last executing test programs:

1.461733328s ago: executing program 0 (id=20350):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f00000017c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000000000250100000004000180100002800c0001800800010014"], 0x28}, 0x1, 0x0, 0x0, 0x88d4}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000440)="2d2dee9de53534b02e678e94098709ff4c55cf49494f2bb2c336304fae253aaeef3b4e6cf920043fb10af5b809cdfbb72049469c09d5a40455d59404257762113df5d2c755b09eecd85c8343aa0dabc2c29f9afaf4c9dbd72e1975eea6c805efd45904895dbf896a7b95f28a3e59301e4f7a9f25dcb97de86187babafe53ba6373f4dc33461696d693303aad9c0c3a54b008ad17ebb9455715039f950aec7b921bd659b748be24598b61b6fcb8f3c5a2237ec02edbbc00494fcb3f8c6ab2dea323c9204cf00aa69556d0a384e0f58dbc779268e18e85b18f65576199fa68662a79174539bcbe497cc398a696028590deebcc79a3b5517fddf4db7e4a0f7001e68bc35bd9f620ccf02780d0db34003c3b59a50daee7fa66a245f50c214017503db83ac6f110c814faae4c78ca3b6ebe7fea3b50d69ea4035931924c94e82ba7ea139d4e225739a430f59e7098fea80f085a0d7a63bbe5beb326ec1d772655c6155da30a3e8b2b8cab715147f29c996aa4e94cffe6ab989f8a422e63ddffc45e98e94721789d2894ce54177ce19dc9eaf5cc9c24c3396564cc328eb01cb46baeeb62fd1227ed8c4e0d479ed23ed972381a9401e17071b5efc6d671aa09f9c4e4d35351f16c680df348d7103e41437395916009cd9221b2", 0x1d6}], 0x1, 0x0, 0x0, 0x20000800}, 0x4000)
socket$kcm(0x2, 0x3, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001f00)=""/4062, &(0x7f0000000100)=0xfde)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010000305000000720f00000000000000", @ANYRES32=0x0, @ANYBLOB="30c000000c200000"], 0x20}}, 0x24004800)

1.460654402s ago: executing program 0 (id=20352):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r5 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040071fc0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
socket(0x10, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'})
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, r6, 0xd0256000)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r8, 0x400448e6, &(0x7f0000000080)="7c773d39aeef") (async, rerun: 64)
ioctl$sock_bt_hci(r8, 0x400448e6, &(0x7f0000000500)="d7") (async, rerun: 64)
ioctl$sock_bt_hci(r8, 0x400448e7, &(0x7f0000000080)) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r9 = socket(0x10, 0x803, 0x40000)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0xefff, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="ef20000000000000140012800b00010062617461647600000400028008000a007bf84347340d1ee7ba1dad5a0b070700f2d9701a74581d54242f7dc3b81ffdc87d000c046ed8ff121575358b70dcad2cd4cd22fedbf4bdbf0dc7f4e80cc1c3290eb0cf", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)

1.401256502s ago: executing program 0 (id=20354):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
accept$ax25(r1, &(0x7f0000000140)={{0x3, @null}, [@remote, @netrom, @default, @rose, @null, @default, @bcast, @rose]}, &(0x7f0000000040)=0x48)
ioctl$VHOST_RESET_OWNER(r0, 0x4008af60, 0x110c230000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000036000701fcffffff00008100037c0000080004"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.399759451s ago: executing program 0 (id=20356):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0x4004af61, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000020e000000008000000010000008336d680", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)

1.211297795s ago: executing program 0 (id=20358):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000017c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000000000250100000004000180100002800c0001800800010014"], 0x28}, 0x1, 0x0, 0x0, 0x88d4}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000440)="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", 0x1d6}], 0x1, 0x0, 0x0, 0x20000800}, 0x4000)
socket$kcm(0x2, 0x3, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010097f60000000000010000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001b00000000428000180080001006e6174001c0002800800014000000000080003400800001408000240000000020989526e68e445fe74610b1c089190fd25010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x7992, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="000000002400000000000000290000003200000000000000000000000000ffffac33225659"], 0x50}}], 0x1, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f00000000c0), 0x10)
sendmmsg$inet(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="050000007402b8f419", 0x9}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}, {&(0x7f0000000200)="587211", 0x3}], 0x3}}], 0x1, 0x240400c4)
close(r5)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}, {0xd, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001f00)=""/4062, &(0x7f0000000100)=0xfde)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010000305000000720f00000000000000", @ANYRES32=0x0, @ANYBLOB="30c000000c200000"], 0x20}}, 0x24004800)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x3, 0x401, 0xe, 0x3}, 0x10)

1.137448057s ago: executing program 0 (id=20359):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff})
accept4$alg(r3, 0x0, 0x0, 0x800)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r3}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, r3}, 0x94)
sendmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="fcce07f2505d052be0379e5c6829d60a826a910affe778fba2ca7408a216e4a993989656d0b48a72198ccd659e23e1d1b71a6c30695b28170154d8e87e61cae98c779975db973ea64f63b96800b4b385486a4438fe48f20c3439e4de02a4e24a0fee1c7ee635d08e2df43d9b", 0x6c}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000240)="e771c244b8f54267267a97512d2a7006067756e010a247950a2cb0cf991d8028c57b10f47d53c4a6383d6f1621a8ea616c25260d029da92a1fe23c5fe96197ea5d6f2cfd9c935e8b06b2985bbcc7c3dc97823a5f08f9f75dd1b7d55197fa3a247fdd44fb814d4b2f246f5b37c2dc308bc2c947be7ad9c468d4722915b8108992fe9c3dbfb65060560c1e3c8b52d16bda261cdae0d20f7554121663dcfd6473c9c26746aaf8075d2d3c59b5af0211a93b27596123ba12a0596d797fa7fbe3614b10bebafd1389987dd1", 0xc9}, {&(0x7f0000000340)="5acdd2445159724cfe9c62d9209a262526c72be74eedcc938261ba5c691e21d3639f671b56bd01c726bb27c403439f3fad7c6802f05117583e979364519677b344e8e53b374988f70f0ff4", 0x4b}], 0x4, &(0x7f00000003c0)=[{0x38, 0x10b, 0x1, "426fff3e344f2c4018fa5fadfbb7deb2febb73bef7e47f6b71ca9f4ede176424664d"}, {0xa8, 0x6, 0x1, "8a01e892f989a25fb76ac4be6d8075800901cc2690e9303fd79fea9076cca0ee576e3d451b8d00379ded62efd0433070228b2c1c700636ce90675d636c074f73f947463547fe0c95c2d87b05f555bf30084af2b9184946b163fb032dfe0c8669e30bc5bf11a4edb7dbc4d011009f9ceb4dd3a77e28a0c7b821acf994a2f5dc9fa0840ce54803824b1889ac1862ef38e4f7bcd48a"}], 0xe0}, 0x4044001)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r4, 0x1, 0x22, 0x0, 0x0)
shutdown(r1, 0x1)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x10000, 0x0, 0x2, 0xb, 0x4, 0x9fd}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@private2, 0x10000, 0x2, 0x2, 0xc, 0x1002, 0x2005}, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)

1.002648109s ago: executing program 2 (id=20363):
r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r0, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff)

996.360643ms ago: executing program 2 (id=20365):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r3 = socket$inet6(0xa, 0x80001, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$bt_hci(r3, 0x0, 0x63, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x1e)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000000000000008000200095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001200010afcffffff000000000a000019"], 0x20}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r2}, 0x14)
r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

788.434811ms ago: executing program 2 (id=20369):
r0 = socket(0x28, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300080c1)
recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)=""/146, 0x92}], 0x1}, 0x40)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'bridge0\x00', @remote})
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r3, &(0x7f00000000c0), 0x12)
close(r3)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000001380), 0x0, 0x2}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast})
socket(0x28, 0x1, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300080c1) (async)
recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)=""/146, 0x92}], 0x1}, 0x40) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'bridge0\x00', @remote}) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
bind$x25(r3, &(0x7f00000000c0), 0x12) (async)
close(r3) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f0000001380), 0x0, 0x2}, 0x20) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) (async)

632.347707ms ago: executing program 2 (id=20373):
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000000)) (async)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x8000000000000001})
r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @null}, [@rose, @bcast, @remote, @netrom, @null, @rose, @bcast, @default]}, &(0x7f0000000100)=0x48)
ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000140))
ioctl$FIOCLEX(r1, 0x5451) (async)
ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_VDPA_GET_IOVA_RANGE(r2, 0x8010af78, &(0x7f00000001c0)) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000200)={0x6, 'macvtap0\x00', {0x9f}, 0x6})
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) (async)
ioctl$XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000006c0)={&(0x7f0000000280)=0x747, 0x6, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], &(0x7f0000000680)})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r3, &(0x7f0000000740)='cpu.weight\x00', 0x2, 0x0) (async)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) (async)
getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000800)={@empty, <r6=>0x0}, &(0x7f0000000840)=0x14)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000980)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x52000008}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x84, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8}, 0x2004c040) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r7, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x1e}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4e2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x200c4810)
ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000b40)=0x4) (async)
r9 = accept$unix(r0, &(0x7f0000000b80)=@abs, &(0x7f0000000c00)=0x6e)
recvmsg$unix(r9, &(0x7f0000000f00)={&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000cc0)=""/82, 0x52}, {&(0x7f0000000d40)=""/157, 0x9d}], 0x2, &(0x7f0000000e40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x40000100)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r4)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r10, &(0x7f00000010c0)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0xd5123d1a9c203c46}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0x98, r11, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xd}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x90}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xc5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) (async)
r12 = socket$inet(0x2, 0x80000, 0xb)
setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000001380)=@filter={'filter\x00', 0xe, 0x1, 0x21e, [0x0, 0x200000001140, 0x200000001170, 0x2000000011a0], 0x0, &(0x7f0000001100), &(0x7f0000001140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x5, 0x8100, 'ipvlan0\x00', 'lo\x00', 'wg2\x00', 'gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @remote, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xde, 0x12e, 0x15e, [@physdev={{'physdev\x00', 0x0, 0x48}, {{'wg1\x00', {0xff}, 'veth0_to_batadv\x00', {}, 0x19, 0xa}}}], [@common=@log={'log\x00', 0x28, {{0xe, "e3c15a708f7c296a4b0a15a118084f762b6d441c6bdecd8e38ccbe6ff01d", 0x1}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x296)

632.021569ms ago: executing program 1 (id=20374):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0012000000a000001c0012800900010062726964676500000c00028005002c00b9000000891a81e9414c83b50f295002f39853c06bdc7863b6f40f1fe4f7184a8dfd6b20afc40a365d04023490962e9c2405deafa6bc8ca16ffcc2d6f25e808f613947bda1a04f17c35129aebee14ab8a66a4112ad600358d3f498afa678e2369ea28e23a2cf1905a4b50039171dae1804f05c589453a4471782e7ab06361fb70f6a9207888473f58ed1ac8654ed2fc6afd5033804378a9722f653dfad9e3dd38e1e6ce8a3d4504d67c58e3ead0000000000000000000000cc287fc99ffd153e745d4e849f41c20007f534386ea7d081b18a84a9ca711cdfdad406a64bb03751a0e59fee3644cf9cb7e05922d382a18a991418759d7c6e0ce90b50a3a91fb1b359cef623ed37fca245a9e71c8d9750cb49731a9e103efad1fffb31e9b21863a5d4ff0acae45fcae9ad6a77759734d55d8c3055666b3706335a644c01b1ab19ad3355b3dde915b49934bbca47684121532304a7916ca43b621a79f0f34538a2be1e0762edb5c8e021c29d33e01ce61a5ad575fbc3995a2e033d144ac487f8a5ce0162f3065bb0bb34ee000000"], 0x3c}}, 0x4)

552.699201ms ago: executing program 1 (id=20375):
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@vsock, &(0x7f0000000080)=0x80, 0x80000)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x4, 0x6, @remote}, 0x14)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@empty, 0x64, r2})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r13 = socket$netlink(0x10, 0x3, 0x0)
r14 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r15, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r16 = socket$alg(0x26, 0x5, 0x0)
sendmsg$inet(r16, &(0x7f0000002000)={&(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f00000008c0)=[{&(0x7f00000001c0)="f84433b273654eb33d8033d98ee535ab7d1ddce48fc8225539687a3b889303195c3b1c030ea426b27fb85f3557e2807a60c42c777844031b23791f6522b8e795a9294d2e3ba7bd0e210dbbb908447d5b9e1e10ed9a4fd8d4fe4b03e7d89cda1bbcf9cc2994bde4daa25410105234013a043e7c9df26d59b52912d83ce842e3ed80120a84c4c5ba818d40f92df0e8c3fc982b2ce4b11fe6c651cd732ef090739debe6b85a8927c9e6579bb3752929018be4e6f49d7515ee94480810b9fb90d4485820", 0xc2}, {&(0x7f0000000340)="be245fd55d23a5195209379156ed1f4bb6728b70b7430e838a303224d2ea440883bb46416bb1", 0x26}, {&(0x7f0000000800)="55666990e4b80de5c7935cba6a301f286962f65dbb9177bc3f22f72f557ab994c4d9c7a58da4f45810f6d65c00b41c40d86c5cbef0f65fcf7e192e5d74cbc5fa438ed9fd78bb2e31999c007f2963f6719a9e679e19106999353d702576472d08959784cf94fc201d4b67505d9a2c64486640012ac919620659c6dfaf9e3000f6f0d8e11485d3feb2f448db37846ecee16c4ab744e0f78944", 0x98}, {&(0x7f0000000480)="9824ad50c5c2d305122c67ef2e4634578a2f6a796c1101c62a6c6c43ab7d9b2eebe70a55447cb5ca4a985a1407612eed54ec", 0x32}, {&(0x7f0000001c80)="898601a462513c69b7a81eb70af5d3ef6dad65cf2ed15d51fe8328e84c50c932a62c187243272549a7618770b4c2c3ff0b6ef9e9d8089b42e51123fcf85cad5bfce8b0c8c3e5388588186dd888071f08e9e46252511609e3c933ac06a4499281e0aedf28adec2e21201995a68939de7948042ef1af62cc5ea5e57a3e70a49fff7e4e075907c38b742b7df7fa8f997aaa86d4b7a47f", 0x95}, {&(0x7f0000001d40)="e69aca16493afb18cb8ddbb88207616ed089e88436281299f3e35ddd0e58e1845b922e5aea26c4030f4c13fd189377256574013a6cdc504f5ccd0fe4bc583b8d605a7451fe4666375b6cfd5341670fac3d6741134437aff7c7af20d71706bb1c7f7ce631d3bfa6306038af97742d17f8e10382fd643f4221cf8dc57d4255be961fe0bbf7f4f337b7ddeec07053f29718d28cc422163c398d2e3f584557f4460b0ff92efb9ea453369cf755b144623065293cadd6722185aee7e0cfa56638fb271ad1207d918498f3504205f72f78d42d429e90cfacbd9b9bb97105cc47f8a2a1ad91d0d8", 0xe4}, {&(0x7f0000001e40)="0fab6dd71836b7e687a4e7512c56d03df466e8deec1215a953078737612baec2e40c7d317335f6120107deca1f9003cec0f19233685c77607264a7e6e8395269ea0650a24dd46d27609e89f0a225af210791e9498cb947c510c165f32a9d634deaeec46b29f525f271cbd17fea992b4ffbcfdf3b925062855a148ec4dc3fa8801537c8d9e9f0790d15e25e2b8462d3b59708414d346a73e00c41bd3a076b3320af6c87d2a675cb9af4915179dfa444b8f98be200ecd74321dd4c2916f38d8fa94a8ff569", 0xc4}, {&(0x7f0000001f40)="9fc4a63de51505f3e9cfec6742ed0c5869919316919ae491b60f34e88531f6a2a2b3d039892b72647406a0b61133c98dc9d3b16b87dd2075ef42c8d2e448f46d414a023501859b790ccf7da556af20d1facb99c7e44988032b39dd16b1a1d14a9b326b745fc0694ab6abc86fcf838a3fdadb34b3e56e682384af6ed0bae0548b99808bfa4e702218ccb1ee344251b0a0cccd4619c86047c4afa0", 0x9a}], 0x8}, 0x4c880)
accept4(r3, 0x0, 0x0, 0x800)

552.397297ms ago: executing program 2 (id=20376):
socketpair(0x1, 0x2, 0x2f4, &(0x7f0000000000))
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
socket$kcm(0x11, 0xa, 0x300)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xb}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00)}], 0x4}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x44, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xffffffffffffffe2, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4)
unshare(0x6a040000)
r7 = socket(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="1709a700000000000001010000004ff83f62fbb48647eea80cf73b4c2b7d2aeb02cfe3b758f266afd7c0fc728985ee3374ae055d6c9f098816d72fb7711ea24a27e345edfbdd9aca5e058367489ef24d5e247aa9deef3f9ce753b88e46c384"], 0x14}}, 0x0)
ppoll(&(0x7f0000000d00)=[{r0, 0x110}], 0x1, &(0x7f0000000d40)={0x0, 0x989680}, &(0x7f0000000d80)={[0x2]}, 0x8)

369.231192ms ago: executing program 1 (id=20377):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000017c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000000000250100000004000180100002800c0001800800010014"], 0x28}, 0x1, 0x0, 0x0, 0x88d4}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'tunl0\x00', &(0x7f00000006c0)={'tunl0\x00', <r4=>0x0, 0x7800, 0x700, 0xffffff8b, 0x8, {{0xa, 0x4, 0x1, 0x30, 0x28, 0x66, 0x0, 0x9, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0xb, 0x54, [@broadcast, @dev={0xac, 0x14, 0x14, 0x34}]}, @timestamp={0x44, 0x8, 0xae, 0x0, 0x4, [0x5]}]}}}}})
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb4, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000c0}, 0x45)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000440)="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", 0x1d6}], 0x1, 0x0, 0x0, 0x20000800}, 0x4000)
socket$l2tp(0x2, 0x2, 0x73)
socket$kcm(0x2, 0x3, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x4010)
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x30, r9, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40810)
r10 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r10, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e617400804a4ffbf850cfcba371b821f4be539a1c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a320000000014000000"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001f00)=""/4062, &(0x7f0000000100)=0xfde)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010000305000000720f00000000000000", @ANYRES32=0x0, @ANYBLOB="30c000000c200000"], 0x20}}, 0x24004800)

281.762645ms ago: executing program 1 (id=20378):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
recvmsg$can_raw(r1, &(0x7f0000000840)={&(0x7f0000000100)=@caif=@rfm, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f00000005c0)=""/51, 0x33}, {&(0x7f0000000900)=""/249, 0xf9}, {&(0x7f0000000a00)=""/216, 0xd8}, {&(0x7f0000000b00)=""/237, 0xed}], 0xa, &(0x7f0000000cc0)=""/194, 0xc2}, 0x40000002) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000000000000008000200095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2}, 0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

122.803706ms ago: executing program 1 (id=20379):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040)

478.556µs ago: executing program 2 (id=20380):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x4, @local}, 0x10)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x20068802}, 0x4040)

0s ago: executing program 1 (id=20381):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
accept$ax25(r1, &(0x7f0000000140)={{0x3, @null}, [@remote, @netrom, @default, @rose, @null, @default, @bcast, @rose]}, &(0x7f0000000040)=0x48)
ioctl$VHOST_RESET_OWNER(r0, 0x4008af60, 0x110c230000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000036000701fcffffff00008100037c0000080004"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

kernel console output (not intermixed with test programs):

T6290]  ? swap_table_get+0x216/0x260
[  576.193881][ T6290]  ? swap_cache_get_folio+0x513/0x520
[  576.193907][ T6290]  do_swap_page+0x54f/0x58d0
[  576.193929][ T6290]  ? __lock_acquire+0x6b5/0x2cf0
[  576.193965][ T6290]  ? do_swap_page+0x12c/0x58d0
[  576.193985][ T6290]  ? __pfx_do_swap_page+0x10/0x10
[  576.194004][ T6290]  ? __pte_offset_map+0x1ae/0x240
[  576.194031][ T6290]  ? pte_offset_map_rw_nolock+0xea/0x160
[  576.194058][ T6290]  handle_mm_fault+0x12d2/0x3310
[  576.194093][ T6290]  ? handle_mm_fault+0xee/0x3310
[  576.194123][ T6290]  ? __pfx_handle_mm_fault+0x10/0x10
[  576.194144][ T6290]  ? lock_vma_under_rcu+0x45a/0x500
[  576.194181][ T6290]  do_user_addr_fault+0xa73/0x1340
[  576.194208][ T6290]  ? rcu_is_watching+0x15/0xb0
[  576.194231][ T6290]  ? trace_page_fault_user+0x84/0x210
[  576.194253][ T6290]  exc_page_fault+0x6a/0xc0
[  576.194279][ T6290]  asm_exc_page_fault+0x26/0x30
[  576.194294][ T6290] RIP: 0033:0x7fc50f66a14c
[  576.194309][ T6290] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00
[  576.194321][ T6290] RSP: 002b:00007ffc75e47d10 EFLAGS: 00010202
[  576.194335][ T6290] RAX: 0000000000000000 RBX: 00007fc50fa15fa0 RCX: 0000555562b96808
[  576.194344][ T6290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  576.194352][ T6290] RBP: 00007fc50fa17da0 R08: 0000000000000000 R09: 0000000000000000
[  576.194361][ T6290] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000008ca63
[  576.194369][ T6290] R13: 00007fc50fa1618c R14: 000000000008c7cb R15: 00007fc50fa16180
[  576.194402][ T6290]  </TASK>
[  576.194408][ T6290] memory: usage 307200kB, limit 307200kB, failcnt 1031
[  576.299347][ T6290] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0
[  576.302234][ T6290] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0
[  576.313915][ T6290] Memory cgroup stats for /syz2:
[  576.313979][ T6290] cache 0
[  576.316534][ T6290] rss 8192
[  576.317624][ T6290] rss_huge 0
[  576.318919][ T6290] shmem 0
[  576.320219][ T6290] mapped_file 0
[  576.321729][ T6290] dirty 0
[  576.322947][ T6290] writeback 0
[  576.324322][ T6290] workingset_refault_anon 26
[  576.326890][ T6290] workingset_refault_file 33
[  576.329151][ T6290] swap 180224
[  576.330459][ T6290] swapcached 389120
[  576.331920][ T6290] pgpgin 385550
[  576.333233][ T6290] pgpgout 385544
[  576.334550][ T6290] pgfault 813380
[  576.335896][ T6290] pgmajfault 55
[  576.337226][ T6290] inactive_anon 0
[  576.340795][ T6290] active_anon 0
[  576.342141][ T6290] inactive_file 0
[  576.343515][ T6290] active_file 0
[  576.344833][ T6290] unevictable 0
[  576.346216][ T6290] hierarchical_memory_limit 314572800
[  576.349643][ T6290] hierarchical_memsw_limit 9223372036854771712
[  576.351649][ T6290] total_cache 0
[  576.352962][ T6290] total_rss 8192
[  576.354269][ T6290] total_rss_huge 0
[  576.361781][ T6290] total_shmem 0
[  576.363070][ T6290] total_mapped_file 0
[  576.376806][ T6290] total_dirty 0
[  576.378371][ T6290] total_writeback 0
[  576.379823][ T6290] total_workingset_refault_anon 26
[  576.381734][ T6290] total_workingset_refault_file 33
[  576.383639][ T6290] total_swap 180224
[  576.396934][ T6290] total_swapcached 389120
[  576.403181][ T6290] total_pgpgin 387141
[  576.404692][ T6290] total_pgpgout 387135
[  576.406144][ T6290] total_pgfault 814947
[  576.407875][ T6290] total_pgmajfault 56
[  576.411842][ T6356] netlink: 'syz.1.14438': attribute type 11 has an invalid length.
[  576.428186][ T6290] total_inactive_anon 0
[  576.430021][ T6290] total_active_anon 0
[  576.431372][ T6290] total_inactive_file 0
[  576.432797][ T6290] total_active_file 0
[  576.434031][ T6290] total_unevictable 0
[  576.435216][ T6290] anon_cost 0
[  576.436242][ T6290] file_cost 0
[  576.437239][ T6290] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.14408,pid=6290,uid=0
[  576.478068][ T6290] Memory cgroup out of memory: Killed process 6290 (syz.2.14408) total-vm:102416kB, anon-rss:1244kB, file-rss:22940kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000
[  576.549640][ T6362] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  576.551951][ T6362] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  576.606983][ T6368] netlink: 'syz.1.14444': attribute type 1 has an invalid length.
[  576.617997][ T6368] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14444'.
[  577.079136][ T6393] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3
[  577.100555][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14451'.
[  577.103204][ T6397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14451'.
[  577.197030][ T6401] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14457'.
[  577.240180][ T6401] netlink: 76 bytes leftover after parsing attributes in process `syz.0.14457'.
[  577.243115][ T6401] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14457'.
[  577.290931][ T6401] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.351163][ T6401] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.369847][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14459'.
[  577.399769][ T6401] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.454867][ T6401] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.547777][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  577.562991][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  577.574618][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  577.593565][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  577.816215][ T6437] lo speed is unknown, defaulting to 1000
[  577.995523][ T6437] lo speed is unknown, defaulting to 1000
[  578.366154][ T6465] syzkaller1: entered promiscuous mode
[  578.368747][ T6465] syzkaller1: entered allmulticast mode
[  578.744281][ T6470] TCP: TCP_TX_DELAY enabled
[  579.018445][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14492'.
[  579.447617][ T6518] netlink: 'syz.1.14510': attribute type 10 has an invalid length.
[  579.671567][ T6548] netlink: 'syz.0.14523': attribute type 1 has an invalid length.
[  579.685519][ T6548] bond18: entered promiscuous mode
[  579.696406][ T6548] 8021q: adding VLAN 0 to HW filter on device bond18
[  579.705312][ T6548] bridge0: Device is already in use.
[  580.033544][ T6575] __nla_validate_parse: 7 callbacks suppressed
[  580.033556][ T6575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14535'.
[  580.198880][ T6583] netlink: 'syz.2.14539': attribute type 1 has an invalid length.
[  580.218826][ T6583] 8021q: adding VLAN 0 to HW filter on device bond24
[  580.280165][ T6583] macvlan1: entered promiscuous mode
[  580.282449][ T6583] macvlan1: entered allmulticast mode
[  580.557059][ T6601] lo speed is unknown, defaulting to 1000
[  580.663507][ T6601] lo speed is unknown, defaulting to 1000
[  580.925905][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14557'.
[  581.083799][ T6642] siw: device registration error -23
[  581.208796][ T6660] netlink: 'syz.2.14572': attribute type 2 has an invalid length.
[  581.222401][ T6660] : entered promiscuous mode
[  581.340075][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14578'.
[  581.493413][ T6687] netlink: 348 bytes leftover after parsing attributes in process `syz.1.14583'.
[  581.966187][ T6729] netlink: 'syz.1.14602': attribute type 10 has an invalid length.
[  581.969712][ T6729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14602'.
[  581.974842][ T6729] bridge0: port 1(dummy0) entered blocking state
[  581.977290][ T6729] bridge0: port 1(dummy0) entered listening state
[  582.030231][ T6735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14607'.
[  582.102835][ T6743] netlink: 'syz.1.14610': attribute type 1 has an invalid length.
[  582.122832][ T6743] 8021q: adding VLAN 0 to HW filter on device bond15
[  582.142832][ T6743] 8021q: adding VLAN 0 to HW filter on device batadv3
[  582.149289][ T6743] bond15: (slave batadv3): making interface the new active one
[  582.153086][ T6743] bond15: (slave batadv3): Enslaving as an active interface with an up link
[  582.156405][ T6748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14612'.
[  582.162811][ T6748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14612'.
[  582.179199][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14610'.
[  582.189307][ T6743] bond15 (unregistering): (slave batadv3): Releasing active interface
[  582.202592][ T6743] bond15 (unregistering): Released all slaves
[  582.238174][ T6752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  582.320755][ T6747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  582.875897][ T6793] sctp: [Deprecated]: syz.0.14631 (pid 6793) Use of struct sctp_assoc_value in delayed_ack socket option.
[  582.875897][ T6793] Use struct sctp_sack_info instead
[  582.941596][ T6797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14635'.
[  583.016398][ T6799] erspan0: left promiscuous mode
[  583.031646][ T6799] 8021q: adding VLAN 0 to HW filter on device team0
[  583.035749][ T6799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  583.647036][ T6862] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  584.353188][ T6920] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  584.674599][ T6955] netlink: 'syz.2.14704': attribute type 1 has an invalid length.
[  585.023659][ T6979] gretap5: entered promiscuous mode
[  585.083999][ T6987] __nla_validate_parse: 12 callbacks suppressed
[  585.084026][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14719'.
[  585.090898][ T6987] netlink: 'syz.0.14719': attribute type 1 has an invalid length.
[  585.326861][ T1198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  585.336671][ T1198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  585.355388][ T6995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  585.955559][ T7025] bond25: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  585.967608][ T7025] bond25 (unregistering): Released all slaves
[  586.094095][ T7032] syzkaller0: entered promiscuous mode
[  586.095715][ T7032] syzkaller0: entered allmulticast mode
[  587.275332][ T7068] netlink: 'syz.1.14749': attribute type 1 has an invalid length.
[  587.277637][ T7068] netlink: 240 bytes leftover after parsing attributes in process `syz.1.14749'.
[  587.338787][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14751'.
[  587.685676][ T7059] lo speed is unknown, defaulting to 1000
[  587.793657][ T7059] lo speed is unknown, defaulting to 1000
[  587.852673][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14757'.
[  588.580607][ T7127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14776'.
[  588.975529][ T7158] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14790'.
[  588.979085][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14790'.
[  588.981834][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14790'.
[  589.344375][ T7168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14794'.
[  589.385618][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14795'.
[  589.630321][ T7187] syzkaller1: entered promiscuous mode
[  589.632547][ T7187] syzkaller1: entered allmulticast mode
[  589.700590][ T5273] block nbd4: Possible stuck request ffff8881047f8000: control (read@0,1024B). Runtime 120 seconds
[  589.704428][ T5273] block nbd4: Possible stuck request ffff8881047f8200: control (read@1024,1024B). Runtime 120 seconds
[  589.708614][ T5273] block nbd4: Possible stuck request ffff8881047f8400: control (read@2048,1024B). Runtime 120 seconds
[  589.712380][ T5273] block nbd4: Possible stuck request ffff8881047f8600: control (read@3072,1024B). Runtime 120 seconds
[  589.825858][ T7199] vlan7: entered promiscuous mode
[  589.827841][ T7199] ip6gretap0: entered promiscuous mode
[  590.260094][ T7227] netlink: 'syz.0.14820': attribute type 2 has an invalid length.
[  591.002184][ T7265] syzkaller0: left promiscuous mode
[  591.004305][ T7265] syzkaller0: left allmulticast mode
[  591.026808][ T7269] netlink: 'syz.2.14838': attribute type 39 has an invalid length.
[  591.053439][ T7271] __nla_validate_parse: 4 callbacks suppressed
[  591.053453][ T7271] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14839'.
[  591.059875][ T7271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14839'.
[  591.063639][ T7273] netlink: 'syz.2.14840': attribute type 1 has an invalid length.
[  591.285477][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14845'.
[  591.294534][ T7284] macvtap1: entered promiscuous mode
[  591.296189][ T7284] macvtap1: entered allmulticast mode
[  591.297756][ T7284] bridge0: entered allmulticast mode
[  591.397500][ T7297] lo speed is unknown, defaulting to 1000
[  591.496957][ T7297] lo speed is unknown, defaulting to 1000
[  591.602877][ T7303] syzkaller0: entered promiscuous mode
[  591.604676][ T7303] syzkaller0: entered allmulticast mode
[  592.066893][ T7330] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.142969][ T7330] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.214386][ T7330] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.271574][ T7330] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.431031][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  592.439237][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  592.446923][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  592.455845][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  592.522313][ T7360] netlink: 80 bytes leftover after parsing attributes in process `syz.1.14878'.
[  592.545394][ T7362] netlink: 'syz.0.14879': attribute type 4 has an invalid length.
[  592.552224][ T7362] netlink: 17 bytes leftover after parsing attributes in process `syz.0.14879'.
[  592.627087][ T7370] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  592.630641][ T7370] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  592.697748][ T7373] Cannot find del_set index 1 as target
[  593.292565][ T7404] netlink: 'syz.2.14899': attribute type 1 has an invalid length.
[  593.294918][ T7404] netlink: 240 bytes leftover after parsing attributes in process `syz.2.14899'.
[  593.458116][T26173] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  595.258676][ T7435] lo speed is unknown, defaulting to 1000
[  595.392691][ T7435] lo speed is unknown, defaulting to 1000
[  595.570464][ T7468] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14923'.
[  595.693545][ T7478] macsec2: entered promiscuous mode
[  595.698187][ T7478] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  596.249200][ T7505] syzkaller1: entered promiscuous mode
[  596.250877][ T7505] syzkaller1: entered allmulticast mode
[  596.253667][ T7505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14939'.
[  597.129034][ T7535] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  597.467748][ T7558] lo speed is unknown, defaulting to 1000
[  597.505446][ T7568] netlink: 'syz.2.14965': attribute type 10 has an invalid length.
[  597.508486][ T7568] netlink: 2 bytes leftover after parsing attributes in process `syz.2.14965'.
[  597.542693][ T7568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  597.890474][ T7558] lo speed is unknown, defaulting to 1000
[  597.984795][ T7584] syzkaller0: entered promiscuous mode
[  597.986914][ T7584] syzkaller0: entered allmulticast mode
[  598.312954][ T7600] netlink: 'syz.2.14979': attribute type 1 has an invalid length.
[  599.392017][ T7633] lo speed is unknown, defaulting to 1000
[  599.511008][ T7633] lo speed is unknown, defaulting to 1000
[  599.941829][ T7674] lo speed is unknown, defaulting to 1000
[  600.079072][ T7674] lo speed is unknown, defaulting to 1000
[  600.140548][ T7679] netlink: 'syz.2.15009': attribute type 4 has an invalid length.
[  600.143056][ T7679] netlink: 'syz.2.15009': attribute type 8 has an invalid length.
[  600.145576][ T7679] netlink: 212 bytes leftover after parsing attributes in process `syz.2.15009'.
[  600.418322][T26173] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  600.811463][ T7699] lo speed is unknown, defaulting to 1000
[  600.966634][ T7699] lo speed is unknown, defaulting to 1000
[  601.442924][ T7733] bridge14: entered promiscuous mode
[  601.444539][ T7733] bridge14: entered allmulticast mode
[  601.867019][ T7783] netlink: 5 bytes leftover after parsing attributes in process `syz.2.15052'.
[  601.874259][ T7785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15053'.
[  601.874344][ T7783] ..0{X: renamed from gretap0
[  601.887647][ T7783] ..0{X: entered allmulticast mode
[  601.891613][ T7783] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check.
[  602.115017][ T7809] lo speed is unknown, defaulting to 1000
[  602.253391][ T7809] lo speed is unknown, defaulting to 1000
[  603.410598][ T7917] netlink: 'syz.2.15111': attribute type 4 has an invalid length.
[  603.413645][ T7917] netlink: 224 bytes leftover after parsing attributes in process `syz.2.15111'.
[  603.889330][ T7939] netlink: 'syz.2.15121': attribute type 2 has an invalid length.
[  604.353062][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15134'.
[  604.362858][ T7967] netlink: 23 bytes leftover after parsing attributes in process `syz.0.15134'.
[  604.362944][ T7969] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15136'.
[  605.638969][ T8068] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15180'.
[  605.647726][ T8064] lo speed is unknown, defaulting to 1000
[  605.810963][ T8064] lo speed is unknown, defaulting to 1000
[  606.526263][ T8108] lo speed is unknown, defaulting to 1000
[  606.678231][ T8108] lo speed is unknown, defaulting to 1000
[  606.745695][ T8118] netlink: 'syz.2.15197': attribute type 1 has an invalid length.
[  606.754774][ T8118] netlink: 228 bytes leftover after parsing attributes in process `syz.2.15197'.
[  606.823098][ T8123] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15199'.
[  606.850878][ T8125] netlink: 'syz.1.15200': attribute type 31 has an invalid length.
[  606.883075][ T8127] netlink: 'syz.2.15201': attribute type 5 has an invalid length.
[  607.072342][ T5843] nci: nci_rx_work: unknown MT 0x7
[  607.429567][ T8157] bond15: entered allmulticast mode
[  607.453441][ T8159] bridge15: entered promiscuous mode
[  607.455057][ T8159] bridge15: entered allmulticast mode
[  607.472839][ T8159] bond15: (slave bridge15): making interface the new active one
[  607.476144][ T8159] bond15: (slave bridge15): Enslaving as an active interface with an up link
[  607.722854][ T8167] syzkaller0: entered promiscuous mode
[  607.724624][ T8167] syzkaller0: entered allmulticast mode
[  609.987868][ T8137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  610.184416][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15232'.
[  610.188242][ T8200] netlink: 348 bytes leftover after parsing attributes in process `syz.2.15232'.
[  610.191590][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15232'.
[  610.194849][ T8200] netlink: 348 bytes leftover after parsing attributes in process `syz.2.15232'.
[  610.198463][ T8200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15232'.
[  610.363106][ T8218] netlink: 76 bytes leftover after parsing attributes in process `syz.0.15240'.
[  610.650101][ T8244] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15254'.
[  610.653499][ T8244] netlink: 88 bytes leftover after parsing attributes in process `syz.2.15254'.
[  610.771896][ T8257] bond25: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  610.775993][ T8257] bond25 (unregistering): Released all slaves
[  611.079344][ T8287] lo speed is unknown, defaulting to 1000
[  611.120852][ T8294] netlink: 'syz.2.15272': attribute type 29 has an invalid length.
[  611.127877][ T8294] netlink: 'syz.2.15272': attribute type 29 has an invalid length.
[  611.146853][ T8296] syzkaller1: tun_chr_ioctl cmd 1074025677
[  611.148898][ T8296] syzkaller1: linktype set to 825
[  611.194996][ T8287] lo speed is unknown, defaulting to 1000
[  611.916513][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15294'.
[  611.920144][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15294'.
[  612.069250][ T8351] netlink: 'syz.0.15299': attribute type 6 has an invalid length.
[  612.073145][ T8351] netlink: 'syz.0.15299': attribute type 6 has an invalid length.
[  612.098025][    C0] bridge0: port 1(dummy0) entered learning state
[  612.279002][ T8359] lo speed is unknown, defaulting to 1000
[  612.377239][ T8359] lo speed is unknown, defaulting to 1000
[  615.998533][ T8400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  616.209861][ T8459] delete_channel: no stack
[  616.315213][ T8468] __nla_validate_parse: 6 callbacks suppressed
[  616.315223][ T8468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15348'.
[  616.659451][ T8498] netlink: 72 bytes leftover after parsing attributes in process `syz.0.15361'.
[  616.737525][ T8509] rdma_rxe: rxe_newlink: failed to add lo
[  616.751998][ T8509] IPVS: stopping backup sync thread 14330 ...
[  616.862623][ T8522] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15372'.
[  616.866627][ T8522] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15372'.
[  616.877781][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15373'.
[  617.393162][ T8566] lo speed is unknown, defaulting to 1000
[  617.576231][ T8566] lo speed is unknown, defaulting to 1000
[  617.620101][ T8582] lo speed is unknown, defaulting to 1000
[  617.870935][ T8582] lo speed is unknown, defaulting to 1000
[  618.230922][ T8611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15411'.
[  618.422262][ T8624] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15417'.
[  618.424895][ T8624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15417'.
[  618.562422][ T8641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15425'.
[  618.565411][ T8641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15425'.
[  619.750532][ T8760] lo speed is unknown, defaulting to 1000
[  619.752332][ T8761] netlink: 'syz.1.15457': attribute type 4 has an invalid length.
[  619.771925][ T8752] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  619.780322][ T5273] block nbd4: Possible stuck request ffff8881047f8000: control (read@0,1024B). Runtime 150 seconds
[  619.784321][ T5273] block nbd4: Possible stuck request ffff8881047f8200: control (read@1024,1024B). Runtime 150 seconds
[  619.789046][ T5273] block nbd4: Possible stuck request ffff8881047f8400: control (read@2048,1024B). Runtime 150 seconds
[  619.792834][ T5273] block nbd4: Possible stuck request ffff8881047f8600: control (read@3072,1024B). Runtime 150 seconds
[  620.055223][ T8760] lo speed is unknown, defaulting to 1000
[  620.164414][ T8798] sch_fq: defrate 4294967293 ignored.
[  621.304180][ T8894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  621.892949][ T8905] netlink: 'syz.2.15512': attribute type 1 has an invalid length.
[  621.908454][ T8905] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  621.950260][ T8911] __nla_validate_parse: 9 callbacks suppressed
[  621.950272][ T8911] netlink: 79 bytes leftover after parsing attributes in process `syz.2.15514'.
[  622.046228][ T8921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15519'.
[  623.465802][ T8975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  623.777517][ T9026] lo speed is unknown, defaulting to 1000
[  623.907728][ T9026] lo speed is unknown, defaulting to 1000
[  624.544770][ T9088] netlink: 'syz.2.15589': attribute type 10 has an invalid length.
[  624.696390][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15594'.
[  624.740331][ T9102] netlink: 27 bytes leftover after parsing attributes in process `syz.2.15596'.
[  625.139513][ T9137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15614'.
[  625.162828][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15615'.
[  625.165937][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15615'.
[  625.403369][ T9173] netlink: 140 bytes leftover after parsing attributes in process `syz.2.15629'.
[  625.406334][ T9173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15629'.
[  625.420244][ T9175] rdma_rxe: rxe_newlink: failed to add lo
[  625.570132][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15636'.
[  625.573440][ T9186] netlink: 'syz.1.15636': attribute type 12 has an invalid length.
[  625.580381][ T9186] netlink: 'syz.1.15636': attribute type 12 has an invalid length.
[  626.531260][ T9239] lo speed is unknown, defaulting to 1000
[  626.676163][ T9254] bond19: option lacp_rate: invalid value (128)
[  626.681316][ T9254] bond19 (unregistering): Released all slaves
[  626.804107][ T9244] IPVS: length: 132 != 8
[  626.810212][ T9239] lo speed is unknown, defaulting to 1000
[  627.024714][ T9272] __nla_validate_parse: 4 callbacks suppressed
[  627.024729][ T9272] netlink: 6 bytes leftover after parsing attributes in process `syz.1.15673'.
[  627.340190][ T9293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15683'.
[  627.573157][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15689'.
[  627.751511][   T56] block nbd6: Receive control failed (result -32)
[  628.068919][ T9332] lo speed is unknown, defaulting to 1000
[  628.173214][ T9332] lo speed is unknown, defaulting to 1000
[  628.601501][ T9357] openvswitch: netlink: IP tunnel dst address not specified
[  628.865126][ T9373] netlink: 'syz.1.15721': attribute type 5 has an invalid length.
[  628.894075][ T9376] syzkaller0: entered promiscuous mode
[  628.896034][ T9376] syzkaller0: entered allmulticast mode
[  628.905483][ T9376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  628.909563][ T9376] tipc: Resetting bearer <eth:syzkaller0>
[  628.956140][ T9376] tipc: Disabling bearer <eth:syzkaller0>
[  628.984003][ T9379] lo speed is unknown, defaulting to 1000
[  629.175301][ T9379] lo speed is unknown, defaulting to 1000
[  629.569551][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15744'.
[  629.602522][ T9427] macsec0 (unregistering): left allmulticast mode
[  629.604975][ T9427] macsec0 (unregistering): left promiscuous mode
[  629.607401][ T9427] bridge0: port 3(macsec0) entered disabled state
[  629.835343][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15749'.
[  631.217836][ T9602] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15806'.
[  631.375253][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15814'.
[  631.379452][ T9617] netlink: 'syz.0.15814': attribute type 1 has an invalid length.
[  631.496449][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15820'.
[  631.763201][ T9647] lo speed is unknown, defaulting to 1000
[  631.951694][ T9647] lo speed is unknown, defaulting to 1000
[  632.160929][ T9673] gretap4: entered promiscuous mode
[  632.351104][ T9690] bridge0: port 2(team0) entered disabled state
[  632.356609][ T9690] veth0_to_bridge: left allmulticast mode
[  632.359294][ T9690] veth0_to_bridge: left promiscuous mode
[  632.361692][ T9690] bridge0: port 1(veth0_to_bridge) entered disabled state
[  632.365443][ T9690] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  632.415282][ T9693] tap0: tun_chr_ioctl cmd 1074025681
[  632.684181][ T9714] dvmrp1: tun_chr_ioctl cmd 2147767506
[  632.813471][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15863'.
[  634.683599][ T9782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15882'.
[  635.437294][ T9796] lo speed is unknown, defaulting to 1000
[  635.465185][ T9800] netlink: 'syz.0.15892': attribute type 10 has an invalid length.
[  635.467474][ T9800] netlink: 156 bytes leftover after parsing attributes in process `syz.0.15892'.
[  635.585583][ T9796] lo speed is unknown, defaulting to 1000
[  635.585799][ T9805] lo speed is unknown, defaulting to 1000
[  635.787375][ T9805] lo speed is unknown, defaulting to 1000
[  635.901249][ T9816] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15898'.
[  635.915043][ T9816] bridge0: port 1(dummy0) entered disabled state
[  635.997530][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15902'.
[  636.000671][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15902'.
[  636.073452][ T9829] netlink: 'syz.1.15905': attribute type 1 has an invalid length.
[  636.659671][ T9873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15924'.
[  637.179892][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15940'.
[  637.307012][ T9919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15944'.
[  637.495427][ T9939] netlink: zone id is out of range
[  637.508341][ T9939] netlink: zone id is out of range
[  637.510198][ T9939] netlink: zone id is out of range
[  637.512086][ T9939] netlink: zone id is out of range
[  637.513957][ T9939] netlink: zone id is out of range
[  637.515900][ T9939] netlink: zone id is out of range
[  637.517853][ T9939] netlink: zone id is out of range
[  637.524059][ T9939] netlink: zone id is out of range
[  637.526228][ T9939] netlink: zone id is out of range
[  637.533613][ T9939] netlink: zone id is out of range
[  637.586434][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15956'.
[  637.665259][ T9949] tipc: Resetting bearer <eth:syzkaller0>
[  637.770002][ T9949] bridge0: left allmulticast mode
[  637.803339][T27995] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  637.809297][T27995] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  637.845327][T27995] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  637.847872][T27995] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  638.181028][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15967'.
[  638.244526][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15970'.
[  638.255454][ T9984] syz_tun: refused to change device tx_queue_len
[  638.380888][T10000] IPVS: set_ctl: invalid protocol: 102 172.30.1.3:20002
[  638.447793][T10009] sctp: [Deprecated]: syz.1.15980 (pid 10009) Use of int in max_burst socket option deprecated.
[  638.447793][T10009] Use struct sctp_assoc_value instead
[  638.618502][T10023] bond25: entered promiscuous mode
[  638.682026][T10032] geneve7: entered promiscuous mode
[  638.692285][ T5858] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  638.695412][ T5858] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  638.702768][ T5858] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  638.708804][ T5858] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  638.798803][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15996'.
[  638.970251][T10069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16007'.
[  639.250833][T10099] netlink: 'syz.0.16022': attribute type 1 has an invalid length.
[  639.322545][T10106] netlink: 'syz.1.16025': attribute type 1 has an invalid length.
[  639.382856][T10112] syzkaller0: left promiscuous mode
[  639.385103][T10112] syzkaller0: left allmulticast mode
[  639.522623][  T908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  639.525338][  T908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.535255][T10123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  639.950558][T10149] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  640.234894][T10172] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  641.655742][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16075'.
[  642.092493][T10262] sctp: [Deprecated]: syz.2.16092 (pid 10262) Use of int in max_burst socket option.
[  642.092493][T10262] Use struct sctp_assoc_value instead
[  642.345237][T10289] netlink: 148 bytes leftover after parsing attributes in process `syz.1.16102'.
[  642.646889][T10308] lo speed is unknown, defaulting to 1000
[  642.814700][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16113'.
[  642.845368][T10308] lo speed is unknown, defaulting to 1000
[  642.892047][T10321] xt_hashlimit: size too large, truncated to 1048576
[  643.430053][T10363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  643.432800][T10363] syzkaller0: entered promiscuous mode
[  643.434953][T10363] syzkaller0: entered allmulticast mode
[  643.465466][T10363] tipc: Resetting bearer <eth:syzkaller0>
[  643.496799][T10362] tipc: Resetting bearer <eth:syzkaller0>
[  643.532520][T10362] tipc: Disabling bearer <eth:syzkaller0>
[  643.555099][T10370] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  643.785919][T10393] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.16147'.
[  643.983651][T10410] lo speed is unknown, defaulting to 1000
[  644.077715][T10410] lo speed is unknown, defaulting to 1000
[  644.353146][T10424] net_ratelimit: 393 callbacks suppressed
[  644.353164][T10424] netlink: zone id is out of range
[  644.357699][T10424] netlink: zone id is out of range
[  644.359796][T10424] netlink: zone id is out of range
[  644.361771][T10424] netlink: zone id is out of range
[  644.363253][T10424] netlink: zone id is out of range
[  644.364809][T10424] netlink: zone id is out of range
[  644.366462][T10424] netlink: zone id is out of range
[  644.369353][T10424] netlink: zone id is out of range
[  644.371029][T10424] netlink: zone id is out of range
[  644.372750][T10424] netlink: zone id is out of range
[  645.216442][T10459] lo speed is unknown, defaulting to 1000
[  645.342903][T10459] lo speed is unknown, defaulting to 1000
[  645.415432][T10468] xt_hashlimit: size too large, truncated to 1048576
[  645.719438][T10488] syzkaller0: entered promiscuous mode
[  645.721642][T10488] syzkaller0: entered allmulticast mode
[  646.109324][T10524] netlink: 'syz.1.16200': attribute type 1 has an invalid length.
[  646.195710][T10531] netlink: 'syz.0.16203': attribute type 6 has an invalid length.
[  646.501920][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16214'.
[  646.512706][ T5843] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  646.515129][ T5843] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  646.517535][ T5843] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  646.520601][ T5843] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  646.523110][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16214'.
[  646.634055][T10566] netlink: 'syz.2.16220': attribute type 1 has an invalid length.
[  646.645682][T10566] netlink: 88 bytes leftover after parsing attributes in process `syz.2.16220'.
[  646.648463][T10566] netlink: 1 bytes leftover after parsing attributes in process `syz.2.16220'.
[  646.651309][T10566] netlink: 'syz.2.16220': attribute type 1 has an invalid length.
[  646.653746][T10566] netlink: 634 bytes leftover after parsing attributes in process `syz.2.16220'.
[  647.234799][T10619] netlink: 100 bytes leftover after parsing attributes in process `syz.1.16245'.
[  647.481022][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16261'.
[  647.484266][T10653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16261'.
[  647.486991][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16261'.
[  647.516470][T10655] netlink: 'syz.2.16260': attribute type 7 has an invalid length.
[  647.523155][T10655] netlink: 'syz.2.16260': attribute type 8 has an invalid length.
[  647.962459][T10693] lo speed is unknown, defaulting to 1000
[  648.061154][T10693] lo speed is unknown, defaulting to 1000
[  648.248680][T10717] netlink: 'syz.1.16285': attribute type 1 has an invalid length.
[  648.404770][T10730] netlink: 'syz.1.16292': attribute type 15 has an invalid length.
[  648.789048][T10774] netlink: 'syz.0.16312': attribute type 1 has an invalid length.
[  648.791377][T10774] __nla_validate_parse: 10 callbacks suppressed
[  648.791385][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16312'.
[  649.148071][T10797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16321'.
[  649.336250][T10811] netlink: 'syz.2.16327': attribute type 14 has an invalid length.
[  649.339545][T10811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16327'.
[  649.342648][T10811] bond0: option xmit_hash_policy: invalid value (8)
[  649.680058][T10836] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  649.682901][T10836] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  649.858786][ T5273] block nbd4: Possible stuck request ffff8881047f8000: control (read@0,1024B). Runtime 180 seconds
[  649.862092][ T5273] block nbd4: Possible stuck request ffff8881047f8200: control (read@1024,1024B). Runtime 180 seconds
[  649.866146][ T5273] block nbd4: Possible stuck request ffff8881047f8400: control (read@2048,1024B). Runtime 180 seconds
[  649.869728][ T5273] block nbd4: Possible stuck request ffff8881047f8600: control (read@3072,1024B). Runtime 180 seconds
[  650.629289][T10848] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16345'.
[  650.725933][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16347'.
[  650.729302][T10856] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16347'.
[  650.732452][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16347'.
[  651.021963][T10885] erspan0: entered promiscuous mode
[  651.032506][T10893] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16366'.
[  651.052725][T10885] net_ratelimit: 61 callbacks suppressed
[  651.052735][T10885] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check.
[  651.468006][ T5256] udevd[5256]: worker [31766] /devices/virtual/block/nbd4 timeout; kill it
[  651.470736][ T5256] udevd[5256]: seq 21680 '/devices/virtual/block/nbd4' killed
[  651.491016][T10931] netlink: 'syz.0.16383': attribute type 1 has an invalid length.
[  651.493901][T10934] netlink: 'syz.1.16385': attribute type 6 has an invalid length.
[  651.493952][T10931] netlink: 224 bytes leftover after parsing attributes in process `syz.0.16383'.
[  651.496307][T10934] IPv6: NLM_F_CREATE should be specified when creating new route
[  651.840141][T10974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16400'.
[  651.933975][T10986] ..0{X: left allmulticast mode
[  651.939812][T10986] syz_tun: left promiscuous mode
[  651.941631][T10986] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  652.212525][T11012] lo speed is unknown, defaulting to 1000
[  652.333958][T11012] lo speed is unknown, defaulting to 1000
[  653.007398][T11067] netlink: 'syz.1.16444': attribute type 31 has an invalid length.
[  653.116101][T11077] ip6tnl8: entered allmulticast mode
[  654.783725][   T34] audit: type=1800 audit(1772218597.357:18): pid=11189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.16495" name="memory.events" dev="tmpfs" ino=28603 res=0 errno=0
[  654.822550][T11188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  655.051211][T11200] __nla_validate_parse: 4 callbacks suppressed
[  655.051223][T11200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16496'.
[  655.295385][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16496'.
[  655.491588][T11213] netlink: 44 bytes leftover after parsing attributes in process `syz.2.16504'.
[  655.836139][T11226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  655.839712][T11226] syzkaller0: entered promiscuous mode
[  655.841446][T11226] syzkaller0: entered allmulticast mode
[  655.855090][T11226] tipc: Resetting bearer <eth:syzkaller0>
[  655.860530][T11225] tipc: Resetting bearer <eth:syzkaller0>
[  655.873030][T11225] tipc: Disabling bearer <eth:syzkaller0>
[  656.362676][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16521'.
[  656.881810][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16534'.
[  657.461194][T11315] netlink: 48 bytes leftover after parsing attributes in process `syz.1.16551'.
[  657.571662][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16553'.
[  658.277112][T11369] netlink: 'syz.1.16575': attribute type 15 has an invalid length.
[  658.280714][T11369] netlink: 666 bytes leftover after parsing attributes in process `syz.1.16575'.
[  658.320114][T11371] gre0: entered promiscuous mode
[  658.322485][T11371] gre0: entered allmulticast mode
[  658.330792][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16576'.
[  659.230976][T11434] lo speed is unknown, defaulting to 1000
[  659.392908][T11434] lo speed is unknown, defaulting to 1000
[  659.807765][T11479] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16624'.
[  659.941133][T11485] netlink: 'syz.1.16627': attribute type 1 has an invalid length.
[  660.044602][T11485] bond17: entered promiscuous mode
[  660.046879][T11485] 8021q: adding VLAN 0 to HW filter on device bond17
[  660.079878][T11485] bond17: (slave bridge19): making interface the new active one
[  660.083391][T11485] bridge19: entered promiscuous mode
[  660.128870][T11485] bond17: (slave bridge19): Enslaving as an active interface with an up link
[  660.254028][T11496] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  660.405967][T11501] xt_CT: No such helper "snmp_trap"
[  660.835115][T11538] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  660.850610][T11538] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  660.963005][T11550] __nla_validate_parse: 1 callbacks suppressed
[  660.963023][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16655'.
[  661.054468][T11556] tipc: Resetting bearer <eth:syzkaller0>
[  661.109021][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.112439][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.116309][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.122896][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  661.630371][T11594] lo speed is unknown, defaulting to 1000
[  661.743509][T11594] lo speed is unknown, defaulting to 1000
[  662.160930][T11635] sit0: entered promiscuous mode
[  662.179483][T11635] netlink: 'syz.2.16691': attribute type 1 has an invalid length.
[  662.189954][T11635] netlink: 1 bytes leftover after parsing attributes in process `syz.2.16691'.
[  663.465968][T11685] netlink: 'syz.0.16712': attribute type 7 has an invalid length.
[  663.556972][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16718'.
[  664.217521][T11734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16734'.
[  664.518970][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16743'.
[  664.573927][T11761] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.16745'.
[  664.585970][T11761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16745'.
[  664.670612][T11771] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16749'.
[  664.800456][T11784] xt_hashlimit: size too large, truncated to 1048576
[  665.125360][T11801] netlink: 'syz.2.16763': attribute type 15 has an invalid length.
[  665.335574][T11814] netlink: 'syz.0.16769': attribute type 1 has an invalid length.
[  665.347155][T11811] lo speed is unknown, defaulting to 1000
[  665.451359][T11811] lo speed is unknown, defaulting to 1000
[  666.142899][T11859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16788'.
[  666.231958][T11867] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  666.234816][T11867] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  666.237568][T11867] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  666.612448][T11907] netlink: 'syz.1.16810': attribute type 13 has an invalid length.
[  666.614988][T11907] netlink: 'syz.1.16810': attribute type 17 has an invalid length.
[  666.647030][T11907] erspan0: left promiscuous mode
[  666.670094][T11907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  666.876646][T11931] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16824'.
[  666.975631][T11945] netlink: 'syz.0.16829': attribute type 10 has an invalid length.
[  667.245868][T11961] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  667.448735][T11982] netlink: 7 bytes leftover after parsing attributes in process `syz.1.16847'.
[  667.555046][T11994] batadv0: entered promiscuous mode
[  667.557720][T11994] batadv0: entered allmulticast mode
[  667.563339][T11994] 8021q: adding VLAN 0 to HW filter on device batadv0
[  667.795153][T12006] xt_connbytes: Forcing CT accounting to be enabled
[  667.834896][T12018] netlink: 'syz.2.16861': attribute type 2 has an invalid length.
[  667.939065][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16865'.
[  667.942518][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16865'.
[  668.552454][T12043] lo speed is unknown, defaulting to 1000
[  668.724197][T12049] lo speed is unknown, defaulting to 1000
[  668.727126][T12043] lo speed is unknown, defaulting to 1000
[  668.824472][T12056] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16877'.
[  668.880010][T12049] lo speed is unknown, defaulting to 1000
[  669.270862][T12081] netlink: 216 bytes leftover after parsing attributes in process `syz.1.16888'.
[  669.273732][T12081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16888'.
[  669.276632][T12081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16888'.
[  669.390146][T12090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  669.530082][T12100] openvswitch: netlink: Message has 572 unknown bytes.
[  669.532969][T12101] netlink: 'syz.1.16897': attribute type 3 has an invalid length.
[  669.535362][T12100] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  669.631426][T12097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16895'.
[  669.976496][T12143] netlink: 'syz.1.16916': attribute type 14 has an invalid length.
[  669.994464][T12145] netlink: 'syz.2.16917': attribute type 16 has an invalid length.
[  669.997379][T12145] netlink: 'syz.2.16917': attribute type 17 has an invalid length.
[  670.009114][T12145] tipc: Resetting bearer <eth:syzkaller0>
[  670.012702][T12145] tipc: Resetting bearer <eth:syzkaller0>
[  670.074294][T12151] netlink: 'syz.2.16919': attribute type 8 has an invalid length.
[  671.251943][T12235] __nla_validate_parse: 2 callbacks suppressed
[  671.251961][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16956'.
[  671.359908][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16958'.
[  671.471606][T12252] netlink: 'syz.0.16964': attribute type 1 has an invalid length.
[  671.505897][T12255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16965'.
[  671.615031][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16970'.
[  671.641910][T12269] lo speed is unknown, defaulting to 1000
[  671.778505][T12269] lo speed is unknown, defaulting to 1000
[  671.851496][T12280] bond18 (unregistering): Released all slaves
[  671.895783][T12285] netlink: 428 bytes leftover after parsing attributes in process `syz.2.16976'.
[  671.956773][T12285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16976'.
[  672.178087][ T5845] Bluetooth: hci2: command 0x0401 tx timeout
[  672.241037][T12311] xt_bpf: check failed: parse error
[  672.547743][T12336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17001'.
[  672.673356][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17006'.
[  672.677445][T12348] netlink: 'syz.2.17006': attribute type 22 has an invalid length.
[  672.683417][T12348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17006'.
[  672.773706][T12356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17011'.
[  673.326775][T12399] delete_channel: no stack
[  673.640160][T12427] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  673.653910][T12429] veth1: entered promiscuous mode
[  673.655719][T12429] veth1: entered allmulticast mode
[  673.657327][T12429] netlink: 'syz.2.17045': attribute type 2 has an invalid length.
[  673.725813][T12433] lo speed is unknown, defaulting to 1000
[  674.033024][T12433] lo speed is unknown, defaulting to 1000
[  674.630009][T12495] netlink: 'syz.0.17074': attribute type 29 has an invalid length.
[  674.948319][T12520] pim6reg: entered allmulticast mode
[  674.962086][T12520] pim6reg: left allmulticast mode
[  675.200693][T12552] netlink: zone id is out of range
[  675.202654][T12552] netlink: zone id is out of range
[  675.204654][T12552] netlink: zone id is out of range
[  675.207071][T12552] netlink: zone id is out of range
[  675.210235][T12552] netlink: zone id is out of range
[  675.214046][T12552] netlink: zone id is out of range
[  675.216782][T12552] netlink: zone id is out of range
[  675.221840][T12552] netlink: zone id is out of range
[  675.223712][T12552] netlink: zone id is out of range
[  675.779988][T12608] lo speed is unknown, defaulting to 1000
[  675.987291][T12608] lo speed is unknown, defaulting to 1000
[  676.271022][T12636] __nla_validate_parse: 11 callbacks suppressed
[  676.271040][T12636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17140'.
[  676.276775][T12636] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17140'.
[  676.409075][T12643] bond18: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  676.412980][T12643] bond18 (unregistering): Released all slaves
[  676.730440][T12658] vlan5: entered allmulticast mode
[  676.732499][T12658] veth0_to_bond: entered allmulticast mode
[  676.758515][T12658] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.17150'.
[  676.913216][T12676] netlink: 14 bytes leftover after parsing attributes in process `syz.0.17159'.
[  676.988776][T12676] bond0 (unregistering): Released all slaves
[  677.223873][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17171'.
[  677.226642][T12706] gre0: left allmulticast mode
[  677.521546][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17182'.
[  678.434890][T12752] netlink: 104 bytes leftover after parsing attributes in process `syz.1.17191'.
[  678.787740][T12788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17208'.
[  679.241459][T12827] lo speed is unknown, defaulting to 1000
[  679.415464][T12827] lo speed is unknown, defaulting to 1000
[  679.938104][ T5273] block nbd4: Possible stuck request ffff8881047f8000: control (read@0,1024B). Runtime 210 seconds
[  679.941278][ T5273] block nbd4: Possible stuck request ffff8881047f8200: control (read@1024,1024B). Runtime 210 seconds
[  679.944345][ T5273] block nbd4: Possible stuck request ffff8881047f8400: control (read@2048,1024B). Runtime 210 seconds
[  679.947415][ T5273] block nbd4: Possible stuck request ffff8881047f8600: control (read@3072,1024B). Runtime 210 seconds
[  680.301547][T12880] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  680.462743][T12896] sctp: [Deprecated]: syz.1.17254 (pid 12896) Use of int in maxseg socket option.
[  680.462743][T12896] Use struct sctp_assoc_value instead
[  680.814044][T12927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17267'.
[  680.879694][T12929] syzkaller1: entered promiscuous mode
[  680.881837][T12929] syzkaller1: entered allmulticast mode
[  681.173267][T12955] netlink: 'syz.0.17281': attribute type 39 has an invalid length.
[  681.213499][T12959] net_ratelimit: 8 callbacks suppressed
[  681.213516][T12959] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  681.301124][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17286'.
[  681.381121][T12973] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  681.384282][T12973] syzkaller0: entered promiscuous mode
[  681.386363][T12973] syzkaller0: entered allmulticast mode
[  681.410252][T12973] tipc: Resetting bearer <eth:syzkaller0>
[  681.414188][T12972] tipc: Resetting bearer <eth:syzkaller0>
[  681.433474][T12972] tipc: Disabling bearer <eth:syzkaller0>
[  681.499729][T12978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17291'.
[  682.870172][T13032] xt_TCPMSS: Only works on TCP SYN packets
[  682.938170][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17320'.
[  683.388275][T13071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17336'.
[  683.984875][T13129] netlink: 'syz.0.17364': attribute type 17 has an invalid length.
[  684.115985][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17371'.
[  684.134520][T13149] netlink: 'syz.1.17373': attribute type 9 has an invalid length.
[  684.145741][T13147] syzkaller1: entered promiscuous mode
[  684.147549][T13147] syzkaller1: entered allmulticast mode
[  684.180174][T13151] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  684.196288][T13151] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  684.199619][T13151] tipc: Resetting bearer <eth:syzkaller0>
[  684.329402][T13166] openvswitch: netlink: Message has 592 unknown bytes.
[  684.333168][T13166] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  684.444289][T13177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17387'.
[  684.466935][T13177] bond18: entered promiscuous mode
[  684.472203][T13177] 8021q: adding VLAN 0 to HW filter on device bond18
[  684.483898][T13177] bond18 (unregistering): Released all slaves
[  684.842705][T13194] netlink: 'syz.1.17395': attribute type 1 has an invalid length.
[  684.860205][T13194] bond18: entered promiscuous mode
[  684.861975][T13194] 8021q: adding VLAN 0 to HW filter on device bond18
[  684.877779][T13194] bond18: (slave veth41): making interface the new active one
[  684.880486][T13194] veth41: entered promiscuous mode
[  684.883245][T13194] bond18: (slave veth41): Enslaving as an active interface with an up link
[  685.031640][T13205] netlink: 'syz.1.17400': attribute type 1 has an invalid length.
[  685.034141][T13205] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17400'.
[  685.037638][T13205] NCSI netlink: No device for ifindex 0
[  685.245298][T13211] xt_TCPMSS: Only works on TCP SYN packets
[  685.281855][T13212] lo speed is unknown, defaulting to 1000
[  685.330870][T13220] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  685.355458][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17407'.
[  685.448208][T13226] netlink: 'syz.2.17409': attribute type 1 has an invalid length.
[  685.450587][T13226] netlink: 352 bytes leftover after parsing attributes in process `syz.2.17409'.
[  685.453320][T13226] netlink: 'syz.2.17409': attribute type 1 has an invalid length.
[  685.455567][T13226] netlink: 352 bytes leftover after parsing attributes in process `syz.2.17409'.
[  685.463708][T13212] lo speed is unknown, defaulting to 1000
[  686.741689][T13290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17436'.
[  686.863119][T13295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17440'.
[  686.898303][T13296] lo speed is unknown, defaulting to 1000
[  686.917025][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17438'.
[  687.014111][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17441'.
[  687.075869][T13296] lo speed is unknown, defaulting to 1000
[  687.293226][T13324] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  687.424740][T13335] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17451'.
[  687.799603][T13347] bridge_slave_0: invalid flags given to default FDB implementation
[  688.006276][T13359] netlink: 'syz.1.17466': attribute type 9 has an invalid length.
[  688.009502][T13359] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.17466'.
[  688.490705][T13396] netlink: 'syz.1.17480': attribute type 13 has an invalid length.
[  688.500130][T13399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  688.523095][T13401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17482'.
[  688.600809][T13402] syzkaller0: Caught tx_queue_len zero misconfig
[  688.652835][T13412] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17486'.
[  689.294103][T13457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17505'.
[  689.751372][T13488] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma?
[  690.127534][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17524'.
[  690.242649][T13510] lo speed is unknown, defaulting to 1000
[  690.522005][T13510] lo speed is unknown, defaulting to 1000
[  691.275182][T13601] 8021q: adding VLAN 0 to HW filter on device bond19
[  691.288176][T13601] 8021q: adding VLAN 0 to HW filter on device batadv4
[  691.294442][T13601] bond19: (slave batadv4): Enslaving as an active interface with an up link
[  691.551341][T13625] lo speed is unknown, defaulting to 1000
[  691.833904][T13645] __nla_validate_parse: 1 callbacks suppressed
[  691.833920][T13645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17582'.
[  691.839827][T13645] bond0: option arp_all_targets: invalid value (16777215)
[  691.949752][T13625] lo speed is unknown, defaulting to 1000
[  693.782590][T13772] tipc: Bearer <udp:syz1>: already 2 bearers with priority 10
[  693.786812][T13772] tipc: Bearer <udp:syz1>: trying with adjusted priority
[  693.791334][T13772] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  696.247247][T13836] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  696.498579][T13863] netlink: 'syz.0.17681': attribute type 1 has an invalid length.
[  696.501548][T13863] netlink: 228 bytes leftover after parsing attributes in process `syz.0.17681'.
[  696.683431][T13876] netlink: 26 bytes leftover after parsing attributes in process `syz.2.17687'.
[  697.497533][T13903] netlink: 'syz.1.17700': attribute type 26 has an invalid length.
[  697.712182][T13915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17706'.
[  697.800040][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17708'.
[  697.803380][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17708'.
[  697.804564][T13921] netlink: 'syz.2.17709': attribute type 64 has an invalid length.
[  697.806784][T13920] netlink: 124 bytes leftover after parsing attributes in process `syz.0.17708'.
[  697.878038][T13923] ip6tnl0: Caught tx_queue_len zero misconfig
[  698.004358][T13936] lo speed is unknown, defaulting to 1000
[  698.224457][T13936] lo speed is unknown, defaulting to 1000
[  699.633885][T14008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17743'.
[  699.636704][T14008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17743'.
[  699.836002][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17749'.
[  699.839390][T14025] netlink: 348 bytes leftover after parsing attributes in process `syz.1.17749'.
[  699.849495][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17749'.
[  699.852704][T14025] netlink: 348 bytes leftover after parsing attributes in process `syz.1.17749'.
[  700.701762][T14098] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[  700.723286][T14100] netlink: 'syz.2.17784': attribute type 4 has an invalid length.
[  701.201830][T14135] lo speed is unknown, defaulting to 1000
[  701.789260][T14135] lo speed is unknown, defaulting to 1000
[  703.115227][T14214] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  703.504485][T14242] netlink: 'syz.0.17845': attribute type 6 has an invalid length.
[  703.570801][T14248] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  703.621187][T14250] netlink: 'syz.2.17849': attribute type 9 has an invalid length.
[  703.894688][T14271] __nla_validate_parse: 3 callbacks suppressed
[  703.894705][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17853'.
[  703.937581][T14271] net veth1_virt_wifi virt_wifi0 (unregistering): left promiscuous mode
[  704.075712][   T34] audit: type=1800 audit(1772218646.647:19): pid=14287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17864" name="blkio.bfq.time_recursive" dev="tmpfs" ino=29206 res=0 errno=0
[  704.488197][ T3146] lo speed is unknown, defaulting to 1000
[  704.490435][ T3146] syz0: Port: 1 Link DOWN
[  704.498160][   T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  704.505810][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  704.519504][   T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  704.526349][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  704.535747][T14294] lo speed is unknown, defaulting to 1000
[  704.538621][   T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  704.548184][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  704.557482][   T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  704.573135][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  704.737101][T14323] delete_channel: no stack
[  704.847532][T14336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17881'.
[  705.014314][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17891'.
[  705.441326][T14382] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17903'.
[  705.445507][T14382] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17903'.
[  706.352626][T14407] team_slave_1: Caught tx_queue_len zero misconfig
[  707.291247][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17931'.
[  707.294419][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17931'.
[  707.746757][T14485] netlink: 232 bytes leftover after parsing attributes in process `syz.2.17947'.
[  708.323046][T14537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17972'.
[  708.512629][T14557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17981'.
[  708.621669][T14569] lo speed is unknown, defaulting to 1000
[  708.816382][T14569] lo speed is unknown, defaulting to 1000
[  709.869528][T14657] 8021q: adding VLAN 0 to HW filter on device team0
[  709.880660][T14657] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  709.890748][ T5839] lo speed is unknown, defaulting to 1000
[  709.892548][ T5839] syz0: Port: 1 Link ACTIVE
[  709.894182][ T5839] lo speed is unknown, defaulting to 1000
[  710.018405][ T5273] block nbd4: Possible stuck request ffff8881047f8000: control (read@0,1024B). Runtime 240 seconds
[  710.027004][ T5273] block nbd4: Possible stuck request ffff8881047f8200: control (read@1024,1024B). Runtime 240 seconds
[  710.031595][ T5273] block nbd4: Possible stuck request ffff8881047f8400: control (read@2048,1024B). Runtime 240 seconds
[  710.035646][ T5273] block nbd4: Possible stuck request ffff8881047f8600: control (read@3072,1024B). Runtime 240 seconds
[  710.476518][T14701] netlink: 'syz.1.18044': attribute type 10 has an invalid length.
[  710.817778][T14729] __nla_validate_parse: 1 callbacks suppressed
[  710.817794][T14729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18056'.
[  710.853977][T14736] netlink: get zone limit has 4 unknown bytes
[  711.940773][T14831] netlink: 332 bytes leftover after parsing attributes in process `syz.2.18091'.
[  711.986791][T14833] geneve5: entered promiscuous mode
[  711.991144][ T5858] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 59988 - 0
[  711.996745][ T5858] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 59988 - 0
[  712.001115][ T5858] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 59988 - 0
[  712.004389][ T5858] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 59988 - 0
[  712.566245][T14869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18109'.
[  712.866571][T14887] lo speed is unknown, defaulting to 1000
[  714.613989][T14895] veth25: entered promiscuous mode
[  714.616747][T14887] lo speed is unknown, defaulting to 1000
[  714.987770][T14929] team0 (unregistering): Port device bridge5 removed
[  714.993891][T14929] team0 (unregistering): Port device bridge22 removed
[  715.305744][T14960] netlink: 1 bytes leftover after parsing attributes in process `syz.0.18148'.
[  715.330708][T14961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18149'.
[  715.439511][T14971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18154'.
[  715.584577][T14984] lo: Caught tx_queue_len zero misconfig
[  715.586416][T14984] netlink: 'syz.1.18160': attribute type 14 has an invalid length.
[  715.624892][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18162'.
[  715.635867][T14987] netlink: 'syz.2.18162': attribute type 12 has an invalid length.
[  715.639306][T14989] netlink: 232 bytes leftover after parsing attributes in process `syz.0.18163'.
[  715.642490][T14989] netlink: 232 bytes leftover after parsing attributes in process `syz.0.18163'.
[  715.645869][T14989] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18163'.
[  715.650492][T14987] netlink: 'syz.2.18162': attribute type 12 has an invalid length.
[  715.844137][T15002] lo speed is unknown, defaulting to 1000
[  716.071237][T15011] lo speed is unknown, defaulting to 1000
[  716.126319][T15002] lo speed is unknown, defaulting to 1000
[  716.198155][T15011] lo speed is unknown, defaulting to 1000
[  716.402114][T15035] lo speed is unknown, defaulting to 1000
[  716.696149][T15035] lo speed is unknown, defaulting to 1000
[  717.271796][T15084] netlink: 'syz.1.18201': attribute type 5 has an invalid length.
[  717.551283][T15108] __nla_validate_parse: 1 callbacks suppressed
[  717.551301][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18212'.
[  718.063415][T15154] netlink: 'syz.2.18230': attribute type 21 has an invalid length.
[  718.066523][T15154] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  718.069350][T15154] IPv6: NLM_F_CREATE should be set when creating new route
[  718.072068][T15154] IPv6: NLM_F_CREATE should be set when creating new route
[  718.074703][T15154] IPv6: NLM_F_CREATE should be set when creating new route
[  718.338320][T15178] veth0: Caught tx_queue_len zero misconfig
[  718.493525][T15190] macsec0: entered promiscuous mode
[  718.495576][T15190] syzkaller0: port 1(macsec0) entered blocking state
[  718.497774][T15190] syzkaller0: port 1(macsec0) entered disabled state
[  718.501541][T15190] macsec0: entered allmulticast mode
[  718.507036][T15190] macsec0: left allmulticast mode
[  718.622882][T15201] netlink: 91 bytes leftover after parsing attributes in process `syz.1.18252'.
[  718.641540][T15194] lo speed is unknown, defaulting to 1000
[  718.809491][T15194] lo speed is unknown, defaulting to 1000
[  718.861181][T15193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  720.350298][T15274] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.18281'.
[  720.369525][T15275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18283'.
[  720.456861][T15287] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  720.470163][T15287] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  720.552836][T15295] netlink: 292 bytes leftover after parsing attributes in process `syz.2.18292'.
[  720.627172][T15301] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18295'.
[  720.677075][T15312] netlink: 'syz.1.18298': attribute type 3 has an invalid length.
[  720.680579][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18298'.
[  720.791709][T15326] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18304'.
[  720.813393][T15330] netlink: 428 bytes leftover after parsing attributes in process `syz.2.18306'.
[  720.816176][T15330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18306'.
[  720.830743][T15332] netlink: 'syz.1.18307': attribute type 1 has an invalid length.
[  721.270205][T15364] lo speed is unknown, defaulting to 1000
[  721.414086][T15364] lo speed is unknown, defaulting to 1000
[  722.980046][T15341] Bluetooth: hci2: command 0x0401 tx timeout
[  723.009259][T15411] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  723.012869][T15411] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  723.118084][T15425] netlink: 'syz.2.18343': attribute type 3 has an invalid length.
[  723.121242][T15425] __nla_validate_parse: 1 callbacks suppressed
[  723.121253][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18343'.
[  723.391454][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18352'.
[  723.394156][T15448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18352'.
[  723.404302][T15448] geneve6: entered promiscuous mode
[  723.418105][T15448] geneve6: entered allmulticast mode
[  723.420782][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  723.423954][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  723.428725][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  723.431897][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  723.448993][T15452] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18354'.
[  723.451775][T15452] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18354'.
[  723.843458][T15484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18369'.
[  723.907704][T15490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18372'.
[  723.917014][T15490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18372'.
[  724.300652][T15528] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18390'.
[  725.002579][T15552] tipc: Resetting bearer <eth:syzkaller0>
[  725.386306][T15582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18408'.
[  725.520607][T15599] netlink: 'syz.1.18416': attribute type 1 has an invalid length.
[  725.523091][T15599] netlink: 'syz.1.18416': attribute type 2 has an invalid length.
[  725.796263][T15618] tipc: Resetting bearer <eth:syzkaller0>
[  727.146086][T15715] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  728.117413][T15738] netlink: 'syz.0.18473': attribute type 13 has an invalid length.
[  728.119973][T15738] netlink: 'syz.0.18473': attribute type 17 has an invalid length.
[  728.135109][T15738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  729.192941][T15775] __nla_validate_parse: 2 callbacks suppressed
[  729.192957][T15775] netlink: 104 bytes leftover after parsing attributes in process `syz.0.18490'.
[  730.093409][T15708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  730.218673][T15795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18496'.
[  730.301901][T15805] netlink: 48 bytes leftover after parsing attributes in process `syz.1.18502'.
[  730.404051][T15807] xt_CT: No such helper "syz1"
[  730.785442][T15838] xt_TPROXY: Can be used only with -p tcp or -p udp
[  730.909130][T15852] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  730.969412][T15855] lo speed is unknown, defaulting to 1000
[  731.088293][T15855] lo speed is unknown, defaulting to 1000
[  731.353734][T15879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18532'.
[  731.357075][T15879] netlink: 11 bytes leftover after parsing attributes in process `syz.0.18532'.
[  731.748792][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18543'.
[  731.753481][T15901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18542'.
[  731.869434][T15915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18549'.
[  732.076708][T15918] infiniband syz1: set active
[  732.078390][T15918] infiniband syz1: added ipvlan0
[  732.115244][T15918] RDS/IB: syz1: added
[  732.117076][T15918] smc: adding ib device syz1 with port count 1
[  732.120086][T15918] smc:    ib device syz1 port 1 has pnetid SYZ0 (user defined)
[  732.593291][T15944] bond1: option mode: unable to set because the bond device has slaves
[  733.109888][T15979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18576'.
[  733.115731][T15979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18576'.
[  733.119674][ T5858] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  733.122256][ T5858] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  733.128615][ T5858] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  733.131891][ T5858] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  733.277792][T15991] sctp: [Deprecated]: syz.0.18581 (pid 15991) Use of struct sctp_assoc_value in delayed_ack socket option.
[  733.277792][T15991] Use struct sctp_sack_info instead
[  734.786641][T16062] lo speed is unknown, defaulting to 1000
[  734.824863][T16068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18613'.
[  734.828307][T16069] netlink: 192 bytes leftover after parsing attributes in process `syz.0.18610'.
[  734.835066][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18610'.
[  734.924071][T16062] lo speed is unknown, defaulting to 1000
[  735.961042][T16140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18641'.
[  736.456463][T16187] veth1_to_bridge: Caught tx_queue_len zero misconfig
[  736.876362][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18685'.
[  736.945716][T16239] netlink: 'syz.0.18687': attribute type 4 has an invalid length.
[  736.981543][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18689'.
[  737.100395][T16251] syzkaller1: entered promiscuous mode
[  737.102392][T16251] syzkaller1: entered allmulticast mode
[  737.273982][ T5858] nci: nci_ntf_packet: unsupported ntf opcode 0xf00
[  737.385569][T16269] lo speed is unknown, defaulting to 1000
[  737.506549][T16269] lo speed is unknown, defaulting to 1000
[  738.335020][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18703'.
[  738.337823][T16282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18703'.
[  738.348606][T16282] netlink: 'syz.1.18703': attribute type 20 has an invalid length.
[  738.571557][T16294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18709'.
[  738.652206][T16298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18711'.
[  738.685741][T16300] geneve1: Caught tx_queue_len zero misconfig
[  739.844268][T16322] syzkaller0: left promiscuous mode
[  739.846426][T16322] syzkaller0: left allmulticast mode
[  740.098297][ T5273] block nbd4: Possible stuck request ffff8881047f8000: control (read@0,1024B). Runtime 270 seconds
[  740.102227][ T5273] block nbd4: Possible stuck request ffff8881047f8200: control (read@1024,1024B). Runtime 270 seconds
[  740.106310][ T5273] block nbd4: Possible stuck request ffff8881047f8400: control (read@2048,1024B). Runtime 270 seconds
[  740.110546][ T5273] block nbd4: Possible stuck request ffff8881047f8600: control (read@3072,1024B). Runtime 270 seconds
[  740.213687][T16257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  740.218283][T16275] netlink: 'syz.2.18698': attribute type 1 has an invalid length.
[  740.231735][T16328] netlink: 'syz.1.18725': attribute type 1 has an invalid length.
[  740.732036][T16376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18741'.
[  741.000054][T16393] netlink: 204 bytes leftover after parsing attributes in process `syz.1.18745'.
[  741.003248][T16393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18745'.
[  741.145896][T16406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18751'.
[  741.150552][T16406] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  741.154280][T16406] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  741.329834][T16422] syzkaller1: entered promiscuous mode
[  741.331870][T16422] syzkaller1: entered allmulticast mode
[  741.334427][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18759'.
[  741.432120][T16432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18762'.
[  741.437104][T16432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18762'.
[  741.900259][T16461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18777'.
[  742.344397][T16479] delete_channel: no stack
[  743.991031][T16538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18812'.
[  744.264403][T16564] ip6t_srh: unknown srh invflags BA61
[  744.298201][T16564] netlink: 'syz.0.18823': attribute type 1 has an invalid length.
[  744.572686][T16595] netlink: 'syz.2.18837': attribute type 2 has an invalid length.
[  744.813908][T16622] netlink: 'syz.1.18850': attribute type 15 has an invalid length.
[  744.816678][T16622] netlink: 666 bytes leftover after parsing attributes in process `syz.1.18850'.
[  744.897368][T16629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  745.102470][T16649] gre0: entered allmulticast mode
[  745.118343][T27995] nci: nci_ntf_packet: unknown ntf opcode 0x11c
[  748.048289][T16641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  748.499564][T16704] netlink: 'syz.1.18883': attribute type 5 has an invalid length.
[  748.734133][T16714] xt_hashlimit: max too large, truncated to 1048576
[  748.734138][T16712] __nla_validate_parse: 1 callbacks suppressed
[  748.734152][T16712] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18888'.
[  748.862705][T16719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18891'.
[  749.011522][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18896'.
[  749.027244][T16732] hsr_slave_0: left promiscuous mode
[  749.262985][T16756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18907'.
[  749.617126][T16787] netlink: 'syz.0.18921': attribute type 7 has an invalid length.
[  749.986821][T16817] netlink: 'syz.0.18936': attribute type 1 has an invalid length.
[  749.992673][T16817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  750.031009][T16821] veth0: entered promiscuous mode
[  750.033332][T16820] veth0: left promiscuous mode
[  750.149730][T16833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18944'.
[  750.405327][T16856] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.18953'.
[  750.415183][T16856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18953'.
[  750.602647][T16864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18957'.
[  750.705570][T16870] openvswitch: netlink: Key 19 has unexpected len 6 expected 4
[  750.872814][T16880] netlink: 'syz.0.18965': attribute type 66 has an invalid length.
[  750.905908][T16882] syzkaller0: entered promiscuous mode
[  750.907603][T16882] syzkaller0: entered allmulticast mode
[  751.261244][T16898] netlink: 'syz.2.18974': attribute type 10 has an invalid length.
[  751.325624][T16900] lo speed is unknown, defaulting to 1000
[  751.422997][T16908] netlink: 'syz.2.18976': attribute type 8 has an invalid length.
[  751.425947][T16908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18976'.
[  751.476397][T16900] lo speed is unknown, defaulting to 1000
[  751.557382][T16910] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  751.669613][T16920] xt_CONNSECMARK: invalid mode: 0
[  752.209461][T16977] syzkaller0: entered promiscuous mode
[  752.211318][T16977] syzkaller0: entered allmulticast mode
[  752.360156][T16983] netlink: 76 bytes leftover after parsing attributes in process `syz.2.19010'.
[  752.503228][T17007] netlink: 'syz.2.19020': attribute type 1 has an invalid length.
[  752.614297][T17014] netlink: 'syz.0.19023': attribute type 10 has an invalid length.
[  752.822589][T17044] sctp: [Deprecated]: syz.0.19037 (pid 17044) Use of int in max_burst socket option deprecated.
[  752.822589][T17044] Use struct sctp_assoc_value instead
[  752.974325][T17061] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  752.976388][T17061] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  753.865896][T17130] __nla_validate_parse: 4 callbacks suppressed
[  753.865913][T17130] netlink: 14 bytes leftover after parsing attributes in process `syz.1.19077'.
[  753.885205][T17130] dummy0 (unregistering): left allmulticast mode
[  753.887668][T17130] dummy0 (unregistering): left promiscuous mode
[  753.891819][T17130] bridge0: port 1(dummy0) entered disabled state
[  753.952285][T17135] xt_connbytes: Forcing CT accounting to be enabled
[  754.499892][T17169] netlink: 216 bytes leftover after parsing attributes in process `syz.1.19094'.
[  754.512436][T17169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19094'.
[  754.520711][T17169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19094'.
[  754.825940][T17195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19107'.
[  754.863202][T17201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19110'.
[  754.942001][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19111'.
[  754.956942][T17207] bridge22: entered promiscuous mode
[  755.225516][T17227] xt_TCPMSS: Only works on TCP SYN packets
[  755.282098][T17232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19125'.
[  755.386809][T17238] debugfs: 'netdev:nicvf0' already exists in 'phy3'
[  755.576745][T17255] ip6_vti0: Caught tx_queue_len zero misconfig
[  755.752208][ T5858] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  755.756841][ T5858] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  755.764138][ T5858] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  755.770080][ T5858] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  755.813094][T17273] netlink: 124 bytes leftover after parsing attributes in process `syz.0.19144'.
[  755.817361][T17273] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  756.016599][T17287] lo speed is unknown, defaulting to 1000
[  756.066946][T17298] netlink: 52 bytes leftover after parsing attributes in process `syz.0.19155'.
[  756.193361][T17287] lo speed is unknown, defaulting to 1000
[  756.233351][T17311] netlink: 'syz.0.19159': attribute type 1 has an invalid length.
[  756.321717][T17317] xt_hashlimit: max too large, truncated to 1048576
[  756.964876][T17364] lo speed is unknown, defaulting to 1000
[  757.101194][T17364] lo speed is unknown, defaulting to 1000
[  757.223362][T17378] siw: device registration error -23
[  757.298674][T17385] netlink: 'syz.0.19192': attribute type 1 has an invalid length.
[  757.652932][T17401] lo speed is unknown, defaulting to 1000
[  757.834329][T17411] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000
[  757.855515][T17401] lo speed is unknown, defaulting to 1000
[  758.331189][T17445] netlink: 'syz.2.19213': attribute type 1 has an invalid length.
[  758.387087][T17445] 8021q: adding VLAN 0 to HW filter on device bond26
[  758.441176][T17439] 8021q: adding VLAN 0 to HW filter on device batadv2
[  758.444729][T17439] bond26: (slave batadv2): making interface the new active one
[  758.453447][T17439] bond26: (slave batadv2): Enslaving as an active interface with an up link
[  758.507117][T17439] bond26 (unregistering): (slave batadv2): Releasing active interface
[  758.519142][T17439] bond26 (unregistering): Released all slaves
[  758.827221][T17482] lo speed is unknown, defaulting to 1000
[  758.893859][T17487] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  758.902884][T17487] netlink: 'syz.2.19228': attribute type 4 has an invalid length.
[  758.948609][T17482] lo speed is unknown, defaulting to 1000
[  759.359731][T17492] __nla_validate_parse: 7 callbacks suppressed
[  759.359741][T17492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19234'.
[  759.377027][T17492] 8021q: adding VLAN 0 to HW filter on device bond0
[  759.430921][T17492] ipvlan0: entered promiscuous mode
[  759.433033][T17492] ipvlan0: entered allmulticast mode
[  759.435112][T17492] bond0: entered allmulticast mode
[  760.049338][T17525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19247'.
[  760.256118][T17545] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  760.295846][T17551] netlink: 'syz.2.19259': attribute type 6 has an invalid length.
[  760.298571][T17551] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19259'.
[  760.453855][T17560] tipc: Resetting bearer <eth:syzkaller0>
[  761.229942][T17583] pimreg: tun_chr_ioctl cmd 1074025677
[  761.232326][T17583] pimreg: linktype set to 780
[  761.554026][T17602] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  761.944050][T17642] xt_CONNSECMARK: invalid mode: 0
[  762.205086][T17659] lo speed is unknown, defaulting to 1000
[  762.297515][T17669] syzkaller0: entered promiscuous mode
[  762.299841][T17669] syzkaller0: entered allmulticast mode
[  762.393413][T17659] lo speed is unknown, defaulting to 1000
[  762.818795][T17684] lo speed is unknown, defaulting to 1000
[  763.137382][T17695] lo speed is unknown, defaulting to 1000
[  763.148618][T17684] lo speed is unknown, defaulting to 1000
[  763.542035][T17695] lo speed is unknown, defaulting to 1000
[  763.797860][T17712] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19326'.
[  763.929402][T17718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19329'.
[  764.573208][T17751] openvswitch: netlink: Duplicate or invalid key (type 0).
[  764.582010][T17751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  764.899014][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19360'.
[  764.902369][T17781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19360'.
[  764.950448][T17785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19362'.
[  765.445813][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19379'.
[  765.535362][T17825] bond19: option updelay: invalid value (18446744072924056005)
[  765.538884][T17825] bond19: option updelay: allowed values 0 - 2147483647
[  765.544432][T17825] bond19 (unregistering): Released all slaves
[  765.834327][T17832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19384'.
[  765.898864][T17838] pimreg: tun_chr_ioctl cmd 35108
[  766.230069][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19398'.
[  766.492935][T17892] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19413'.
[  766.496486][T17892] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19413'.
[  767.122010][T17955] dvmrp12: entered allmulticast mode
[  767.124876][T17954] dvmrp12: left allmulticast mode
[  767.189154][T17961] IPVS: Error connecting to the multicast addr
[  767.361999][T17977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19453'.
[  767.438705][T17983] lo speed is unknown, defaulting to 1000
[  767.567701][T17983] lo speed is unknown, defaulting to 1000
[  768.787360][T18048] netlink: 'syz.1.19480': attribute type 8 has an invalid length.
[  768.790593][T18048] netlink: 'syz.1.19480': attribute type 9 has an invalid length.
[  768.793400][T18048] netlink: 'syz.1.19480': attribute type 10 has an invalid length.
[  768.796277][T18048] netlink: 'syz.1.19480': attribute type 11 has an invalid length.
[  768.799247][T18048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19480'.
[  768.972804][T18064] netlink: 'syz.1.19488': attribute type 17 has an invalid length.
[  769.251807][T18091] nbd: illegal input index 38656
[  769.565109][T18128] netlink: 'syz.1.19515': attribute type 1 has an invalid length.
[  769.606616][T18128] 8021q: adding VLAN 0 to HW filter on device bond21
[  769.613110][T18128] bond20: (slave bond21): making interface the new active one
[  769.618273][T18128] bond20: (slave bond21): Enslaving as an active interface with an up link
[  769.642181][T18128] bond20: (slave gretap9): Enslaving as a backup interface with an up link
[  769.646673][T18128] 8021q: adding VLAN 0 to HW filter on device bond20
[  769.657325][T18128] vlan7: entered promiscuous mode
[  769.659142][T18128] bond20: entered promiscuous mode
[  769.660761][T18128] bond21: entered promiscuous mode
[  770.113230][T18167] __nla_validate_parse: 3 callbacks suppressed
[  770.113246][T18167] netlink: 104 bytes leftover after parsing attributes in process `syz.2.19532'.
[  770.125709][T18166] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19532'.
[  770.192464][T18166] lo speed is unknown, defaulting to 1000
[  770.198028][ T5273] block nbd4: Possible stuck request ffff8881047f8000: control (read@0,1024B). Runtime 300 seconds
[  770.201674][ T5273] block nbd4: Possible stuck request ffff8881047f8200: control (read@1024,1024B). Runtime 300 seconds
[  770.205105][ T5273] block nbd4: Possible stuck request ffff8881047f8400: control (read@2048,1024B). Runtime 300 seconds
[  770.209268][ T5273] block nbd4: Possible stuck request ffff8881047f8600: control (read@3072,1024B). Runtime 300 seconds
[  770.347052][T18166] lo speed is unknown, defaulting to 1000
[  770.753828][T18180] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 1, id = 0
[  771.853085][T18220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19554'.
[  771.990643][T18232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19560'.
[  772.043487][T18237] netlink: 'syz.2.19561': attribute type 10 has an invalid length.
[  772.085701][T18239] sctp: [Deprecated]: syz.2.19563 (pid 18239) Use of int in max_burst socket option.
[  772.085701][T18239] Use struct sctp_assoc_value instead
[  772.102395][T18240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19562'.
[  772.526964][T18254] netlink: 'syz.2.19569': attribute type 3 has an invalid length.
[  772.643752][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19571'.
[  772.768246][T18267] netlink: 43 bytes leftover after parsing attributes in process `syz.2.19573'.
[  773.156509][T18292] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19583'.
[  773.638891][T18312] xt_CT: You must specify a L4 protocol and not use inversions on it
[  773.776425][T18321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19595'.
[  774.036305][T18331] netlink: 'syz.2.19599': attribute type 9 has an invalid length.
[  774.102510][T18335] netlink: 'syz.2.19601': attribute type 9 has an invalid length.
[  774.220522][T18337] netlink: 'syz.2.19602': attribute type 1 has an invalid length.
[  774.223399][T18338] netlink: 'syz.2.19602': attribute type 1 has an invalid length.
[  774.245884][T18337] bond26: entered promiscuous mode
[  774.249419][T18337] 8021q: adding VLAN 0 to HW filter on device bond26
[  774.257653][T18338] netlink: 164 bytes leftover after parsing attributes in process `syz.2.19602'.
[  774.271584][T18338] bond26: (slave bridge27): making interface the new active one
[  774.274760][T18338] bridge27: entered promiscuous mode
[  774.278714][T18338] bridge27: left promiscuous mode
[  774.672284][T18347] netlink: 'syz.0.19605': attribute type 9 has an invalid length.
[  774.772179][T18349] vlan0: left allmulticast mode
[  774.774783][T18349] bridge_slave_0: left allmulticast mode
[  774.777053][T18349] vlan0: left promiscuous mode
[  774.779646][T18349] bridge_slave_0: left promiscuous mode
[  774.782121][T18349] bridge0: port 2(vlan0) entered disabled state
[  775.194093][T18363] __nla_validate_parse: 24 callbacks suppressed
[  775.194108][T18363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19610'.
[  775.198800][T18343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19603'.
[  775.203172][T18343] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19603'.
[  775.271493][T18363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19610'.
[  775.401453][T18370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19612'.
[  775.405097][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19612'.
[  775.409046][T18370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19612'.
[  775.426958][T18370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19612'.
[  775.465642][T18375] netlink: 'syz.1.19614': attribute type 1 has an invalid length.
[  775.486893][T18375] bond22: entered promiscuous mode
[  775.489448][T18375] 8021q: adding VLAN 0 to HW filter on device bond22
[  775.502426][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19615'.
[  775.502462][T18379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19615'.
[  775.511135][T18375] bond22: (slave bridge0): making interface the new active one
[  775.514329][T18375] bridge0: entered promiscuous mode
[  775.517370][T18375] bond22: (slave bridge0): Enslaving as an active interface with an up link
[  775.549525][T18381] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20001
[  775.622729][T18390] netlink: 'syz.2.19618': attribute type 1 has an invalid length.
[  775.640671][T18390] bond27: entered promiscuous mode
[  775.642912][T18390] 8021q: adding VLAN 0 to HW filter on device bond27
[  775.662875][T18383] lo speed is unknown, defaulting to 1000
[  775.704920][T18388] Set syz1 is full, maxelem 65536 reached
[  775.716392][T18393] netlink: 'syz.2.19619': attribute type 1 has an invalid length.
[  775.754842][T18393] bond28: entered promiscuous mode
[  775.756601][T18393] 8021q: adding VLAN 0 to HW filter on device bond28
[  775.774341][T18398] bridge0: entered allmulticast mode
[  775.786328][T18398] vlan1: left promiscuous mode
[  775.787809][T18398] bridge_slave_0: left promiscuous mode
[  775.791473][T18398] bridge0: port 4(vlan1) entered disabled state
[  775.796493][T18398] hsr0: left promiscuous mode
[  775.799873][T18398] bridge0: port 3(hsr0) entered disabled state
[  775.867682][T18393] bond28: (slave bridge27): making interface the new active one
[  775.870230][T18393] bridge27: entered promiscuous mode
[  775.873107][T18393] bridge27: left promiscuous mode
[  775.930619][T18401] SET target dimension over the limit!
[  775.934185][T18383] lo speed is unknown, defaulting to 1000
[  775.937421][T18401] SET target dimension over the limit!
[  775.946598][T18401] SET target dimension over the limit!
[  776.237031][T18430] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  776.239676][T18430] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  776.450593][T18439] netlink: 'syz.1.19630': attribute type 9 has an invalid length.
[  776.821456][T18451] bridge0: entered allmulticast mode
[  776.964449][T18454] netlink: 'syz.0.19633': attribute type 4 has an invalid length.
[  776.983811][T13377] lo speed is unknown, defaulting to 1000
[  776.985677][T13377] syz0: Port: 1 Link DOWN
[  776.987501][T13377] lo speed is unknown, defaulting to 1000
[  778.292938][T18536] bond23: entered promiscuous mode
[  778.300055][T18536] 8021q: adding VLAN 0 to HW filter on device bond23
[  778.330417][T18544] bond23: (slave bridge25): making interface the new active one
[  778.333409][T18544] bridge25: entered promiscuous mode
[  778.336563][T18544] bond23: (slave bridge25): Enslaving as an active interface with an up link
[  778.415711][T18554] bond0: entered promiscuous mode
[  778.421466][T18554] bond0: left promiscuous mode
[  778.436933][T18559] syzkaller0: entered allmulticast mode
[  778.442020][T18559] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma?
[  778.447305][T18559] syzkaller0 (unregistering): left allmulticast mode
[  778.522243][T18567] batman_adv: batadv0: Adding interface: macvtap0
[  778.526563][T18567] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  778.534624][T18567] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active
[  778.805259][T18589] bridge0: entered allmulticast mode
[  778.836493][T18589] bond22: (slave bridge0): Releasing backup interface
[  778.839620][T18589] bridge0 (unregistering): left promiscuous mode
[  779.124361][T18608] bridge0: entered allmulticast mode
[  779.274384][T18618] validate_nla: 4 callbacks suppressed
[  779.274395][T18618] netlink: 'syz.2.19678': attribute type 10 has an invalid length.
[  779.838562][T18659] netlink: 'syz.0.19684': attribute type 9 has an invalid length.
[  780.051503][T18669] netlink: 'syz.0.19688': attribute type 1 has an invalid length.
[  780.069787][T18669] bond19: entered promiscuous mode
[  780.071719][T18669] 8021q: adding VLAN 0 to HW filter on device bond19
[  780.158047][T18673] bond19: (slave bridge0): making interface the new active one
[  780.161039][T18673] bridge0: entered promiscuous mode
[  780.164999][T18673] bridge0: left promiscuous mode
[  780.216784][T18675] __nla_validate_parse: 51 callbacks suppressed
[  780.216799][T18675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19690'.
[  780.229555][T18675] netlink: 'syz.2.19690': attribute type 21 has an invalid length.
[  780.353793][T18682] netlink: 'syz.0.19692': attribute type 1 has an invalid length.
[  780.356285][T18682] netlink: 96 bytes leftover after parsing attributes in process `syz.0.19692'.
[  780.362679][T18682] netlink: 1 bytes leftover after parsing attributes in process `syz.0.19692'.
[  780.365899][T18682] netlink: 'syz.0.19692': attribute type 1 has an invalid length.
[  780.369087][T18682] netlink: 634 bytes leftover after parsing attributes in process `syz.0.19692'.
[  780.641828][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19697'.
[  780.682812][T18700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19696'.
[  780.803189][T18706] netlink: 27 bytes leftover after parsing attributes in process `syz.1.19699'.
[  780.855211][T18712] bridge0: entered allmulticast mode
[  780.871950][T18710] 8021q: VLANs not supported on lo
[  780.954178][T18722] netlink: 76 bytes leftover after parsing attributes in process `syz.0.19701'.
[  781.005902][T18725] netlink: 32 bytes leftover after parsing attributes in process `syz.1.19705'.
[  781.016521][T18720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19705'.
[  781.198349][T18735] netlink: 'syz.0.19708': attribute type 10 has an invalid length.
[  781.272372][T18724] lo speed is unknown, defaulting to 1000
[  781.507814][T18724] lo speed is unknown, defaulting to 1000
[  781.521449][T18747] bridge0: entered allmulticast mode
[  782.069035][T18783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  782.260883][T18787] netlink: 'syz.1.19721': attribute type 10 has an invalid length.
[  782.473565][T18792] netlink: 'syz.1.19724': attribute type 10 has an invalid length.
[  782.510421][T18794] netlink: 'syz.0.19725': attribute type 9 has an invalid length.
[  782.612978][T18804] openvswitch: netlink: Unknown nsh attribute 0
[  782.827665][T18819] xt_CT: No such helper "snmp_trap"
[  782.844568][T18819] xt_TCPMSS: Only works on TCP SYN packets
[  783.114043][T18834] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  783.324539][T18852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  784.494751][T18929] validate_nla: 7 callbacks suppressed
[  784.494761][T18929] netlink: 'syz.0.19758': attribute type 10 has an invalid length.
[  784.574581][T18925] syzkaller1: entered promiscuous mode
[  784.576755][T18925] syzkaller1: entered allmulticast mode
[  784.885959][T18960] netlink: 'syz.2.19767': attribute type 10 has an invalid length.
[  784.970244][T18963] netlink: 'syz.0.19769': attribute type 1 has an invalid length.
[  784.990612][T18963] bond20: entered promiscuous mode
[  784.995067][T18963] 8021q: adding VLAN 0 to HW filter on device bond20
[  785.034962][T18963] bond20: (slave bridge0): making interface the new active one
[  785.037450][T18963] bridge0: entered promiscuous mode
[  785.052077][T18963] bridge0: left promiscuous mode
[  785.294168][T18991] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  785.329105][T18993] __nla_validate_parse: 41 callbacks suppressed
[  785.329121][T18993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19777'.
[  785.488412][T19000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19779'.
[  785.679438][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19780'.
[  785.684282][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19780'.
[  785.687038][T19007] netlink: 348 bytes leftover after parsing attributes in process `syz.2.19780'.
[  785.692884][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19780'.
[  785.695826][T19007] netlink: 348 bytes leftover after parsing attributes in process `syz.2.19780'.
[  785.700293][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19780'.
[  785.715982][T19011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19781'.
[  785.828679][T19025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19783'.
[  786.711631][T19073] netlink: 'syz.0.19799': attribute type 9 has an invalid length.
[  787.385130][T19107] netlink: 'syz.1.19810': attribute type 1 has an invalid length.
[  787.647869][T19120] bond1: option mode: unable to set because the bond device has slaves
[  787.654949][T19119] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  787.830179][T19134] netlink: 'syz.2.19819': attribute type 10 has an invalid length.
[  787.850454][T19138] netlink: 'syz.1.19820': attribute type 1 has an invalid length.
[  787.870829][T19138] bond25: entered promiscuous mode
[  787.872614][T19138] 8021q: adding VLAN 0 to HW filter on device bond25
[  787.886848][T19138] bond25: (slave bridge0): making interface the new active one
[  787.889869][T19138] bridge0: entered promiscuous mode
[  787.893577][T19138] bridge0: left promiscuous mode
[  788.283417][T19170] netlink: 'syz.2.19830': attribute type 10 has an invalid length.
[  788.352957][T19172] netlink: 'syz.1.19831': attribute type 1 has an invalid length.
[  788.374361][T19172] bond26: entered promiscuous mode
[  788.376841][T19172] 8021q: adding VLAN 0 to HW filter on device bond26
[  788.391450][T19172] bond26: (slave bridge0): making interface the new active one
[  788.393839][T19172] bridge0: entered promiscuous mode
[  788.396490][T19172] bond26: (slave bridge0): Enslaving as an active interface with an up link
[  788.480600][T19184] bond26: (slave bridge0): Releasing backup interface
[  788.483545][T19184] bridge0 (unregistering): left promiscuous mode
[  789.098072][T19226] bridge0: entered allmulticast mode
[  789.220906][T19244] netlink: 'syz.1.19851': attribute type 9 has an invalid length.
[  789.990379][T19279] lo speed is unknown, defaulting to 1000
[  790.097327][T19280] netlink: 'syz.0.19860': attribute type 13 has an invalid length.
[  790.100861][T19280] netlink: 'syz.0.19860': attribute type 17 has an invalid length.
[  790.135087][T19280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  790.148794][T14299] lo speed is unknown, defaulting to 1000
[  790.148823][T19279] lo speed is unknown, defaulting to 1000
[  790.150551][T14299] syz0: Port: 1 Link ACTIVE
[  790.150631][T14299] lo speed is unknown, defaulting to 1000
[  790.195514][T19289] netlink: 'syz.2.19863': attribute type 1 has an invalid length.
[  790.221719][T19289] bond29: entered promiscuous mode
[  790.224115][T19289] 8021q: adding VLAN 0 to HW filter on device bond29
[  790.266140][T19289] bond29: (slave bridge0): making interface the new active one
[  790.269216][T19289] bridge0: entered promiscuous mode
[  790.286865][T19289] bridge0: left promiscuous mode
[  790.509483][T19301] __nla_validate_parse: 35 callbacks suppressed
[  790.509498][T19301] netlink: 104 bytes leftover after parsing attributes in process `syz.0.19868'.
[  790.575341][T19308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19870'.
[  790.590840][T19308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19870'.
[  790.724094][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19874'.
[  790.770716][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19874'.
[  790.782488][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19874'.
[  790.895345][T19336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19879'.
[  790.899324][T19336] netlink: 'syz.2.19879': attribute type 2 has an invalid length.
[  790.933217][T19336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19879'.
[  791.146470][T19364] netlink: 'syz.0.19888': attribute type 9 has an invalid length.
[  792.011957][T19392] netlink: 'syz.2.19898': attribute type 10 has an invalid length.
[  792.014918][T19392] netlink: 228 bytes leftover after parsing attributes in process `syz.2.19898'.
[  792.388378][T19412] openvswitch: netlink: Actions may not be safe on all matching packets
[  792.395165][T19412] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19906'.
[  792.442327][T19423] netlink: 'syz.2.19909': attribute type 9 has an invalid length.
[  792.980905][T19467] netlink: 'syz.0.19923': attribute type 10 has an invalid length.
[  793.052983][T19475] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  793.346488][T19504] syzkaller0: entered promiscuous mode
[  793.348903][T19504] syzkaller0: entered allmulticast mode
[  793.485280][T19509] lo speed is unknown, defaulting to 1000
[  793.666077][T19509] lo speed is unknown, defaulting to 1000
[  794.546216][T19564] netlink: 'syz.0.19958': attribute type 10 has an invalid length.
[  795.810741][T19646] netlink: 'syz.0.19987': attribute type 9 has an invalid length.
[  795.913111][T19648] pim6reg1: entered promiscuous mode
[  795.916177][T19648] pim6reg1: entered allmulticast mode
[  795.923038][T19648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  795.925266][T19648] IPv6: NLM_F_CREATE should be set when creating new route
[  795.986246][T19655] __nla_validate_parse: 32 callbacks suppressed
[  795.986257][T19655] netlink: 68 bytes leftover after parsing attributes in process `syz.2.19988'.
[  796.163936][T19683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19999'.
[  796.199384][T19685] netlink: 'syz.0.20000': attribute type 9 has an invalid length.
[  796.263365][T19687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20001'.
[  796.272891][T19687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20001'.
[  796.275557][T19687] netlink: 348 bytes leftover after parsing attributes in process `syz.1.20001'.
[  796.278566][T19687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20001'.
[  796.281160][T19687] netlink: 348 bytes leftover after parsing attributes in process `syz.1.20001'.
[  796.283966][T19687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20001'.
[  796.415344][T19699] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) !
[  796.549261][T19713] netlink: 44 bytes leftover after parsing attributes in process `syz.2.20006'.
[  796.692775][T19730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20013'.
[  796.833817][T19733] netlink: 'syz.1.20014': attribute type 21 has an invalid length.
[  796.836824][T19733] netlink: 'syz.1.20014': attribute type 22 has an invalid length.
[  796.839571][T19733] netlink: 'syz.1.20014': attribute type 23 has an invalid length.
[  797.011343][T19743] Unsupported ieee802154 address type: 0
[  797.028278][T19743] netlink: 'syz.1.20016': attribute type 10 has an invalid length.
[  797.653612][T19776] netlink: 'syz.0.20028': attribute type 10 has an invalid length.
[  797.851028][T19792] netlink: 'syz.1.20034': attribute type 1 has an invalid length.
[  797.877109][T19792] bond27: entered promiscuous mode
[  797.879108][T19792] 8021q: adding VLAN 0 to HW filter on device bond27
[  797.930734][T19802] netlink: 'syz.0.20038': attribute type 1 has an invalid length.
[  797.989589][T19802] bond21: entered promiscuous mode
[  797.991847][T19802] 8021q: adding VLAN 0 to HW filter on device bond21
[  798.082334][T19818] netlink: 'syz.0.20041': attribute type 9 has an invalid length.
[  798.130907][T19820] bridge0: entered allmulticast mode
[  798.252822][T19824] lo speed is unknown, defaulting to 1000
[  798.336798][T19834] 8021q: adding VLAN 0 to HW filter on device bond28
[  798.379626][T19824] lo speed is unknown, defaulting to 1000
[  798.489326][T19844] syzkaller0: entered allmulticast mode
[  798.524432][T19849] xt_NFQUEUE: number of total queues is 0
[  798.527233][T19849] tunl0: Caught tx_queue_len zero misconfig
[  798.541945][T19843] syzkaller0: left allmulticast mode
[  798.969004][T19876] syzkaller1: entered promiscuous mode
[  798.978570][T19876] syzkaller1: entered allmulticast mode
[  799.296134][T19902] sctp: [Deprecated]: syz.2.20069 (pid 19902) Use of int in max_burst socket option.
[  799.296134][T19902] Use struct sctp_assoc_value instead
[  799.769119][T19935] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32)
[  799.975251][T19957] tipc: Failed to remove unknown binding: 66,1,1/2297384600:2671689110/2671689112
[  800.032333][T19958] tipc: Failed to remove unknown binding: 66,1,1/2297384600:2671689110/2671689112
[  800.035907][T19958] tipc: Failed to remove unknown binding: 66,1,1/2297384600:2671689110/2671689112
[  800.093506][T19960] @: option downdelay: invalid value (18446744073709547007)
[  800.096402][T19960] @: option downdelay: allowed values 0 - 2147483647
[  800.100868][T19960] @ (unregistering): Released all slaves
[  800.258748][ T5273] block nbd4: Possible stuck request ffff8881047f8000: control (read@0,1024B). Runtime 330 seconds
[  800.263192][ T5273] block nbd4: Possible stuck request ffff8881047f8200: control (read@1024,1024B). Runtime 330 seconds
[  800.268797][ T5273] block nbd4: Possible stuck request ffff8881047f8400: control (read@2048,1024B). Runtime 330 seconds
[  800.272831][ T5273] block nbd4: Possible stuck request ffff8881047f8600: control (read@3072,1024B). Runtime 330 seconds
[  800.372323][T19968] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  800.375574][T19969] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  801.041228][T20006] syzkaller1: entered promiscuous mode
[  801.043281][T20006] syzkaller1: entered allmulticast mode
[  801.054141][T20006] syzkaller1: left promiscuous mode
[  801.056248][T20006] syzkaller1: left allmulticast mode
[  801.095756][T20010] __nla_validate_parse: 29 callbacks suppressed
[  801.095767][T20010] netlink: 68 bytes leftover after parsing attributes in process `syz.0.20107'.
[  801.325616][T20031] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  801.354281][T20033] netlink: 96 bytes leftover after parsing attributes in process `syz.1.20114'.
[  801.365623][T20033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20114'.
[  801.382027][T20037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20116'.
[  801.386552][T20038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20116'.
[  801.393558][   T34] audit: type=1800 audit(1772218743.967:20): pid=20040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.20117" name="memory.events" dev="tmpfs" ino=34738 res=0 errno=0
[  801.426160][T20037] bridge0: port 1(veth27) entered blocking state
[  801.428273][T20037] bridge0: port 1(veth27) entered disabled state
[  801.430275][T20037] veth27: entered allmulticast mode
[  801.432988][T20037] veth27: entered promiscuous mode
[  801.446714][T20038] bridge0: port 2(veth29) entered blocking state
[  801.449112][T20038] bridge0: port 2(veth29) entered disabled state
[  801.451263][T20038] veth29: entered allmulticast mode
[  801.454024][T20038] veth29: entered promiscuous mode
[  801.458805][T20037] bridge0: port 3(veth0_to_bond) entered blocking state
[  801.466869][T20037] bridge0: port 3(veth0_to_bond) entered disabled state
[  801.470852][T20037] veth0_to_bond: entered promiscuous mode
[  801.488748][T20037] bridge0: port 4(veth31) entered blocking state
[  801.491499][T20037] bridge0: port 4(veth31) entered disabled state
[  801.494027][T20037] veth31: entered allmulticast mode
[  801.497774][T20037] veth31: entered promiscuous mode
[  801.531653][T20044] validate_nla: 6 callbacks suppressed
[  801.531664][T20044] netlink: 'syz.2.20119': attribute type 10 has an invalid length.
[  801.535948][T20044] netlink: 228 bytes leftover after parsing attributes in process `syz.2.20119'.
[  801.712115][T20050] ip6gretap0: entered allmulticast mode
[  801.753328][T20059] Set syz1 is full, maxelem 65536 reached
[  801.790387][T20063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20126'.
[  801.821290][T20066] sch_tbf: burst 8 is lower than device syzkaller0 mtu (313) !
[  801.846767][T20067] A link change request failed with some changes committed already. Interface 9iLL may have been left with an inconsistent configuration, please check.
[  801.853255][T20066] A link change request failed with some changes committed already. Interface 9iLL may have been left with an inconsistent configuration, please check.
[  801.905464][T20074] netlink: 876 bytes leftover after parsing attributes in process `syz.2.20132'.
[  801.908916][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20132'.
[  801.913822][T20077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20131'.
[  802.326233][T20114] syzkaller1: left promiscuous mode
[  802.328404][T20114] syzkaller1: left allmulticast mode
[  802.413766][T20118] netlink: 'syz.1.20148': attribute type 10 has an invalid length.
[  802.612685][T20122] rdma_rxe: rxe_newlink: failed to add lo
[  802.620885][T20122] IPVS: stopping backup sync thread 18180 ...
[  802.914632][T20131] xt_nfacct: accounting object `syz0' does not exist
[  803.291657][T20160] can: request_module (can-proto-0) failed.
[  803.318506][T20163] netlink: 'syz.0.20164': attribute type 1 has an invalid length.
[  803.666764][T20185] bridge0: entered allmulticast mode
[  803.670419][T20183] bridge0: entered allmulticast mode
[  803.771207][T20183] veth31: left allmulticast mode
[  803.773062][T20183] veth31: left promiscuous mode
[  803.775066][T20183] bridge0: port 4(veth31) entered disabled state
[  803.784471][T20183] veth0_to_bond: left promiscuous mode
[  803.795030][T20183] bridge0: port 3(veth0_to_bond) entered disabled state
[  803.801544][T20183] veth29: left allmulticast mode
[  803.803654][T20183] veth29: left promiscuous mode
[  803.805940][T20183] bridge0: port 2(veth29) entered disabled state
[  803.818410][T20183] veth27: left allmulticast mode
[  803.820456][T20183] veth27: left promiscuous mode
[  803.822715][T20183] bridge0: port 1(veth27) entered disabled state
[  803.872945][T20190] bridge0: entered allmulticast mode
[  804.057597][T20207] syzkaller1: entered promiscuous mode
[  804.059926][T20207] syzkaller1: entered allmulticast mode
[  804.075770][T20207] syzkaller1: left promiscuous mode
[  804.077742][T20207] syzkaller1: left allmulticast mode
[  804.531184][T20244] netlink: 'syz.2.20191': attribute type 9 has an invalid length.
[  804.797738][T20269] netlink: 'syz.1.20201': attribute type 9 has an invalid length.
[  804.881631][T20273] netlink: 'syz.2.20202': attribute type 29 has an invalid length.
[  804.891983][T20273] sctp: [Deprecated]: syz.2.20202 (pid 20273) Use of struct sctp_assoc_value in delayed_ack socket option.
[  804.891983][T20273] Use struct sctp_sack_info instead
[  804.898529][T20273] netlink: 'syz.2.20202': attribute type 29 has an invalid length.
[  805.078513][T20288] netlink: 'syz.1.20207': attribute type 9 has an invalid length.
[  805.182195][T20296] netem: change failed
[  805.342738][T20311] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  805.461671][T20317] netlink: 'syz.1.20218': attribute type 10 has an invalid length.
[  805.595833][T20332] netlink: 'syz.1.20224': attribute type 33 has an invalid length.
[  805.629634][T20336] xt_cgroup: xt_cgroup: no path or classid specified
[  805.767075][T20344] veth0_to_hsr: entered allmulticast mode
[  805.874976][T20347] bond30: entered promiscuous mode
[  805.876896][T20347] 8021q: adding VLAN 0 to HW filter on device bond30
[  805.888320][T20349] bond30: (slave bridge0): making interface the new active one
[  805.890772][T20349] bridge0: entered promiscuous mode
[  805.893161][T20349] bond30: (slave bridge0): Enslaving as an active interface with an up link
[  805.904558][T20349] bond30: (slave bridge32): Enslaving as a backup interface with an up link
[  805.914154][T20349] bond30: (slave bridge33): Enslaving as a backup interface with an up link
[  806.028697][T20354] bond31: entered promiscuous mode
[  806.031171][T20354] 8021q: adding VLAN 0 to HW filter on device bond31
[  806.048622][T20354] bond31: (slave bridge34): making interface the new active one
[  806.051526][T20354] bridge34: entered promiscuous mode
[  806.054518][T20354] bridge34: left promiscuous mode
[  806.195447][T20358] bond30: (slave bridge0): Releasing backup interface
[  806.198341][T20358] bond30: (slave bridge0): the permanent HWaddr of slave - 9a:a9:c0:43:58:1c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  806.204486][T20358] bridge0 (unregistering): left promiscuous mode
[  806.206935][T20358] bond30: (slave bridge32): making interface the new active one
[  806.214383][T20358] bridge32: entered promiscuous mode
[  806.461328][T20369] bridge0: entered allmulticast mode
[  806.582454][T20374] syzkaller0: entered promiscuous mode
[  806.584087][T20374] syzkaller0: entered allmulticast mode
[  806.646008][T20382] __nla_validate_parse: 92 callbacks suppressed
[  806.646018][T20382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20241'.
[  806.663769][T20380] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  806.686228][T20382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20241'.
[  806.766179][T20388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20243'.
[  806.782228][T20388] validate_nla: 3 callbacks suppressed
[  806.782241][T20388] netlink: 'syz.0.20243': attribute type 10 has an invalid length.
[  806.787412][T20388] netlink: 228 bytes leftover after parsing attributes in process `syz.0.20243'.
[  806.801939][T20387] netlink: 'syz.0.20243': attribute type 10 has an invalid length.
[  806.805163][T20387] netlink: 228 bytes leftover after parsing attributes in process `syz.0.20243'.
[  806.842834][T20392] IPVS: Unknown mcast interface: bridge_slave_1
[  806.918576][T20400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20249'.
[  806.945933][T20402] bridge0: entered allmulticast mode
[  807.002519][T20405] bridge0: entered allmulticast mode
[  807.015832][T20405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20251'.
[  807.236105][T20419] bond32: (slave ip6gretap3): making interface the new active one
[  807.242136][T20419] bond32: (slave ip6gretap3): Enslaving as an active interface with an up link
[  807.294096][T20429] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) !
[  807.389413][T20433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20256'.
[  807.590169][T20457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20260'.
[  807.600848][T20457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20260'.
[  807.945265][T20485] netlink: 'syz.2.20266': attribute type 1 has an invalid length.
[  807.980613][T20485] bond33: entered promiscuous mode
[  807.983055][T20485] 8021q: adding VLAN 0 to HW filter on device bond33
[  809.221176][T20609] tipc: Resetting bearer <eth:syzkaller0>
[  809.372262][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  809.376874][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  809.380370][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  809.383751][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  809.841593][T20652] lo speed is unknown, defaulting to 1000
[  809.877343][T20656] tc_dump_action: action bad kind
[  810.130777][T20676] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) !
[  810.339097][T20691] netlink: 'syz.0.20313': attribute type 1 has an invalid length.
[  810.380136][T20691] bond22: entered promiscuous mode
[  810.382295][T20691] 8021q: adding VLAN 0 to HW filter on device bond22
[  810.429096][T20691] bond22: (slave bridge0): making interface the new active one
[  810.431956][T20691] bridge0: entered promiscuous mode
[  810.435875][T20691] bridge0: left promiscuous mode
[  810.512904][T20701] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  810.638831][T20712] syzkaller1: entered promiscuous mode
[  810.640698][T20712] syzkaller1: entered allmulticast mode
[  810.917827][T20733] bridge_slave_0: entered promiscuous mode
[  810.922796][T20733] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  811.042120][T20741] netlink: 'syz.0.20329': attribute type 10 has an invalid length.
[  811.640523][T20770] netlink: 'syz.1.20341': attribute type 1 has an invalid length.
[  811.655652][T20770] bond30: entered promiscuous mode
[  811.657629][T20770] 8021q: adding VLAN 0 to HW filter on device bond30
[  811.672650][T20770] bond30: (slave bridge0): making interface the new active one
[  811.674865][T20770] bridge0: entered promiscuous mode
[  811.677426][T20770] bridge0: left promiscuous mode
[  812.091688][T20795] __nla_validate_parse: 31 callbacks suppressed
[  812.091700][T20795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20349'.
[  812.096101][T20795] openvswitch: netlink: Flow actions attr not present in new flow.
[  812.160164][T20802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20352'.
[  812.237317][T20814] syzkaller1: entered promiscuous mode
[  812.239834][T20814] syzkaller1: entered allmulticast mode
[  812.361356][T20817] openvswitch: netlink: Missing valid actions attribute.
[  812.364201][T20817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  812.449366][T20823] bridge0: entered allmulticast mode
[  812.662822][T20843] netlink: 'syz.2.20365': attribute type 1 has an invalid length.
[  812.717663][T20843] bond34: entered promiscuous mode
[  812.728341][T20843] 8021q: adding VLAN 0 to HW filter on device bond34
[  812.806123][T20855] bridge0: entered allmulticast mode
[  813.162237][T20880] lo speed is unknown, defaulting to 1000
[  813.194237][T20883] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  813.222704][T20885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20377'.
[  813.247697][T20885] netlink: 92 bytes leftover after parsing attributes in process `syz.1.20377'.
[  813.372046][T20880] lo speed is unknown, defaulting to 1000
[  813.470090][T20890] netlink: 'syz.1.20379': attribute type 9 has an invalid length.
[  813.726328][   T35] INFO: task udevd:31766 blocked for more than 143 seconds.
[  813.729288][   T35]       Not tainted syzkaller #0
[  813.734011][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  813.737595][   T35] task:udevd           state:D stack:20664 pid:31766 tgid:31766 ppid:5256   task_flags:0x400140 flags:0x00080002
[  813.752596][   T35] Call Trace:
[  813.754011][   T35]  <TASK>
[  813.755266][   T35]  __schedule+0x1585/0x5340
[  813.760564][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  813.763640][   T35]  ? __pfx___schedule+0x10/0x10
[  813.767795][   T35]  ? schedule+0x90/0x360
[  813.770177][T20901] netlink: 'syz.1.20382': attribute type 9 has an invalid length.
[  813.772262][   T35]  schedule+0x164/0x360
[  813.776813][   T35]  io_schedule+0x7f/0xd0
[  813.782644][   T35]  folio_wait_bit_common+0x6d8/0xbc0
[  813.787118][   T35]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  813.791868][   T35]  ? __pfx_wake_page_function+0x10/0x10
[  813.794129][   T35]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[  813.802056][   T35]  do_read_cache_folio+0x1ad/0x590
[  813.806394][   T35]  ? __pfx_blkdev_read_folio+0x10/0x10
[  813.809943][   T35]  read_part_sector+0xb6/0x2b0
[  813.813177][   T35]  adfspart_check_POWERTEC+0x92/0xef0
[  813.817534][   T35]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  813.822161][   T35]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  813.826856][   T35]  bdev_disk_changed+0x7ba/0x1550
[  813.831420][   T35]  ? bdev_open+0xe0/0xd30
[  813.835479][   T35]  ? __pfx_bdev_disk_changed+0x10/0x10
[  813.839923][   T35]  blkdev_get_whole+0x380/0x510
[  813.844272][   T35]  bdev_open+0x31e/0xd30
[  813.848363][   T35]  blkdev_open+0x470/0x610
[  813.851271][   T35]  ? __pfx_blkdev_open+0x10/0x10
[  813.855551][   T35]  do_dentry_open+0x785/0x14e0
[  813.860129][   T35]  vfs_open+0x3b/0x340
[  813.863471][   T35]  ? path_openat+0x2df0/0x3860
[  813.866077][   T35]  path_openat+0x2e08/0x3860
[  813.869862][   T35]  ? __pfx_stack_trace_save+0x10/0x10
[  813.873119][   T35]  ? stack_depot_save_flags+0x33/0x810
[  813.877978][   T35]  ? __pfx_path_openat+0x10/0x10
[  813.882271][   T35]  ? __x64_sys_openat+0x138/0x170
[  813.886529][   T35]  ? do_syscall_64+0x14d/0xf80
[  813.890893][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.895719][   T35]  ? __lock_acquire+0x6b5/0x2cf0
[  813.900043][   T35]  do_file_open+0x23e/0x4a0
[  813.904271][   T35]  ? __pfx_do_file_open+0x10/0x10
[  813.908714][   T35]  ? _raw_spin_unlock+0x28/0x50
[  813.912988][   T35]  ? alloc_fd+0x64b/0x6c0
[  813.915863][   T35]  do_sys_openat2+0x113/0x200
[  813.919996][   T35]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  813.924394][   T35]  ? __pfx_do_sys_openat2+0x10/0x10
[  813.928696][   T35]  ? rcu_is_watching+0x15/0xb0
[  813.932868][   T35]  __x64_sys_openat+0x138/0x170
[  813.937020][   T35]  do_syscall_64+0x14d/0xf80
[  813.941837][   T35]  ? trace_irq_disable+0x3b/0x150
[  813.946067][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.950837][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.955453][   T35] RIP: 0033:0x7f7813b619a4
[  813.959522][   T35] RSP: 002b:00007ffc99ae8f70 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  813.968058][   T35] RAX: ffffffffffffffda RBX: 0000557ff8711fc0 RCX: 00007f7813b619a4
[  813.973491][   T35] RDX: 00000000000a0800 RSI: 0000557ff870ce10 RDI: 00000000ffffff9c
[  813.979989][   T35] RBP: 0000557ff870ce10 R08: 0000000000000001 R09: 3fffffffffffffff
[  813.986557][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800
[  813.989632][   T35] R13: 0000557ff8704aa0 R14: 0000000000000001 R15: 0000557ff86f3910
[  813.992629][   T35]  </TASK>
[  813.994397][   T35] 
[  813.994397][   T35] Showing all locks held in the system:
[  813.997671][   T35] 5 locks held by kworker/u8:1/13:
[  813.999923][   T35] 1 lock held by khungtaskd/35:
[  814.001794][   T35]  #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  814.005616][   T35] 2 locks held by getty/5634:
[  814.007452][   T35]  #0: ffff8881777a50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  814.011609][   T35]  #1: ffffc9000356e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  814.015393][   T35] 1 lock held by udevd/31766:
[  814.017298][   T35]  #0: ffff8881047b1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  814.020934][   T35] 2 locks held by syz.0.20359/20831:
[  814.023006][   T35] 3 locks held by syz.1.20382/20901:
[  814.025146][   T35]  #0: ffffffff901372d0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  814.028782][   T35]  #1: ffffffff8fbcc888 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  814.032316][   T35]  #2: ffffffff8e766440 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  814.036017][   T35] 
[  814.036900][   T35] =============================================
[  814.036900][   T35] 
[  814.053038][   T35] NMI backtrace for cpu 1
[  814.053051][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  814.053061][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  814.053066][   T35] Call Trace:
[  814.053070][   T35]  <TASK>
[  814.053074][   T35]  dump_stack_lvl+0xe8/0x150
[  814.053093][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  814.053106][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  814.053140][   T35]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  814.053154][   T35]  sys_info+0x135/0x170
[  814.053164][   T35]  watchdog+0xfd9/0x1030
[  814.053184][   T35]  ? watchdog+0x21a/0x1030
[  814.053203][   T35]  kthread+0x388/0x470
[  814.053211][   T35]  ? __pfx_watchdog+0x10/0x10
[  814.053226][   T35]  ? __pfx_kthread+0x10/0x10
[  814.053234][   T35]  ret_from_fork+0x51e/0xb90
[  814.053249][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  814.053261][   T35]  ? __switch_to+0xc7d/0x1450
[  814.053273][   T35]  ? __pfx_kthread+0x10/0x10
[  814.053281][   T35]  ret_from_fork_asm+0x1a/0x30
[  814.053303][   T35]  </TASK>
[  814.053307][   T35] Sending NMI from CPU 1 to CPUs 0:
[  814.086523][    C0] NMI backtrace for cpu 0
[  814.086537][    C0] CPU: 0 UID: 0 PID: 20831 Comm: syz.0.20359 Not tainted syzkaller #0 PREEMPT(full) 
[  814.086547][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  814.086553][    C0] RIP: 0010:lock_release+0x94/0x3d0
[  814.086571][    C0] Code: 85 0d 02 00 00 65 4c 8b 3d e1 13 7a 11 41 83 bf 14 0b 00 00 00 0f 85 f7 01 00 00 49 81 3e 20 94 df 93 0f 84 ea 01 00 00 9c 5b <fa> 48 c7 c7 24 c1 f0 8d e8 6f b1 0b 0a 65 ff 05 58 59 7a 11 c7 44
[  814.086578][    C0] RSP: 0018:ffffc900074f75c0 EFLAGS: 00000206
[  814.086586][    C0] RAX: 0000000000000000 RBX: 0000000000000206 RCX: 0000000080000202
[  814.086592][    C0] RDX: ffffc90009bc8000 RSI: ffffffff8c27a9e0 RDI: ffffffff8c27a9a0
[  814.086598][    C0] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004
[  814.086602][    C0] R10: dffffc0000000000 R11: fffff52000e9eeb4 R12: 1ffff1102dbbb041
[  814.086608][    C0] R13: ffffffff8a9cf879 R14: ffff88816ddd8260 R15: ffff8881115c8000
[  814.086614][    C0] FS:  00007fdd685f66c0(0000) GS:ffff88818de64000(0000) knlGS:0000000000000000
[  814.086620][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  814.086626][    C0] CR2: 0000200000ee7030 CR3: 0000000111b5e000 CR4: 00000000000006f0
[  814.086651][    C0] Call Trace:
[  814.086655][    C0]  <TASK>
[  814.086663][    C0]  release_sock+0x126/0x1f0
[  814.086677][    C0]  bt_sock_stream_recvmsg+0x1319/0x15e0
[  814.086693][    C0]  ? __pfx_bt_sock_stream_recvmsg+0x10/0x10
[  814.086704][    C0]  ? rfcomm_sock_recvmsg+0x200/0x260
[  814.086720][    C0]  ? rfcomm_sock_recvmsg+0x200/0x260
[  814.086767][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  814.086791][    C0]  rfcomm_sock_recvmsg+0xd2/0x260
[  814.086812][    C0]  ? __pfx_rfcomm_sock_recvmsg+0x10/0x10
[  814.086834][    C0]  sock_recvmsg_nosec+0x186/0x1c0
[  814.086853][    C0]  ____sys_recvmsg+0x3e3/0x4a0
[  814.086873][    C0]  ? __pfx_____sys_recvmsg+0x10/0x10
[  814.086892][    C0]  ? import_iovec+0x73/0xa0
[  814.086907][    C0]  ___sys_recvmsg+0x215/0x590
[  814.086921][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  814.086935][    C0]  ? __pfx____sys_recvmsg+0x10/0x10
[  814.086959][    C0]  do_recvmmsg+0x334/0x800
[  814.086976][    C0]  ? __pfx_do_recvmmsg+0x10/0x10
[  814.086994][    C0]  ? __pfx_do_futex+0x10/0x10
[  814.087010][    C0]  __x64_sys_recvmmsg+0x198/0x250
[  814.087026][    C0]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  814.087045][    C0]  do_syscall_64+0x14d/0xf80
[  814.087061][    C0]  ? trace_irq_disable+0x3b/0x150
[  814.087076][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  814.087085][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  814.087093][    C0] RIP: 0033:0x7fdd6a39c799
[  814.087101][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  814.087113][    C0] RSP: 002b:00007fdd685f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  814.087149][    C0] RAX: ffffffffffffffda RBX: 00007fdd6a616090 RCX: 00007fdd6a39c799
[  814.087155][    C0] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000006
[  814.087160][    C0] RBP: 00007fdd6a432bd9 R08: 0000000000000000 R09: 0000000000000000
[  814.087165][    C0] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000
[  814.087170][    C0] R13: 00007fdd6a616128 R14: 00007fdd6a616090 R15: 00007fffe0c2d878
[  814.087181][    C0]  </TASK>
[  814.222896][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  814.225366][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  814.228489][   T35] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  814.231913][   T35] Call Trace:
[  814.233163][   T35]  <TASK>
[  814.234238][   T35]  vpanic+0x56c/0xa60
[  814.235613][   T35]  ? __pfx___schedule+0x10/0x10
[  814.237385][   T35]  ? __pfx_vpanic+0x10/0x10
[  814.238992][   T35]  ? __pfx_console_unlock+0x10/0x10
[  814.240870][   T35]  panic+0xc5/0xd0
[  814.242239][   T35]  ? __pfx_panic+0x10/0x10
[  814.243799][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  814.245717][   T35]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  814.247901][   T35]  watchdog+0x1023/0x1030
[  814.249476][   T35]  ? watchdog+0x21a/0x1030
[  814.251057][   T35]  kthread+0x388/0x470
[  814.252493][   T35]  ? __pfx_watchdog+0x10/0x10
[  814.254155][   T35]  ? __pfx_kthread+0x10/0x10
[  814.255764][   T35]  ret_from_fork+0x51e/0xb90
[  814.257392][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  814.259218][   T35]  ? __switch_to+0xc7d/0x1450
[  814.260783][   T35]  ? __pfx_kthread+0x10/0x10
[  814.262374][   T35]  ret_from_fork_asm+0x1a/0x30
[  814.264013][   T35]  </TASK>
[  814.265765][   T35] Kernel Offset: disabled
[  814.267317][   T35] Rebooting in 86400 seconds..
