a4e4e655adf6c03f0474df2fe6f48d9985f4a8b369cb01d14f06297a2ed492f3d677a85bb9f248236cf4c4d27387f90764564e0129a03fcd9ef00de4c25002769561968cbf8e77cd1038e3c8029924c8aeb3bea6366e8b5bbeda5db111e550f2a1eba028a0b81400aa5bad6abd6569abea3799256e82c4454dd07394c3211f47b39230e60da2ce542c2a200cc16f0dc2f0b1f0cd9254cda4894c6048d902b0e529a5155977baf74cbaa1ecb6705fe207eebc2395eceb922064b82977826a36303fd6d6e3ad6578cf26c27613713f910c07b469c24222ef0bfa4758b2a23557d9ab9be486caec8559f0078763c586763d09e8838d891d80ddebc8d6bcc2f0d0015d959f799bf5aae05a989a3", 0x4cc}], 0x7, 0xe)
ioctl$sock_inet_sctp_SIOCINQ(r9, 0x541b, &(0x7f0000000e80))
setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f0000001080)={r5, 0x1, 0x6, @remote}, 0x10)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYRESOCT=0x0, @ANYBLOB="25923d1103080003009bab1c799787653536450f9bfec9dde01e91d066b1b82b39f88978c1f9b491c4a56ac2b79262f663acf83c37785cdcc6c6d7cdd163d120f92d336e90e9c548943c9caaa0cc4dcd398123d61a5a4700bb2df036025ecf269f767686360dc95e55d802d0cd7c3530143917755e5d8424bcbbfa3e6c5a3ccf3b95f07e8840c94808097b7ee3f43ade91af96a3500ebab997ce97e2ea47e372770732115922188926b6a8fb2b091ebcad8901d77e46beafe3d6b0c9278a0a62dd1518bb389909ab777886cf07c76588e13b14d274a1b184f5dbe312d81a13b2c1f5ba4d15eb7284eb9992d05e3c8ad9e50b9c1d406343c273915fda1a511a237ac79f36facd231dcc3a813aa9d99be599c075a95d2bdef74efa9a51433d19970bfb902c65d2810cf2e77fb38cb58ed4797972cba2e64672f21bb4d28e1e883562e02bafcaddf7c7026274f2407b21bcf6f17cc35b7db7c6e9cadc10a8b8c3ef6e71547285f5cf54fd23936c309082bf6197d60f25abfdb8ef0c8e882c", @ANYRES16=r10, @ANYRESHEX=r7], 0x38}, 0x1, 0x0, 0x0, 0x68040}, 0x4004)

620.037359ms ago: executing program 0 (id=9641):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket(0x11, 0x800000003, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) (async)
r4 = socket$qrtr(0x2a, 0x2, 0x0) (async)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r5, 0x8008743f, 0xf0ff1f00000000) (async)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000002c0)=0x4) (async)
connect$qrtr(r4, &(0x7f0000000040), 0xc) (async)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) (async)
connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async)
ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, 0x0) (async)
writev(r6, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)=ANY=[@ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x2400c090}, 0x20000045) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r8, &(0x7f00000000c0), &(0x7f0000000140)=""/116}, 0x20) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r7}, &(0x7f0000000240), &(0x7f0000000380)=r10}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r8, &(0x7f0000000e00)="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", &(0x7f00000003c0)=""/151}, 0x20) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0)
close(r11) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)

537.22365ms ago: executing program 0 (id=9644):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000007000000008000000140000000000000", @ANYRES32, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000000000000000b136ccfd92b784bb11a3796b0700"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000002c0)}, 0x20)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a050000000000000000003000000000140000001100ecffffffffffffff00000000000a"], 0x48}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000300)=0x4, 0x4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x80, 0x9, 0x4, {{0x7, 0x4, 0x2, 0x11, 0x1c, 0x64, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x3b}, {[@end, @generic={0x44, 0x4, "807d"}]}}}}})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
listen(0xffffffffffffffff, 0xf403)
unshare(0x2c060000)
unshare(0x24020400)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)

490.254374ms ago: executing program 0 (id=9645):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r1=>r0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x20, r3, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100)=0x1, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', <r7=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x4000046, r7})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@bridge_getvlan={0x58, 0x72, 0x100, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00')
ioctl$FS_IOC_FSGETXATTR(r8, 0x801c581f, &(0x7f0000000080)={0x100, 0x2, 0x100, 0x5, 0x6})

487.665985ms ago: executing program 0 (id=9647):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001500)={&(0x7f00000000c0)={0x1410, r1, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xd5cb}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2a}, @NL80211_ATTR_FILS_ERP_REALM={0x88, 0xfa, "1fe2261ac07103f266fb4494a76e724283a55ee3fc5c49897dc66cc781ccc11f10b80f3c557452c7baa5d862425e663764a53fdcb253570fb911763e4e63357d29b5e93ef717ecb919bc467a727fc32b8e7c1e0c998cf6a804a0462ea6b31b8b16aa4fa65d18eaada744a8d295be8e1cc220388608eef29242f5cf22ae34f601808d140f"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfa3}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}], @NL80211_ATTR_IE={0x268, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0x1, 0x1, 0x9, 0x21}}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @random_vendor={0xdd, 0xe7, "7d07074ac59251d0053145aa8b5ac3f8db16d322eb97d3c3a336e01040dce1207f4532b3d58fe1f091ffe51afa25f291b8ce7609a79cc9a723346c4b8bf4882e58cae0871dbcd721e42be1ebd0d02f77a8697c0c64210856d562e21b8871b07f2eb4f73a7fe45f9c70a41570a544dd8a01c925fd8c7384fcb9fafc2e7704f101c26e30b2f8106fb541d1517b31ca145641e10b5bb3c7e07ec29e85e7e255c9998adb1cdc583b16bd6ef19fbaec9d92771b36b71a09aa69935f449eb6b225447e6f299a04cfb2cf2e10381117c6ebf9d728335bfb055dccd4147434dc8cf262108c43555cac1f28"}, @fast_bss_trans={0x37, 0x9a, {0x3, 0x4, "8c3b587e3a4443f98b05a3898b35d690", "fc36b5f585718bc74a33d1ffc6343d3d21eef03069efbac7b985482923e422a3", "dcf7a58f36209bcaf05b97cc68d7d9231d4e5e1cc69f4567d9fbe8a9ee6234ea", [{0x2, 0x5, "cc3a55e12b"}, {0x4, 0x1e, "3b8ae4ca29eb01608787d490e4a1747706bc516a835a5d640db5c1e8fe8c"}, {0x4, 0x9, "73f7d0d7a97d340108"}, {0x4, 0x14, "e336b5fe979671d8926e8406021f175ad44779cf"}]}}, @tim={0x5, 0xc0, {0x6, 0xdb, 0x3, "9104cfee8355fdf693cd6ca24337ce69b8e11f37b1ec7ac9cb31132f46b1b705c037250b9e977c70d729e3c8e23b5fd0ab31ce66662daa9babd1beb5a4678f898eba1f9ee8998c2ae6f852fea3fb4288f6c5d4deb4ce65f9ebdffb8eb446a97827cc7f9e31d8b4c59afb629fb5ab37c023fad7ac491f6b2151c244c0d25021c182592ad69ecd3a133e1f53e3c1021d595c2832a5f3acef975076f871ff16ffe832fc34d1b06dd243b333fcaaa05e767b9dec8f384198c8b0710420baa9"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "b0e7db8f4492d97cc75e"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xd0, 0xfc, "32ab8ccbe8aa3e1ffce5924f5431b406e4763f00eee5f6908d5dd882f9765db92a4fa2ddac200435be3143f13fee73f576a22f36d97ac86a0a8ebec9eab1cc02e89490dbd3f62fdfd86e23f0892d1d44de2172f43ba2657fe63ff9c491867ad23a70b3bee5be939be768a0c006201a482e23ecf56dbe703af32119643c9e4bb16e64687b99a7caf45824d60defcb9551f2c3072feab04b0645fce1f4d20d64a627aa87a5f4125757e9eed758772b38c245ddfe9c3e0c9464ba0d5fcd5f290211a46707cfe0f8b812decdb3f9"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}]]}, 0x1410}, 0x1, 0x0, 0x0, 0x9852}, 0x800)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000015c0), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000001780)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001740)={&(0x7f0000001600)={0x11c, r4, 0x300, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x317}, {0x6, 0x11, 0xb}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfd}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xffff}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x81}, 0x20010090)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001800)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, r1, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4008000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_PMKSA(r6, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x68, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000000, 0x5a}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "4b372f98060621b8ad84ca572973f0ca"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "74098845383ee9e6b29ec24e7172fe52"}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040005}, 0x24801)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001a40)=[@in6={0xa, 0x4e21, 0x4, @empty, 0xfffffff9}, @in={0x2, 0x4e21, @remote}], 0x2c)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000001ac0), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001b00)=<r8=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001b40)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x34, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008080}, 0x20000800)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c80), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001cc0)={'wpan1\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000001d00)={'wpan3\x00', <r12=>0x0})
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001c40), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x30, r10, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x44001)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001e00)={<r13=>r0})
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r13, 0x118, 0x1, &(0x7f0000001e40)=0x3e5, 0x4)
r14 = bpf$ITER_CREATE(0x21, &(0x7f0000001e80), 0x8)
ioctl$TUNGETVNETBE(r14, 0x800454df, &(0x7f0000001ec0)=0x1)
ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f0000001f40)=<r15=>0x0)
sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x44, r7, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r16 = socket$key(0xf, 0x3, 0x2)
close(r16)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000021c0)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x615, 0x62}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x404}, 0x8000)

379.776484ms ago: executing program 0 (id=9650):
unshare(0x20000400) (async)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, &(0x7f00000002c0))
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r3, 0xffffffff}, 0x8) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={<r4=>r1, 0x9, 0x7fffffffffffffff, 0x8000000000000001}) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x22000604}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r5, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c5}, 0x204c)

378.262304ms ago: executing program 2 (id=9651):
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="01002cbd70004400000005000000"], 0x14}}, 0x4)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040088}, 0x4011)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ab4000000020a010800000000000000000200000611000600f46c30e62c83ed35955e5cbd9f0000007d00060013f3ab5e7ce055708a1e08a31dbc3a8648a92cc92400aacf9dac926663b20733536d13c736e8ed9c9cb1edfa2635b578acce826805ea553ddb1a9aea79a427cf911c0af9d578e51bc63683a54f03fa3229068d9342ccf1caa5cf3563b1dc49e6bd2bc1176450d651cc8c6e697c199e99b015726c07dd068e710000000c000440000000000000000150000000060a010200000000000000000300000008000940000000010900020073797a31000000000c000340000000000000000208000a400000000208000a40000000000900010073797a3000000000140000001100010000000000040000000100000a"], 0x12c}}, 0x44)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2)
r5 = epoll_create(0x7)
r6 = epoll_create1(0x0)
r7 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0))
r8 = epoll_create1(0x0)
r9 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r11, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$DEVLINK_CMD_TRAP_SET(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x18}, 0x0)
r12 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r12, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r10, &(0x7f0000000200))
sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf251a00000054002e80050005000100000008000600020000000c0004000203aaaaaaaaaaaa0c00040000000000000000000c0004000201aaaaaaaaaaaa05000500010000000c0004000202aaaaaaaaaaaa06000100390c000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060001000000"], 0x7c}}, 0x8000)

372.214611ms ago: executing program 0 (id=9652):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x101840, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'wg0\x00', 0x8000})
r3 = socket(0x40000000015, 0x5, 0x0)
socket(0x11, 0x4, 0xf2e)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000006800010003001000fdffff7f00000000000000000400020004000b00060003000000000082b091d679f400cf447a0000003b427338fdfc0c27bd91a0118606d6b3f0e67c32a86534758745c60c5272a893", @ANYRESDEC=r0, @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x4000080)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000400)={0xa})
epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x80000000, 0x0, 0x0)
pipe(&(0x7f0000000480)={<r5=>0xffffffffffffffff})
ioctl$int_in(r5, 0x5452, 0x0)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f00000001c0), 0x4)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r6, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e29, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000000000b03000000000000000000000d00000000040000000000000c0100000000000000"], 0x0, 0x42, 0x0, 0x1}, 0x28)
socket(0x2, 0x3, 0xff)
r7 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0xfffffffffffffd55)
sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r9}, 0x80, 0x0}}], 0x1, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="e4da1d90dfb677f4edf29229a5225eedc32b0db335ce352e693ed69ae69f5fdd0e6dbd5b67da4b978a1829ab11acafe04c8274b46d50d5d82c14a0c4327268f8835be2c3d960a5be273b4cbf48164b497297d697c8062bf6705bb71ae7d84f9d800f16b59027c5a177bfe92f1cae1b766c414faacfd60d3fa61024221955d33921158ef912f714edf2", @ANYRESHEX=r6, @ANYRESDEC=r6], 0x48)

310.288715ms ago: executing program 2 (id=9653):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x18c, 0x30, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{0x178, 0x1, [@m_sample={0x174, 0x2, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x27}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x0, 0x2, 0x2d14, 0xa5}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x800, 0x3, 0x8, 0x0, 0x10000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10001, 0x76750a0d, 0x4, 0x3, 0x80000001}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0xffff0000, 0x0, 0x0, 0x1}}]}, {0xd0, 0x6, "05ca1a3d64bf23e43d3a826c2de4c6c15ea5c2edf71f34580327dfb963b7308d4ddedd9b945379e3f120ef41bad8c935d99687ca52a4e4936968455573adf0f67ea7485a3525207c85fdede6614445afbc8ef05c0f8ea84237b3e7c2eb4216d93abb1db6bd566c42a80158c4b03014b4b0f44171cbb107e0553f3c9905c9b2da52738805b35f1456d85ba3e27ae9cc1b37b70630df862555157f4de908be07e570b4a0e791685d41702fbab8a66e49cf4288a6bcc61caea61c1265e3e727ac19f13549ceeb3342b3acf98035"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20040040}, 0x400c010)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r2 = socket(0x200000000000011, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r3, 0x107, 0x2, 0x0, &(0x7f0000000100))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x80000, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c8030}, 0x0)

309.628968ms ago: executing program 2 (id=9654):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x3, 0x8, 0x9ffffc})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xd, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xa}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xd, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0xa}, 0x94)

249.638433ms ago: executing program 2 (id=9655):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x5, 0x3, 0x8, 0x1}, {0x1, 0x9, 0x3, 0x400}, {0x8, 0xfe, 0xc7, 0x3}, {0x1, 0x3, 0x0, 0x401}]}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'})

200.286904ms ago: executing program 2 (id=9656):
socket$kcm(0x10, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r5, &(0x7f0000000000), 0x2a979d)
write$tun(r5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb00fa1800000000080000000000000000000005000000005f613000212ea4fb592cc369898f96d5daf7193cae206b3d71108af9b56bfb7937b6e9c4cacd70833a95eff3a87cafe1583bd32af7c7bffb161b30b52bcdf366a61ab21d144c5b903a69eb8f06fdb333af985dc30d77f6644b83b6ab5562a2e1aba461e405e4288efcd907ebd69e2b3dd5f520a726e8a56167c2fcd945f2f4a20d3f7f48ce45701e9e1acfdedeae09971d8db7f1be5b5dbb9c5252"], &(0x7f0000001180)=""/4096, 0x1d, 0x1000, 0x1, 0x6}, 0x28)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002801400"], 0x48}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x1, {0x60, 0x0, 0x0, r8, {0x9}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40814)
sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3201, 0x0)
ioctl$TUNSETOFFLOAD(r11, 0x4004743d, 0x110e22fff6)
socket$packet(0x11, 0x3, 0x300)

0s ago: executing program 2 (id=9657):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004000}, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
ppoll(&(0x7f0000000080)=[{r0, 0x621}], 0x1, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03fd6836498e346f9c0000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}}, 0x24}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000280)={@loopback, <r5=>0x0}, &(0x7f00000002c0)=0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl0\x00', <r6=>0x0, 0x2f, 0x5, 0x9, 0x6, 0x44, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x10, 0x10, 0x6, 0x76}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000400)={'gretap0\x00', <r7=>0x0, 0x7, 0x7, 0x80000000, 0x8, {{0x17, 0x4, 0x1, 0x1f, 0x5c, 0x67, 0x0, 0x35, 0x2f, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@timestamp={0x44, 0x8, 0xd3, 0x0, 0x9, [0x97]}, @ssrr={0x89, 0x7, 0x44, [@multicast2]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x10, 0x0, [{0x6, 0xa, "57ee619945de3f81"}]}, @generic={0x86, 0xd, "4c2e3a80efbec5ca1014cb"}, @end, @timestamp={0x44, 0x14, 0xce, 0x0, 0x3, [0x8, 0x2, 0x1cd, 0x7]}]}}}}})
r8 = socket(0x9, 0x800000003, 0x0)
r9 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x4]}}}}]}, 0x88}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', <r11=>0x0, 0x7800, 0x40, 0x9b6, 0x1, {{0xe, 0x4, 0x1, 0x0, 0x38, 0x66, 0x0, 0xa2, 0x29, 0x0, @empty, @private=0xa010100, {[@lsrr={0x83, 0x13, 0x34, [@empty, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}]}, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x54, [@multicast2, @local]}, @noop]}}}}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000780)={'ip6tnl0\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x7, 0x6, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x7, 0x8000, 0xf0, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'ip6gre0\x00', <r13=>0x0, 0x29, 0x6, 0xe, 0xd, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x40}, 0x40, 0x80, 0x9, 0x7}})
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000940)=<r14=>0x0, &(0x7f0000000980)=0x4)
r15 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r16=>0xffffffffffffffff})
getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r15, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0xa0, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x8c, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2, r17}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x38, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fddbdf25040000006000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020070696d36726567310000000000000000000003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r4, @ANYBLOB="080000000b005163d108000000d90100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="a8fe0100", @ANYRES32=r7, @ANYBLOB="0800030001000000140002006e65747063693000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000300030000004000018008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0000020070696d3672656700000000000000000008000100", @ANYRES32=r13, @ANYBLOB="140002006c6f000000000000000000000000000008000100", @ANYRES32=r14, @ANYBLOB="140001800800030001000000000002006970766c616e31000000000000000000"], 0x120}, 0x1, 0x0, 0x0, 0x800}, 0x8081)

kernel console output (not intermixed with test programs):

tover after parsing attributes in process `syz.1.7352'.
[  386.836621][T27497] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  386.898775][T27434] tipc: Resetting bearer <eth:syzkaller0>
[  386.910228][T27434] tipc: Disabling bearer <eth:syzkaller0>
[  386.926161][T27504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7356'.
[  387.058797][T27523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7361'.
[  387.112855][T27529] x_tables: duplicate underflow at hook 2
[  387.114962][T27525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7363'.
[  387.171606][T26515] Bluetooth: hci2: command 0x0401 tx timeout
[  387.252168][ T1101] smc: removing ib device syz1
[  387.254637][T27525] bond0 (unregistering): Released all slaves
[  387.264071][T27542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7366'.
[  387.267813][T27542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7366'.
[  387.279268][T27539] lo speed is unknown, defaulting to 1000
[  387.933122][T27568] bond0 (unregistering): Released all slaves
[  388.439374][T27634] SET target dimension over the limit!
[  388.444537][T27634] netlink: 'syz.1.7389': attribute type 21 has an invalid length.
[  388.450852][T27634] netlink: 'syz.1.7389': attribute type 4 has an invalid length.
[  388.457403][T27634] netlink: 'syz.1.7389': attribute type 3 has an invalid length.
[  388.660767][T27652] netlink: 'syz.0.7391': attribute type 1 has an invalid length.
[  388.713024][T27652] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  388.718098][T27652] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  388.783890][T27656] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  388.792580][T27656] syzkaller0: entered promiscuous mode
[  388.794600][T27656] syzkaller0: entered allmulticast mode
[  388.814380][T27656] tipc: Resetting bearer <eth:syzkaller0>
[  388.845245][T27655] tipc: Resetting bearer <eth:syzkaller0>
[  388.863738][T27655] tipc: Disabling bearer <eth:syzkaller0>
[  389.010914][T27665] netlink: 'syz.2.7395': attribute type 11 has an invalid length.
[  389.014346][T27666] netlink: 'syz.2.7395': attribute type 11 has an invalid length.
[  389.085632][T27695] netlink: 'syz.2.7400': attribute type 1 has an invalid length.
[  389.163489][T27709] xt_HMARK: spi-set and port-set can't be combined
[  389.245370][T27717] syz.0.7407 uses old SIOCAX25GETINFO
[  389.304209][T27725] netlink: 'syz.1.7409': attribute type 2 has an invalid length.
[  389.415645][T27739] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  389.420429][T27741] netlink: 'syz.1.7417': attribute type 4 has an invalid length.
[  389.423244][T27739] syzkaller0: entered promiscuous mode
[  389.426297][T27739] syzkaller0: entered allmulticast mode
[  389.448717][T27739] tipc: Resetting bearer <eth:syzkaller0>
[  389.462049][T27738] tipc: Resetting bearer <eth:syzkaller0>
[  389.472882][T27738] tipc: Disabling bearer <eth:syzkaller0>
[  389.527812][T27743] nbd4: detected capacity change from 0 to 63
[  389.531806][   T55] block nbd4: Receive control failed (result -104)
[  389.996737][T27784] 8021q: adding VLAN 0 to HW filter on device bond45
[  390.000316][T27784] bond0: (slave bond45): making interface the new active one
[  390.003371][T27784] bond0: (slave bond45): Enslaving as an active interface with an up link
[  390.122227][T27807] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  390.221062][T27818] netlink: 'syz.1.7441': attribute type 4 has an invalid length.
[  390.372224][T27842] openvswitch: netlink: IP tunnel dst address not specified
[  390.517052][T27853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  391.166612][T27905] 8021q: adding VLAN 0 to HW filter on device bond46
[  391.173345][T27905] bond0: (slave bond46): Enslaving as an active interface with an up link
[  391.218793][T27916] __nla_validate_parse: 92 callbacks suppressed
[  391.218803][T27916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7474'.
[  391.272698][T27922] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7477'.
[  391.285392][T27924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7476'.
[  391.329461][T27929] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7480'.
[  391.340426][T27928] 8021q: adding VLAN 0 to HW filter on device bond36
[  391.344045][T27928] bond0: (slave bond36): making interface the new active one
[  391.348409][T27928] bond0: (slave bond36): Enslaving as an active interface with an up link
[  391.486901][T27947] nbd: nbd0 already in use
[  391.489021][T27947] block nbd0: NBD_DISCONNECT
[  391.490553][T27947] block nbd0: Send disconnect failed -32
[  391.492640][T27947] block nbd0: shutting down sockets
[  391.500431][    C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  391.503453][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  391.513810][   T60] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  391.517333][   T60] Buffer I/O error on dev nbd0, logical block 0, async page read
[  391.520761][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  391.524248][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read
[  391.534555][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  391.537970][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read
[  391.541768][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  391.544826][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read
[  391.547549][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  391.550772][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read
[  391.555543][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  391.559309][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read
[  391.563645][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  391.567145][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read
[  391.571170][ T5835] ldm_validate_partition_table(): Disk read failed.
[  391.573445][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  391.576839][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read
[  391.579736][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  391.583464][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read
[  391.586975][ T5835] Dev nbd0: unable to read RDB block 0
[  391.592159][ T5835]  nbd0: unable to read partition table
[  391.638473][ T5278] udevd[5278]: worker [5835] terminated by signal 9 (Killed)
[  391.641578][ T5278] udevd[5278]: worker [5835] failed while handling '/devices/virtual/block/nbd0'
[  391.644760][T27955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7487'.
[  391.956129][T27989] validate_nla: 1 callbacks suppressed
[  391.956138][T27989] netlink: 'syz.2.7495': attribute type 2 has an invalid length.
[  392.057299][T27991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7496'.
[  392.183416][T28004] : renamed from vlan0
[  392.235113][T28009] openvswitch: netlink: Message has 20 unknown bytes.
[  392.242620][T28009] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  392.497333][T28051] netlink: 'syz.1.7513': attribute type 8 has an invalid length.
[  392.553217][T28058] netlink: 'syz.1.7513': attribute type 4 has an invalid length.
[  392.555695][T28057] netlink: 'syz.1.7513': attribute type 4 has an invalid length.
[  392.560120][T28058] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7513'.
[  392.560246][T28055] syzkaller1: entered promiscuous mode
[  392.564651][T28055] syzkaller1: entered allmulticast mode
[  392.631656][T28063] lo speed is unknown, defaulting to 1000
[  392.681131][T28059] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7516'.
[  393.042318][T28082] syz.2.7523: vmalloc error: size 5771264, failed to allocated page array size 11272, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  393.048810][T28082] CPU: 1 UID: 0 PID: 28082 Comm: syz.2.7523 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 PREEMPT(full) 
[  393.048822][T28082] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  393.048828][T28082] Call Trace:
[  393.048831][T28082]  <TASK>
[  393.048835][T28082]  dump_stack_lvl+0x189/0x250
[  393.048850][T28082]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  393.048865][T28082]  ? __pfx_dump_stack_lvl+0x10/0x10
[  393.048873][T28082]  ? __pfx__printk+0x10/0x10
[  393.048884][T28082]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  393.048893][T28082]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  393.048905][T28082]  warn_alloc+0x214/0x310
[  393.048936][T28082]  ? __pfx_warn_alloc+0x10/0x10
[  393.048949][T28082]  ? __get_vm_area_node+0x28f/0x300
[  393.048960][T28082]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  393.048970][T28082]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  393.048992][T28082]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  393.049002][T28082]  ? __futex_wait+0x1d1/0x3e0
[  393.049009][T28082]  ? __pfx_aa_get_newest_label+0x10/0x10
[  393.049017][T28082]  ? __futex_wait+0x34f/0x3e0
[  393.049027][T28082]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  393.049033][T28082]  __vmalloc_noprof+0xb1/0xf0
[  393.049044][T28082]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  393.049052][T28082]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[  393.049061][T28082]  bpf_prog_alloc+0x3c/0x1a0
[  393.049069][T28082]  bpf_prog_load+0x735/0x1930
[  393.049081][T28082]  ? __pfx_bpf_prog_load+0x10/0x10
[  393.049096][T28082]  ? bpf_lsm_bpf+0x9/0x20
[  393.049106][T28082]  ? security_bpf+0x7e/0x300
[  393.049114][T28082]  __sys_bpf+0x5f1/0x860
[  393.049126][T28082]  ? __pfx___sys_bpf+0x10/0x10
[  393.049144][T28082]  ? rcu_is_watching+0x15/0xb0
[  393.049155][T28082]  __x64_sys_bpf+0x7c/0x90
[  393.049170][T28082]  do_syscall_64+0xfa/0x3b0
[  393.049180][T28082]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.049187][T28082]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.049194][T28082]  ? exc_page_fault+0x9f/0xf0
[  393.049202][T28082]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.049209][T28082] RIP: 0033:0x7f4c5118e9a9
[  393.049217][T28082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  393.049223][T28082] RSP: 002b:00007f4c51ff8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  393.049232][T28082] RAX: ffffffffffffffda RBX: 00007f4c513b5fa0 RCX: 00007f4c5118e9a9
[  393.049238][T28082] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005
[  393.049242][T28082] RBP: 00007f4c51210d69 R08: 0000000000000000 R09: 0000000000000000
[  393.049247][T28082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  393.049251][T28082] R13: 0000000000000000 R14: 00007f4c513b5fa0 R15: 00007ffdce83fb58
[  393.049262][T28082]  </TASK>
[  393.049266][T28082] Mem-Info:
[  393.144530][T28082] active_anon:18647 inactive_anon:0 isolated_anon:0
[  393.144530][T28082]  active_file:1495 inactive_file:38346 isolated_file:0
[  393.144530][T28082]  unevictable:1768 dirty:154 writeback:0
[  393.144530][T28082]  slab_reclaimable:11230 slab_unreclaimable:98177
[  393.144530][T28082]  mapped:18770 shmem:2515 pagetables:1174
[  393.144530][T28082]  sec_pagetables:0 bounce:0
[  393.144530][T28082]  kernel_misc_reclaimable:0
[  393.144530][T28082]  free:227933 free_pcp:22837 free_cma:0
[  393.159118][T28082] Node 0 active_anon:14284kB inactive_anon:0kB active_file:4056kB inactive_file:25464kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39848kB dirty:412kB writeback:0kB shmem:5000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9352kB pagetables:2960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  393.170040][T28082] Node 1 active_anon:60304kB inactive_anon:0kB active_file:1924kB inactive_file:127920kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35232kB dirty:204kB writeback:0kB shmem:5060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5388kB pagetables:1736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  393.180638][T28082] Node 0 DMA free:15044kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:312kB local_pcp:4kB free_cma:0kB
[  393.190003][T28082] lowmem_reserve[]: 0 812 812 812 812
[  393.191809][T28082] Node 0 DMA32 free:298236kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14284kB inactive_anon:0kB active_file:4056kB inactive_file:25464kB unevictable:3536kB writepending:412kB present:1556484kB managed:831980kB mlocked:0kB bounce:0kB free_pcp:47136kB local_pcp:13844kB free_cma:0kB
[  393.201990][T28082] lowmem_reserve[]: 0 0 0 0 0
[  393.203564][T28082] Node 1 DMA32 free:442964kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:15644kB local_pcp:9316kB free_cma:0kB
[  393.213266][T28082] lowmem_reserve[]: 0 0 854 854 854
[  393.214987][T28082] Node 1 Normal free:155488kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60304kB inactive_anon:0kB active_file:1924kB inactive_file:127920kB unevictable:3536kB writepending:204kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:28772kB local_pcp:12764kB free_cma:0kB
[  393.225255][T28082] lowmem_reserve[]: 0 0 0 0 0
[  393.226834][T28082] Node 0 DMA: 1*4kB (U) 2*8kB (U) 1*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 1*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (U) 2*4096kB (U) = 15044kB
[  393.231905][T28082] Node 0 DMA32: 1081*4kB (UM) 561*8kB (UME) 604*16kB (UME) 70*32kB (UM) 294*64kB (UM) 223*128kB (UM) 147*256kB (UME) 72*512kB (UME) 44*1024kB (UME) 2*2048kB (UM) 26*4096kB (UM) = 298220kB
[  393.238178][T28082] Node 1 DMA32: 11*4kB (UM) 9*8kB (UM) 10*16kB (UM) 2*32kB (M) 2*64kB (U) 1*128kB (U) 2*256kB (M) 3*512kB (UM) 2*1024kB (M) 0*2048kB 107*4096kB (UM) = 442964kB
[  393.243314][T28082] Node 1 Normal: 522*4kB (UM) 407*8kB (UME) 376*16kB (UME) 425*32kB (UME) 323*64kB (UM) 168*128kB (UME) 89*256kB (UM) 20*512kB (UM) 14*1024kB (UME) 2*2048kB (U) 9*4096kB (UM) = 155456kB
[  393.249411][T28082] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  393.252382][T28082] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  393.255348][T28082] 42356 total pagecache pages
[  393.256865][T28082] 0 pages in swap cache
[  393.258369][T28082] Free swap  = 124996kB
[  393.259732][T28082] Total swap = 124996kB
[  393.261131][T28082] 786301 pages RAM
[  393.262354][T28082] 0 pages HighMem/MovableOnly
[  393.263885][T28082] 241058 pages reserved
[  393.265294][T28082] 0 pages cma reserved
[  394.271521][T28168] netlink: 'syz.0.7550': attribute type 29 has an invalid length.
[  394.284577][T28168] netlink: 'syz.0.7550': attribute type 29 has an invalid length.
[  394.296081][T28168] netlink: 588 bytes leftover after parsing attributes in process `syz.0.7550'.
[  394.327011][T28170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7551'.
[  394.330200][T28170] netlink: 'syz.0.7551': attribute type 5 has an invalid length.
[  395.219434][T28220] netlink: 'syz.0.7563': attribute type 32 has an invalid length.
[  395.222227][T28220] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  395.314197][T28230] netlink: 'syz.0.7566': attribute type 4 has an invalid length.
[  395.344018][T28233] syzkaller0: entered promiscuous mode
[  395.345790][T28233] syzkaller0: entered allmulticast mode
[  395.524489][T28240] netlink: 'syz.1.7570': attribute type 1 has an invalid length.
[  395.616531][T28248] 8021q: adding VLAN 0 to HW filter on device bond47
[  395.625169][T28248] bond0: (slave bond47): Enslaving as an active interface with an up link
[  395.761344][T28258] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.956229][T28272] sctp: [Deprecated]: syz.0.7580 (pid 28272) Use of int in max_burst socket option deprecated.
[  395.956229][T28272] Use struct sctp_assoc_value instead
[  396.336606][T28292] __nla_validate_parse: 14 callbacks suppressed
[  396.336618][T28292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7587'.
[  396.343929][T28292] bond0 (unregistering): (slave bond36): Releasing active interface
[  396.350337][T28292] bond0 (unregistering): Released all slaves
[  396.575574][T28308] 8021q: adding VLAN 0 to HW filter on device bond48
[  396.580157][T28308] bond0: (slave bond48): Enslaving as an active interface with an up link
[  396.633675][T28315] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7593'.
[  396.637043][T28315] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7593'.
[  396.760857][T28330] 8021q: adding VLAN 0 to HW filter on device bond49
[  396.764508][T28330] bond0: (slave bond49): Enslaving as an active interface with an up link
[  396.932677][T28348] 8021q: adding VLAN 0 to HW filter on device bond50
[  396.936591][T28348] bond0: (slave bond50): Enslaving as an active interface with an up link
[  397.053468][T28361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7609'.
[  397.101328][T28356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7608'.
[  397.106953][T28364] lo speed is unknown, defaulting to 1000
[  397.308246][T28382] 8021q: adding VLAN 0 to HW filter on device bond51
[  397.311930][T28382] bond0: (slave bond51): Enslaving as an active interface with an up link
[  397.339483][T28391] validate_nla: 6 callbacks suppressed
[  397.339495][T28391] netlink: 'syz.1.7616': attribute type 4 has an invalid length.
[  397.411849][T28398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7619'.
[  397.415017][T28398] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7619'.
[  397.419691][T28398] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) !
[  397.452643][T28401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7620'.
[  397.455657][T28401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7620'.
[  397.458679][T28401] netlink: 'syz.2.7620': attribute type 12 has an invalid length.
[  397.461331][T28401] netlink: 'syz.2.7620': attribute type 11 has an invalid length.
[  397.500241][T28406] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  397.556710][T28414] netlink: 'syz.1.7624': attribute type 4 has an invalid length.
[  397.620010][T28413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7625'.
[  397.686570][T28427] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20003
[  397.770036][T28449] netlink: 'syz.0.7635': attribute type 4 has an invalid length.
[  397.796708][T28447] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  397.870055][T28464] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  397.891393][T28462] netlink: 'syz.0.7638': attribute type 1 has an invalid length.
[  397.929690][T28462] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.949570][T28462] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.952954][T28462] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address
[  397.957377][T28462] bond0: (slave vxcan1): Error -95 calling set_mac_address
[  397.997389][T28482] 8021q: adding VLAN 0 to HW filter on device bond0
[  398.069337][T28491] syzkaller1: entered promiscuous mode
[  398.071202][T28491] syzkaller1: entered allmulticast mode
[  398.113329][T28494] 8021q: adding VLAN 0 to HW filter on device bond38
[  398.120707][T28494] bond0: (slave bond38): Enslaving as an active interface with a down link
[  398.270480][T28509] syzkaller1: entered promiscuous mode
[  398.272359][T28509] syzkaller1: entered allmulticast mode
[  398.527927][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  398.627034][T28534] tap0: tun_chr_ioctl cmd 1074025677
[  398.630377][T28534] tap0: linktype set to 823
[  398.650278][T28537] netlink: 'syz.2.7655': attribute type 30 has an invalid length.
[  398.656360][T28537] netdevsim netdevsim2 : set [0, 0] type 1 family 0 port 8472 - 0
[  398.659535][T28537] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  398.662352][T28537] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  398.665566][T28537] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  398.708968][T28537] netlink: 'syz.2.7655': attribute type 30 has an invalid length.
[  398.780950][T28547] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  398.788565][T28547] tipc: Resetting bearer <eth:syzkaller0>
[  400.264288][T28656] netlink: 'syz.0.7690': attribute type 4 has an invalid length.
[  400.535048][T28692] syzkaller0: entered allmulticast mode
[  400.560558][T28692] syzkaller0: left allmulticast mode
[  400.583811][T28706] ipt_ECN: cannot use operation on non-tcp rule
[  400.592463][T28703] 8021q: adding VLAN 0 to HW filter on device bond52
[  400.596054][T28703] bond0: (slave bond52): Enslaving as an active interface with an up link
[  400.632436][T28710] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  400.735635][T28724] lo speed is unknown, defaulting to 1000
[  400.857505][T28735] 8021q: adding VLAN 0 to HW filter on device bond39
[  400.861567][T28735] bond0: (slave bond39): Enslaving as an active interface with a down link
[  401.222375][T28772] netlink: 'syz.2.7725': attribute type 1 has an invalid length.
[  401.276353][T28780] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  401.311450][T28784] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  401.345592][T28786] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  401.354108][T28786] __nla_validate_parse: 19 callbacks suppressed
[  401.354120][T28786] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7729'.
[  401.403118][T28788] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7730'.
[  401.596969][T28822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7741'.
[  401.602521][T28822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7741'.
[  401.674652][T28832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7745'.
[  401.765445][T28839] xt_CT: No such helper "snmp"
[  401.768482][T28835] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7746'.
[  401.967534][T28856] 8021q: adding VLAN 0 to HW filter on device bond54
[  401.972055][T28856] bond53: (slave bond54): making interface the new active one
[  401.974927][T28856] bond53: (slave bond54): Enslaving as an active interface with an up link
[  401.986978][T28856] bond53: (slave gretap4): Enslaving as a backup interface with an up link
[  401.997490][T28856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7754'.
[  402.001637][T28856] 8021q: adding VLAN 0 to HW filter on device bond53
[  402.162881][T28864] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7756'.
[  402.234734][T28867] x_tables: ip_tables: DSCP.0 target: invalid size 8 (kernel) != (user) 0
[  402.477631][T28892] validate_nla: 4 callbacks suppressed
[  402.481665][T28892] netlink: 'syz.0.7762': attribute type 4 has an invalid length.
[  402.511692][T28896] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7763'.
[  402.583894][T28904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7765'.
[  402.594226][T28904] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  402.792130][T28919] netlink: 'syz.2.7769': attribute type 4 has an invalid length.
[  402.846185][T28925] xt_CONNSECMARK: invalid mode: 254
[  402.848864][T26515] Bluetooth: hci2: command 0x0401 tx timeout
[  402.975971][T28940] 8021q: adding VLAN 0 to HW filter on device bond55
[  402.979890][T28940] bridge0: port 1(bond55) entered blocking state
[  402.982332][T28940] bridge0: port 1(bond55) entered disabled state
[  402.985032][T28940] bond55: entered allmulticast mode
[  402.989486][T28940] bond55: entered promiscuous mode
[  402.991905][T28940] bridge0: port 1(bond55) entered blocking state
[  402.994114][T28940] bridge0: port 1(bond55) entered forwarding state
[  402.999758][ T1101] bridge0: port 1(bond55) entered disabled state
[  403.313728][T28977] openvswitch: netlink: Missing key (keys=40, expected=80)
[  403.521860][T28999] siw: device registration error -23
[  403.546842][T29001] netlink: 'syz.1.7789': attribute type 1 has an invalid length.
[  403.698482][T29011] netlink: 'syz.1.7793': attribute type 3 has an invalid length.
[  403.710599][T29011] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  403.760497][T29011] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  403.798602][T29022] xt_hashlimit: size too large, truncated to 1048576
[  403.813457][T29011] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  403.920676][T29011] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  403.974180][T29011] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  403.982518][T29011] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  403.994083][T29011] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  404.003728][T29011] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  404.071880][T29028] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  404.246796][T29046] netlink: 'syz.1.7800': attribute type 12 has an invalid length.
[  404.556218][T29069] can: request_module (can-proto-4) failed.
[  404.596769][T29072] bond0 (unregistering): (slave bond45): Releasing active interface
[  404.603300][T29072] bond0 (unregistering): (slave bond46): Releasing active interface
[  404.609265][T29072] bond0 (unregistering): (slave bond47): Releasing active interface
[  404.615931][T29072] bond0 (unregistering): (slave bond48): Releasing active interface
[  404.621208][T29072] bond0 (unregistering): (slave bond49): Releasing active interface
[  404.632089][T29072] bond0 (unregistering): (slave bond50): Releasing active interface
[  404.639882][T29072] bond0 (unregistering): (slave bond51): Releasing active interface
[  404.646460][T29072] bond0 (unregistering): (slave bond52): Releasing active interface
[  404.652253][T29072] bond0 (unregistering): Released all slaves
[  405.284161][T29122] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.284184][T29123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.527113][T29141] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  405.910941][T29168] bridge0: port 2(ipvlan1) entered blocking state
[  405.913310][T29168] bridge0: port 2(ipvlan1) entered disabled state
[  405.915712][T29168] ipvlan1: entered allmulticast mode
[  405.919242][T29168] ipvlan1: left allmulticast mode
[  405.928135][T29163] nbd0: detected capacity change from 0 to 63
[  405.931730][   T55] block nbd0: Receive control failed (result -104)
[  406.013732][T29177] tap0: tun_chr_ioctl cmd 2147767521
[  406.023888][T29177] tap0: tun_chr_ioctl cmd 1074025677
[  406.026680][T29177] tap0: linktype set to 823
[  406.363481][T29216] netlink: 'syz.1.7851': attribute type 1 has an invalid length.
[  406.366078][T29216] __nla_validate_parse: 18 callbacks suppressed
[  406.366089][T29216] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7851'.
[  406.410942][T29221] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7852'.
[  406.493710][T29228] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7854'.
[  407.313711][T29240] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  407.316459][T29240] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  407.319562][T29240] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  407.322449][T29240] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  407.373829][T29244] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7860'.
[  407.396268][T29248] netlink: 'syz.0.7862': attribute type 32 has an invalid length.
[  407.400136][T29248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7862'.
[  407.403511][T29248] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7862'.
[  407.475639][T29264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7866'.
[  407.483999][T29264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7866'.
[  407.487354][T29264] netlink: 'syz.2.7866': attribute type 5 has an invalid length.
[  407.596035][T29282] netlink: 'syz.2.7871': attribute type 4 has an invalid length.
[  407.601761][T29280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7872'.
[  407.672432][T29291] smc: net device bond0 applied user defined pnetid SYZ2
[  407.758181][T29294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7875'.
[  408.109437][T29324] netlink: 'syz.1.7886': attribute type 20 has an invalid length.
[  408.187082][T29331] netlink: 'syz.1.7889': attribute type 1 has an invalid length.
[  408.939542][T29388] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  409.027379][T29388] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  409.278234][T29388] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  409.377586][T29388] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  409.412878][   T60] block nbd3: Possible stuck request ffff888020c40000: control (read@0,1024B). Runtime 30 seconds
[  409.416495][   T60] block nbd3: Possible stuck request ffff888020c40200: control (read@1024,1024B). Runtime 30 seconds
[  409.453058][T29388] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  409.464275][T29388] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  409.479560][T29388] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  409.487168][T29388] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  409.683218][T29440] netlink: 'syz.1.7923': attribute type 4 has an invalid length.
[  409.769923][T29450] xt_CT: You must specify a L4 protocol and not use inversions on it
[  409.779275][T29452] xt_CT: You must specify a L4 protocol and not use inversions on it
[  409.819793][T29457] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  409.852379][T29461] netlink: 'syz.2.7929': attribute type 10 has an invalid length.
[  410.011989][T29481] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[  410.044958][T29483] bond0: option use_carrier: invalid value (3)
[  410.194663][T29500] pim6reg: left allmulticast mode
[  410.353149][T29518] ip6t_rpfilter: unknown options
[  410.933385][T29561] tc_dump_action: action bad kind
[  411.017175][T29563] delete_channel: no stack
[  411.182232][T29584] netlink: 'syz.1.7968': attribute type 4 has an invalid length.
[  411.489647][T29610] netlink: 'syz.2.7975': attribute type 4 has an invalid length.
[  411.584894][T29626] 8021q: adding VLAN 0 to HW filter on device bond57
[  411.588454][T29626] bond0: (slave bond57): making interface the new active one
[  411.592528][T29626] bond0: (slave bond57): Enslaving as an active interface with an up link
[  411.834560][T29636] tipc: Enabling of bearer <eth:geneve1> rejected, already enabled
[  411.870349][T29638] netlink: 'syz.1.7984': attribute type 4 has an invalid length.
[  411.991052][T29649] __nla_validate_parse: 23 callbacks suppressed
[  411.991066][T29649] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7988'.
[  412.009895][T29649] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7988'.
[  412.057238][T29656] netlink: 'syz.0.7991': attribute type 4 has an invalid length.
[  412.063474][T29658] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7992'.
[  412.113135][T29660] 8021q: adding VLAN 0 to HW filter on device bond40
[  412.116758][T29660] bond0: (slave bond40): Enslaving as an active interface with a down link
[  412.169272][T29665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7995'.
[  412.454435][T29681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8003'.
[  413.892510][  T128] block nbd2: Possible stuck request ffff888020c10000: control (read@0,1024B). Runtime 270 seconds
[  413.896287][  T128] block nbd2: Possible stuck request ffff888020c10200: control (read@1024,1024B). Runtime 270 seconds
[  413.900282][  T128] block nbd2: Possible stuck request ffff888020c10400: control (read@2048,1024B). Runtime 270 seconds
[  413.904080][  T128] block nbd2: Possible stuck request ffff888020c10600: control (read@3072,1024B). Runtime 270 seconds
[  414.054436][T29692] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  414.155916][T29709] validate_nla: 1 callbacks suppressed
[  414.155930][T29709] netlink: 'syz.1.8011': attribute type 4 has an invalid length.
[  414.158052][T29701] 8021q: adding VLAN 0 to HW filter on device bond41
[  414.159212][T29701] bond0: (slave bond41): Enslaving as an active interface with a down link
[  414.191956][T29705] bond0 (unregistering): Released all slaves
[  414.212260][T29714] netlink: 'syz.1.8012': attribute type 7 has an invalid length.
[  414.214747][T29714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8012'.
[  414.465358][T29744] tipc: Resetting bearer <eth:syzkaller0>
[  414.467370][T29744] tipc: Resetting bearer <eth:syzkaller0>
[  414.483866][T29745] netlink: 404 bytes leftover after parsing attributes in process `syz.2.8023'.
[  414.487076][T29745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8023'.
[  414.491895][T29747] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8024'.
[  414.492644][T29745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8023'.
[  414.530167][T29744] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  414.533145][T29744] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  414.535886][T29744] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  414.543955][T29754] netlink: 'syz.0.8026': attribute type 4 has an invalid length.
[  414.549003][T29744] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  414.592128][T29744] tipc: Resetting bearer <eth:syzkaller0>
[  415.724010][T29804] 8021q: adding VLAN 0 to HW filter on device bond42
[  415.728957][T29804] bond0: (slave bond42): Enslaving as an active interface with a down link
[  415.749053][T29801] netlink: 'syz.1.8040': attribute type 1 has an invalid length.
[  415.821020][T29815] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  415.823428][T29815] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  415.920974][T29833] netlink: 'syz.1.8051': attribute type 1 has an invalid length.
[  415.943352][T29833] bond59: (slave gretap5): making interface the new active one
[  415.946506][T29833] bond59: (slave gretap5): Enslaving as an active interface with an up link
[  416.140330][T29855] "syz.2.8060" (29855) uses obsolete ecb(arc4) skcipher
[  416.296816][T29870] syzkaller1: entered promiscuous mode
[  416.298808][T29870] syzkaller1: entered allmulticast mode
[  416.326030][T29875] smc: net device bond0 erased user defined pnetid SYZ2
[  416.475171][T29885] netlink: 'syz.2.8071': attribute type 5 has an invalid length.
[  416.512150][T29896] xt_bpf: check failed: parse error
[  416.516431][T29896] netlink: 'syz.1.8074': attribute type 2 has an invalid length.
[  416.682570][T29908] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  416.685230][T29908] tipc: Bearer <udp:s>: trying with adjusted priority
[  416.687883][T29908] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  416.764965][T29920] netlink: 'syz.1.8081': attribute type 5 has an invalid length.
[  416.866007][T29929] sock: sock_timestamping_bind_phc: sock not bind to device
[  416.870757][T29929] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  416.958102][T29937] pim6reg9: entered allmulticast mode
[  416.985444][T29940] netlink: 'syz.2.8088': attribute type 4 has an invalid length.
[  416.992194][T29940] netlink: 'syz.2.8088': attribute type 4 has an invalid length.
[  417.135983][T29946] __nla_validate_parse: 18 callbacks suppressed
[  417.135995][T29946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8090'.
[  417.211806][T29958] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  417.214966][T29958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8093'.
[  417.222808][T29958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8093'.
[  417.381505][T29964] erspan0: entered promiscuous mode
[  417.396647][T29964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  417.767089][T29970] can: request_module (can-proto-4) failed.
[  417.848284][T29977] Cannot find add_set index 3 as target
[  417.921125][T29981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8102'.
[  418.169698][T30002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8110'.
[  418.174752][T30003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8110'.
[  418.370339][T30020] netlink: 208 bytes leftover after parsing attributes in process `syz.2.8118'.
[  418.375425][T30020] netlink: 208 bytes leftover after parsing attributes in process `syz.2.8118'.
[  418.419206][T30029] xt_limit: Overflow, try lower: 0/0
[  418.545893][T30039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8124'.
[  418.551513][T30039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8124'.
[  418.906374][T30047] netlink: 'syz.1.8128': attribute type 11 has an invalid length.
[  418.970090][T30048] syzkaller1: entered promiscuous mode
[  418.972062][T30048] syzkaller1: entered allmulticast mode
[  419.215632][T30050] validate_nla: 9 callbacks suppressed
[  419.215669][T30050] netlink: 'syz.1.8129': attribute type 4 has an invalid length.
[  419.302629][T30058] x_tables: duplicate underflow at hook 2
[  419.359516][T30065] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  419.362059][T30065] tipc: Bearer <udp:s>: trying with adjusted priority
[  419.364530][T30065] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  419.466722][T30078] lo speed is unknown, defaulting to 1000
[  419.474681][T30082] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  419.490972][T30081] syzkaller0: entered promiscuous mode
[  419.492854][T30081] syzkaller0: entered allmulticast mode
[  419.649440][  T128] block nbd4: Possible stuck request ffff888020ce0000: control (read@0,1024B). Runtime 30 seconds
[  419.653262][  T128] block nbd4: Possible stuck request ffff888020ce0200: control (read@1024,1024B). Runtime 30 seconds
[  419.656984][  T128] block nbd4: Possible stuck request ffff888020ce0400: control (read@2048,1024B). Runtime 30 seconds
[  419.661029][  T128] block nbd4: Possible stuck request ffff888020ce0600: control (read@3072,1024B). Runtime 30 seconds
[  419.681571][T30090] 8021q: adding VLAN 0 to HW filter on device bond60
[  419.685879][T30090] bond0: (slave bond60): Enslaving as a backup interface with an up link
[  419.886861][T30097] netlink: 'syz.1.8145': attribute type 16 has an invalid length.
[  419.893536][T30097] netlink: 'syz.1.8145': attribute type 3 has an invalid length.
[  419.904145][T30097] netlink: 'syz.1.8145': attribute type 16 has an invalid length.
[  419.908086][T30097] netlink: 'syz.1.8145': attribute type 3 has an invalid length.
[  420.067513][T30107] lo speed is unknown, defaulting to 1000
[  420.383079][T30125] netlink: 'syz.0.8153': attribute type 9 has an invalid length.
[  420.475462][T30130] bond0 (unregistering): (slave bond57): Releasing backup interface
[  420.492850][T30130] bond0 (unregistering): (slave bond60): Releasing backup interface
[  420.498457][T30130] bond0 (unregistering): Released all slaves
[  420.504608][T30136] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  420.507327][T30136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  420.983157][T30181] netlink: 'syz.0.8166': attribute type 16 has an invalid length.
[  420.987762][T30181] netlink: 'syz.0.8166': attribute type 17 has an invalid length.
[  421.015079][T30181] 8021q: adding VLAN 0 to HW filter on device team0
[  421.028325][T30181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  421.033277][T26421] lo speed is unknown, defaulting to 1000
[  421.035152][T26421] syz0: Port: 1 Link ACTIVE
[  421.036711][T26421] lo speed is unknown, defaulting to 1000
[  421.060153][T30184] netlink: 'syz.2.8171': attribute type 1 has an invalid length.
[  421.064417][T30184] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR
[  421.172905][T30189] 0X: renamed from gretap0 (while UP)
[  421.176387][T30189] 0X: entered allmulticast mode
[  421.179269][T30189] A link change request failed with some changes committed already. Interface 30X may have been left with an inconsistent configuration, please check.
[  421.220517][T30195] xt_hashlimit: max too large, truncated to 1048576
[  421.228066][T30195] No such timeout policy "syz1"
[  421.253713][T30199] netlink: 'syz.2.8174': attribute type 9 has an invalid length.
[  421.394682][T30201] xt_CT: You must specify a L4 protocol and not use inversions on it
[  422.450287][T30235] bond0 (unregistering): Released all slaves
[  422.523204][T30252] __nla_validate_parse: 21 callbacks suppressed
[  422.523220][T30252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8190'.
[  422.532547][T30256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8191'.
[  422.535897][T30256] openvswitch: netlink: Flow actions attr not present in new flow.
[  422.654667][T30266] 8021q: adding VLAN 0 to HW filter on device team0
[  422.667687][T30266] : entered promiscuous mode
[  422.677386][T30266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  422.682785][T30266] 8021q: adding VLAN 0 to HW filter on device hsr0
[  422.688706][T30266] veth1_macvtap: left promiscuous mode
[  422.691014][T30266] veth1_macvtap: entered promiscuous mode
[  422.693777][T30266] veth0_macvtap: left promiscuous mode
[  422.696380][T30266] veth0_macvtap: entered promiscuous mode
[  422.700903][T30266] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  422.703638][T30266] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  422.706354][T30266] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  422.709251][T30266] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  422.723209][T30266] 8021q: adding VLAN 0 to HW filter on device bond1
[  422.730392][T30266] 8021q: adding VLAN 0 to HW filter on device bond2
[  422.741937][T30266] 8021q: adding VLAN 0 to HW filter on device bond3
[  422.744912][T30266] 8021q: adding VLAN 0 to HW filter on device bond4
[  422.749236][T30266] 8021q: adding VLAN 0 to HW filter on device batadv1
[  422.753445][T30266] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  422.756288][T30266] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  422.759769][T30266] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  422.762491][T30266] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  422.771750][T30266] 8021q: adding VLAN 0 to HW filter on device bond5
[  422.774530][T30266] 8021q: adding VLAN 0 to HW filter on device bond6
[  422.780830][T30266] 8021q: adding VLAN 0 to HW filter on device bond7
[  422.783455][T30266] 8021q: adding VLAN 0 to HW filter on device bond8
[  422.789297][T30266] 8021q: adding VLAN 0 to HW filter on device bond9
[  422.792859][T30266] 8021q: adding VLAN 0 to HW filter on device bond10
[  422.795851][T30266] 8021q: adding VLAN 0 to HW filter on device bond11
[  422.799101][T30266] 8021q: adding VLAN 0 to HW filter on device bond12
[  422.803895][T30266] 8021q: adding VLAN 0 to HW filter on device bond13
[  422.806883][T30266] 8021q: adding VLAN 0 to HW filter on device bond14
[  422.809947][T30266] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  422.812922][T30266] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  422.815715][T30266] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  422.818843][T30266] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  422.824162][T30266] 8021q: adding VLAN 0 to HW filter on device bond15
[  422.826760][T30266] 8021q: adding VLAN 0 to HW filter on device bond16
[  422.830992][T30266] 8021q: adding VLAN 0 to HW filter on device bond17
[  422.834089][T30266] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  422.839367][T30266] 8021q: adding VLAN 0 to HW filter on device bond18
[  422.843111][T30266] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  422.905449][T30271] lo speed is unknown, defaulting to 1000
[  423.144468][T30295] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  423.246182][T30303] netlink: 15 bytes leftover after parsing attributes in process `syz.2.8205'.
[  423.297907][T30292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8202'.
[  423.327875][T30306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8206'.
[  423.363753][T30306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  423.384507][T30313] netlink: 45 bytes leftover after parsing attributes in process `syz.2.8208'.
[  423.483883][T30324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  423.529145][T30331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8215'.
[  423.533449][T30331] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8215'.
[  423.537090][T30331] netlink: 84 bytes leftover after parsing attributes in process `syz.2.8215'.
[  423.541387][T30331] ip6_vti0: entered promiscuous mode
[  423.543339][T30331] ip6_vti0: entered allmulticast mode
[  423.565839][T30332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8216'.
[  423.580057][T30332] bond0 (unregistering): (slave bond38): Releasing active interface
[  423.583761][T30332] bond0 (unregistering): (slave bond39): Releasing active interface
[  423.587321][T30332] bond0 (unregistering): (slave bond40): Releasing active interface
[  423.595258][T30332] bond0 (unregistering): (slave bond41): Releasing active interface
[  423.602173][T30332] bond0 (unregistering): (slave bond42): Releasing active interface
[  423.607137][T30332] bond0 (unregistering): Released all slaves
[  423.646346][T30336] bond18: (slave geneve5): Opening slave failed
[  423.694018][T30336] 8021q: adding VLAN 0 to HW filter on device bond18
[  423.702395][T30336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  424.303015][T30408] validate_nla: 15 callbacks suppressed
[  424.303027][T30408] netlink: 'syz.2.8236': attribute type 16 has an invalid length.
[  424.307961][T30408] netlink: 'syz.2.8236': attribute type 17 has an invalid length.
[  424.313083][T30408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  424.510616][T30422] 8021q: adding VLAN 0 to HW filter on device bond19
[  424.514469][T30422] bond0: (slave bond19): Enslaving as an active interface with a down link
[  424.576346][T30429] xt_TPROXY: Can be used only with -p tcp or -p udp
[  424.582291][T30429] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  424.585303][T30429] netlink: 'syz.2.8243': attribute type 16 has an invalid length.
[  424.588570][T30429] netlink: 'syz.2.8243': attribute type 17 has an invalid length.
[  424.593556][T30429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  424.625978][T30431] tap0: tun_chr_ioctl cmd 1074025680
[  424.629474][T30431] tap0: tun_chr_ioctl cmd 1074025673
[  424.631541][T30433] tap0: tun_chr_ioctl cmd 1074025680
[  424.827930][T30442] netlink: 'syz.0.8247': attribute type 7 has an invalid length.
[  424.834066][T30442] netlink: 'syz.0.8247': attribute type 8 has an invalid length.
[  424.949915][T30455] netlink: 'syz.0.8250': attribute type 16 has an invalid length.
[  424.952642][T30455] netlink: 'syz.0.8250': attribute type 17 has an invalid length.
[  424.966473][T30455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  425.019440][T30461] netlink: 'syz.0.8252': attribute type 4 has an invalid length.
[  425.105133][T30474] netlink: 'syz.2.8255': attribute type 1 has an invalid length.
[  425.123685][T30474] bond20: entered promiscuous mode
[  425.126064][T30474] 8021q: adding VLAN 0 to HW filter on device bond20
[  425.143476][T30474] 8021q: adding VLAN 0 to HW filter on device bond20
[  425.146703][T30474] bond20: (slave vcan0): The slave device specified does not support setting the MAC address
[  425.151129][T30474] bond20: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  425.158323][T30474] bond20: (slave vcan0): making interface the new active one
[  425.161482][T30474] vcan0: entered promiscuous mode
[  425.164621][T30474] bond20: (slave vcan0): Enslaving as an active interface with an up link
[  425.169540][T30476] syzkaller0: entered promiscuous mode
[  425.176072][T30476] syzkaller0: entered allmulticast mode
[  425.201478][T30476] sch_fq: defrate 257 ignored.
[  425.718486][T30534] 8021q: adding VLAN 0 to HW filter on device bond21
[  425.722020][T30534] bond0: (slave bond21): Enslaving as an active interface with a down link
[  427.092338][T30615] 8021q: adding VLAN 0 to HW filter on device bond22
[  427.096088][T30615] bond0: (slave bond22): Enslaving as an active interface with a down link
[  427.569806][T30654] net_ratelimit: 1 callbacks suppressed
[  427.569812][T30654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  427.661293][T30667] tap0: tun_chr_ioctl cmd 1074025677
[  427.664329][T30667] tap0: linktype set to 776
[  427.725060][T30671] __nla_validate_parse: 20 callbacks suppressed
[  427.725073][T30671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8319'.
[  427.762624][T30673] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  427.866856][T30684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  427.869459][T30684] IPv6: NLM_F_CREATE should be set when creating new route
[  427.871931][T30684] IPv6: NLM_F_CREATE should be set when creating new route
[  427.905550][T30677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8324'.
[  428.091022][T30697] 8021q: adding VLAN 0 to HW filter on device bond43
[  428.096325][T30697] bond0: (slave bond43): Enslaving as an active interface with a down link
[  428.151658][T30705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8329'.
[  428.169251][T30705] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  428.172962][T30705] team0: Device ipvlan0 is already an upper device of the team interface
[  428.270869][T30709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8331'.
[  428.275425][T30709] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8331'.
[  428.337467][T30713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8333'.
[  428.549093][T30726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8336'.
[  428.676204][T30737] 8021q: adding VLAN 0 to HW filter on device bond23
[  428.681882][T30737] bond0: (slave bond23): Enslaving as an active interface with a down link
[  428.820716][T30757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8345'.
[  428.881718][T30763] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  428.919465][T30767] xt_limit: Overflow, try lower: 262144/524288
[  429.197142][T30786] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  429.460842][T30801] validate_nla: 18 callbacks suppressed
[  429.460874][T30801] netlink: 'syz.1.8365': attribute type 10 has an invalid length.
[  429.483975][T30801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8365'.
[  429.487177][T30801] !: left promiscuous mode
[  429.491573][T30801] !: left allmulticast mode
[  429.493571][T30801] bridge0: port 2(0!) entered blocking state
[  429.495866][T30801] bridge0: port 2(0!) entered disabled state
[  429.498273][T30801] !: entered allmulticast mode
[  429.500930][T30801] !: entered promiscuous mode
[  429.607065][T30802] lo speed is unknown, defaulting to 1000
[  429.807108][T30821] sctp: [Deprecated]: syz.0.8371 (pid 30821) Use of int in max_burst socket option deprecated.
[  429.807108][T30821] Use struct sctp_assoc_value instead
[  429.820001][T30820] 8021q: adding VLAN 0 to HW filter on device bond24
[  429.824964][T30820] bond0: (slave bond24): Enslaving as an active interface with a down link
[  429.831587][T30821] netlink: 'syz.0.8371': attribute type 7 has an invalid length.
[  429.859487][T30824] netlink: 'syz.2.8372': attribute type 16 has an invalid length.
[  429.862307][T30824] netlink: 'syz.2.8372': attribute type 17 has an invalid length.
[  429.870740][T30824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  429.904034][T30830] netlink: 'syz.2.8374': attribute type 16 has an invalid length.
[  429.906910][T30830] netlink: 'syz.2.8374': attribute type 17 has an invalid length.
[  429.918291][T30830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  429.925786][T30826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8373'.
[  429.931092][T30826] bond0 (unregistering): (slave bond43): Releasing active interface
[  429.936571][T30826] bond0 (unregistering): Released all slaves
[  430.380160][T30868] wg2: entered promiscuous mode
[  430.382287][T30868] wg2: entered allmulticast mode
[  431.125948][T30891] xt_CT: No such helper "snmp"
[  431.163474][T30896] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  431.166345][T30896] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  431.169855][T30896] tipc: Enabled bearer <udp:syz0>, priority 9
[  431.221162][T30902] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  431.316851][T30911] netlink: 'syz.0.8397': attribute type 16 has an invalid length.
[  431.321032][T30911] netlink: 'syz.0.8397': attribute type 17 has an invalid length.
[  431.325671][T30912] netlink: 'syz.2.8396': attribute type 1 has an invalid length.
[  431.330256][T30911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  431.374455][T30912] 8021q: adding VLAN 0 to HW filter on device bond26
[  431.378620][T30912] bond25: (slave bond26): making interface the new active one
[  431.381608][T30912] bond25: (slave bond26): Enslaving as an active interface with an up link
[  431.393844][T30912] bond25: (slave gretap0): Enslaving as a backup interface with an up link
[  431.529347][T30932] xt_hashlimit: size too large, truncated to 1048576
[  431.535809][T30932] syz.0.8405: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  431.541845][T30932] CPU: 0 UID: 0 PID: 30932 Comm: syz.0.8405 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 PREEMPT(full) 
[  431.541858][T30932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  431.541862][T30932] Call Trace:
[  431.541866][T30932]  <TASK>
[  431.541870][T30932]  dump_stack_lvl+0x189/0x250
[  431.541887][T30932]  ? __pfx_dump_stack_lvl+0x10/0x10
[  431.541896][T30932]  ? __pfx__printk+0x10/0x10
[  431.541907][T30932]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  431.541918][T30932]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  431.541927][T30932]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  431.541937][T30932]  warn_alloc+0x214/0x310
[  431.541948][T30932]  ? __pfx_warn_alloc+0x10/0x10
[  431.541958][T30932]  ? __get_vm_area_node+0x28f/0x300
[  431.541970][T30932]  ? htable_create+0xfc/0x7a0
[  431.541981][T30932]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  431.542003][T30932]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  431.542015][T30932]  ? rcu_is_watching+0x15/0xb0
[  431.542025][T30932]  ? htable_create+0xfc/0x7a0
[  431.542031][T30932]  ? htable_create+0xfc/0x7a0
[  431.542037][T30932]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  431.542048][T30932]  ? htable_create+0xfc/0x7a0
[  431.542054][T30932]  ? hashlimit_pernet+0x23/0x240
[  431.542064][T30932]  htable_create+0xfc/0x7a0
[  431.542074][T30932]  hashlimit_mt_check_common+0x719/0xa10
[  431.542084][T30932]  xt_check_match+0x3d1/0xab0
[  431.542096][T30932]  ? __pfx___mutex_lock+0x10/0x10
[  431.542107][T30932]  ? __pfx_xt_check_match+0x10/0x10
[  431.542118][T30932]  ? pcpu_alloc_noprof+0xfdd/0x16b0
[  431.542133][T30932]  ? xt_find_match+0x1f7/0x250
[  431.542146][T30932]  translate_table+0x1553/0x2040
[  431.542167][T30932]  ? __pfx_translate_table+0x10/0x10
[  431.542177][T30932]  ? __might_fault+0xb0/0x130
[  431.542196][T30932]  ? _copy_from_user+0x94/0xb0
[  431.542209][T30932]  do_ip6t_set_ctl+0x970/0xce0
[  431.542221][T30932]  ? rcu_is_watching+0x15/0xb0
[  431.542229][T30932]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[  431.542248][T30932]  ? __pfx___mutex_lock+0x10/0x10
[  431.542255][T30932]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  431.542267][T30932]  ? __lock_acquire+0xab9/0xd20
[  431.542278][T30932]  nf_setsockopt+0x26f/0x290
[  431.542291][T30932]  rawv6_setsockopt+0x23b/0x5b0
[  431.542300][T30932]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  431.542307][T30932]  ? aa_sock_opt_perm+0x74/0x110
[  431.542315][T30932]  ? sock_common_setsockopt+0x36/0xc0
[  431.542325][T30932]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  431.542334][T30932]  do_sock_setsockopt+0x17c/0x1b0
[  431.542346][T30932]  __x64_sys_setsockopt+0x13f/0x1b0
[  431.542358][T30932]  do_syscall_64+0xfa/0x3b0
[  431.542367][T30932]  ? lockdep_hardirqs_on+0x9c/0x150
[  431.542374][T30932]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.542381][T30932]  ? exc_page_fault+0x9f/0xf0
[  431.542389][T30932]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.542395][T30932] RIP: 0033:0x7f22a338e9a9
[  431.542404][T30932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  431.542411][T30932] RSP: 002b:00007f22a413e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  431.542420][T30932] RAX: ffffffffffffffda RBX: 00007f22a35b5fa0 RCX: 00007f22a338e9a9
[  431.542425][T30932] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007
[  431.542430][T30932] RBP: 00007f22a3410d69 R08: 0000000000000588 R09: 0000000000000000
[  431.542434][T30932] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000
[  431.542439][T30932] R13: 0000000000000000 R14: 00007f22a35b5fa0 R15: 00007ffefaf34468
[  431.542450][T30932]  </TASK>
[  431.542454][T30932] Mem-Info:
[  431.671434][T30932] active_anon:18744 inactive_anon:0 isolated_anon:0
[  431.671434][T30932]  active_file:1495 inactive_file:38363 isolated_file:0
[  431.671434][T30932]  unevictable:1768 dirty:147 writeback:0
[  431.671434][T30932]  slab_reclaimable:11240 slab_unreclaimable:101415
[  431.671434][T30932]  mapped:18682 shmem:2521 pagetables:1307
[  431.671434][T30932]  sec_pagetables:0 bounce:0
[  431.671434][T30932]  kernel_misc_reclaimable:0
[  431.671434][T30932]  free:220840 free_pcp:29713 free_cma:0
[  431.691279][T30947] netlink: 'syz.1.8410': attribute type 4 has an invalid length.
[  431.701260][T30932] Node 0 active_anon:14512kB inactive_anon:0kB active_file:4024kB inactive_file:25480kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:39480kB dirty:412kB writeback:0kB shmem:5008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10096kB pagetables:2992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  431.712387][T30932] Node 1 active_anon:60532kB inactive_anon:0kB active_file:1956kB inactive_file:127972kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:35248kB dirty:176kB writeback:0kB shmem:5076kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5536kB pagetables:1828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  431.726119][T30932] Node 0 DMA free:15044kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:312kB local_pcp:308kB free_cma:0kB
[  431.736266][T30932] lowmem_reserve[]: 0 812 812 812 812
[  431.738602][T30932] Node 0 DMA32 free:291888kB boost:0kB min:33656kB low:42068kB high:50480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14512kB inactive_anon:0kB active_file:4024kB inactive_file:25480kB unevictable:3536kB writepending:412kB present:1556484kB managed:831980kB mlocked:0kB bounce:0kB free_pcp:52732kB local_pcp:35080kB free_cma:0kB
[  431.749283][T30932] lowmem_reserve[]: 0 0 0 0 0
[  431.751054][T30932] Node 1 DMA32 free:442964kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:15644kB local_pcp:6328kB free_cma:0kB
[  431.761306][T30932] lowmem_reserve[]: 0 0 854 854 854
[  431.763175][T30932] Node 1 Normal free:139864kB boost:0kB min:36616kB low:45768kB high:54920kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60804kB inactive_anon:0kB active_file:1956kB inactive_file:127972kB unevictable:3536kB writepending:176kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:43368kB local_pcp:14872kB free_cma:0kB
[  431.773545][T30932] lowmem_reserve[]: 0 0 0 0 0
[  431.775325][T30932] Node 0 DMA: 1*4kB (U) 2*8kB (U) 1*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 1*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (U) 2*4096kB (U) = 15044kB
[  431.780714][T30932] Node 0 DMA32: 8*4kB (M) 892*8kB (UME) 339*16kB (UME) 613*32kB (UME) 177*64kB (UM) 258*128kB (UM) 147*256kB (UE) 73*512kB (U) 49*1024kB (UME) 4*2048kB (UM) 20*4096kB (UM) = 291856kB
[  431.786971][T30932] Node 1 DMA32: 11*4kB (UM) 9*8kB (UM) 10*16kB (UM) 2*32kB (M) 2*64kB (U) 1*128kB (U) 2*256kB (M) 3*512kB (UM) 2*1024kB (M) 0*2048kB 107*4096kB (UM) = 442964kB
[  431.792446][T30932] Node 1 Normal: 892*4kB (UM) 698*8kB (UME) 446*16kB (UME) 67*32kB (ME) 288*64kB (UME) 199*128kB (UM) 104*256kB (UME) 21*512kB (UM) 13*1024kB (U) 1*2048kB (M) 6*4096kB (U) = 139648kB
[  431.798890][T30932] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  431.802034][T30932] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  431.805098][T30932] 42379 total pagecache pages
[  431.807359][T30932] 0 pages in swap cache
[  431.809332][T30932] Free swap  = 124996kB
[  431.811210][T30932] Total swap = 124996kB
[  431.812946][T30932] 786301 pages RAM
[  431.814350][T30932] 0 pages HighMem/MovableOnly
[  431.816011][T30932] 241058 pages reserved
[  431.817490][T30932] 0 pages cma reserved
[  432.105439][T30983] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  432.124377][T30983] lo speed is unknown, defaulting to 1000
[  432.754326][T31006] __nla_validate_parse: 10 callbacks suppressed
[  432.754339][T31006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8423'.
[  433.754451][T31057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  433.833048][T31061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8439'.
[  433.844182][T31061] bond0 (unregistering): (slave bond19): Releasing active interface
[  433.856379][T31061] bond0 (unregistering): (slave bond21): Releasing active interface
[  433.863613][T31061] bond0 (unregistering): (slave bond22): Releasing active interface
[  433.869010][T31061] bond0 (unregistering): (slave bond23): Releasing active interface
[  433.875035][T31061] bond0 (unregistering): (slave bond24): Releasing active interface
[  433.882298][T31061] bond0 (unregistering): Released all slaves
[  433.946813][T31073] netlink: 100 bytes leftover after parsing attributes in process `syz.1.8442'.
[  433.979119][T31077] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  434.064998][T31088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8448'.
[  434.069540][T31088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8448'.
[  434.080944][T31088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8448'.
[  434.190359][T31108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.200542][T31110] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.8454'.
[  434.203845][T31110] openvswitch: netlink: Message has 5 unknown bytes.
[  434.283123][T31121] can: request_module (can-proto-3) failed.
[  434.459463][T31135] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8459'.
[  434.676462][T31140] bond33: left allmulticast mode
[  434.679861][T31140] bond33: left promiscuous mode
[  434.681873][T31140] bridge0: port 1(bond33) entered disabled state
[  434.685914][T31140] bond34: left allmulticast mode
[  434.689524][T31140] bond34: left promiscuous mode
[  434.691436][T31140] bridge0: port 2(bond34) entered disabled state
[  434.699918][T31140] bond35: left allmulticast mode
[  434.705410][T31140] bond35: left promiscuous mode
[  434.707286][T31140] bridge0: port 3(bond35) entered disabled state
[  434.712505][T31140] tipc: Resetting bearer <eth:syzkaller0>
[  434.722698][T31140] validate_nla: 7 callbacks suppressed
[  434.722708][T31140] netlink: 'syz.0.8464': attribute type 10 has an invalid length.
[  435.082987][T31162] 8021q: adding VLAN 0 to HW filter on device bond61
[  435.086994][T31162] bond0: (slave bond61): Enslaving as an active interface with a down link
[  435.092720][T31165] netlink: 'syz.0.8474': attribute type 2 has an invalid length.
[  435.095832][T31165] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8474'.
[  435.138218][T31165] syz0: rxe_newlink: already configured on lo
[  435.145296][T31165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  435.197302][T31176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8477'.
[  435.377077][T31194] netlink: 'syz.0.8485': attribute type 13 has an invalid length.
[  435.408675][T31194] lo speed is unknown, defaulting to 1000
[  435.411226][T31199] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  435.420080][T31199] x_tables: duplicate underflow at hook 3
[  435.643206][T31221] 8021q: adding VLAN 0 to HW filter on device bond27
[  435.647080][T31221] bond0: (slave bond27): Enslaving as an active interface with a down link
[  435.911743][T31247] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  435.914370][T31247] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  435.950577][T31252] netlink: 'syz.2.8507': attribute type 21 has an invalid length.
[  435.984447][T31253] 8021q: adding VLAN 0 to HW filter on device bond62
[  435.991295][T31253] bond0: (slave bond62): Enslaving as an active interface with a down link
[  436.302893][  T128] block nbd0: Possible stuck request ffff888020b40000: control (read@0,1024B). Runtime 30 seconds
[  436.306547][  T128] block nbd0: Possible stuck request ffff888020b40200: control (read@1024,1024B). Runtime 30 seconds
[  436.310155][  T128] block nbd0: Possible stuck request ffff888020b40400: control (read@2048,1024B). Runtime 30 seconds
[  436.314108][  T128] block nbd0: Possible stuck request ffff888020b40600: control (read@3072,1024B). Runtime 30 seconds
[  436.319427][T31278] netlink: 'syz.1.8517': attribute type 13 has an invalid length.
[  436.328763][T31278] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  436.336608][T31274] lo speed is unknown, defaulting to 1000
[  436.799927][T31330] netlink: 'syz.0.8532': attribute type 1 has an invalid length.
[  436.804221][T31330] netlink: 'syz.0.8532': attribute type 2 has an invalid length.
[  436.807992][T31330] netlink: 'syz.0.8532': attribute type 1 has an invalid length.
[  436.813973][T31330] netlink: 'syz.0.8532': attribute type 2 has an invalid length.
[  436.865997][T31336] 8021q: adding VLAN 0 to HW filter on device bond63
[  436.875052][T31336] bond0: (slave bond63): Enslaving as an active interface with a down link
[  437.300111][T31379] dvmrp8: entered allmulticast mode
[  437.312640][T31380] dvmrp8: left allmulticast mode
[  437.481138][T31394] openvswitch: netlink: Unknown key attributes 2
[  438.058808][T31431] __nla_validate_parse: 14 callbacks suppressed
[  438.058819][T31431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8568'.
[  438.076132][T31441] netlink: 'syz.2.8571': attribute type 6 has an invalid length.
[  438.189350][T31452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8573'.
[  438.222999][T31454] macsec0: entered promiscuous mode
[  438.225023][T31454] macsec0: entered allmulticast mode
[  438.226977][T31454] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  438.572342][T31464] netlink: 'syz.1.8579': attribute type 11 has an invalid length.
[  438.702650][T31477] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  438.857130][T31488] 8021q: adding VLAN 0 to HW filter on device bond64
[  438.910775][T31494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8589'.
[  438.914038][T31494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8589'.
[  438.964881][T31496] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  439.026578][T31498] 0X: left allmulticast mode
[  439.037343][T31498] ip6_vti0: left promiscuous mode
[  439.039311][T31498] ip6_vti0: left allmulticast mode
[  439.062764][T31498] veth1: left promiscuous mode
[  439.075137][T31498] vxlan0: left allmulticast mode
[  439.082951][T31498] veth5: left promiscuous mode
[  439.085137][T31498] veth7: left promiscuous mode
[  439.088706][T31498] macvtap2: left promiscuous mode
[  439.090403][T31498] macvtap2: left allmulticast mode
[  439.092425][T31498] gretap2: left promiscuous mode
[  439.096766][T31498] bridge12: left allmulticast mode
[  439.100602][T31498] vlan2: left promiscuous mode
[  439.102266][T31498] hsr_slave_1: left promiscuous mode
[  439.104212][T31498] vlan2: left allmulticast mode
[  439.105841][T31498] hsr_slave_1: left allmulticast mode
[  439.121014][T31498] ip6gretap3: left promiscuous mode
[  439.134230][T31498] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  439.137173][T31498] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  439.140064][T31498] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  439.143014][T31498] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  439.173091][T31498] bond20: left promiscuous mode
[  439.175490][T31498] vcan0: left promiscuous mode
[  439.215975][T31505] 8021q: adding VLAN 0 to HW filter on device bond65
[  439.222677][T31505] bond0: (slave bond65): Enslaving as an active interface with a down link
[  439.239705][T31514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8597'.
[  439.242921][T31514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8597'.
[  439.243088][T31515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8597'.
[  439.252699][T31515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8597'.
[  439.326101][T31522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8596'.
[  439.331915][T31524] netlink: 364 bytes leftover after parsing attributes in process `syz.0.8601'.
[  439.335060][T31524] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  439.494911][   T60] block nbd3: Possible stuck request ffff888020c40000: control (read@0,1024B). Runtime 60 seconds
[  439.498728][   T60] block nbd3: Possible stuck request ffff888020c40200: control (read@1024,1024B). Runtime 60 seconds
[  439.814553][ T5278] udevd[5278]: worker [12758] /devices/virtual/block/nbd3 is taking a long time
[  439.973655][T31577] lo speed is unknown, defaulting to 1000
[  439.975701][T31577] lo speed is unknown, defaulting to 1000
[  439.978373][T31577] lo speed is unknown, defaulting to 1000
[  439.985280][T31577] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  439.999115][T31577] lo speed is unknown, defaulting to 1000
[  440.001929][T31577] lo speed is unknown, defaulting to 1000
[  440.004541][T31577] lo speed is unknown, defaulting to 1000
[  440.204324][T31600] validate_nla: 10 callbacks suppressed
[  440.204336][T31600] netlink: 'syz.0.8626': attribute type 16 has an invalid length.
[  440.218860][T31600] netlink: 'syz.0.8626': attribute type 17 has an invalid length.
[  440.225860][T31600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  440.269047][T31606] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  440.293256][T31607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  441.129759][T31631] xt_hashlimit: size too large, truncated to 1048576
[  441.211827][T31634] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  441.219998][T31639] netlink: 'syz.2.8640': attribute type 16 has an invalid length.
[  441.222647][T31639] netlink: 'syz.2.8640': attribute type 17 has an invalid length.
[  441.231706][T31639] erspan0: left promiscuous mode
[  441.247470][T31639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  441.270320][T31641] netlink: 'syz.0.8641': attribute type 4 has an invalid length.
[  441.298923][T31643] netlink: 'syz.2.8642': attribute type 13 has an invalid length.
[  441.301715][T31643] netlink: 'syz.2.8642': attribute type 17 has an invalid length.
[  441.313980][T31643] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  441.350130][T31643] lo speed is unknown, defaulting to 1000
[  441.471393][T31657] netlink: 'syz.0.8647': attribute type 11 has an invalid length.
[  441.499990][T31643] lo speed is unknown, defaulting to 1000
[  441.654228][T31676] netlink: 'syz.0.8652': attribute type 16 has an invalid length.
[  441.657025][T31676] netlink: 'syz.0.8652': attribute type 17 has an invalid length.
[  441.662093][T31676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  442.380586][T31714] 8021q: adding VLAN 0 to HW filter on device bond44
[  442.384200][T31714] bond0: (slave bond44): Enslaving as an active interface with a down link
[  442.493481][    T9] lo speed is unknown, defaulting to 1000
[  442.495560][    T9] syz1: Port: 1 Link DOWN
[  442.502036][    T9] lo speed is unknown, defaulting to 1000
[  442.507508][    T9] syz1: Port: 1 Link ACTIVE
[  442.643265][T31747] 8021q: adding VLAN 0 to HW filter on device bond45
[  442.647477][T31747] bond0: (slave bond45): Enslaving as an active interface with a down link
[  442.721933][T31756] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  442.728634][T31756] syzkaller0: entered promiscuous mode
[  442.730643][T31756] syzkaller0: entered allmulticast mode
[  442.746638][T31756] sch_fq: defrate 257 ignored.
[  443.437182][T31787] __nla_validate_parse: 25 callbacks suppressed
[  443.437192][T31787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8696'.
[  443.635066][T31812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8706'.
[  443.979784][T31817] bond66: (slave bridge23): making interface the new active one
[  443.983623][T31817] bond66: (slave bridge23): Enslaving as an active interface with an up link
[  443.988121][  T128] block nbd2: Possible stuck request ffff888020c10000: control (read@0,1024B). Runtime 300 seconds
[  443.992754][  T128] block nbd2: Possible stuck request ffff888020c10200: control (read@1024,1024B). Runtime 300 seconds
[  443.996565][  T128] block nbd2: Possible stuck request ffff888020c10400: control (read@2048,1024B). Runtime 300 seconds
[  444.000520][  T128] block nbd2: Possible stuck request ffff888020c10600: control (read@3072,1024B). Runtime 300 seconds
[  444.004969][T31820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  444.022461][T31822] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  444.028772][T31822] syzkaller0: entered promiscuous mode
[  444.030707][T31822] syzkaller0: entered allmulticast mode
[  444.072469][T31822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8710'.
[  444.237177][T31843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  444.251493][T31845] bond0: entered promiscuous mode
[  444.258834][T31845] macvlan1: entered promiscuous mode
[  444.261225][T31845] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  444.264035][T31845] Cannot create hsr debugfs directory
[  444.268994][T31845] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  444.272348][T31845] hsr1: Slave B (macvlan1) is not up; please bring it up to get a fully working HSR network
[  444.275841][T31845] hsr1: entered promiscuous mode
[  444.280256][T31843] netlink: 404 bytes leftover after parsing attributes in process `syz.0.8716'.
[  444.284480][T31843] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8716'.
[  444.289481][T31843] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8716'.
[  444.293145][T31845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8718'.
[  444.473461][T31876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8726'.
[  444.476541][T31876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8726'.
[  444.496725][T31875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8726'.
[  444.825210][T31927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  444.982107][T31949] vlan0: entered promiscuous mode
[  444.983911][T31949] veth0: entered promiscuous mode
[  445.163636][T31970] lo speed is unknown, defaulting to 1000
[  445.173509][T31972] xt_TCPMSS: Only works on TCP SYN packets
[  445.256018][T31970] lo speed is unknown, defaulting to 1000
[  446.111743][T31991] validate_nla: 14 callbacks suppressed
[  446.111758][T31991] netlink: 'syz.1.8762': attribute type 4 has an invalid length.
[  446.174978][T31999] xt_ecn: cannot match TCP bits for non-tcp packets
[  446.199817][T31997] syzkaller1: entered promiscuous mode
[  446.204508][T31997] syzkaller1: entered allmulticast mode
[  447.001566][T32067] netlink: 'syz.1.8790': attribute type 1 has an invalid length.
[  447.200175][T32088] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744072737849344)
[  447.203928][T32088] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  447.330303][T32105] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  447.344396][T32108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  447.396413][T32114] netlink: 'syz.1.8805': attribute type 4 has an invalid length.
[  447.628571][T32141] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  447.636325][T32141] syzkaller1: entered promiscuous mode
[  447.642075][T32141] syzkaller1: entered allmulticast mode
[  448.065542][T32178] lo speed is unknown, defaulting to 1000
[  448.158135][T32178] lo speed is unknown, defaulting to 1000
[  448.524392][T32198] __nla_validate_parse: 18 callbacks suppressed
[  448.524409][T32198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8833'.
[  448.535502][T32198] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8833'.
[  448.616361][T32209] netlink: 236 bytes leftover after parsing attributes in process `syz.1.8837'.
[  448.622917][T32209] netlink: 'syz.1.8837': attribute type 39 has an invalid length.
[  448.628156][T32209] veth0_macvtap: left promiscuous mode
[  448.633297][T32211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8838'.
[  448.637618][T32211] netlink: 'syz.0.8838': attribute type 1 has an invalid length.
[  448.641504][T32211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8838'.
[  448.709559][T32214] lo speed is unknown, defaulting to 1000
[  448.739902][T32217] netlink: 'syz.0.8839': attribute type 21 has an invalid length.
[  448.742666][T32217] netlink: 'syz.0.8839': attribute type 6 has an invalid length.
[  448.752959][T32217] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8839'.
[  448.759466][T32217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8839'.
[  448.873040][T32214] lo speed is unknown, defaulting to 1000
[  449.046202][T32239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  449.048999][T32239] IPv6: NLM_F_CREATE should be set when creating new route
[  449.051653][T32239] IPv6: NLM_F_CREATE should be set when creating new route
[  449.054087][T32239] IPv6: NLM_F_CREATE should be set when creating new route
[  449.057588][T32239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  449.073909][T32236] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8847'.
[  449.096905][T32239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8848'.
[  449.491614][T32273] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.542468][T32279] netlink: 'syz.1.8860': attribute type 4 has an invalid length.
[  449.596564][T32282] netlink: 'syz.1.8861': attribute type 15 has an invalid length.
[  449.606646][T32282] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.664590][T32284] netlink: 'syz.1.8862': attribute type 16 has an invalid length.
[  449.690457][T32284] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  449.713363][   T33] audit: type=1804 audit(1753155719.039:9): pid=32287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.8863" name="/newroot/2777/memory.events" dev="tmpfs" ino=14181 res=1 errno=0
[  449.725552][   T33] audit: type=1800 audit(1753155719.049:10): pid=32287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8863" name="memory.events" dev="tmpfs" ino=14181 res=0 errno=0
[  449.748758][  T128] block nbd4: Possible stuck request ffff888020ce0000: control (read@0,1024B). Runtime 60 seconds
[  449.753869][  T128] block nbd4: Possible stuck request ffff888020ce0200: control (read@1024,1024B). Runtime 60 seconds
[  449.759155][  T128] block nbd4: Possible stuck request ffff888020ce0400: control (read@2048,1024B). Runtime 60 seconds
[  449.764004][  T128] block nbd4: Possible stuck request ffff888020ce0600: control (read@3072,1024B). Runtime 60 seconds
[  449.850270][T32298] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073508225023)
[  449.854797][T32298] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  450.029406][T32316] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  450.045947][T32316] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  450.174230][T32327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8876'.
[  450.413668][T32338] tipc: Resetting bearer <eth:geneve1>
[  450.470666][T32338] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  450.473689][T32338] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  450.476632][T32338] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  450.480173][T32338] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  450.506866][T32338] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  450.510065][T32338] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  450.513040][T32338] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  450.515957][T32338] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  450.572702][T32338] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  450.575887][T32338] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  450.579067][T32338] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  450.582083][T32338] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  450.632015][  T972] lo speed is unknown, defaulting to 1000
[  450.634307][  T972] syz1: Port: 1 Link DOWN
[  450.760905][T32358] tipc: New replicast peer: 255.255.255.255
[  450.763494][T32358] tipc: Enabled bearer <udp:syz2>, priority 6
[  451.561752][T32367] validate_nla: 5 callbacks suppressed
[  451.561764][T32367] netlink: 'syz.2.8892': attribute type 16 has an invalid length.
[  451.566823][T32367] netlink: 'syz.2.8892': attribute type 17 has an invalid length.
[  452.259754][ T5278] udevd[5278]: worker [12756] /devices/virtual/block/nbd4 is taking a long time
[  452.604684][T32403] netlink: 'syz.0.8906': attribute type 4 has an invalid length.
[  452.736804][T32412] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  452.926459][T32442] netlink: 'syz.0.8917': attribute type 16 has an invalid length.
[  452.934032][T32442] netlink: 'syz.0.8917': attribute type 17 has an invalid length.
[  452.939515][T32442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  453.091040][T32458] netlink: 'syz.0.8922': attribute type 12 has an invalid length.
[  453.808855][T32512] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  454.035183][T32527] __nla_validate_parse: 6 callbacks suppressed
[  454.035201][T32527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8943'.
[  454.062312][T32527] team1: entered promiscuous mode
[  454.066265][T32527] team1: entered allmulticast mode
[  454.112069][T32529] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8944'.
[  454.148301][T32532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8946'.
[  454.151673][T32532] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  454.154929][T32532] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  454.236365][T32542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8949'.
[  454.276790][T32544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8950'.
[  454.413415][T32551] netlink: 404 bytes leftover after parsing attributes in process `syz.2.8952'.
[  454.416721][T32551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8952'.
[  454.420122][T32551] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8952'.
[  454.423093][T32551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8952'.
[  454.485424][T32555] bridge0: entered promiscuous mode
[  454.560728][T32559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8956'.
[  454.571961][T32559] bond20: (slave vcan0): Releasing backup interface
[  454.574907][T32559] bond20: Destroying bond
[  454.710572][T32559] bond20 (unregistering): Released all slaves
[  454.806940][   T33] audit: type=1800 audit(1753155724.129:11): pid=32572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8961" name="blkio.bfq.time_recursive" dev="tmpfs" ino=14359 res=0 errno=0
[  454.817318][   T33] audit: type=1800 audit(1753155724.139:12): pid=32574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8961" name="blkio.bfq.time_recursive" dev="tmpfs" ino=14359 res=0 errno=0
[  455.052559][T32581] pim6reg: entered allmulticast mode
[  455.057887][T32581] pim6reg: left allmulticast mode
[  457.869625][T32588] netlink: 'syz.2.8966': attribute type 39 has an invalid length.
[  458.572387][T32619] netlink: 'syz.0.8978': attribute type 1 has an invalid length.
[  458.597907][T32619] bond46: (slave bridge20): making interface the new active one
[  458.601284][T32619] bond46: (slave bridge20): Enslaving as an active interface with an up link
[  458.750464][T32634] netlink: 'syz.1.8984': attribute type 16 has an invalid length.
[  458.753164][T32634] netlink: 'syz.1.8984': attribute type 17 has an invalid length.
[  458.782452][T32634] 8021q: adding VLAN 0 to HW filter on device team0
[  458.813263][T32634] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  458.824319][T32634] 8021q: adding VLAN 0 to HW filter on device hsr0
[  458.829498][T32634] veth1_macvtap: left promiscuous mode
[  458.831943][T32634] veth1_macvtap: entered promiscuous mode
[  458.840303][T32634] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.843212][T32634] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.846448][T32634] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.849838][T32634] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.874876][T32634] 8021q: adding VLAN 0 to HW filter on device bond1
[  458.880690][T32634] 8021q: adding VLAN 0 to HW filter on device bond2
[  458.889391][T32634] 8021q: adding VLAN 0 to HW filter on device bond3
[  458.892352][T32634] 8021q: adding VLAN 0 to HW filter on device bond4
[  458.895919][T32634] 8021q: adding VLAN 0 to HW filter on device batadv1
[  458.899864][T32634] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  458.902711][T32634] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  458.905393][T32634] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  458.908821][T32634] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  458.913993][T32634] 8021q: adding VLAN 0 to HW filter on device bond5
[  458.916802][T32634] 8021q: adding VLAN 0 to HW filter on device bond6
[  458.922005][T32634] 8021q: adding VLAN 0 to HW filter on device bond7
[  458.925954][T32634] 8021q: adding VLAN 0 to HW filter on device bond8
[  458.930386][T32634] 8021q: adding VLAN 0 to HW filter on device bond9
[  458.934092][T32634] 8021q: adding VLAN 0 to HW filter on device bond10
[  458.937208][T32634] 8021q: adding VLAN 0 to HW filter on device bond11
[  458.940749][T32634] 8021q: adding VLAN 0 to HW filter on device bond12
[  458.944855][T32634] 8021q: adding VLAN 0 to HW filter on device bond13
[  458.947903][T32634] 8021q: adding VLAN 0 to HW filter on device bond14
[  458.950713][T32634] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  458.953547][T32634] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  458.956479][T32634] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  458.960303][T32634] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  458.966688][T32634] 8021q: adding VLAN 0 to HW filter on device bond15
[  458.969828][T32634] 8021q: adding VLAN 0 to HW filter on device bond16
[  458.973525][T32634] 8021q: adding VLAN 0 to HW filter on device bond17
[  458.976393][T32634] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  458.979623][T32634] 8021q: adding VLAN 0 to HW filter on device bond18
[  458.983694][T32634] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  458.991759][    T9] lo speed is unknown, defaulting to 1000
[  458.993805][    T9] syz1: Port: 1 Link ACTIVE
[  459.023761][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  459.050691][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  459.054034][T32647] netlink: 'syz.1.8989': attribute type 1 has an invalid length.
[  459.100743][T32647] __nla_validate_parse: 7 callbacks suppressed
[  459.100754][T32647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8989'.
[  459.186483][T32664] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  459.336489][T32678] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  459.356200][T32678] netlink: 'syz.1.9001': attribute type 10 has an invalid length.
[  459.470739][T32704] netlink: 'syz.1.9008': attribute type 16 has an invalid length.
[  459.473987][T32704] netlink: 'syz.1.9008': attribute type 17 has an invalid length.
[  459.498883][T32704] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  459.518180][T32707] IPv6: sit7: Disabled Multicast RS
[  459.520670][T32707] sit7: entered allmulticast mode
[  459.576539][T32713] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9011'.
[  459.631327][T32715] lo speed is unknown, defaulting to 1000
[  459.715110][T32715] lo speed is unknown, defaulting to 1000
[  459.983870][T32729] sctp: [Deprecated]: syz.1.9015 (pid 32729) Use of struct sctp_assoc_value in delayed_ack socket option.
[  459.983870][T32729] Use struct sctp_sack_info instead
[  460.265358][T32739] bond0: option mode: unable to set because the bond device has slaves
[  460.339893][T32743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9021'.
[  460.464810][T32757] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  460.469489][T32758] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9025'.
[  460.478024][T32758] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9025'.
[  460.482052][T32758] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9025'.
[  460.485446][T32758] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9025'.
[  460.491405][T32758] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9025'.
[  460.494809][T32758] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9025'.
[  460.498445][T32758] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9025'.
[  460.539616][T32762] netlink: del zone limit has 4 unknown bytes
[  460.593196][T32763] lo speed is unknown, defaulting to 1000
[  460.716638][T32763] lo speed is unknown, defaulting to 1000
[  460.959910][  T332] netlink: 'syz.1.9037': attribute type 1 has an invalid length.
[  460.988874][  T332] 8021q: adding VLAN 0 to HW filter on device bond69
[  460.992687][  T332] bond68: (slave bond69): making interface the new active one
[  460.995756][  T332] bond68: (slave bond69): Enslaving as an active interface with an up link
[  461.001799][  T332] 8021q: adding VLAN 0 to HW filter on device bond68
[  461.140680][  T348] xt_CT: You must specify a L4 protocol and not use inversions on it
[  461.374844][  T370] netlink: 'syz.1.9049': attribute type 1 has an invalid length.
[  462.122832][  T427] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  462.460612][  T456] lo speed is unknown, defaulting to 1000
[  462.586894][  T456] lo speed is unknown, defaulting to 1000
[  462.731908][  T473] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  462.988252][  T490] validate_nla: 2 callbacks suppressed
[  462.988262][  T490] netlink: 'syz.1.9091': attribute type 16 has an invalid length.
[  462.992904][  T490] netlink: 'syz.1.9091': attribute type 17 has an invalid length.
[  463.016573][  T490] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  463.162124][  T510] !: left allmulticast mode
[  463.163778][  T510] !: left promiscuous mode
[  463.166043][  T510] bridge0: port 2(0!) entered disabled state
[  463.174521][  T510] bond55: left allmulticast mode
[  463.176710][  T510] bond55: left promiscuous mode
[  463.179896][  T510] bridge0: port 1(bond55) entered disabled state
[  463.248536][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  463.252024][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  463.321271][  T525] netlink: 'syz.0.9101': attribute type 1 has an invalid length.
[  463.380533][  T532] netlink: 'syz.1.9103': attribute type 10 has an invalid length.
[  463.403420][  T534] netlink: 'syz.0.9105': attribute type 16 has an invalid length.
[  463.406207][  T534] netlink: 'syz.0.9105': attribute type 17 has an invalid length.
[  463.427131][  T534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  463.515960][  T541] syzkaller1: entered promiscuous mode
[  463.519056][  T541] syzkaller1: entered allmulticast mode
[  463.715281][  T564] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  463.886601][  T577] IPVS: length: 148 != 24
[  464.114484][  T601] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  464.172897][  T607] __nla_validate_parse: 79 callbacks suppressed
[  464.172910][  T607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9125'.
[  464.186972][  T607] syz_tun: entered allmulticast mode
[  464.195888][  T607] dvmrp8: entered allmulticast mode
[  464.219452][T26421] page_pool_release_retry() stalled pool shutdown: id 137, 1 inflight 60 sec
[  464.262830][  T613] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9128'.
[  464.263345][  T614] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9128'.
[  464.380229][  T622] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  464.505288][  T626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9134'.
[  464.541460][  T629] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9135'.
[  464.545358][  T629] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.9135'.
[  464.569905][  T631] netlink: 'syz.1.9136': attribute type 21 has an invalid length.
[  464.572759][  T631] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9136'.
[  464.575819][  T631] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9136'.
[  464.614236][  T633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9137'.
[  464.725476][  T637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9139'.
[  464.847343][  T645] pimreg: entered allmulticast mode
[  464.860816][  T645] pimreg: left allmulticast mode
[  464.946477][  T600] syz_tun: left allmulticast mode
[  465.017919][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[  465.329321][  T691] netlink: 'syz.2.9156': attribute type 4 has an invalid length.
[  465.333981][  T689] netlink: 'syz.2.9156': attribute type 4 has an invalid length.
[  465.340091][  T688] netlink: 'syz.0.9155': attribute type 1 has an invalid length.
[  465.592820][  T712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  465.613523][  T724] xt_TCPMSS: Only works on TCP SYN packets
[  465.889188][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[  465.940056][  T769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  466.055487][  T779] 8021q: adding VLAN 0 to HW filter on device bond48
[  466.060493][  T779] bond0: (slave bond48): Enslaving as an active interface with a down link
[  466.119548][  T793] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  466.264704][  T811] sctp: [Deprecated]: syz.2.9189 (pid 811) Use of int in max_burst socket option deprecated.
[  466.264704][  T811] Use struct sctp_assoc_value instead
[  466.370116][  T128] block nbd0: Possible stuck request ffff888020b40000: control (read@0,1024B). Runtime 60 seconds
[  466.373938][  T128] block nbd0: Possible stuck request ffff888020b40200: control (read@1024,1024B). Runtime 60 seconds
[  466.377899][  T128] block nbd0: Possible stuck request ffff888020b40400: control (read@2048,1024B). Runtime 60 seconds
[  466.381700][  T128] block nbd0: Possible stuck request ffff888020b40600: control (read@3072,1024B). Runtime 60 seconds
[  467.087815][T26515] Bluetooth: hci2: command 0x0401 tx timeout
[  467.588598][  T861] bridge_slave_0: default FDB implementation only supports local addresses
[  468.180788][  T910] xt_CONNSECMARK: invalid mode: 254
[  468.457209][  T946] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  468.461960][  T946] syzkaller0: entered promiscuous mode
[  468.464721][  T946] syzkaller0: entered allmulticast mode
[  468.524971][  T948] openvswitch: netlink: IPv4 tun info is not correct
[  469.225308][  T955] validate_nla: 7 callbacks suppressed
[  469.225324][  T955] netlink: 'syz.0.9227': attribute type 16 has an invalid length.
[  469.237592][  T955] netlink: 'syz.0.9227': attribute type 17 has an invalid length.
[  469.244269][  T955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  469.306512][  T957] __nla_validate_parse: 23 callbacks suppressed
[  469.306523][  T957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9229'.
[  469.585791][   T60] block nbd3: Possible stuck request ffff888020c40000: control (read@0,1024B). Runtime 90 seconds
[  469.589957][   T60] block nbd3: Possible stuck request ffff888020c40200: control (read@1024,1024B). Runtime 90 seconds
[  470.102148][  T967] netlink: 'syz.1.9233': attribute type 7 has an invalid length.
[  470.140422][  T967] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  470.144072][  T967] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.147480][  T967] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  470.182807][  T967] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  470.186628][  T967] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.191963][  T967] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  470.242896][  T967] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  470.246394][  T967] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.251263][  T967] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  470.292486][  T967] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  470.295793][  T967] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.300085][  T967] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  470.368318][  T967] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  470.371651][  T967] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  470.375155][  T967] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  470.383978][  T967] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  470.387127][  T967] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  470.391726][  T967] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  470.402873][  T967] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  470.406012][  T967] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  470.410467][  T967] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  470.418694][  T967] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  470.421624][  T967] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  470.424551][  T967] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  470.432685][  T982] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9236'.
[  470.495953][  T986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9238'.
[  470.518829][  T986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9238'.
[  470.582286][  T988] netlink: 'syz.1.9239': attribute type 7 has an invalid length.
[  470.585428][  T988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9239'.
[  471.045968][  T992] netlink: 'syz.1.9240': attribute type 1 has an invalid length.
[  471.058469][  T992] netlink: 'syz.1.9240': attribute type 1 has an invalid length.
[  471.119585][ T1000] netlink: 'syz.1.9241': attribute type 11 has an invalid length.
[  471.122321][ T1000] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9241'.
[  471.315049][ T1003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9242'.
[  471.331606][ T1003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9242'.
[  471.353063][ T1030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9247'.
[  471.369197][ T1023] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9246'.
[  471.410074][ T1039] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  471.482556][ T1045] dvmrp8: entered allmulticast mode
[  471.945505][ T1108] netlink: 'syz.2.9263': attribute type 10 has an invalid length.
[  471.985752][ T1110] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  472.128599][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  472.132481][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  472.317059][ T1124] netlink: 'syz.0.9267': attribute type 16 has an invalid length.
[  472.320281][ T1124] netlink: 'syz.0.9267': attribute type 17 has an invalid length.
[  472.325020][ T1124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  472.358854][ T1126] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  472.511338][ T1142] netlink: 'syz.0.9273': attribute type 3 has an invalid length.
[  472.856619][ T1180] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  472.920246][ T1185] syz_tun: entered allmulticast mode
[  473.063048][ T1195] batadv_slave_0: left promiscuous mode
[  473.069578][ T1195] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  473.095865][ T1195] lo speed is unknown, defaulting to 1000
[  473.182834][ T1195] lo speed is unknown, defaulting to 1000
[  473.541855][ T1207] openvswitch: netlink: EtherType 10 is less than min 600
[  473.589875][ T1211] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  473.690279][ T1179] syz_tun: left allmulticast mode
[  474.057384][  T128] block nbd2: Possible stuck request ffff888020c10000: control (read@0,1024B). Runtime 330 seconds
[  474.062798][  T128] block nbd2: Possible stuck request ffff888020c10200: control (read@1024,1024B). Runtime 330 seconds
[  474.066458][  T128] block nbd2: Possible stuck request ffff888020c10400: control (read@2048,1024B). Runtime 330 seconds
[  474.071691][  T128] block nbd2: Possible stuck request ffff888020c10600: control (read@3072,1024B). Runtime 330 seconds
[  474.089625][ T1264] xt_hashlimit: size too large, truncated to 1048576
[  474.312345][ T1284] __nla_validate_parse: 36 callbacks suppressed
[  474.312357][ T1284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9310'.
[  474.341508][ T1298] validate_nla: 12 callbacks suppressed
[  474.341519][ T1298] netlink: 'syz.2.9313': attribute type 9 has an invalid length.
[  474.389939][ T1302] syzkaller1: entered promiscuous mode
[  474.392158][ T1302] syzkaller1: entered allmulticast mode
[  474.527937][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[  475.125760][ T1341] netlink: 240 bytes leftover after parsing attributes in process `syz.0.9324'.
[  475.129320][ T1341] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9324'.
[  475.200903][ T1350] IPVS: stopping backup sync thread 19197 ...
[  475.275973][ T1368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9329'.
[  475.286085][ T1368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9329'.
[  475.422141][ T1381] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode
[  475.443682][ T1384] No such timeout policy "syz0"
[  475.444741][ T1381] bond25: (slave bond26): Releasing backup interface
[  475.449235][ T1381] bond25: (slave bond26): the permanent HWaddr of slave - 56:0a:18:b9:9c:85 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  475.468102][ T1381] bond25: (slave gretap0): making interface the new active one
[  475.472295][ T1381] bond25: (slave gretap0): Releasing backup interface
[  475.475879][ T1381] bond0: (slave bond27): Releasing active interface
[  475.488547][ T1385] netlink: 'syz.2.9333': attribute type 10 has an invalid length.
[  475.667625][ T1396] sctp: [Deprecated]: syz.0.9337 (pid 1396) Use of struct sctp_assoc_value in delayed_ack socket option.
[  475.667625][ T1396] Use struct sctp_sack_info instead
[  476.003170][ T1407] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9341'.
[  476.135929][ T1416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9344'.
[  476.139859][ T1416] netlink: 'syz.2.9344': attribute type 7 has an invalid length.
[  476.142548][ T1416] netlink: 'syz.2.9344': attribute type 8 has an invalid length.
[  476.145444][ T1416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9344'.
[  476.149946][ T1416] openvswitch: netlink: Message has 20 unknown bytes.
[  476.152259][ T1416] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  476.235148][ T1425] vlan0: entered promiscuous mode
[  476.237178][ T1425] vlan0: entered allmulticast mode
[  476.239351][ T1425] bridge0: entered allmulticast mode
[  476.305732][ T1427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9347'.
[  476.366426][ T1429] netlink: 'syz.2.9348': attribute type 21 has an invalid length.
[  476.369475][ T1429] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9348'.
[  476.400515][ T1431] netlink: set zone limit has 8 unknown bytes
[  476.483191][ T1440] netlink: 'syz.0.9352': attribute type 4 has an invalid length.
[  476.636992][ T1457] netlink: 'syz.0.9358': attribute type 1 has an invalid length.
[  477.081093][ T5278] udevd[5278]: worker [5828] /devices/virtual/block/nbd0 is taking a long time
[  477.162229][ T1518] openvswitch: netlink: Missing key (keys=40, expected=100)
[  477.571292][ T1550] netlink: 'syz.2.9388': attribute type 1 has an invalid length.
[  477.588419][ T1550] 8021q: adding VLAN 0 to HW filter on device bond20
[  477.609781][ T1550] 8021q: adding VLAN 0 to HW filter on device bond20
[  477.615144][ T1550] bond20: (slave vxcan5): The slave device specified does not support setting the MAC address
[  477.623405][ T1550] bond20: (slave vxcan5): Error -95 calling set_mac_address
[  477.639860][ T1553] macsec1: entered allmulticast mode
[  477.658381][ T1554] veth15: entered promiscuous mode
[  477.661849][ T1554] bond20: (slave veth15): Enslaving as an active interface with a down link
[  477.725243][ T1554] erspan0: entered allmulticast mode
[  477.744555][ T1561] netlink: 'syz.0.9392': attribute type 16 has an invalid length.
[  477.747299][ T1561] netlink: 'syz.0.9392': attribute type 17 has an invalid length.
[  477.800527][ T1561] tipc: Resetting bearer <eth:syzkaller0>
[  477.807916][ T1561] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  477.810674][ T1561] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  477.813450][ T1561] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  477.816243][ T1561] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  477.824063][ T1561] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  477.848401][ T1565] IPv6: NLM_F_REPLACE set, but no existing node found!
[  477.860526][    T9] lo speed is unknown, defaulting to 1000
[  477.862965][    T9] syz0: Port: 1 Link DOWN
[  477.864479][    T9] lo speed is unknown, defaulting to 1000
[  478.070244][ T1575] xt_hashlimit: max too large, truncated to 1048576
[  478.072585][ T1575] xt_hashlimit: overflow, rate too high: 0
[  478.693091][ T1583] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  478.762513][ T1589] syz_tun: entered allmulticast mode
[  479.385077][ T1637] __nla_validate_parse: 71 callbacks suppressed
[  479.385089][ T1637] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9419'.
[  479.521917][ T1582] syz_tun: left allmulticast mode
[  479.614745][ T1648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9423'.
[  479.742702][ T1652] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  479.838950][  T128] block nbd4: Possible stuck request ffff888020ce0000: control (read@0,1024B). Runtime 90 seconds
[  479.842866][  T128] block nbd4: Possible stuck request ffff888020ce0200: control (read@1024,1024B). Runtime 90 seconds
[  479.846645][  T128] block nbd4: Possible stuck request ffff888020ce0400: control (read@2048,1024B). Runtime 90 seconds
[  479.850430][  T128] block nbd4: Possible stuck request ffff888020ce0600: control (read@3072,1024B). Runtime 90 seconds
[  480.256550][ T1665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9428'.
[  480.350881][ T1673] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9431'.
[  480.463611][ T1688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9437'.
[  480.584881][ T1698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9440'.
[  480.589048][ T1698] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9440'.
[  480.595920][ T1702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9441'.
[  480.632548][ T1707] ip6gretap0: entered promiscuous mode
[  480.686199][ T1707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9443'.
[  480.689656][ T1707] nbd: must specify at least one socket
[  480.767806][T26515] Bluetooth: hci2: command 0x0401 tx timeout
[  480.822269][ T1728] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  480.879241][ T1730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9448'.
[  481.642748][ T1738] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  482.925367][ T1832] bond0: entered promiscuous mode
[  482.930668][ T1832] bond0: left promiscuous mode
[  482.973413][ T1838] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  483.232848][ T1865] netlink: 'syz.0.9488': attribute type 2 has an invalid length.
[  483.563819][ T1895] bridge15: the hash_elasticity option has been deprecated and is always 16
[  483.566825][ T1895] bridge15: entered allmulticast mode
[  484.253758][ T1934] tipc: Enabled bearer <eth:geneve1>, priority 0
[  484.396510][ T1947] dvmrp8: left allmulticast mode
[  484.570111][ T1956] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  484.628159][ T1956] __nla_validate_parse: 12 callbacks suppressed
[  484.628171][ T1956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9509'.
[  484.973348][ T1979] delete_channel: no stack
[  485.008922][ T1984] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9518'.
[  485.261586][ T2011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9519'.
[  485.264693][ T2011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9519'.
[  485.345034][ T2017] delete_channel: no stack
[  485.507380][ T2028] 8021q: adding VLAN 0 to HW filter on device bond50
[  485.516812][ T2028] bond0: (slave bond50): Enslaving as an active interface with a down link
[  485.547172][ T2032] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  485.555393][ T2011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9519'.
[  485.583851][ T2034] xt_CT: You must specify a L4 protocol and not use inversions on it
[  485.591873][ T2034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9527'.
[  485.646381][ T2037] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  485.655299][ T2039] netlink: 'syz.2.9529': attribute type 5 has an invalid length.
[  485.658135][ T2039] netlink: 'syz.2.9529': attribute type 7 has an invalid length.
[  485.685522][ T2042] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  485.698268][ T2034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9527'.
[  485.701429][ T2034] netlink: 'syz.0.9527': attribute type 18 has an invalid length.
[  485.704105][ T2034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9527'.
[  485.742746][ T2045] syz_tun: entered allmulticast mode
[  486.143196][ T2062] 8021q: adding VLAN 0 to HW filter on device bond70
[  486.147460][ T2062] bond0: (slave bond70): Enslaving as an active interface with a down link
[  486.171798][ T2059] netlink: 248 bytes leftover after parsing attributes in process `syz.0.9536'.
[  486.300253][ T2075] ip6t_rpfilter: unknown options
[  486.467880][ T2075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9541'.
[  486.539286][ T2041] syz_tun: left allmulticast mode
[  486.591872][ T2096] netlink: 'syz.2.9545': attribute type 1 has an invalid length.
[  486.779156][ T2117] netlink: 'syz.2.9550': attribute type 1 has an invalid length.
[  486.782032][ T2117] netlink: 'syz.2.9550': attribute type 2 has an invalid length.
[  486.784747][ T2117] netlink: 'syz.2.9550': attribute type 1 has an invalid length.
[  486.789049][ T2117] xt_CT: You must specify a L4 protocol and not use inversions on it
[  486.878695][ T2125] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  486.881199][ T2125] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  487.014712][ T2135] netlink: 'syz.2.9557': attribute type 6 has an invalid length.
[  487.337252][ T2153] nbd: nbd2 already in use
[  487.445773][ T2159] netlink: 'syz.0.9564': attribute type 1 has an invalid length.
[  487.500266][ T2164] ipt_rpfilter: unknown options
[  487.692869][ T2180] block nbd0: NBD_DISCONNECT
[  487.694611][ T2180] block nbd0: Send disconnect failed -32
[  487.696571][ T2180] block nbd0: shutting down sockets
[  487.708460][    C0] blk_print_req_error: 6 callbacks suppressed
[  487.708472][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  487.713741][    C0] buffer_io_error: 6 callbacks suppressed
[  487.713748][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  487.718365][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  487.721306][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  487.723783][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  487.726746][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  487.729415][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  487.732417][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  487.736375][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  487.746396][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read
[  487.750468][ T5828] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  487.753570][ T5828] Buffer I/O error on dev nbd0, logical block 1, async page read
[  487.756151][ T5828] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  487.759268][ T5828] Buffer I/O error on dev nbd0, logical block 2, async page read
[  487.761859][ T5828] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  487.764836][ T5828] Buffer I/O error on dev nbd0, logical block 3, async page read
[  487.767488][ T5828] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  487.773035][ T5828] Buffer I/O error on dev nbd0, logical block 0, async page read
[  487.775637][ T5828] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  487.778724][ T5828] Buffer I/O error on dev nbd0, logical block 1, async page read
[  487.782531][ T5828] ldm_validate_partition_table(): Disk read failed.
[  487.785613][ T5828] Dev nbd0: unable to read RDB block 0
[  487.790418][ T5828]  nbd0: unable to read partition table
[  487.797300][ T5828] ldm_validate_partition_table(): Disk read failed.
[  487.800764][ T5828] Dev nbd0: unable to read RDB block 0
[  487.803879][ T5828]  nbd0: unable to read partition table
[  487.841342][ T2187] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  487.904040][ T2192] dvmrp8: entered allmulticast mode
[  488.029789][ T2200] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  488.085322][ T2202] 8021q: adding VLAN 0 to HW filter on device bond51
[  488.089473][ T2202] bond0: (slave bond51): Enslaving as an active interface with a down link
[  488.325072][ T2233] batadv_slave_0: entered promiscuous mode
[  488.331207][ T2233] batadv_slave_0: left promiscuous mode
[  488.767940][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  488.809320][ T2261] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  488.814540][    T9] lo speed is unknown, defaulting to 1000
[  488.816727][    T9] syz1: Port: 1 Link DOWN
[  488.932663][ T2269] sctp: [Deprecated]: syz.2.9603 (pid 2269) Use of struct sctp_assoc_value in delayed_ack socket option.
[  488.932663][ T2269] Use struct sctp_sack_info instead
[  488.950790][ T2267] veth1_macvtap: default FDB implementation only supports local addresses
[  488.984568][ T2272] SET target dimension over the limit!
[  489.205520][ T2296] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  489.210955][ T2296] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  489.408173][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  489.507114][ T2314] 8021q: adding VLAN 0 to HW filter on device bond28
[  489.510852][ T2314] bond0: (slave bond28): Enslaving as an active interface with a down link
[  490.089914][ T2332] validate_nla: 2 callbacks suppressed
[  490.089925][ T2332] netlink: 'syz.0.9623': attribute type 8 has an invalid length.
[  490.096545][ T2333] netlink: 'syz.0.9623': attribute type 8 has an invalid length.
[  490.229678][ T2349] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  490.254215][ T2346] delete_channel: no stack
[  490.313359][ T2360] __nla_validate_parse: 13 callbacks suppressed
[  490.313370][ T2360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9631'.
[  490.408164][ T2374] sctp: [Deprecated]: syz.0.9634 (pid 2374) Use of struct sctp_assoc_value in delayed_ack socket option.
[  490.408164][ T2374] Use struct sctp_sack_info instead
[  490.581405][ T2404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9644'.
[  490.795519][ T2428] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.798473][ T2428] batadv0: entered promiscuous mode
[  490.801976][ T2428] team0: Port device batadv0 added
[  491.329720][   T34] INFO: task udevd:5834 blocked for more than 143 seconds.
[  491.332371][   T34]       Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0
[  491.336466][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  491.340146][   T34] task:udevd           state:D stack:22632 pid:5834  tgid:5834  ppid:5278   task_flags:0x400140 flags:0x00004006
[  491.344302][   T34] Call Trace:
[  491.345598][   T34]  <TASK>
[  491.346736][   T34]  __schedule+0x16f5/0x4d00
[  491.350456][   T34]  ? schedule+0x165/0x360
[  491.352079][   T34]  ? __pfx___schedule+0x10/0x10
[  491.353929][   T34]  ? schedule+0x91/0x360
[  491.355558][   T34]  schedule+0x165/0x360
[  491.357123][   T34]  io_schedule+0x80/0xd0
[  491.358756][   T34]  folio_wait_bit_common+0x6b0/0xb90
[  491.360687][   T34]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  491.362833][   T34]  ? __pfx_wake_page_function+0x10/0x10
[  491.365418][   T34]  ? __filemap_get_folio+0x6c0/0xaf0
[  491.367483][   T34]  ? do_read_cache_folio+0x4e9/0x590
[  491.370638][   T34]  do_read_cache_folio+0x1aa/0x590
[  491.372577][   T34]  ? __pfx_blkdev_read_folio+0x10/0x10
[  491.374497][   T34]  read_part_sector+0xb6/0x2b0
[  491.376153][   T34]  adfspart_check_POWERTEC+0x8c/0xf30
[  491.378186][   T34]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  491.380021][   T34]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  491.381993][   T34]  bdev_disk_changed+0x75f/0x14b0
[  491.383753][   T34]  ? __pfx_bdev_disk_changed+0x10/0x10
[  491.385596][   T34]  ? wait_on_inode+0xc0/0x230
[  491.387233][   T34]  blkdev_get_whole+0x380/0x510
[  491.390178][   T34]  bdev_open+0x31e/0xd30
[  491.391690][   T34]  blkdev_open+0x3a8/0x510
[  491.393179][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  491.394947][   T34]  do_dentry_open+0xdf3/0x1970
[  491.396561][   T34]  vfs_open+0x3b/0x340
[  491.398204][   T34]  ? path_openat+0x2ecd/0x3830
[  491.399809][   T34]  path_openat+0x2ee5/0x3830
[  491.401357][   T34]  ? arch_stack_walk+0xfc/0x150
[  491.403045][   T34]  ? __pfx_path_openat+0x10/0x10
[  491.404708][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.407045][   T34]  do_filp_open+0x1fa/0x410
[  491.408937][   T34]  ? __lock_acquire+0xab9/0xd20
[  491.410631][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  491.412361][   T34]  ? _raw_spin_unlock+0x28/0x50
[  491.413996][   T34]  ? alloc_fd+0x64c/0x6c0
[  491.415445][   T34]  do_sys_openat2+0x121/0x1c0
[  491.417026][   T34]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  491.419202][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  491.420956][   T34]  ? rcu_is_watching+0x15/0xb0
[  491.422838][   T34]  __x64_sys_openat+0x138/0x170
[  491.424623][   T34]  do_syscall_64+0xfa/0x3b0
[  491.426474][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.428821][   T34]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  491.431070][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.433074][   T34] RIP: 0033:0x7fe4c3f169a4
[  491.434743][   T34] RSP: 002b:00007ffebe3eb4e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  491.439157][   T34] RAX: ffffffffffffffda RBX: 000055e145d46da0 RCX: 00007fe4c3f169a4
[  491.441932][   T34] RDX: 00000000000a0800 RSI: 000055e145d47010 RDI: 00000000ffffff9c
[  491.444487][   T34] RBP: 000055e145d47010 R08: 0000000000000001 R09: 7fffffffffffffff
[  491.447125][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  491.449983][   T34] R13: 000055e145d427c0 R14: 0000000000000001 R15: 000055e145d2e910
[  491.452838][   T34]  </TASK>
[  491.454061][   T34] 
[  491.454061][   T34] Showing all locks held in the system:
[  491.456660][   T34] 1 lock held by khungtaskd/34:
[  491.459537][   T34]  #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  491.462808][   T34] 2 locks held by getty/5655:
[  491.464535][   T34]  #0: ffff888021da10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  491.468106][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  491.471652][   T34] 1 lock held by udevd/5834:
[  491.473283][   T34]  #0: ffff888020ab7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  491.476541][   T34] 2 locks held by kworker/u10:5/7478:
[  491.479733][   T34]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  491.483749][   T34]  #1: ffffc90002b1fbc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  491.488684][   T34] 1 lock held by udevd/12756:
[  491.490385][   T34]  #0: ffff888020b77358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  491.493534][   T34] 1 lock held by udevd/12758:
[  491.495190][   T34]  #0: ffff888020b73358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  491.499673][   T34] 
[  491.500513][   T34] =============================================
[  491.500513][   T34] 
[  491.503295][   T34] NMI backtrace for cpu 1
[  491.503303][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 PREEMPT(full) 
[  491.503312][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  491.503317][   T34] Call Trace:
[  491.503321][   T34]  <TASK>
[  491.503326][   T34]  dump_stack_lvl+0x189/0x250
[  491.503338][   T34]  ? __wake_up_klogd+0xd9/0x110
[  491.503349][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  491.503357][   T34]  ? __pfx__printk+0x10/0x10
[  491.503371][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  491.503384][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  491.503392][   T34]  ? _printk+0xcf/0x120
[  491.503403][   T34]  ? __pfx__printk+0x10/0x10
[  491.503412][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  491.503421][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  491.503432][   T34]  watchdog+0xfee/0x1030
[  491.503440][   T34]  ? watchdog+0x1de/0x1030
[  491.503449][   T34]  kthread+0x711/0x8a0
[  491.503461][   T34]  ? __pfx_watchdog+0x10/0x10
[  491.503467][   T34]  ? __pfx_kthread+0x10/0x10
[  491.503477][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  491.503488][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  491.503495][   T34]  ? __pfx_kthread+0x10/0x10
[  491.503504][   T34]  ret_from_fork+0x3fc/0x770
[  491.503514][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  491.503523][   T34]  ? __switch_to_asm+0x39/0x70
[  491.503531][   T34]  ? __switch_to_asm+0x33/0x70
[  491.503539][   T34]  ? __pfx_kthread+0x10/0x10
[  491.503548][   T34]  ret_from_fork_asm+0x1a/0x30
[  491.503562][   T34]  </TASK>
[  491.503565][   T34] Sending NMI from CPU 1 to CPUs 0:
[  491.558258][    C0] NMI backtrace for cpu 0
[  491.558270][    C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 PREEMPT(full) 
[  491.558279][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  491.558285][    C0] Workqueue: bat_events batadv_nc_worker
[  491.558301][    C0] RIP: 0010:__this_cpu_preempt_check+0x0/0x20
[  491.558311][    C0] Code: 76 59 c5 f5 eb a7 e8 bf e4 ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 89 fe 48 c7 c7 00 8c e2 8b e9 bd fe ff ff cc cc cc
[  491.558317][    C0] RSP: 0018:ffffc900001077d0 EFLAGS: 00000002
[  491.558324][    C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: e750a65ce7678a00
[  491.558329][    C0] RDX: 0000000000000000 RSI: ffffffff8be28be0 RDI: ffffffff8d9a9a5d
[  491.558333][    C0] RBP: ffffc900001078d0 R08: ffffffff8fa1d6f7 R09: 1ffffffff1f43ade
[  491.558338][    C0] R10: dffffc0000000000 R11: fffffbfff1f43adf R12: dffffc0000000000
[  491.558343][    C0] R13: ffffffff81adc2d7 R14: ffff88804b025958 R15: ffff88801c2f8000
[  491.558348][    C0] FS:  0000000000000000(0000) GS:ffff8880b8623000(0000) knlGS:0000000000000000
[  491.558354][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  491.558358][    C0] CR2: 00007f5d3085bfc8 CR3: 000000002851e000 CR4: 00000000000006f0
[  491.558386][    C0] Call Trace:
[  491.558391][    C0]  <TASK>
[  491.558394][    C0]  lock_release+0xbc/0x3e0
[  491.558405][    C0]  _raw_spin_unlock_irqrestore+0x70/0x110
[  491.558416][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  491.558426][    C0]  ? rcu_is_watching+0x15/0xb0
[  491.558435][    C0]  __mod_timer+0xb37/0xf30
[  491.558447][    C0]  queue_delayed_work_on+0x18b/0x280
[  491.558456][    C0]  ? __pfx_batadv_nc_fwd_flush+0x10/0x10
[  491.558463][    C0]  ? __pfx_queue_delayed_work_on+0x10/0x10
[  491.558471][    C0]  ? batadv_nc_process_nc_paths+0xba/0x3a0
[  491.558477][    C0]  ? __msecs_to_jiffies+0x1e/0x50
[  491.558483][    C0]  ? batadv_nc_worker+0x4f8/0x610
[  491.558492][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  491.558500][    C0]  process_scheduled_works+0xae1/0x17b0
[  491.558513][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  491.558524][    C0]  worker_thread+0x8a0/0xda0
[  491.558537][    C0]  kthread+0x711/0x8a0
[  491.558546][    C0]  ? __pfx_worker_thread+0x10/0x10
[  491.558553][    C0]  ? __pfx_kthread+0x10/0x10
[  491.558569][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  491.558578][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  491.558584][    C0]  ? __pfx_kthread+0x10/0x10
[  491.558593][    C0]  ret_from_fork+0x3fc/0x770
[  491.558601][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  491.558609][    C0]  ? __switch_to_asm+0x39/0x70
[  491.558617][    C0]  ? __switch_to_asm+0x33/0x70
[  491.558624][    C0]  ? __pfx_kthread+0x10/0x10
[  491.558633][    C0]  ret_from_fork_asm+0x1a/0x30
[  491.558644][    C0]  </TASK>
[  491.559301][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  491.654739][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 PREEMPT(full) 
[  491.658815][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  491.662231][   T34] Call Trace:
[  491.663398][   T34]  <TASK>
[  491.664452][   T34]  dump_stack_lvl+0x99/0x250
[  491.666076][   T34]  ? __asan_memcpy+0x40/0x70
[  491.667683][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  491.669471][   T34]  ? __pfx__printk+0x10/0x10
[  491.671114][   T34]  panic+0x2db/0x790
[  491.672544][   T34]  ? __pfx_panic+0x10/0x10
[  491.674198][   T34]  ? nmi_backtrace_stall_check+0x433/0x440
[  491.676230][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  491.678073][   T34]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  491.680170][   T34]  watchdog+0x102d/0x1030
[  491.681661][   T34]  ? watchdog+0x1de/0x1030
[  491.683205][   T34]  kthread+0x711/0x8a0
[  491.684612][   T34]  ? __pfx_watchdog+0x10/0x10
[  491.686257][   T34]  ? __pfx_kthread+0x10/0x10
[  491.687835][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  491.689624][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  491.691401][   T34]  ? __pfx_kthread+0x10/0x10
[  491.692989][   T34]  ret_from_fork+0x3fc/0x770
[  491.694518][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  491.696208][   T34]  ? __switch_to_asm+0x39/0x70
[  491.697902][   T34]  ? __switch_to_asm+0x33/0x70
[  491.699679][   T34]  ? __pfx_kthread+0x10/0x10
[  491.701365][   T34]  ret_from_fork_asm+0x1a/0x30
[  491.703016][   T34]  </TASK>
[  491.704780][   T34] Kernel Offset: disabled
[  491.706309][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:42:40  Registers:
info registers vcpu 0

CPU#0
RAX=b0d153952b951100 RBX=ffffffff81976a48 RCX=b0d153952b951100 RDX=0000000000000001
RSI=ffffffff8d99613c RDI=ffffffff8be28c00 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d6f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d84f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3e33842440 CR3=000000010f2e0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=e0afac11ab29188a 974bda675bbd6d0e XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=f2ed14f712f98e15 2139d35519222410
XMM06=a63f0dd6cfaa4f41 6c761bae1c2fe9bf XMM07=77a1c52790b5160f 809d4fd8e71ab75b
XMM08=70f62b06c897d697 72494b1648bf4c3b XMM09=0000000000000000 00007f22a3411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6d0
R8 =ffff888108ed8237 R9 =1ffff110211db046 R10=dffffc0000000000 R11=ffffffff85461d20
R12=dffffc0000000000 R13=ffffffff99af18d8 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461d9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c32b14b CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffff00 ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffff0000 XMM03=ffffffffffffff00 ffffffffffff0000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f5d2fa11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
