last executing test programs:

2.183211824s ago: executing program 0 (id=12681):
socket$kcm(0x2, 0x200000000000003, 0x106) (async)
r0 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
clock_gettime(0x7, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="3c005a80380000800c0001000202"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="3c005a80380000800c0001000202"], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1f489dd803f3864b, 0x119, 0x7, {0x0, 0xea60}, {r2, r3/1000+10000}, {0x2, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x1, 0x0, 0x0, "42fc8eb8e203273c"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0xc048cc0)

2.06187278s ago: executing program 0 (id=12683):
r0 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x4004)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, r3, 0x0)
read(r1, &(0x7f0000000000)=""/31, 0x1f)

1.938762842s ago: executing program 0 (id=12684):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffa}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @empty, 0x4100007}, 0x43)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x80)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="07000000000000000000020008000300ac1414aa00"/34], 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbfffff7000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438cbeda03ab55fe60b7"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r6, 0x0, 0x48000)
socket$netlink(0x10, 0x3, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)

1.603668121s ago: executing program 2 (id=12685):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
close(0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000005a00)=[{{&(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@remote]}]}}}], 0x18}}], 0x1, 0x400c050)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x20, 0x140a, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8810)
r4 = socket$inet6(0xa, 0x5, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000000)="95", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40)
shutdown(r5, 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x1, 0x3, 0xa8, 0x1, 0x9, 0xd2e, 0x7, {0x0, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x10}}, 0x5, 0x9, 0x7, 0x37, 0xda8}}, &(0x7f0000000040)=0xb0)
setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x7, @loopback, 0x10}, @in6={0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x1c}}], 0x38)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdc02, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc890}, 0x20000000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x400c850}, 0x40)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000400)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001)
r8 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x210, 0x178, 0x178, 0x210, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe0, 0x140, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x8, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x7, 0x0, 0x2, 0x0, 0x8], 0x4, 0x5}, {0x1, [0xb, 0x4, 0x4, 0x4, 0x1, 0x2], 0x2, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff, 0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="0f", 0x1}], 0x20}, 0x40040)
socket$vsock_stream(0x28, 0x1, 0x0)

1.083558561s ago: executing program 0 (id=12690):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000000bc0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800)
close(r0)
close(0xffffffffffffffff)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @rand_addr=0x64010102}, 0x10, 0x0}, 0x3000c041)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'dummy0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r6, @ANYBLOB="eabbc9e0b6a249791e16fa7ed0fd5100aaa5ba15749885fa9513a208822b67038fbdbef921d5b99069411b5d166ad5f482ffda10f15dc18faeee8ad022904289250193bcf82f37935467a4973a02981a8c71e106eca70c0fb4e1baf90bb7e09c1646fd17b9845af62433bb33bebe4d0dec1d22a43abc33f53d1525f8a346684232cd6cf17e15c110f06201182791e14f00c586f939308b3ed5d66dbc496e9fe576670c963bba8bef260a4dc7dd5dda392aa489706082c1e7e34ee879f1ac38b4205fa6957b271ad1faee2ed6984f17a9de18f523b001c5c7e930eb16ac76b550b2", @ANYRES32=r4], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x6e)
recvmsg$unix(r9, &(0x7f0000000480)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/119, 0x77}, {&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000100)=""/29, 0x1d}], 0x3, &(0x7f0000000500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x100)
ioctl$sock_netdev_private(r8, 0x8940, &(0x7f00000006c0)="a6cd04e2d8f1c38afbf14b29b86e3a2cfd553b9fd207170ab66f7795f732ac169e4a4791406a40aa7b5531d096553202aca63329")
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="100028bd70ece7e8994cf3e4665200fadbdf2501000000040001801800028014000180050001000200000008007cb529bf2aa91b4a273b7b44010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x24044094}, 0x40040)
r11 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x56, &(0x7f0000000040)={&(0x7f0000000700)=@newqdisc={0x40, 0x24, 0x400, 0xfffffffd, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xfffe}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}}, 0x404c844)
socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r15, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000)
sendmsg$nl_generic(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000002e00010026bdf000fcdbdf250400000008000c00", @ANYRES32=0x0, @ANYBLOB="46f99512be959ef472363caf35e0489dd238307b5896b9f0"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

933.203767ms ago: executing program 0 (id=12692):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14010000100001000000007122b233b405d94b2b856800000000000100000a2800435b507901040000000045920000010080030900010073797a30000000000800024000000001f8ff0000030a010100000000000000ed010002000900010073797a30000000000900030073797a32000000002c000000030a05110000000000000000010000050c0002400000000073797a3000000038377af100110001000000000700000a"], 0xa8}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x80)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014040180060001000200000008000300ac1414aa161f46065aceef2cc7d7a21b185917bb693e03a8f309bd4f35bbd8e30d868ec32f98b1b1a3b8138f0f67afd3c3c9f50d12094d5c55647f81e685c7e688a66928fcaff5903319e9745bd136aaf1857338615264f90bb8bd6e26a0d6479f2fb403f025700c82d27d2994f6aea4df01d6ec4d72fafc323989647d88d0665e89b868a5738c13f87553a926a9b090e3980d2a27fda0b0126f9edcbe3f34cf6d1509c9fafb1fb7f6b8"], 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fbfffff7000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438cbeda03ab55fe60b7"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r6, 0x0, 0x48000)
socket$netlink(0x10, 0x3, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)

753.438069ms ago: executing program 2 (id=12696):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
listen(r0, 0x0)

640.346625ms ago: executing program 2 (id=12698):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x2)
getsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
r2 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
connect$nfc_llcp(r2, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x39363b3887fd5111, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x5, 0x2, 0x5, 0x1b}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r8)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000000)={0xa})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x34, r10, 0x1, 0x0, 0x0, {0x3a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xb0, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xec5}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8001}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2400884c}, 0x40090)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00090027bd70000000000004000000080018000cac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x18)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)

552.537344ms ago: executing program 2 (id=12700):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe89b5e6ccb54cca8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=r4, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e000018000280040012000500160001000000080015"], 0x48}}, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xd}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000080)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="1400000010000100000000000092d7000a00000a20000000000a0300000000000000000007000089a00482cbe39b3e010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d04001280080003400000000000000000008020d3792769816aa38a00"/144], 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038340300000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000008030380040300800800034000000002100002800c00028008000180000000000c000440", @ANYBLOB='FQLk'], 0x3c8}, 0x1, 0x0, 0x0, 0x4}, 0x50)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0))

481.012138ms ago: executing program 2 (id=12702):
socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32)
close(0x3) (async, rerun: 32)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) (async)
ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f00000001c0)=0xec)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) (async)
r6 = socket(0x200000000000011, 0x2, 0xd)
bpf$MAP_CREATE(0x700000000000000, 0x0, 0x0) (async)
socket$inet(0x2, 0xa, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), r7)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x40, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x10, 0xfe47, 0x3, 0x5f43, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r9, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x14) (async)
syz_emit_ethernet(0x10e, &(0x7f0000000600)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x39, 0x4, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ssrr={0x89, 0xb, 0xe7, [@broadcast, @local]}, @lsrr={0x83, 0x13, 0x50, [@empty, @empty, @multicast1, @rand_addr=0x64010101]}, @lsrr={0x83, 0x27, 0xa2, [@broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @local, @loopback, @broadcast, @remote, @multicast2]}, @timestamp={0x44, 0x24, 0xed, 0x0, 0x3, [0x1, 0x897, 0x2, 0x0, 0x2000000, 0x6, 0x200, 0x7]}, @generic={0x7, 0x7, "ad8471e866"}, @timestamp_addr={0x44, 0x34, 0xc9, 0x1, 0x5, [{@multicast1, 0x2}, {@private=0xa010101, 0x2}, {@remote, 0x4}, {@empty, 0x38}, {@broadcast, 0x7}, {@loopback, 0x8d3e}]}, @timestamp_addr={0x44, 0x2c, 0x92, 0x1, 0x7, [{@local, 0x5}, {@rand_addr=0x64010102, 0x9bf}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@loopback, 0x706}, {@multicast2, 0x800}]}]}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x601, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b0017"], 0x58}}, 0x0) (async, rerun: 64)
listen(r0, 0x0) (async, rerun: 64)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='\a'], 0x10)

477.124299ms ago: executing program 2 (id=12704):
recvmmsg(0xffffffffffffffff, &(0x7f0000003d80)=[{{&(0x7f0000000000)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f00000000c0)=""/38, 0x26}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000180)=""/100, 0x64}, {&(0x7f0000000200)=""/148, 0x94}, {&(0x7f00000002c0)=""/216, 0xd8}, {&(0x7f00000003c0)=""/215, 0xd7}], 0x7, &(0x7f0000000540)=""/132, 0x84}, 0x4}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/163, 0xa3}], 0x1, &(0x7f0000000700)=""/69, 0x45}, 0x6}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)=""/87, 0x57}], 0x1, &(0x7f0000000840)=""/33, 0x21}, 0x8e}, {{&(0x7f0000000880)=@tipc=@id, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000900)=""/92, 0x5c}, {&(0x7f0000000980)=""/149, 0x95}, {&(0x7f0000000a40)=""/64, 0x40}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000000b80)=""/223, 0xdf}, {&(0x7f0000000c80)=""/4096, 0x1000}], 0x6}, 0x8}, {{&(0x7f0000001d00)=@can, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d80)=""/50, 0x32}, {&(0x7f0000001dc0)=""/53, 0x35}, {&(0x7f0000001e00)=""/128, 0x80}, {&(0x7f0000001e80)=""/54, 0x36}], 0x4}, 0x1}, {{&(0x7f0000001f00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003100)=[{&(0x7f0000001f80)=""/251, 0xfb}, {&(0x7f0000002080)=""/7, 0x7}, {&(0x7f00000020c0)=""/28, 0x1c}, {&(0x7f0000002100)=""/4096, 0x1000}], 0x4, &(0x7f0000003140)=""/119, 0x77}}, {{&(0x7f00000031c0)=@tipc=@name, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003240)=""/103, 0x67}, {&(0x7f00000032c0)=""/230, 0xe6}, {&(0x7f00000033c0)=""/8, 0x8}, {&(0x7f0000003400)=""/160, 0xa0}], 0x4}, 0x56d3a3d7}, {{&(0x7f0000003500)=@nfc_llcp, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003580)=""/21, 0x15}], 0x1, &(0x7f0000003600)=""/104, 0x68}, 0x8}, {{&(0x7f0000003680)=@qipcrtr, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003700)=""/167, 0xa7}], 0x1}, 0xb}, {{&(0x7f0000003800)=@un=@abs, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003880)=""/234, 0xea}, {&(0x7f0000003980)=""/188, 0xbc}, {&(0x7f0000003a40)=""/16, 0x10}, {&(0x7f0000003a80)=""/172, 0xac}, {&(0x7f0000003b40)=""/75, 0x4b}, {&(0x7f0000003bc0)=""/220, 0xdc}], 0x6, &(0x7f0000003d40)=""/39, 0x27}, 0x80000001}], 0xa, 0x40000000, &(0x7f0000004000)={0x0, 0x3938700})
r0 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000004040), 0x800)
setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000004080)=0x6, 0x4)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000040c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000004140), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000004200)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000041c0)={&(0x7f0000004180)={0x1c, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40081)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000005540)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005500)={&(0x7f0000004280)={0x1268, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x594}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc20e}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "a12d106fd99ad74fae761345e30d0beb660ced5d275ce8d6a4d2c56bf6974e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_NODE={0x1034, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x541}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x72f8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffc874}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x64}}}}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x976}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f9a2873f1021b730faaac6aec764789d8342534260766346c311c9eab028eb"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1268}, 0x1, 0x0, 0x0, 0xa83fbd2fda29ca75}, 0x4800)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000055c0), r4)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000005600)={@local, @initdev}, &(0x7f0000005640)=0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000005680)={'wg0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000056c0)={'vcan0\x00', <r7=>0x0})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r8, &(0x7f0000005880)={0xa, 0x4e23, 0xb53, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, 0x1c)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000005980)={&(0x7f00000058c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000005940)={&(0x7f0000005900)={0x1c, r5, 0x202, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c091}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000005c40)={0xa, 0xb, &(0x7f00000059c0)=@raw=[@generic={0x9, 0x3, 0x7, 0x2, 0x8}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000005a40)='syzkaller\x00', 0x2, 0x8a, &(0x7f0000005a80)=""/138, 0x40f00, 0x32, '\x00', r7, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000005b40)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000005b80)={0x5, 0x7, 0x2, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000005bc0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r4], &(0x7f0000005c00)=[{0x0, 0x3, 0xd, 0x8}, {0x2, 0x4, 0x6, 0x2}], 0x10, 0x9}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000005d00)=r9, 0x4)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r10, &(0x7f0000005e00)={&(0x7f0000005d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005dc0)={&(0x7f0000005d80)={0x3c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x6)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r10, &(0x7f0000005f40)={&(0x7f0000005e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005f00)={&(0x7f0000005e80)={0x48, 0x1, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9566}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x4040810)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000005f80)={<r11=>0x0, 0x18, "f08eb6069a9ba51d3d4e9dea40d61023bdce9201a9b59c4a"}, &(0x7f0000005fc0)=0x20)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000006000)={0x1, 0x2, 0xfffffff8, 0x10, r11}, &(0x7f0000006040)=0x10)
ioctl$sock_SIOCOUTQNSD(r10, 0x894b, &(0x7f0000006080))
r12 = accept4(r8, &(0x7f00000060c0)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000006140)=0x80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r12, 0x89f8, &(0x7f0000006200)={'syztnl2\x00', &(0x7f0000006180)={'tunl0\x00', r6, 0xa7, 0x7, 0x1000, 0xdacd, {{0x17, 0x4, 0x2, 0x8, 0x5c, 0x66, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x19}, {[@timestamp_addr={0x44, 0x1c, 0xf0, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@local}, {@private=0xa010101, 0x7fff}]}, @generic={0x83, 0xf, "fd9caf39ecc96e93c17e91cd61"}, @timestamp_addr={0x44, 0x1c, 0xc2, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@local, 0x3ff}, {@empty, 0xfff}]}]}}}}})

271.528155ms ago: executing program 1 (id=12709):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"/922], 0x2dc}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRESHEX=r0, @ANYBLOB="00010000c580000008001b000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40080c6)
sendmmsg(r4, 0x0, 0x0, 0x80)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbfffff7000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=ANY=[@ANYBLOB="b80000001300e99900000008000000fc000000000000000100000000000000ac1e0001000000000000000000000001e011d4e6cec005c760681a9ed5a84500000000000000000a0060", @ANYRES32=r3], 0xb8}}, 0x810)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438cbeda03ab55fe60b7"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r6, 0x0, 0x48000)
socket$netlink(0x10, 0x3, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)

183.485154ms ago: executing program 1 (id=12710):
r0 = socket$kcm(0x29, 0x2, 0x0)
close(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSUUID(r1, 0x80111500, &(0x7f0000000340))
close(0xffffffffffffffff)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)

182.322257ms ago: executing program 1 (id=12711):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_XOR={0x8, 0x7, 0x3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0x0, 0x5}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async)
recvmmsg(r4, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0xb94}], 0x1, 0x0, 0x0) (async)
accept$alg(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080))
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x40d46215fb8400e6) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x2, <r5=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xb, 0xe, &(0x7f0000001880)=ANY=[@ANYRESHEX=r3], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r5, r3}, 0x94) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r6, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000340)='cgroup.stat\x00', 0x0, 0x0)
sendmsg$can_raw(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@can={{0x2}, 0x1, 0x3, 0x0, 0x0, "d0487c9cf85e01bb"}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x810) (async)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f00000000001400010001000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec587547"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000240)={<r10=>0x0, 0x29, "fb72a95479442bfe4d882a8f7bac552e74c7e091f36bf89b455734269b7bfbc13a1265827d3cc97971"}, &(0x7f0000000280)=0x31)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f00000002c0)={r10, 0x3}, &(0x7f0000000300)=0x8) (async)
socket$rxrpc(0x21, 0x2, 0x2)

72.031923ms ago: executing program 0 (id=12712):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4401, 0x0, @loopback}, 0x1c)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)

70.859799ms ago: executing program 1 (id=12713):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet6_int(r0, 0x29, 0x77, &(0x7f0000000000), 0x4)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'macvlan0\x00', {0x2, 0x0, @dev}})

1.241197ms ago: executing program 1 (id=12714):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x80)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="e377754021cb0a5d525d6b4ea05342776e4dfc216858470bd434ac4e8bb0765f14036ea394a171ee05ca0a7fe3d4f7", @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbfffff7000000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438cbeda03ab55fe60b7"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x76b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r6, 0x0, 0x48000)
socket$netlink(0x10, 0x3, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="fc9eb095ba24ab9a065cb9df1c65a23599758341fc8fa822d1791d24f78443bc096f8c0fd3c50cefbf911a249342102dbc6ecc7d2810a7d0a222083745d4754009b3471ab144f0fd512f3ad5fb65b6b98be8fa9e80bb510ac6296c728c9c151d615b81b51413611716ba9ebb92b8db5e1bfa73662f2563776a6723836f7c3d7e4bbe6bbb1df6f92a5fefa4cc2beeaa3aae0e42320c98c37329b28211aa1f4c3fd6ac382ebf856fdc72af8c2fc4d40b01fd7b46cdc916811d1230ea222b17ef0c04c5019a68d78ec6fd930d48359073db25a864063c7d3e0818b1d035decec518a39d337db15286de5b567bcb496e35ecbfe33af5ef3c80e3d753bcd2b03a9261b345c6f733faad7726733aa52901f31fa30e2a95b9ae6c01d0873e0c77101f339c22b5d3f3b59be5157fcb55c7139cf4209343288a3e2766ca0fa63194b5e01723db6b04de1a8915a10c2b23607ef8c7c961cad19bf88c05b56d780937b56c37282035bb654429ed8f4a58b5973ca1fb4424016ceeea2fca0d36e4d0007529c41d06da4883477676035396b306858ccbeca824ee15e17d0c152bfaf2e30c351cb5395cd001bf5a6cce36b7ebe32a73b70da235b0236cbf3c2d8083a0d8a7943efd055a542546e38bef879c68a4b606315d0a77819285964f6d36de7253ba2aaa5cc4498596699f8bbc13ee79c695482c52558035a3bb204b1f04b980fb21cfdefeafbbec2a9ad8026740ac40283322aa5a6afe2d66b4a38602125afa197504b9c66fa1d1ed0bafe830d4363cc1633b339fe1c3621d1b134de2741f3f0648ca32fdd173cf874b9ef3a6cd8aa8488b473c93a9a67e2ad9d7668b94a21bb396dff56579f684f6479392626e4c956fd9ea06adac61324a0d66fa67ac6e4f39daf8aa6bd034d431fad9ef5c275a781211a2e633e98303592b1818990b8adb887cc5957f33c3d63206dfce3c4f00f6579ac6c004afd7dc8c53c921963aa84388f947d5128f5849c48583d6f7cb3c1559b305af39706c897a88be4df2120a0ce4e13451efc8c594778cb0f53f12020a61fdf4d8b99ff6551d59ddc93d3f24999812d51fd88b8440ba129892fbab347e550722cc5a457c8402acb8eb325163d858174026705b046705f57aa11a105a908a8d502a612b76dd4e2c13c89a0109150b877cded0d25e74b4a4fa6fa35d3f69ad3c358a1538c6630b072e754663a03ae3daecfb8159a0da78d850fed9c63acb1da7b58203900eaf336348631aa07bc4a68f0d8628638054e7e5f37c7932013663d6cf193eaff9be135861a3ff0358ef2df328c6c29eee621de240b924c42eea5a81448ff749055ecebe0b943bb55937abc4d1eee13a6a3c21b541596beeef407f29f58cf913fb4634f44f900cdb9c3d8a837823b514b9efd0f0ffc1a089c6119171ad21fa13b6db76f499c5213904e6169619aa111570f81478c6abfff52a07c40bc9e3c20e3ba7ac7a4fc5137f4c0d25e9461fd2b49aa2cbe637a772cfba088f5f489d30e7dc97ec9b45e8d7f982ae4ab437adeeaab00c47eeb7d0db897ad0aa54b3ce3451070230d4f019735dde3b8a7c1a3439d124f1fde40a95b6f3a4c86e058546658087068e1b5e531033c1534021607bf1a462fcbbe34b793851dd3d27e1c2ac68ebc59d70fa32d5f09971087f2e08cdebb17e8009b14b077189aca17a742fbc6f681c183bf548cc4dc6e0e2803976a908edcefca661516d03884ac91196ca7f9a426cb44a87b0a805da3e291b78d4615d2de82d400de3acb76753af4e2d69ab0d3917121ae90898cc2b644f8d56072d54bdeae9e155c2d615212f5c80dc571e59e8f1fc4bde995ce6a838b2010ce1dc721a58002c2f5146914f95a5c02b987f903e3e142b89342aba7ddb9fe9c3b13866f67c53249d9184fad903e3ab3e8df04ce5ffcd6524b8f50fff2213e380738c5ab892c214c867ecc5a8dc3342ac497579b656279db5cf3de71acbfce0af2bf6a16ae78cfb09bd79646bc34ce0914bc1a66781b128cfabe57a4266e9c4a3c0937ec7607a426b69d63330021f44b4b81e05b2158a883727926b11c38f7c676fb115104395f08cf421938892fd8936bb793a179d015feec56c0e7e4cf0581e1df3e21b97549a3e042ada0711a1ffeb92121056ebfb85a2b0e2af105681a277f32c4afb9b35f45ba22d5dfb15bfd0d1e6fe77591cb8a8ede9fe8b6e59da2152cb3959c42513b18d37054ad5e8b8dbf798daf06e618cf47cc05d212e8c1f29394e4e944a2e0f042b4ad4b3808e6c1097e5ac4c1cd1f248bd62b2beffbf1a7ac5e99e06bcdd14462bd0b8ea3a07e71fac63369b95603f3d648e7a6b11b5021d88cc1b291359210ed55d420ca1225a5c294d5bde7d01d42741f29473e7190e00183e3a6c5773c8a0e09f866ef512113d7872f4e586c9914f3284dd33116b8c9c5fe9f2ef2aa3126e92cddd860fd9329401add5319d17d2b14fe0045554dbd31fe9b1ad1d9c1458e5aa68fdbdebbb74d21aca85dea8b8084fcc14f5c34c0f90d008b87dc48ed7f5acd1a9216c5bb1d1f6d23363956714d72a3d28f0f43ddd96f8467befec4655c21af95aed87d6376a70ecd1667cc679709a61353ddf89fe0430b058f607d99ba299d82877c575dddb4d93e55b87ac5d48f80dc4170018d01cc318c539693606b3470a9377d3ee5c40f6d2e34287f8b829f2df88b66122ec09f30089d550f4968c6f8eaa20ca00b7762db6085c5a682884aa420017bfe7410c1e0d61b3525ad12571b9c5ed6e76cbc54d8e098b1f6c25d9ed58d5af859108f591b105ccad7748de59b61e49861045ae38e5d463a8465241c83ecfb5f8510bbae1c0f84f3f192912db6ec9457019a0bc656bab58159f4e3c279090e23f24d4801892ae494c3f22fa73b9a24725c56c53458826be30d919602cd36414322fea2d3866834973d8fc05641e5fbb78873a66ccb4c0b6068948b5b1df65696bd3c690888edfb381131a13af9f8c1044f12bfeefc3c2684df3d421444abbd7881bf6805241bf2f5723e151a49a3a211215d8a0eea9163d9385eeaea031091ee62dc97d92c20b3d07ad0b6ab629e5d38c4adbc8008bda7943b2808b082feccc4e5720e1af7c059ca688772cb0f517b3984d5451a403b9add0234d19e3d46b84ec2d91468a362d0f47fd806b05bd11bfe98d7827a2f4e7a1620db68642e8308a5b3b1263360401fd76016760172580dc561aac68e32e1cd6cd41ed5154ce023c2c8a28a1d4a3a517af8968ee1dc717ffd8513512f98a8793cf16d0712df896d659905208b22e7a16e8d3ec88f3fab1ea240c627f2fe53bb4e68aaaae554423b410545a59507e62dd531be22d6019dc2355274899aa5213be5c3a1c6adfc4944f5d5381fb06a74187f724e881f3ee6c273339edec5285a454976bfb0c8fcc8b2f5eefacd0e769980283e94809a7fb1e90f41e973a6963288703801ea6ccec66c55c8a4e0b785882e253df541a6331a7b1422c326d7495d88d4903d0703a740d17cc686a1869693d23e3d6d69524774b3f72496d88196e79b4070026724b8d7472e2d6966b282cca3895f89a2614ed08fb8b13b13f1a3f615b669f8612a2173c40c49726cb7644e16e319e675f0a19bb70b3f74f7530dd2fc584d4625547f2769c90e047c7c3fe57350b18f42a284c411ce69f3f8bee8691235c3a15b4c6c3afaa3c2fc7433f27357bcd0f9d861c1e8994ceb110bfc4fbd7787da15809bdf0fc1c4729a8602c599b60fd7f359023820cb915caa7c7842d6571601084155557039f571e672552d6cf182d94715f2aee8803b699567985a7209f8ccb9ef9e80d648a64bbae1fc84917a99b1e93ce4558fcabb687893dcf3bc0cfd5270098651e092fcd38ad84ae34c42fb02a55750b75951f2da40858c280a6d1a9d28477c72d96326c3bc6ff4a25ab8062126bdd9c306000bcbd9e96f702a50eea1583a35500b95752abf561bb1fdb08e3ddcb3608bacbd48e18e9cacf30f2b2927fb84b33759ea89e443ed9ab5dec76c30440681358b2602a0908eabcaaa0b942c19e371259d69d58f9027590ef840825c49b2cd9479f06c4e998aa715bfe02bdbb61f1541f5bb61ef653e4636a138601e58f75d1d4f0d46e7d3ca1eab4ec6b76cef16288b959654a67d25af5ff434e454c98770f074127acb99e960b8e8ab5a3d742c6a44ea3985711f3a6f7e88473ba6ef8ff13c531b9b2ac555972db0773e3b8887392d9a85aff38838fe510c2b8f3bea9f387d1453c68ba25ff0a53885c9bab36e54196a4f40fda75efc25a8329baf2db2c72e6be8b500376306372adaf0081b837c903f5bd8b0bc917ef79e5f9ed3f30e7d4fcb2fb83841969f694ac240cb44e05ab15d2973cf83153340d53d5886814dcc27fb510f10ccc57482511f477e9778bf587cb9436c075311686e235b2dde8b2241b5461b109381cb4f14beba7abd73e431587639eebb50eef53ca30a0251a6b0b10900eae6d6c83c29230975b643bd667477181b5b544ffa042e9f7836af919aecad6400589f2c1e18722a0895a015e3bbfb17e5773fcddbe400a58c5405e5fe52de2714a67d1b8a2ce6001151278b6f00fe278e35b0c81b20e3b05f31948abf69e93bd24a6ff08bc4b8123c878d3ff4b8a709c5bd0e078d5d96bb6f00c0b61d3c9995b8d6653fb96e2fa0ff559ebc43ad6712347fe233e797a1c48cd944ffd90c6afab4514489852af48bb20eed79505dd2c80343008c89dbbc35d4f6229597b4035ff3c4550f3d3dbdefda80cdfdc0a59b1214cb80c167cf3a57406e2c714bb56878852d4566c34bc95cd4b36803db3de72a60da66af43c90fa2ec973e2dff80eea157c87b6843ee1055cb059704ee1a9b82f53ec4718e0af09f39c9bcc4f2f1aa79b8abe9f00a940fb2cb921a10b7285682e3907ff83b1669048642486daa6dac57667ef1e6e39bd43c7142632b37e40e400689d4c3422b65562e7a488498be0e450f51ffcf7359e79b1d3e47bd1654f04de25f701f5070099c67060f0e3068db11d56f966ec06608f0e8e32d3afb07662f06c800d4be31b55b57eed58ff8a6b9023cf9c58951a81ee00015608e1d73820aee3c8a42ea814673c79cae25e664b1a953b5a30131c26175f0886476aef1f3544d9b134124d560499ef833952c2c9e40225c2e86f8929a3a6f5be1a9018b11312931ceb45e619b5820c7b1d553a66daf62b27106188e8b506e217798df4caa6260daddbeb9292b78ec5c53533cd96baaa3b20438f3df2a381dd1327c2d6fbaede5c00efb5878c76ae09a1d4c627c6e619387224b475fc5138f33b62caf02d3e63621cfd0ec204eee4ec2f923ec30f4f926ed5210fc7524db1c6237bf091fc619906391e9d391f96fc1cccfd2a9b3c90096818b8e27d2aa0232071bf2ba2b80b089052d7242d10b9544fec91b8dc92e8ac583e39af1a431d6ac8f6a4480e6ce4747edc1e0aa45686e1194a01fe806bf64555e3d061792a3730b54dc92de8d7e776651bd206ed88dc076c14e81a34887bc3aa2dadcbf44866faf3db48732933ec2b01480162eaa672713a44bcab56c75d5827dcb43df52fd4d671e410233367e60e2734efad1c4c4504680c70f4ce29cae26c5ea0aec6708f5f9aa5a1408c7fb807624837c083e266aa63a428e2185e8301b2b36c23711c59c1e589df87a49a6df4c0a36760446f2a1aabd61a5bd8da43baeb18a13cf0c8609e3d5d7d74e77c3ea27eb5ed01bfd145e94c9372ab0a3998ec58a63ac8de354b501dbed870af046bc911679b69490d7205"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50)

0s ago: executing program 1 (id=12715):
unshare(0x22020600)
r0 = socket(0x18, 0x1, 0x1)
getsockopt$inet_int(r0, 0x111, 0x32, 0x0, &(0x7f0000000300)=0xffffffffffffffe6)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x5)
syz_emit_ethernet(0x0, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
shutdown(r2, 0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000700)=[@in6={0xa, 0x4e22, 0xc89, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}], 0x1c)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, 0x0, 0x0, 0x0)
close(0x3)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x9)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000000)=0x200, 0x4)
sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040a59201000039fc378469d5765b9cc28384089637b02c9e6045c361eb00"/54, 0x36}], 0x3}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910300000000000730a11ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0xfffffffd, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

after parsing attributes in process `syz.1.10196'.
[ 1117.150403][T10777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10195'.
[ 1117.301817][T10795] xt_hashlimit: size too large, truncated to 1048576
[ 1117.481972][T10810] netlink: 'syz.1.10206': attribute type 29 has an invalid length.
[ 1117.485083][T10810] netlink: 'syz.1.10206': attribute type 29 has an invalid length.
[ 1117.598260][T10821] syzkaller1: entered promiscuous mode
[ 1117.600124][T10821] syzkaller1: entered allmulticast mode
[ 1118.640558][T10833] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[ 1118.644083][T10833] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[ 1119.183204][T10863] IPVS: set_ctl: invalid protocol: 1 172.30.1.2:20001
[ 1119.292713][T10871] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1119.404759][T10877] __nla_validate_parse: 2 callbacks suppressed
[ 1119.404770][T10877] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10227'.
[ 1119.412130][T10877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10227'.
[ 1119.448531][T10881] xt_hashlimit: size too large, truncated to 1048576
[ 1119.648268][T10892] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[ 1119.688731][T10894] netlink: 'syz.1.10230': attribute type 12 has an invalid length.
[ 1119.738394][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10231'.
[ 1119.745824][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10231'.
[ 1119.837554][T10904] netlink: 'syz.1.10233': attribute type 2 has an invalid length.
[ 1119.966686][T10914] netlink: 'syz.1.10236': attribute type 11 has an invalid length.
[ 1119.970180][T10914] netlink: 'syz.1.10236': attribute type 23 has an invalid length.
[ 1119.973900][T10914] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10236'.
[ 1119.994676][T10914] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10236'.
[ 1120.121777][T10919] syzkaller0: entered promiscuous mode
[ 1120.123669][T10919] syzkaller0: entered allmulticast mode
[ 1120.228149][T10921] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10239'.
[ 1120.536277][T10941] netlink: 'syz.2.10244': attribute type 7 has an invalid length.
[ 1120.539359][T10941] netlink: 'syz.2.10244': attribute type 8 has an invalid length.
[ 1121.366001][T10947] syzkaller0: entered promiscuous mode
[ 1121.368486][T10947] syzkaller0: entered allmulticast mode
[ 1121.386760][T10947] tap0: tun_chr_ioctl cmd 2148553947
[ 1121.595578][T10957] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10250'.
[ 1121.598599][T10958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10251'.
[ 1121.602166][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10250'.
[ 1121.689609][T10963] syzkaller1: entered promiscuous mode
[ 1121.691813][T10963] syzkaller1: entered allmulticast mode
[ 1121.718812][T10965] Cannot find set identified by id 65534 to match
[ 1121.902258][T10979] xt_TCPMSS: Only works on TCP SYN packets
[ 1122.009788][T10991] syzkaller1: entered promiscuous mode
[ 1122.015109][T10991] syzkaller1: entered allmulticast mode
[ 1122.863187][T11030] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1122.866887][T11030] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1123.444403][T11039] syzkaller0: entered promiscuous mode
[ 1123.446888][T11039] syzkaller0: entered allmulticast mode
[ 1123.677726][T11044] block nbd0: Unsupported socket: should be TCP or UNIX.
[ 1125.220708][T11058] syzkaller1: entered promiscuous mode
[ 1125.222995][T11058] syzkaller1: entered allmulticast mode
[ 1127.013929][T11084] __nla_validate_parse: 7 callbacks suppressed
[ 1127.013940][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10287'.
[ 1127.027701][T11084] netlink: 'syz.1.10287': attribute type 1 has an invalid length.
[ 1127.030146][T11084] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10287'.
[ 1127.099551][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10289'.
[ 1127.104180][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10289'.
[ 1127.140143][T11094] syzkaller1: entered promiscuous mode
[ 1127.143143][T11094] syzkaller1: entered allmulticast mode
[ 1127.287581][T11102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10293'.
[ 1127.307875][T11102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10293'.
[ 1127.312726][T11102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10293'.
[ 1127.320065][T11102] netlink: 'syz.1.10293': attribute type 2 has an invalid length.
[ 1127.323445][T11102] netlink: 'syz.1.10293': attribute type 2 has an invalid length.
[ 1127.327858][T11102] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10293'.
[ 1127.798990][T11128] xt_cgroup: xt_cgroup: no path or classid specified
[ 1127.828425][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10301'.
[ 1127.833019][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10301'.
[ 1128.073820][T11138] netlink: 'syz.2.10303': attribute type 1 has an invalid length.
[ 1128.086717][T11138] 8021q: adding VLAN 0 to HW filter on device bond22
[ 1128.104503][T11138] bond22: (slave veth133): Enslaving as an active interface with a down link
[ 1128.109884][T11138] batman_adv: batadv0: Removing interface: dummy0
[ 1128.123711][T11138] bond22: (slave dummy0): making interface the new active one
[ 1128.128919][T11138] bond22: (slave dummy0): Enslaving as an active interface with an up link
[ 1128.149519][T11138] bond22: (slave dummy0): Releasing active interface
[ 1128.159136][T11138] vlan5 (unregistering): left allmulticast mode
[ 1128.161970][T11138] dummy0 (unregistering): left allmulticast mode
[ 1128.164450][T11138] vlan5 (unregistering): left promiscuous mode
[ 1128.166833][T11138] dummy0 (unregistering): left promiscuous mode
[ 1128.171042][T11138] bridge0: port 2(vlan5) entered disabled state
[ 1128.236217][T11138] syz.2.10303 (11138) used greatest stack depth: 19424 bytes left
[ 1128.391630][T11153] net_ratelimit: 40 callbacks suppressed
[ 1128.391648][T11153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1129.364233][T11173] syzkaller1: entered promiscuous mode
[ 1129.366229][T11173] syzkaller1: entered allmulticast mode
[ 1129.531795][T11183] lo speed is unknown, defaulting to 1000
[ 1129.604907][T11184] syzkaller0: entered promiscuous mode
[ 1129.606797][T11184] syzkaller0: entered allmulticast mode
[ 1129.629503][T11183] lo speed is unknown, defaulting to 1000
[ 1131.421564][T11204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1133.079204][T11218] __nla_validate_parse: 5 callbacks suppressed
[ 1133.079215][T11218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10324'.
[ 1133.187365][T11232] ipt_ECN: cannot use operation on non-tcp rule
[ 1133.250234][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10328'.
[ 1133.299607][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10329'.
[ 1133.304715][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10329'.
[ 1133.547774][T11254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10335'.
[ 1133.849020][T11271] syzkaller1: entered promiscuous mode
[ 1133.851005][T11271] syzkaller1: entered allmulticast mode
[ 1133.975920][T11273] sctp: [Deprecated]: syz.2.10341 (pid 11273) Use of int in max_burst socket option deprecated.
[ 1133.975920][T11273] Use struct sctp_assoc_value instead
[ 1134.007542][T11275] xt_nat: multiple ranges no longer supported
[ 1134.192520][T11292] syzkaller1: entered promiscuous mode
[ 1134.194926][T11292] syzkaller1: entered allmulticast mode
[ 1134.549465][T11315] syzkaller1: entered promiscuous mode
[ 1134.552490][T11315] syzkaller1: entered allmulticast mode
[ 1134.619928][T11321] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10356'.
[ 1134.706692][T11323] sock: sock_set_timeout: `syz.2.10357' (pid 11323) tries to set negative timeout
[ 1134.761275][T11332] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1134.900573][T11346] nlmon0: Caught tx_queue_len zero misconfig
[ 1135.255458][T11372] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10372'.
[ 1135.876957][T11381] netlink: 'syz.1.10373': attribute type 1 has an invalid length.
[ 1135.879883][T11381] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10373'.
[ 1135.949645][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10374'.
[ 1135.966742][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10374'.
[ 1136.038608][T11390] macvtap0: entered promiscuous mode
[ 1136.504801][T11418] : renamed from lo
[ 1136.509170][T11418] xt_hashlimit: size too large, truncated to 1048576
[ 1136.851175][T11440] batadv0: left promiscuous mode
[ 1136.852918][T11440] batadv0: left allmulticast mode
[ 1136.951071][T11443] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1137.064583][T11454] netlink: 'syz.2.10391': attribute type 21 has an invalid length.
[ 1137.134944][T11462] tunl0: Caught tx_queue_len zero misconfig
[ 1137.738887][T11476] bond0: entered promiscuous mode
[ 1137.742440][T11476] batadv0: entered promiscuous mode
[ 1137.745662][T11476] debugfs: 'hsr0' already exists in 'hsr'
[ 1137.748044][T11476] Cannot create hsr debugfs directory
[ 1138.145591][T11508] __nla_validate_parse: 3 callbacks suppressed
[ 1138.145602][T11508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10407'.
[ 1138.289753][T11523] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR
[ 1138.696471][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10417'.
[ 1138.702134][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10417'.
[ 1139.146095][T11581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10425'.
[ 1139.153378][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10425'.
[ 1139.156826][T11581] netlink: 580 bytes leftover after parsing attributes in process `syz.0.10425'.
[ 1139.196532][T11587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10427'.
[ 1139.308930][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10428'.
[ 1140.101623][T11600] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10430'.
[ 1140.105410][T11600] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1140.227155][T11602] syzkaller1: entered promiscuous mode
[ 1140.235224][T11602] syzkaller1: entered allmulticast mode
[ 1140.417601][T11612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10434'.
[ 1141.375459][T11652] lo speed is unknown, defaulting to 1000
[ 1141.482413][T11652] lo speed is unknown, defaulting to 1000
[ 1142.332504][T11672] syzkaller1: entered promiscuous mode
[ 1142.334326][T11672] syzkaller1: entered allmulticast mode
[ 1142.415428][T11674] netlink: 'syz.0.10452': attribute type 83 has an invalid length.
[ 1143.236131][T11692] __nla_validate_parse: 1 callbacks suppressed
[ 1143.236147][T11692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10459'.
[ 1143.338079][T11696] netlink: 'syz.0.10461': attribute type 3 has an invalid length.
[ 1143.408252][T11705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10463'.
[ 1143.437112][T11705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10463'.
[ 1143.447213][T11705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10463'.
[ 1143.462916][T11705] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10463'.
[ 1143.463856][T11709] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1143.478379][T11709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10465'.
[ 1143.514617][T11711] netlink: 'syz.1.10466': attribute type 12 has an invalid length.
[ 1143.759453][T11734] syzkaller1: entered promiscuous mode
[ 1143.761749][T11734] syzkaller1: entered allmulticast mode
[ 1144.536086][T11762] syzkaller1: entered promiscuous mode
[ 1144.538307][T11762] syzkaller1: entered allmulticast mode
[ 1144.636309][T11764] syzkaller1: entered promiscuous mode
[ 1144.638406][T11764] syzkaller1: entered allmulticast mode
[ 1144.642955][T11764] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96
[ 1144.676507][T11764] netlink: 'syz.2.10483': attribute type 1 has an invalid length.
[ 1144.679737][T11764] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10483'.
[ 1144.912862][T11772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10484'.
[ 1145.048295][T11783] netlink: 'syz.0.10487': attribute type 3 has an invalid length.
[ 1145.108970][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10490'.
[ 1145.115805][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10490'.
[ 1145.175314][T11795] No such timeout policy "syz0"
[ 1145.399346][T11815] lo speed is unknown, defaulting to 1000
[ 1145.505924][T11815] lo speed is unknown, defaulting to 1000
[ 1145.588872][T11823] lo speed is unknown, defaulting to 1000
[ 1145.618402][T11825] netlink: 'syz.2.10496': attribute type 2 has an invalid length.
[ 1145.621192][T11825] netlink: 'syz.2.10496': attribute type 2 has an invalid length.
[ 1145.720303][T11823] lo speed is unknown, defaulting to 1000
[ 1146.108136][T11832] xt_hashlimit: size too large, truncated to 1048576
[ 1146.223297][T11839] syzkaller1: entered promiscuous mode
[ 1146.230525][T11839] syzkaller1: entered allmulticast mode
[ 1146.534154][T11859] netlink: 'syz.2.10506': attribute type 2 has an invalid length.
[ 1146.537569][T11859] netlink: 'syz.2.10506': attribute type 2 has an invalid length.
[ 1147.056348][T11877] lo speed is unknown, defaulting to 1000
[ 1147.162345][T11877] lo speed is unknown, defaulting to 1000
[ 1147.678985][T11905] syzkaller1: entered promiscuous mode
[ 1147.682300][T11905] syzkaller1: entered allmulticast mode
[ 1148.146979][T11923] netlink: 'syz.2.10519': attribute type 8 has an invalid length.
[ 1148.155567][ T7599] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1148.155735][T11923] netlink: 'syz.2.10519': attribute type 8 has an invalid length.
[ 1148.162886][ T7599] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1148.174473][ T7599] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1148.193351][ T7599] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1148.285806][T11927] lo speed is unknown, defaulting to 1000
[ 1148.478715][T11927] lo speed is unknown, defaulting to 1000
[ 1149.268130][T11948] __nla_validate_parse: 17 callbacks suppressed
[ 1149.268144][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10525'.
[ 1149.374827][T11953] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10527'.
[ 1150.146197][T11962] netlink: 68 bytes leftover after parsing attributes in process `syz.2.10531'.
[ 1150.307190][T11966] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10532'.
[ 1150.340033][T11966] lo speed is unknown, defaulting to 1000
[ 1150.421171][T11966] lo speed is unknown, defaulting to 1000
[ 1150.570029][T11976] xt_hashlimit: size too large, truncated to 1048576
[ 1151.233841][T12017] syzkaller1: entered promiscuous mode
[ 1151.236388][T12017] syzkaller1: entered allmulticast mode
[ 1151.244367][T12019] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.10547'.
[ 1151.314181][T12024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10548'.
[ 1151.317255][T12024] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1151.411024][T12024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10548'.
[ 1151.414182][T12024] netlink: 'syz.0.10548': attribute type 7 has an invalid length.
[ 1151.433336][T12024] netlink: 'syz.0.10548': attribute type 8 has an invalid length.
[ 1151.435942][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10548'.
[ 1151.436777][T12031] team0: No ports can be present during mode change
[ 1151.932886][T12040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10553'.
[ 1153.059552][T12059] dummy0: mtu less than device minimum
[ 1153.066672][T12059] dummy0: mtu less than device minimum
[ 1153.071541][T12059] dummy0: mtu less than device minimum
[ 1153.077720][T12059] dummy0: mtu less than device minimum
[ 1153.081548][T12059] dummy0: mtu less than device minimum
[ 1153.253489][T12066] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1153.352662][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10561'.
[ 1153.978605][T12092] netlink: 'syz.2.10569': attribute type 1 has an invalid length.
[ 1154.183896][T12117] netlink: 'syz.0.10576': attribute type 6 has an invalid length.
[ 1154.318210][T12129] lo speed is unknown, defaulting to 1000
[ 1154.443521][T12129] lo speed is unknown, defaulting to 1000
[ 1154.751774][T12155] __nla_validate_parse: 1 callbacks suppressed
[ 1154.751791][T12155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10586'.
[ 1154.757219][T12155] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1154.759348][T12155] netlink: 7 bytes leftover after parsing attributes in process `syz.2.10586'.
[ 1155.247096][T12167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10591'.
[ 1155.278511][T12167] netlink: 'syz.1.10591': attribute type 2 has an invalid length.
[ 1155.286128][T12167] netlink: 'syz.1.10591': attribute type 2 has an invalid length.
[ 1155.296097][T12167] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10591'.
[ 1155.452024][T12177] syzkaller0: entered promiscuous mode
[ 1155.454030][T12177] syzkaller0: entered allmulticast mode
[ 1155.506678][T12181] netlink: 'syz.2.10596': attribute type 12 has an invalid length.
[ 1155.839541][T12202] netlink: 'syz.1.10601': attribute type 1 has an invalid length.
[ 1155.842428][T12202] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10601'.
[ 1156.009360][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10604'.
[ 1156.272255][T12232] netlink: 'syz.1.10608': attribute type 1 has an invalid length.
[ 1156.274936][T12232] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10608'.
[ 1156.318799][T12238] netlink: 248 bytes leftover after parsing attributes in process `syz.0.10613'.
[ 1156.324645][T12238] netlink: 248 bytes leftover after parsing attributes in process `syz.0.10613'.
[ 1156.569774][T12261] bond21: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[ 1156.574438][T12261] bond21 (unregistering): Released all slaves
[ 1156.576834][T12266] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10621'.
[ 1156.978826][T12301] sctp: [Deprecated]: syz.1.10631 (pid 12301) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1156.978826][T12301] Use struct sctp_sack_info instead
[ 1157.143634][T12312] netlink: 'syz.1.10634': attribute type 1 has an invalid length.
[ 1157.601971][T12316] lo speed is unknown, defaulting to 1000
[ 1157.683366][T12316] lo speed is unknown, defaulting to 1000
[ 1157.945476][T12324] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[ 1158.726632][T12336] syzkaller1: entered promiscuous mode
[ 1158.729127][T12336] syzkaller1: entered allmulticast mode
[ 1159.004198][T12349] vlan0 (unregistering): left promiscuous mode
[ 1159.007773][T12349] bridge0: port 9(vlan0) entered disabled state
[ 1159.383047][T12371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1159.675007][T12279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1159.904061][T12398] netlink: 'syz.1.10658': attribute type 1 has an invalid length.
[ 1159.906768][T12398] __nla_validate_parse: 6 callbacks suppressed
[ 1159.906779][T12398] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10658'.
[ 1161.020272][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10665'.
[ 1161.028798][T12422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10665'.
[ 1161.054834][T12426] syzkaller0: entered promiscuous mode
[ 1161.056712][T12426] syzkaller0: entered allmulticast mode
[ 1161.143480][T12434] xt_hashlimit: size too large, truncated to 1048576
[ 1161.174116][T12436] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10670'.
[ 1161.182493][T12436] netlink: 'syz.0.10670': attribute type 1 has an invalid length.
[ 1161.185936][T12436] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10670'.
[ 1161.353332][T12439] syzkaller1: entered promiscuous mode
[ 1161.355574][T12439] syzkaller1: entered allmulticast mode
[ 1161.997464][T12447] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10675'.
[ 1162.007295][T12447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10675'.
[ 1162.141243][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10678'.
[ 1162.181707][T12458] syzkaller1: entered promiscuous mode
[ 1162.183902][T12458] syzkaller1: entered allmulticast mode
[ 1162.384584][T12461] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1162.389090][T12461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1162.397510][T12476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10683'.
[ 1162.405584][T12476] netlink: 'syz.2.10683': attribute type 2 has an invalid length.
[ 1162.408388][T12476] netlink: 'syz.2.10683': attribute type 2 has an invalid length.
[ 1162.412848][T12476] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10683'.
[ 1162.691050][T12492] netlink: 'syz.2.10688': attribute type 1 has an invalid length.
[ 1163.256793][T12502] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1163.262311][T12502] netlink: 'syz.1.10691': attribute type 1 has an invalid length.
[ 1164.419319][T12526] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1164.474371][T12526] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1164.514614][T12526] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1164.562424][T12526] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1164.621421][ T7599] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1164.629797][ T7599] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1164.639387][ T7599] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1164.648532][ T7599] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1165.115081][T12556] __nla_validate_parse: 5 callbacks suppressed
[ 1165.115091][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10708'.
[ 1165.213668][T12558] netlink: 204 bytes leftover after parsing attributes in process `syz.1.10709'.
[ 1165.218542][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10709'.
[ 1165.227828][T12558] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10709'.
[ 1165.317874][T12563] sctp: [Deprecated]: syz.1.10711 (pid 12563) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1165.317874][T12563] Use struct sctp_sack_info instead
[ 1165.541329][T12574] netlink: 'syz.1.10713': attribute type 1 has an invalid length.
[ 1165.543897][T12574] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10713'.
[ 1166.708584][T12611] netlink: 'syz.0.10722': attribute type 10 has an invalid length.
[ 1167.159166][T12613] netlink: 'syz.1.10723': attribute type 10 has an invalid length.
[ 1167.488327][T12617] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1167.572388][T12631] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20003
[ 1167.697746][T12651] xt_hashlimit: size too large, truncated to 1048576
[ 1167.749158][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10732'.
[ 1167.852746][T12660] netlink: 'syz.0.10734': attribute type 1 has an invalid length.
[ 1167.855319][T12660] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10734'.
[ 1168.175471][T12682] xt_hashlimit: size too large, truncated to 1048576
[ 1168.295188][T12686] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[ 1168.384532][T12695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10742'.
[ 1168.464027][ T6002] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1168.468992][T12696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10742'.
[ 1168.472852][ T6002] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1168.475811][T12696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10742'.
[ 1168.478844][ T6002] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1168.482923][ T6002] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1169.713051][T12733] xt_hashlimit: size too large, truncated to 1048576
[ 1169.764304][T12735] Bluetooth: hci2: Opcode 0x0401 failed: -22
[ 1169.813945][T12737] nbd: couldn't find a device at index 1
[ 1169.962089][T12751] xt_hashlimit: size too large, truncated to 1048576
[ 1170.035808][T12759] netlink: 'syz.0.10761': attribute type 1 has an invalid length.
[ 1170.038616][T12759] netlink: 'syz.0.10761': attribute type 1 has an invalid length.
[ 1170.152705][T12778] __nla_validate_parse: 8 callbacks suppressed
[ 1170.152715][T12778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10765'.
[ 1170.195953][T12787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10767'.
[ 1170.198936][T12787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10767'.
[ 1170.202524][T12787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10767'.
[ 1170.205643][T12787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10767'.
[ 1170.209140][T12787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10767'.
[ 1170.212325][T12787] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10767'.
[ 1170.325255][T12811] syzkaller0: entered promiscuous mode
[ 1170.327232][T12811] syzkaller0: entered allmulticast mode
[ 1171.837097][T12856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10782'.
[ 1171.851991][T12856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10782'.
[ 1172.525953][T12891] xt_nat: multiple ranges no longer supported
[ 1172.555865][T12898] xt_hashlimit: size too large, truncated to 1048576
[ 1172.689365][T12910] xt_hashlimit: size too large, truncated to 1048576
[ 1172.804565][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10798'.
[ 1172.819329][T12922] xt_socket: unknown flags 0x8
[ 1172.845575][T12925] netlink: 'syz.1.10801': attribute type 89 has an invalid length.
[ 1172.957006][T12932] netlink: 'syz.1.10802': attribute type 1 has an invalid length.
[ 1172.959759][T12932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1173.560494][T12958] xt_hashlimit: size too large, truncated to 1048576
[ 1173.699869][T12968] xt_hashlimit: max too large, truncated to 1048576
[ 1173.703265][T12968] xt_hashlimit: Unknown mode mask 300, kernel too old?
[ 1173.934710][T12986] netlink: 'syz.0.10820': attribute type 1 has an invalid length.
[ 1173.958489][T12986] gretap2: entered allmulticast mode
[ 1173.965203][T12986] bond21: (slave gretap2): making interface the new active one
[ 1173.968233][T12986] bond21: (slave gretap2): Enslaving as an active interface with an up link
[ 1174.713390][T12997] netlink: 'syz.0.10824': attribute type 1 has an invalid length.
[ 1174.720079][T12997] workqueue: Failed to create a rescuer kthread for wq "bond22": -EINTR
[ 1174.832378][T13013] netlink: 'syz.1.10827': attribute type 13 has an invalid length.
[ 1174.839371][T13013] netlink: 'syz.1.10827': attribute type 17 has an invalid length.
[ 1175.000635][ T7599] bond0: (slave bond_slave_0): interface is now down
[ 1175.001220][T13013] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1175.016880][T13013] team0: left promiscuous mode
[ 1175.018606][T13013] : left promiscuous mode
[ 1175.023687][ T7599] bond0: (slave bond_slave_0): interface is now down
[ 1175.028294][T13013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1175.034297][ T5900] lo speed is unknown, defaulting to 1000
[ 1175.036775][ T5900] sqz0: Port: 1 Link ACTIVE
[ 1175.040471][ T5900] lo speed is unknown, defaulting to 1000
[ 1175.043219][ T5654] bond0: (slave bond_slave_0): interface is now down
[ 1175.050652][ T5654] bond0: now running without any active interface!
[ 1175.724926][T13041] __nla_validate_parse: 6 callbacks suppressed
[ 1175.724945][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10834'.
[ 1175.860222][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10836'.
[ 1175.878088][T13054] xt_hashlimit: size too large, truncated to 1048576
[ 1175.938162][T13054] team0: entered allmulticast mode
[ 1175.939953][T13054] team_slave_0: entered allmulticast mode
[ 1175.944590][T13054] team_slave_1: entered allmulticast mode
[ 1175.947366][T13054] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1175.954400][T13054] netlink: 'syz.2.10838': attribute type 1 has an invalid length.
[ 1175.957605][T13054] netlink: 228 bytes leftover after parsing attributes in process `syz.2.10838'.
[ 1176.081077][T13063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10840'.
[ 1176.140497][T13077] netlink: 'syz.2.10842': attribute type 1 has an invalid length.
[ 1176.169834][T13077] bond23: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1176.173774][T13077] bond23: (slave vxcan3): Error -95 calling set_mac_address
[ 1176.306619][ T7968] lo speed is unknown, defaulting to 1000
[ 1176.309586][ T7968] sqz0: Port: 1 Link DOWN
[ 1176.318928][T13083] bond23: (slave gretap2): making interface the new active one
[ 1176.326393][T13083] bond23: (slave gretap2): Enslaving as an active interface with an up link
[ 1176.340614][ T7968] lo speed is unknown, defaulting to 1000
[ 1176.349585][T13086] macvlan5: entered promiscuous mode
[ 1176.353225][T13086] macvlan5: entered allmulticast mode
[ 1176.356311][T13086] bond23: entered promiscuous mode
[ 1176.358521][T13086] gretap2: entered promiscuous mode
[ 1176.362819][T13086] 8021q: adding VLAN 0 to HW filter on device macvlan5
[ 1176.373466][T13086] bond23: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of gretap2
[ 1176.379510][T13088] netlink: 'syz.1.10844': attribute type 1 has an invalid length.
[ 1176.382262][T13086] bond23: left promiscuous mode
[ 1176.382280][T13086] gretap2: left promiscuous mode
[ 1176.387654][T13088] netlink: 'syz.1.10844': attribute type 2 has an invalid length.
[ 1176.590780][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10847'.
[ 1176.595936][T13098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10847'.
[ 1177.233561][T13102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10849'.
[ 1177.258275][T13107] batadv4: left allmulticast mode
[ 1177.260067][T13107] batadv4: left promiscuous mode
[ 1177.265034][T13107] bridge0: port 8(batadv4) entered disabled state
[ 1177.272856][T13107] batadv1: left allmulticast mode
[ 1177.274507][T13107] batadv1: left promiscuous mode
[ 1177.278364][T13107] bridge0: port 7(batadv1) entered disabled state
[ 1177.281866][T13107] vlan4: left promiscuous mode
[ 1177.283499][T13107] veth1: left promiscuous mode
[ 1177.285230][T13107] bridge0: port 6(vlan4) entered disabled state
[ 1177.291583][T13107] vlan3: left promiscuous mode
[ 1177.293153][T13107] geneve0: left promiscuous mode
[ 1177.294915][T13107] bridge0: port 5(vlan3) entered disabled state
[ 1177.297744][T13107] veth0_to_bridge: left allmulticast mode
[ 1177.299568][T13107] veth0_to_bridge: left promiscuous mode
[ 1177.301828][T13107] bridge0: port 4(veth0_to_bridge) entered disabled state
[ 1177.305104][T13107] vlan2: left promiscuous mode
[ 1177.306846][T13107] bridge0: port 3(vlan2) entered disabled state
[ 1177.309898][T13107] bridge_slave_1: left allmulticast mode
[ 1177.311950][T13107] bridge_slave_1: left promiscuous mode
[ 1177.313920][T13107] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1177.319866][T13107] bridge_slave_0: left promiscuous mode
[ 1177.323734][T13107] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1177.535499][T13115] netlink: 228 bytes leftover after parsing attributes in process `syz.0.10852'.
[ 1177.724328][T13130] syzkaller1: entered promiscuous mode
[ 1177.726101][T13130] syzkaller1: entered allmulticast mode
[ 1177.793913][T13132] netlink: 676 bytes leftover after parsing attributes in process `syz.0.10857'.
[ 1177.841518][T13132] lo speed is unknown, defaulting to 1000
[ 1177.886358][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10857'.
[ 1177.961783][T13132] lo speed is unknown, defaulting to 1000
[ 1178.139913][T13143] bond15: option lp_interval: invalid value (0)
[ 1178.143258][T13143] bond15: option lp_interval: allowed values 1 - 2147483647
[ 1178.148037][T13143] bond15 (unregistering): Released all slaves
[ 1178.775295][T13162] syzkaller1: entered promiscuous mode
[ 1178.777243][T13162] syzkaller1: entered allmulticast mode
[ 1179.230107][T13175] validate_nla: 2 callbacks suppressed
[ 1179.230123][T13175] netlink: 'syz.1.10869': attribute type 1 has an invalid length.
[ 1179.302344][T13179] openvswitch: netlink: IP tunnel dst address not specified
[ 1179.307369][T13179] siw: device registration error -23
[ 1179.995717][T13211] lo speed is unknown, defaulting to 1000
[ 1180.077353][T13211] lo speed is unknown, defaulting to 1000
[ 1180.435959][T13241] delete_channel: no stack
[ 1180.449563][T13244] delete_channel: no stack
[ 1180.655104][T13261] bond0: (slave veth0_macvtap): Error: Device is in use and cannot be enslaved
[ 1180.787881][T13268] __nla_validate_parse: 4 callbacks suppressed
[ 1180.787903][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10893'.
[ 1180.885642][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10894'.
[ 1181.386010][T13276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10896'.
[ 1181.409449][T13276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10896'.
[ 1181.413662][T13276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10896'.
[ 1181.419715][T13276] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10896'.
[ 1181.589094][T13280] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1181.598493][T13280] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1181.668122][T13283] netlink: 'syz.1.10898': attribute type 2 has an invalid length.
[ 1181.670733][T13283] netlink: 'syz.1.10898': attribute type 2 has an invalid length.
[ 1181.848427][T13288] tipc: Resetting bearer <eth:syzkaller0>
[ 1182.274235][T13291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1182.907159][T13311] batadv5: entered promiscuous mode
[ 1182.909046][T13311] batadv5: entered allmulticast mode
[ 1183.313146][T13357] netlink: 'syz.0.10916': attribute type 1 has an invalid length.
[ 1183.319258][T13357] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10916'.
[ 1183.878772][T13364] netlink: 'syz.2.10917': attribute type 1 has an invalid length.
[ 1183.878785][T13363] netlink: 'syz.2.10917': attribute type 1 has an invalid length.
[ 1183.899735][T13363] 8021q: adding VLAN 0 to HW filter on device bond24
[ 1183.905110][T13364] bond24: entered allmulticast mode
[ 1183.910311][T13364] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10917'.
[ 1184.138440][T13379] gre3: entered promiscuous mode
[ 1184.197354][T13385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10924'.
[ 1184.247610][T13385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10924'.
[ 1184.259031][T13385] netlink: 'syz.1.10924': attribute type 2 has an invalid length.
[ 1184.262140][T13385] netlink: 'syz.1.10924': attribute type 2 has an invalid length.
[ 1184.437927][T13402] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[ 1185.058388][T13412] dummy0: mtu less than device minimum
[ 1185.950544][T13441] xt_hashlimit: size too large, truncated to 1048576
[ 1186.379425][T13469] netlink: 'syz.0.10945': attribute type 1 has an invalid length.
[ 1186.384062][T13469] __nla_validate_parse: 6 callbacks suppressed
[ 1186.384073][T13469] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10945'.
[ 1187.661913][T13532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10960'.
[ 1187.708273][T13528] ip6tnl2: entered promiscuous mode
[ 1187.718663][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10962'.
[ 1187.734713][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10962'.
[ 1187.883588][T13551] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1187.963715][T13557] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1187.968884][T13557] IPVS: set_ctl: invalid protocol: 33 172.20.20.10:20002
[ 1188.495277][T13559] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10965'.
[ 1188.509008][T13559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10965'.
[ 1188.513643][T13559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10965'.
[ 1188.518134][T13559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10965'.
[ 1188.523278][T13559] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10965'.
[ 1188.627717][T13563] lo speed is unknown, defaulting to 1000
[ 1188.733702][T13563] lo speed is unknown, defaulting to 1000
[ 1189.109004][T13597] netlink: 80 bytes leftover after parsing attributes in process `syz.0.10975'.
[ 1189.446811][T13626] xt_hashlimit: size too large, truncated to 1048576
[ 1189.556144][T13634] xt_hashlimit: size too large, truncated to 1048576
[ 1189.623730][T13634] netlink: 'syz.1.10988': attribute type 18 has an invalid length.
[ 1189.705721][T13643] syzkaller0: entered promiscuous mode
[ 1189.707751][T13643] syzkaller0: entered allmulticast mode
[ 1189.708085][T13650] netlink: 'syz.2.10992': attribute type 1 has an invalid length.
[ 1190.462245][T13712] xt_hashlimit: size too large, truncated to 1048576
[ 1190.755566][T13721] xt_hashlimit: size too large, truncated to 1048576
[ 1191.231791][T13752] xt_hashlimit: size too large, truncated to 1048576
[ 1191.590621][T13761] netlink: 'syz.0.11017': attribute type 2 has an invalid length.
[ 1191.597107][T13762] netlink: 'syz.0.11017': attribute type 2 has an invalid length.
[ 1191.638859][T13766] __nla_validate_parse: 7 callbacks suppressed
[ 1191.638871][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11019'.
[ 1192.472605][T13776] syzkaller0: entered promiscuous mode
[ 1192.474590][T13776] syzkaller0: entered allmulticast mode
[ 1192.572442][T13778] netlink: 'syz.0.11023': attribute type 1 has an invalid length.
[ 1192.590753][T13778] 8021q: adding VLAN 0 to HW filter on device bond22
[ 1192.598339][T13778] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11023'.
[ 1192.640025][T13783] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1192.645636][T13783] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[ 1192.870196][T13810] netlink: 165 bytes leftover after parsing attributes in process `syz.1.11032'.
[ 1192.882692][T13812] xt_hashlimit: size too large, truncated to 1048576
[ 1192.939531][T13815] xt_hashlimit: size too large, truncated to 1048576
[ 1195.799568][T13805] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1195.881180][T13845] netlink: 'syz.0.11041': attribute type 1 has an invalid length.
[ 1195.884174][T13845] netlink: 280 bytes leftover after parsing attributes in process `syz.0.11041'.
[ 1196.937880][T13873] xt_hashlimit: size too large, truncated to 1048576
[ 1197.951700][T13893] xt_hashlimit: size too large, truncated to 1048576
[ 1197.968559][T13895] syzkaller1: entered promiscuous mode
[ 1197.971650][T13895] syzkaller1: entered allmulticast mode
[ 1198.237511][T13916] netlink: 35 bytes leftover after parsing attributes in process `syz.2.11065'.
[ 1198.244890][T13920] netlink: 35 bytes leftover after parsing attributes in process `syz.2.11065'.
[ 1198.450834][T13932] xt_hashlimit: size too large, truncated to 1048576
[ 1198.858378][T13945] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11071'.
[ 1199.029313][T13954] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[ 1199.116748][T13957] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1199.122049][T13959] syzkaller1: entered promiscuous mode
[ 1199.124154][T13959] syzkaller1: entered allmulticast mode
[ 1199.169061][T13961] xt_hashlimit: size too large, truncated to 1048576
[ 1199.537115][T13976] wg1: Caught tx_queue_len zero misconfig
[ 1199.637661][T13983] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11080'.
[ 1200.418912][T13991] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 1200.586427][T13999] macvtap0: left promiscuous mode
[ 1200.589067][T13999] bond18: left promiscuous mode
[ 1200.591628][T13999] gre4: left promiscuous mode
[ 1200.591673][T14000] ip6t_srh: unknown srh match flags  4000
[ 1200.593520][T13999] bond20: left promiscuous mode
[ 1200.597031][T13999] ip6gre4: left promiscuous mode
[ 1200.598828][T13999] bond21: left promiscuous mode
[ 1200.600470][T13999] gre5: left promiscuous mode
[ 1200.991704][T14023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11094'.
[ 1201.007822][T14023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11094'.
[ 1201.011028][T14023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11094'.
[ 1201.017482][T14023] netlink: 248 bytes leftover after parsing attributes in process `syz.2.11094'.
[ 1201.699753][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11101'.
[ 1202.846744][T14065] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[ 1202.990843][T14069] xt_hashlimit: overflow, rate too high: 0
[ 1203.016976][T14074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11108'.
[ 1203.034808][T14074] netlink: 'syz.1.11108': attribute type 2 has an invalid length.
[ 1203.037335][T14074] netlink: 'syz.1.11108': attribute type 2 has an invalid length.
[ 1203.414079][T14096] __nla_validate_parse: 1 callbacks suppressed
[ 1203.414089][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11114'.
[ 1204.174464][T14109] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1204.180239][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11118'.
[ 1204.182428][T14109] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1204.613067][T14127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11122'.
[ 1204.969841][T14129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11123'.
[ 1205.506578][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11129'.
[ 1205.510151][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11129'.
[ 1205.539727][T14155] dvmrp1: tun_chr_ioctl cmd 2147767507
[ 1205.543623][T14155] dvmrp1: tun_chr_ioctl cmd 3223385353
[ 1205.552178][T14155] dvmrp1: tun_chr_ioctl cmd 2153273474
[ 1205.614655][T14160] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1205.735123][T14176] lo speed is unknown, defaulting to 1000
[ 1205.815329][T14176] lo speed is unknown, defaulting to 1000
[ 1206.008374][T14194] xt_hashlimit: size too large, truncated to 1048576
[ 1206.544607][T14213] netlink: 'syz.1.11144': attribute type 89 has an invalid length.
[ 1206.855328][T14224] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11147'.
[ 1207.212115][T14245] netlink: 'syz.0.11152': attribute type 1 has an invalid length.
[ 1207.214856][T14245] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11152'.
[ 1208.334229][T14286] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[ 1208.336726][T14286] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[ 1208.464667][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11167'.
[ 1208.656507][T14309] syzkaller0: entered promiscuous mode
[ 1208.658267][T14309] syzkaller0: entered allmulticast mode
[ 1208.792637][T14311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11172'.
[ 1209.635083][T14360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11184'.
[ 1209.650991][T14360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11184'.
[ 1209.670144][T14360] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11184'.
[ 1209.752022][T14367] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1209.870813][T14372] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11189'.
[ 1209.905306][T14380] xt_hashlimit: size too large, truncated to 1048576
[ 1210.234208][T14405] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11195'.
[ 1210.237105][T14405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11195'.
[ 1210.615039][T14428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11203'.
[ 1210.618076][T14427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11203'.
[ 1210.632518][T14427] netlink: 'syz.0.11203': attribute type 2 has an invalid length.
[ 1210.635553][T14427] netlink: 'syz.0.11203': attribute type 2 has an invalid length.
[ 1211.169409][T14446] lo speed is unknown, defaulting to 1000
[ 1211.312945][T14446] lo speed is unknown, defaulting to 1000
[ 1211.612155][T14458] netlink: 'syz.0.11211': attribute type 12 has an invalid length.
[ 1211.614846][T14458] netlink: 'syz.0.11211': attribute type 12 has an invalid length.
[ 1211.897896][T14471] syzkaller1: entered promiscuous mode
[ 1211.899778][T14471] syzkaller1: entered allmulticast mode
[ 1211.903062][T14473] syzkaller1: entered promiscuous mode
[ 1211.905735][T14473] syzkaller1: entered allmulticast mode
[ 1212.144838][T14483] xt_hashlimit: size too large, truncated to 1048576
[ 1212.887609][T14488] netlink: 'syz.1.11219': attribute type 10 has an invalid length.
[ 1212.904551][T14490] xt_hashlimit: size too large, truncated to 1048576
[ 1212.919379][T14488] team0 (unregistering): Port device 76 removed
[ 1212.957213][T14494] netlink: 'syz.1.11219': attribute type 1 has an invalid length.
[ 1213.045779][T14500] xt_hashlimit: size too large, truncated to 1048576
[ 1213.062256][T14502] syzkaller1: entered promiscuous mode
[ 1213.064275][T14502] syzkaller1: entered allmulticast mode
[ 1213.146499][T14507] syzkaller1: entered promiscuous mode
[ 1213.148459][T14507] syzkaller1: entered allmulticast mode
[ 1213.246971][T14519] dummy0: mtu less than device minimum
[ 1213.589842][T14543] syzkaller1: entered promiscuous mode
[ 1213.593547][T14543] syzkaller1: entered allmulticast mode
[ 1213.795735][T14555] xt_hashlimit: size too large, truncated to 1048576
[ 1213.856020][T14556] syzkaller0: entered promiscuous mode
[ 1213.858040][T14556] syzkaller0: entered allmulticast mode
[ 1214.137283][T14566] __nla_validate_parse: 9 callbacks suppressed
[ 1214.137301][T14566] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11240'.
[ 1214.147840][T14566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11240'.
[ 1215.028894][T14602] netlink: 'syz.1.11249': attribute type 11 has an invalid length.
[ 1215.934718][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11258'.
[ 1215.938894][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11258'.
[ 1216.190986][T14655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11263'.
[ 1216.319547][T14665] netlink: 'syz.1.11266': attribute type 1 has an invalid length.
[ 1216.324563][T14665] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11266'.
[ 1216.359800][T14670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1216.365907][T14670] tipc: Resetting bearer <eth:syzkaller0>
[ 1216.373944][T14669] tipc: Disabling bearer <eth:syzkaller0>
[ 1216.435185][T14672] xt_hashlimit: size too large, truncated to 1048576
[ 1216.865651][T14684] syzkaller0: entered promiscuous mode
[ 1216.868168][T14684] syzkaller0: entered allmulticast mode
[ 1217.109968][T14696] xt_hashlimit: size too large, truncated to 1048576
[ 1217.224107][T14704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11278'.
[ 1217.312980][T14709] xt_hashlimit: size too large, truncated to 1048576
[ 1217.452112][T14715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11280'.
[ 1217.792935][T14726] netlink: 'syz.1.11283': attribute type 62 has an invalid length.
[ 1217.979778][T14728] netlink: 'syz.0.11284': attribute type 1 has an invalid length.
[ 1218.015530][T14728] 8021q: adding VLAN 0 to HW filter on device bond23
[ 1218.040300][T14728] 8021q: adding VLAN 0 to HW filter on device bond23
[ 1218.043798][T14728] bond23: (slave vcan0): The slave device specified does not support setting the MAC address
[ 1218.048297][T14728] bond23: (slave vcan0): Error -95 calling set_mac_address
[ 1218.259147][T14745] netlink: 124 bytes leftover after parsing attributes in process `syz.0.11289'.
[ 1218.369384][T14753] xt_hashlimit: size too large, truncated to 1048576
[ 1218.450390][T14760] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002
[ 1218.502725][T14753] netlink: 176 bytes leftover after parsing attributes in process `syz.0.11291'.
[ 1219.313380][T14794] syzkaller1: entered promiscuous mode
[ 1219.315254][T14794] syzkaller1: entered allmulticast mode
[ 1219.463918][T14800] __nla_validate_parse: 1 callbacks suppressed
[ 1219.463934][T14800] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11307'.
[ 1219.537967][T14809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11311'.
[ 1219.541663][T14809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11311'.
[ 1220.499505][T14834] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11316'.
[ 1220.502552][T14834] netlink: 680 bytes leftover after parsing attributes in process `syz.2.11316'.
[ 1220.505445][T14834] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11316'.
[ 1220.569346][T14842] netlink: 'syz.0.11320': attribute type 7 has an invalid length.
[ 1220.622733][T14845] netlink: 'syz.2.11319': attribute type 1 has an invalid length.
[ 1220.625547][T14845] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11319'.
[ 1220.668950][T14847] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11322'.
[ 1220.893399][T14866] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11327'.
[ 1221.127462][T14873] syzkaller1: entered promiscuous mode
[ 1221.129410][T14873] syzkaller1: entered allmulticast mode
[ 1221.611637][T14906] vlan0 (unregistering): left promiscuous mode
[ 1221.614430][T14906] bridge0: port 6(vlan0) entered disabled state
[ 1221.737351][T14915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11341'.
[ 1221.819985][T14922] xt_hashlimit: size too large, truncated to 1048576
[ 1222.089760][T14934] netlink: 'syz.2.11347': attribute type 32 has an invalid length.
[ 1222.106227][T14934] bond25: Setting coupled_control to off (0)
[ 1222.642225][T14949] netlink: 'syz.0.11351': attribute type 1 has an invalid length.
[ 1223.175255][T14967] netlink: 'syz.2.11358': attribute type 1 has an invalid length.
[ 1223.178177][T14966] netlink: 'syz.2.11358': attribute type 1 has an invalid length.
[ 1223.441903][T14982] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1224.017648][T14989] netlink: 'syz.1.11364': attribute type 3 has an invalid length.
[ 1224.021468][T14990] netlink: 'syz.1.11364': attribute type 3 has an invalid length.
[ 1224.150132][T15000] xfrm0: entered allmulticast mode
[ 1224.283338][T15016] xt_hashlimit: size too large, truncated to 1048576
[ 1224.581678][T15044] __nla_validate_parse: 11 callbacks suppressed
[ 1224.581692][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11380'.
[ 1224.598637][T15043] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11381'.
[ 1224.603044][T15043] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check.
[ 1224.664844][T15050] xt_hashlimit: size too large, truncated to 1048576
[ 1225.628244][T15064] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002
[ 1225.732896][T15067] macvtap1: entered promiscuous mode
[ 1225.734854][T15067] macvtap1: entered allmulticast mode
[ 1225.736629][T15067] veth1_vlan: entered allmulticast mode
[ 1225.744660][T15067] macvtap2: entered promiscuous mode
[ 1225.746556][T15067] macvtap2: entered allmulticast mode
[ 1225.799797][T15068] veth1_vlan: left allmulticast mode
[ 1225.812299][T15066] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11388'.
[ 1225.879593][T15072] netlink: 'syz.2.11390': attribute type 14 has an invalid length.
[ 1225.934050][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11391'.
[ 1226.561763][   T33] audit: type=1800 audit(1776808892.084:12): pid=15101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11399" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=21212 res=0 errno=0
[ 1226.579507][   T33] audit: type=1804 audit(1776808892.094:13): pid=15101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.11399" name=2F6E6577726F6F742F343133332F3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=21212 res=1 errno=0
[ 1226.928784][T15108] netlink: 'syz.2.11402': attribute type 1 has an invalid length.
[ 1227.104131][T15113] netlink: 'syz.2.11404': attribute type 1 has an invalid length.
[ 1227.106926][T15113] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11404'.
[ 1227.511959][T15115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11405'.
[ 1227.696390][T15126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11408'.
[ 1228.044196][T15131] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1228.046663][T15131] netem: change failed
[ 1228.486611][T15148] xt_hashlimit: size too large, truncated to 1048576
[ 1228.571138][T15152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11415'.
[ 1228.578234][T15152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1229.451681][T15167] xt_hashlimit: size too large, truncated to 1048576
[ 1229.709539][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11421'.
[ 1230.041148][T15196] xt_HMARK: spi-set and port-set can't be combined
[ 1230.881864][T15216] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11430'.
[ 1230.930159][T15218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11431'.
[ 1230.933487][T15218] netlink: 580 bytes leftover after parsing attributes in process `syz.2.11431'.
[ 1231.148291][T15238] syzkaller0: entered promiscuous mode
[ 1231.151383][T15238] syzkaller0: entered allmulticast mode
[ 1231.294361][T15253] netlink: 'syz.1.11440': attribute type 2 has an invalid length.
[ 1231.297958][T15253] netlink: 'syz.1.11440': attribute type 1 has an invalid length.
[ 1231.305882][T15253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11440'.
[ 1231.308945][T15253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11440'.
[ 1231.346236][T15255] syzkaller0: entered promiscuous mode
[ 1231.348223][T15255] syzkaller0: entered allmulticast mode
[ 1231.742967][T15264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11444'.
[ 1235.819285][T15308] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11456'.
[ 1235.924361][T15318] netlink: 220 bytes leftover after parsing attributes in process `syz.0.11460'.
[ 1235.927593][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11460'.
[ 1235.934102][T15319] xt_hashlimit: size too large, truncated to 1048576
[ 1235.938890][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11460'.
[ 1235.954544][T15318] xt_hashlimit: size too large, truncated to 1048576
[ 1236.012772][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11460'.
[ 1236.095737][T15329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11463'.
[ 1236.098808][T15329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11463'.
[ 1236.148067][T15336] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11465'.
[ 1237.206067][T15365] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1237.227064][T15365] netlink: 'syz.0.11474': attribute type 1 has an invalid length.
[ 1237.229615][T15365] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11474'.
[ 1237.246583][T15370] syzkaller1: entered promiscuous mode
[ 1237.249041][T15370] syzkaller1: entered allmulticast mode
[ 1237.363066][T15372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11476'.
[ 1237.599720][T15382] IPVS: Unknown mcast interface: vlan0
[ 1238.215900][T15409] lo speed is unknown, defaulting to 1000
[ 1238.302587][T15409] lo speed is unknown, defaulting to 1000
[ 1239.214196][T15445] netlink: 'syz.1.11498': attribute type 1 has an invalid length.
[ 1241.287925][T15525] netlink: 'syz.1.11522': attribute type 1 has an invalid length.
[ 1241.293227][T15525] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[ 1241.499812][T15539] __nla_validate_parse: 4 callbacks suppressed
[ 1241.499825][T15539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11525'.
[ 1241.527408][T15539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11525'.
[ 1241.530477][T15539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11525'.
[ 1241.536429][T15539] netlink: 'syz.1.11525': attribute type 2 has an invalid length.
[ 1241.539128][T15539] netlink: 'syz.1.11525': attribute type 2 has an invalid length.
[ 1241.699715][T15565] xt_hashlimit: size too large, truncated to 1048576
[ 1242.244622][T15597] syzkaller1: entered promiscuous mode
[ 1242.250618][T15597] syzkaller1: entered allmulticast mode
[ 1242.355147][T15603] xt_hashlimit: size too large, truncated to 1048576
[ 1242.407675][T15605] netlink: 253 bytes leftover after parsing attributes in process `syz.1.11544'.
[ 1242.697667][T15623] netlink: 80 bytes leftover after parsing attributes in process `syz.0.11551'.
[ 1243.010819][T15639] lo speed is unknown, defaulting to 1000
[ 1243.020010][T15641] lo speed is unknown, defaulting to 1000
[ 1243.128805][T15639] lo speed is unknown, defaulting to 1000
[ 1243.322311][T15641] lo speed is unknown, defaulting to 1000
[ 1243.736609][T15652] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11558'.
[ 1244.759187][T15679] dummy0: mtu less than device minimum
[ 1244.814785][T15682] tunl0: Caught tx_queue_len zero misconfig
[ 1245.593739][T15726] syzkaller1: entered promiscuous mode
[ 1245.596101][T15726] syzkaller1: entered allmulticast mode
[ 1245.839606][T15745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11580'.
[ 1245.912233][T15748] lo speed is unknown, defaulting to 1000
[ 1245.950057][T15750] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1245.973247][T15757] syzkaller1: entered promiscuous mode
[ 1245.977119][T15757] syzkaller1: entered allmulticast mode
[ 1246.031101][T15748] lo speed is unknown, defaulting to 1000
[ 1246.082317][T15760] xt_hashlimit: size too large, truncated to 1048576
[ 1246.240795][T15764] sctp: [Deprecated]: syz.0.11585 (pid 15764) Use of int in max_burst socket option.
[ 1246.240795][T15764] Use struct sctp_assoc_value instead
[ 1246.345841][T15775] Bluetooth: hci0: Opcode 0x080f failed: -22
[ 1246.564532][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11593'.
[ 1247.504023][T15868] xt_hashlimit: size too large, truncated to 1048576
[ 1247.568601][T15869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11608'.
[ 1247.597152][T15869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11608'.
[ 1247.897607][T15883] netlink: 'syz.1.11615': attribute type 1 has an invalid length.
[ 1247.900278][T15883] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11615'.
[ 1248.308192][T15890] xt_recent: Unsupported userspace flags (000000b1)
[ 1248.485296][T15899] netlink: 'syz.0.11620': attribute type 1 has an invalid length.
[ 1248.487919][T15899] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11620'.
[ 1248.761930][T15906] netlink: 'syz.1.11622': attribute type 27 has an invalid length.
[ 1248.911122][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11623'.
[ 1248.926735][T15908] 8021q: adding VLAN 0 to HW filter on device bond16
[ 1248.941563][T15908] 8021q: adding VLAN 0 to HW filter on device bond17
[ 1248.947808][T15908] bond16: (slave bond17): Enslaving as an active interface with an up link
[ 1248.953481][T15908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11623'.
[ 1248.959706][T15908] bond16 (unregistering): (slave bond17): Releasing backup interface
[ 1248.964854][T15908] bond16 (unregistering): Released all slaves
[ 1249.481788][T15949] netlink: 'syz.2.11633': attribute type 39 has an invalid length.
[ 1249.713982][T15970] team0: Caught tx_queue_len zero misconfig
[ 1249.823212][T15972] syz_tun: entered promiscuous mode
[ 1249.826066][T15972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11638'.
[ 1250.320812][T15988] syzkaller1: entered promiscuous mode
[ 1250.323525][T15988] syzkaller1: entered allmulticast mode
[ 1250.754338][T16019] xt_hashlimit: size too large, truncated to 1048576
[ 1250.841998][T16023] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20002
[ 1251.222332][T16050] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11659'.
[ 1252.327708][T16073] netlink: 292 bytes leftover after parsing attributes in process `syz.0.11669'.
[ 1252.336336][T16073] tipc: Disabling bearer <udp:syz2>
[ 1252.345806][T16075] IPVS: Scheduler module ip_vs_ not found
[ 1252.364468][T16077] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0
[ 1252.397558][T16081] syzkaller0: entered promiscuous mode
[ 1252.399461][T16081] syzkaller0: entered allmulticast mode
[ 1252.691702][T16103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11678'.
[ 1252.930431][T16111] nbd0: detected capacity change from 0 to 63
[ 1252.952160][ T9417] block nbd0: Receive control failed (result -104)
[ 1252.998436][T16129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11684'.
[ 1253.048981][T16139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11687'.
[ 1253.059932][T16139] netlink: 'syz.0.11687': attribute type 2 has an invalid length.
[ 1253.066834][T16139] netlink: 'syz.0.11687': attribute type 2 has an invalid length.
[ 1253.073315][T16139] netlink: 128 bytes leftover after parsing attributes in process `syz.0.11687'.
[ 1253.086603][T16140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11686'.
[ 1253.091642][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11686'.
[ 1253.096412][T16136] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1253.105692][T16143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11688'.
[ 1253.205961][T16149] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 1253.210202][T16149] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11691'.
[ 1253.308662][T16157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11693'.
[ 1253.590312][T16167] netlink: 'syz.0.11696': attribute type 1 has an invalid length.
[ 1254.004047][T16181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1254.196429][T16198] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20000
[ 1254.212709][T16199] netlink: 'syz.1.11705': attribute type 1 has an invalid length.
[ 1254.581391][T16214] dummy0: mtu less than device minimum
[ 1254.716598][T16219] syzkaller1: entered promiscuous mode
[ 1254.718494][T16219] syzkaller1: entered allmulticast mode
[ 1255.207253][T16264] netlink: 'syz.2.11725': attribute type 12 has an invalid length.
[ 1255.267010][T16268] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1255.404300][T16273] syzkaller1: entered promiscuous mode
[ 1255.406479][T16273] syzkaller1: entered allmulticast mode
[ 1255.443701][T16271] team_slave_1: Caught tx_queue_len zero misconfig
[ 1255.541938][T16282] xt_hashlimit: size too large, truncated to 1048576
[ 1256.261245][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 2 seconds
[ 1256.265698][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 2 seconds
[ 1256.269385][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 2 seconds
[ 1256.273343][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 2 seconds
[ 1257.993230][T16383] __nla_validate_parse: 9 callbacks suppressed
[ 1257.993244][T16383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11758'.
[ 1258.039899][T16387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11759'.
[ 1258.077230][T16387] netlink: 'syz.2.11759': attribute type 1 has an invalid length.
[ 1258.195442][T16404] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11764'.
[ 1258.195867][T16406] netlink: 'syz.2.11765': attribute type 12 has an invalid length.
[ 1258.267846][T16410] xt_hashlimit: size too large, truncated to 1048576
[ 1258.995275][T16443] netlink: 'syz.1.11774': attribute type 1 has an invalid length.
[ 1258.997987][T16443] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11774'.
[ 1259.052073][T16452] netlink: 'syz.1.11776': attribute type 12 has an invalid length.
[ 1259.056741][T16452] ip6gretap0: entered promiscuous mode
[ 1259.060802][T16451] ip6gretap0: left promiscuous mode
[ 1259.139754][T16455] syzkaller1: entered promiscuous mode
[ 1259.143668][T16455] syzkaller1: entered allmulticast mode
[ 1259.303430][T16478] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11785'.
[ 1259.310447][T16478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11785'.
[ 1259.315904][T16478] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11785'.
[ 1259.325442][T16475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11784'.
[ 1259.330323][T16482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11783'.
[ 1259.479698][T16489] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[ 1259.621488][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 4 seconds
[ 1259.625125][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 4 seconds
[ 1259.628755][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 4 seconds
[ 1259.636402][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 4 seconds
[ 1260.254010][T16498] syzkaller1: entered promiscuous mode
[ 1260.256417][T16498] syzkaller1: entered allmulticast mode
[ 1260.515232][T16512] xt_hashlimit: size too large, truncated to 1048576
[ 1260.630306][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11794'.
[ 1262.047349][T16531] syzkaller1: entered promiscuous mode
[ 1262.049301][T16531] syzkaller1: entered allmulticast mode
[ 1262.054554][T16531] netlink: 'syz.0.11798': attribute type 13 has an invalid length.
[ 1262.304543][T16539] lo speed is unknown, defaulting to 1000
[ 1262.385628][T16548] netlink: 'syz.0.11805': attribute type 21 has an invalid length.
[ 1262.394152][T16548] netlink: 'syz.0.11805': attribute type 4 has an invalid length.
[ 1262.397013][T16548] netlink: 'syz.0.11805': attribute type 5 has an invalid length.
[ 1262.401986][T16548] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig
[ 1262.428679][T16548] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[ 1262.437098][T16548] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[ 1262.442013][T16539] lo speed is unknown, defaulting to 1000
[ 1262.574313][T16566] netlink: 'syz.2.11812': attribute type 2 has an invalid length.
[ 1262.599776][T16566] !9: entered promiscuous mode
[ 1262.609638][T16566] netlink: 'syz.2.11812': attribute type 2 has an invalid length.
[ 1262.615160][T16566] !9: left promiscuous mode
[ 1262.858325][T16583] tc_dump_action: action bad kind
[ 1262.981228][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 6 seconds
[ 1262.985398][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 6 seconds
[ 1262.988750][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 6 seconds
[ 1262.993126][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 6 seconds
[ 1263.065108][T16603] __nla_validate_parse: 9 callbacks suppressed
[ 1263.065118][T16603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11823'.
[ 1263.083455][T16603] macvlan5: entered allmulticast mode
[ 1263.113322][T16605] netlink: 308 bytes leftover after parsing attributes in process `syz.0.11824'.
[ 1263.116644][T16606] netlink: 308 bytes leftover after parsing attributes in process `syz.0.11824'.
[ 1263.329892][T16618] lo speed is unknown, defaulting to 1000
[ 1263.467327][T16618] lo speed is unknown, defaulting to 1000
[ 1263.603529][T16647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11833'.
[ 1263.781855][T16652] x_tables: duplicate underflow at hook 2
[ 1263.873134][T16658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11837'.
[ 1263.939151][T16664] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11840'.
[ 1263.952111][T16662] syzkaller1: entered promiscuous mode
[ 1263.954155][T16662] syzkaller1: entered allmulticast mode
[ 1264.320104][T16698] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1264.323537][T16698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11847'.
[ 1265.094837][T16721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11850'.
[ 1265.468860][T16757] xt_hashlimit: size too large, truncated to 1048576
[ 1265.520155][T16759] tipc: Enabled bearer <ib:gre0>, priority 10
[ 1265.568855][T16764] validate_nla: 2 callbacks suppressed
[ 1265.568866][T16764] netlink: 'syz.0.11861': attribute type 4 has an invalid length.
[ 1265.574536][T16764] netlink: 'syz.0.11861': attribute type 8 has an invalid length.
[ 1265.577115][T16764] netlink: 212 bytes leftover after parsing attributes in process `syz.0.11861'.
[ 1265.581807][T16764] netlink: 'syz.0.11861': attribute type 1 has an invalid length.
[ 1265.595822][T16764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11861'.
[ 1265.696115][T16771] netlink: 'syz.0.11863': attribute type 1 has an invalid length.
[ 1266.108897][T16788] tc_dump_action: action bad kind
[ 1266.175018][T16794] netlink: 'syz.2.11869': attribute type 1 has an invalid length.
[ 1266.217425][T16795] netlink: 'syz.1.11870': attribute type 1 has an invalid length.
[ 1266.341443][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 8 seconds
[ 1266.345866][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 8 seconds
[ 1266.350350][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 8 seconds
[ 1266.354953][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 8 seconds
[ 1267.130814][T16822] netlink: 'syz.1.11877': attribute type 2 has an invalid length.
[ 1267.133437][T16822] netlink: 'syz.1.11877': attribute type 2 has an invalid length.
[ 1267.318175][T16835] syzkaller1: entered promiscuous mode
[ 1267.320147][T16835] syzkaller1: entered allmulticast mode
[ 1267.841834][T16873] xt_hashlimit: size too large, truncated to 1048576
[ 1268.409386][T16903] lo speed is unknown, defaulting to 1000
[ 1268.493845][T16903] lo speed is unknown, defaulting to 1000
[ 1269.315214][T16919] __nla_validate_parse: 12 callbacks suppressed
[ 1269.315228][T16919] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.11903'.
[ 1269.332971][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11901'.
[ 1269.392144][T16920] bond25: entered promiscuous mode
[ 1269.394087][T16920] bond25: entered allmulticast mode
[ 1269.396327][T16920] 8021q: adding VLAN 0 to HW filter on device bond25
[ 1269.667309][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11908'.
[ 1269.703383][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 10 seconds
[ 1269.706859][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 10 seconds
[ 1269.710375][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 10 seconds
[ 1269.714167][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 10 seconds
[ 1270.045652][T16946] delete_channel: no stack
[ 1270.047861][T16946] delete_channel: no stack
[ 1270.126404][T16950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1270.409449][T16958] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11912'.
[ 1271.407683][T16996] 8021q: adding VLAN 0 to HW filter on device bond26
[ 1271.432676][T16996] 8021q: adding VLAN 0 to HW filter on device bond27
[ 1271.445708][T16996] 8021q: adding VLAN 0 to HW filter on device bond28
[ 1271.464298][T16996] 8021q: adding VLAN 0 to HW filter on device bond29
[ 1271.479689][T17005] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11923'.
[ 1271.492133][T16996] 8021q: adding VLAN 0 to HW filter on device bond30
[ 1271.507442][T16996] 8021q: adding VLAN 0 to HW filter on device bond31
[ 1271.522868][T16996] 8021q: adding VLAN 0 to HW filter on device bond32
[ 1271.536584][T16996] 8021q: adding VLAN 0 to HW filter on device bond33
[ 1271.549828][T16996] 8021q: adding VLAN 0 to HW filter on device bond34
[ 1271.564097][T16996] 8021q: adding VLAN 0 to HW filter on device bond35
[ 1271.577410][T16996] 8021q: adding VLAN 0 to HW filter on device bond36
[ 1271.590371][T16996] 8021q: adding VLAN 0 to HW filter on device bond37
[ 1271.604108][T16996] 8021q: adding VLAN 0 to HW filter on device bond38
[ 1271.617516][T16996] 8021q: adding VLAN 0 to HW filter on device bond39
[ 1271.630638][T16996] 8021q: adding VLAN 0 to HW filter on device bond40
[ 1271.646553][T16996] 8021q: adding VLAN 0 to HW filter on device bond41
[ 1271.665261][T16996] 8021q: adding VLAN 0 to HW filter on device bond42
[ 1271.683821][T16996] 8021q: adding VLAN 0 to HW filter on device bond43
[ 1271.698232][T16996] 8021q: adding VLAN 0 to HW filter on device bond44
[ 1271.714253][T16996] 8021q: adding VLAN 0 to HW filter on device bond45
[ 1271.731381][T16996] 8021q: adding VLAN 0 to HW filter on device bond46
[ 1271.746089][T16996] 8021q: adding VLAN 0 to HW filter on device bond47
[ 1271.749628][T17023] lo: Caught tx_queue_len zero misconfig
[ 1271.757798][T17023] netem: change failed
[ 1271.772118][T16996] 8021q: adding VLAN 0 to HW filter on device bond48
[ 1271.789990][T16996] 8021q: adding VLAN 0 to HW filter on device bond49
[ 1271.812137][T16996] 8021q: adding VLAN 0 to HW filter on device bond50
[ 1271.825321][T16996] 8021q: adding VLAN 0 to HW filter on device bond51
[ 1271.841614][T16996] 8021q: adding VLAN 0 to HW filter on device bond52
[ 1271.855190][T16996] 8021q: adding VLAN 0 to HW filter on device bond53
[ 1271.872916][T16996] 8021q: adding VLAN 0 to HW filter on device bond54
[ 1271.886613][T16996] 8021q: adding VLAN 0 to HW filter on device bond55
[ 1271.901628][T16996] 8021q: adding VLAN 0 to HW filter on device bond56
[ 1271.918705][T16996] 8021q: adding VLAN 0 to HW filter on device bond57
[ 1271.935159][T16996] 8021q: adding VLAN 0 to HW filter on device bond58
[ 1273.061352][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 12 seconds
[ 1273.065164][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 12 seconds
[ 1273.068899][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 12 seconds
[ 1273.072985][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 12 seconds
[ 1276.421470][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 14 seconds
[ 1276.425896][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 14 seconds
[ 1276.430292][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 14 seconds
[ 1276.435284][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 14 seconds
[ 1279.781277][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 16 seconds
[ 1279.784883][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 16 seconds
[ 1279.788308][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 16 seconds
[ 1279.792408][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 16 seconds
[ 1283.141377][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 18 seconds
[ 1283.146049][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 18 seconds
[ 1283.150385][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 18 seconds
[ 1283.155383][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 18 seconds
[ 1286.501378][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 20 seconds
[ 1286.505969][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 20 seconds
[ 1286.510439][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 20 seconds
[ 1286.515243][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 20 seconds
[ 1289.861513][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 22 seconds
[ 1289.865675][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 22 seconds
[ 1289.869809][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 22 seconds
[ 1289.874540][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 22 seconds
[ 1293.221421][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 24 seconds
[ 1293.225960][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 24 seconds
[ 1293.230370][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 24 seconds
[ 1293.236297][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 24 seconds
[ 1296.581357][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 26 seconds
[ 1296.585084][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 26 seconds
[ 1296.588518][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 26 seconds
[ 1296.592367][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 26 seconds
[ 1296.933038][T17064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11930'.
[ 1296.935980][T17064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11930'.
[ 1296.939093][T17064] netlink: 'syz.1.11930': attribute type 14 has an invalid length.
[ 1296.943121][T17064] netlink: 'syz.1.11930': attribute type 13 has an invalid length.
[ 1296.983474][T17064] netlink: 'syz.1.11930': attribute type 1 has an invalid length.
[ 1296.990154][T17064] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11930'.
[ 1297.010552][T17073] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11934'.
[ 1297.016495][T17073] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.11934'.
[ 1297.222724][T17078] netlink: 'syz.0.11935': attribute type 10 has an invalid length.
[ 1297.225815][T17078] dummy0: left promiscuous mode
[ 1297.227834][T17078] dummy0: left allmulticast mode
[ 1297.230457][T17078] netlink: 'syz.0.11935': attribute type 10 has an invalid length.
[ 1297.242341][T17078] dummy0: entered promiscuous mode
[ 1297.249398][T17078] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1297.324654][T17082] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 1297.386126][T17086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11939'.
[ 1297.458345][T17087] netlink: 52 bytes leftover after parsing attributes in process `syz.0.11939'.
[ 1298.035384][T17103] syzkaller1: entered promiscuous mode
[ 1298.037500][T17103] syzkaller1: entered allmulticast mode
[ 1298.231623][T17110] netlink: 'syz.1.11946': attribute type 1 has an invalid length.
[ 1298.234363][T17110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11946'.
[ 1298.263870][T17113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11947'.
[ 1298.333853][T17119] dummy0: mtu less than device minimum
[ 1298.344311][T17121] netlink: 30 bytes leftover after parsing attributes in process `syz.1.11949'.
[ 1299.245351][T17151] dummy0: mtu less than device minimum
[ 1299.382659][T17152] netlink: zone id is out of range
[ 1299.384988][T17152] netlink: zone id is out of range
[ 1299.387333][T17152] netlink: zone id is out of range
[ 1299.389644][T17152] netlink: zone id is out of range
[ 1299.392510][T17152] netlink: zone id is out of range
[ 1299.394878][T17152] netlink: zone id is out of range
[ 1299.397166][T17152] netlink: zone id is out of range
[ 1299.399472][T17152] netlink: zone id is out of range
[ 1299.946973][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 28 seconds
[ 1299.951027][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 28 seconds
[ 1299.955124][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 28 seconds
[ 1299.958817][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 28 seconds
[ 1300.034413][T17171] netlink: 'syz.2.11963': attribute type 2 has an invalid length.
[ 1300.037352][T17171] netlink: 'syz.2.11963': attribute type 2 has an invalid length.
[ 1300.148298][T17180] xt_hashlimit: size too large, truncated to 1048576
[ 1303.301376][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 30 seconds
[ 1303.305900][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 30 seconds
[ 1303.310273][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 30 seconds
[ 1303.318976][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 30 seconds
[ 1303.783248][T17201] xt_hashlimit: size too large, truncated to 1048576
[ 1303.846136][T17208] netlink: 'syz.1.11971': attribute type 3 has an invalid length.
[ 1303.849401][T17208] __nla_validate_parse: 7 callbacks suppressed
[ 1303.849412][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11971'.
[ 1303.917446][T17211] xt_hashlimit: size too large, truncated to 1048576
[ 1303.978770][T17215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11975'.
[ 1304.060442][T17223] net_ratelimit: 354 callbacks suppressed
[ 1304.060461][T17223] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1304.169403][T17231] xt_hashlimit: size too large, truncated to 1048576
[ 1304.409291][T17237] syzkaller1: entered promiscuous mode
[ 1304.411690][T17237] syzkaller1: entered allmulticast mode
[ 1304.737295][T17252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11986'.
[ 1304.786097][T17254] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11987'.
[ 1304.789216][T17254] netlink: 'syz.1.11987': attribute type 1 has an invalid length.
[ 1304.824455][T17256] xt_hashlimit: size too large, truncated to 1048576
[ 1304.984902][T17264] netlink: 176 bytes leftover after parsing attributes in process `syz.0.11990'.
[ 1305.104360][T17272] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11993'.
[ 1305.395413][T17297] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12000'.
[ 1305.441541][T17301] syzkaller1: entered promiscuous mode
[ 1305.443436][T17301] syzkaller1: entered allmulticast mode
[ 1305.497586][T17304] xt_hashlimit: max too large, truncated to 1048576
[ 1305.500234][T17304] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1305.607551][T17307] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1305.993921][T17327] reject_tg_check: 23 callbacks suppressed
[ 1305.993945][T17327] ipt_REJECT: ECHOREPLY no longer supported.
[ 1306.661198][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 32 seconds
[ 1306.664687][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 32 seconds
[ 1306.668166][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 32 seconds
[ 1306.672210][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 32 seconds
[ 1306.886247][T17354] syzkaller1: entered promiscuous mode
[ 1306.888265][T17354] syzkaller1: entered allmulticast mode
[ 1306.889498][T17356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12018'.
[ 1306.956429][T17358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12019'.
[ 1306.982886][T17359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12018'.
[ 1307.097452][T17363] xt_cluster: node mask cannot exceed total number of nodes
[ 1307.103563][T17363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1307.384543][T17372] syzkaller1: entered promiscuous mode
[ 1307.387056][T17372] syzkaller1: entered allmulticast mode
[ 1307.559644][T17379] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[ 1307.796108][T17395] lo speed is unknown, defaulting to 1000
[ 1307.958534][T17395] lo speed is unknown, defaulting to 1000
[ 1308.255151][T17415] syzkaller1: entered promiscuous mode
[ 1308.257174][T17415] syzkaller1: entered allmulticast mode
[ 1308.658106][T17431] macvtap0: entered promiscuous mode
[ 1308.660520][T17431] macvtap0: entered allmulticast mode
[ 1308.921739][T17447] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[ 1309.078088][T17454] netlink: 'syz.0.12043': attribute type 1 has an invalid length.
[ 1309.082284][T17454] __nla_validate_parse: 1 callbacks suppressed
[ 1309.082303][T17454] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12043'.
[ 1310.021322][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 34 seconds
[ 1310.025944][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 34 seconds
[ 1310.030344][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 34 seconds
[ 1310.034743][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 34 seconds
[ 1310.283294][T17475] veth1_to_team: Caught tx_queue_len zero misconfig
[ 1310.738780][T17482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12050'.
[ 1310.962892][T17492] netlink: 'syz.2.12053': attribute type 1 has an invalid length.
[ 1310.966854][T17492] workqueue: Failed to create a rescuer kthread for wq "bond26": -EINTR
[ 1311.027253][T17496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12054'.
[ 1311.078316][ T9417] block nbd10: Receive control failed (result -1)
[ 1311.270239][T17506] lo speed is unknown, defaulting to 1000
[ 1311.300747][T17507] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[ 1311.317510][T17507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12056'.
[ 1311.335189][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12057'.
[ 1311.338072][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12057'.
[ 1311.386794][T17506] lo speed is unknown, defaulting to 1000
[ 1311.454775][T17525] netlink: 'syz.1.12061': attribute type 1 has an invalid length.
[ 1311.801233][T17551] x_tables: duplicate underflow at hook 2
[ 1311.893129][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12068'.
[ 1312.386923][T17562] syzkaller1: entered promiscuous mode
[ 1312.389041][T17562] syzkaller1: entered allmulticast mode
[ 1312.689984][T17579] netlink: 'syz.2.12075': attribute type 1 has an invalid length.
[ 1312.696975][T17578] netlink: 'syz.2.12075': attribute type 1 has an invalid length.
[ 1312.732156][T17578] 8021q: adding VLAN 0 to HW filter on device bond26
[ 1312.897743][T17590] syzkaller1: entered promiscuous mode
[ 1312.903320][T17590] syzkaller1: entered allmulticast mode
[ 1312.950693][T17594] x_tables: duplicate underflow at hook 3
[ 1312.985379][T17596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12079'.
[ 1312.988451][T17596] openvswitch: netlink: Key type 29 is not supported
[ 1313.384825][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 36 seconds
[ 1313.389401][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 36 seconds
[ 1313.393332][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 36 seconds
[ 1313.396879][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 36 seconds
[ 1313.493807][T17627] xt_hashlimit: size too large, truncated to 1048576
[ 1313.733238][T17636] netlink: 'syz.0.12088': attribute type 12 has an invalid length.
[ 1313.737036][T17637] netlink: 'syz.0.12088': attribute type 12 has an invalid length.
[ 1314.239934][T17647] xt_hashlimit: size too large, truncated to 1048576
[ 1314.403629][T17658] xt_hashlimit: size too large, truncated to 1048576
[ 1314.488426][T17664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12096'.
[ 1314.494033][T17664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12096'.
[ 1314.499529][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12096'.
[ 1314.985287][T17682] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1315.017494][T17684] xt_hashlimit: size too large, truncated to 1048576
[ 1315.156446][ T5274] udevd[5274]: worker [16124] /devices/virtual/block/nbd0 is taking a long time
[ 1315.188605][T17688] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12104'.
[ 1315.196085][T17688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12104'.
[ 1315.200849][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12104'.
[ 1315.367270][T17699] netlink: 'syz.0.12106': attribute type 1 has an invalid length.
[ 1315.369985][T17699] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12106'.
[ 1315.529695][T17706] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[ 1315.833502][T17723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12114'.
[ 1315.849362][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12114'.
[ 1315.934901][T17729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12116'.
[ 1316.085671][T17734] netlink: 'syz.1.12118': attribute type 1 has an invalid length.
[ 1316.741285][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 38 seconds
[ 1316.744840][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 38 seconds
[ 1316.748255][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 38 seconds
[ 1316.751839][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 38 seconds
[ 1317.468598][T17778] xt_hashlimit: size too large, truncated to 1048576
[ 1317.730050][T17802] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[ 1317.738078][T17801] netlink: 'syz.1.12138': attribute type 5 has an invalid length.
[ 1317.906440][T17809] netlink: 'syz.1.12141': attribute type 1 has an invalid length.
[ 1317.910231][T17809] veth0: Caught tx_queue_len zero misconfig
[ 1317.916142][T17809] netlink: 'syz.1.12141': attribute type 1 has an invalid length.
[ 1318.819160][T17830] netlink: 'syz.2.12147': attribute type 2 has an invalid length.
[ 1318.821907][T17830] netlink: 'syz.2.12147': attribute type 2 has an invalid length.
[ 1318.825174][T17827] netlink: 'syz.0.12146': attribute type 2 has an invalid length.
[ 1318.831153][T17827] netlink: 'syz.0.12146': attribute type 2 has an invalid length.
[ 1319.083065][T17846] lo speed is unknown, defaulting to 1000
[ 1319.271972][T17846] lo speed is unknown, defaulting to 1000
[ 1319.566542][T17865] __nla_validate_parse: 18 callbacks suppressed
[ 1319.566559][T17865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12156'.
[ 1319.730180][T17874] dummy0: mtu less than device minimum
[ 1319.736088][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12159'.
[ 1319.745469][T17874] netlink: 'syz.0.12159': attribute type 1 has an invalid length.
[ 1319.933464][T17883] syzkaller1: entered promiscuous mode
[ 1319.935544][T17883] syzkaller1: entered allmulticast mode
[ 1320.105983][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 40 seconds
[ 1320.111599][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 40 seconds
[ 1320.115242][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 40 seconds
[ 1320.118961][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 40 seconds
[ 1320.131976][T17893] netlink: 63 bytes leftover after parsing attributes in process `syz.1.12165'.
[ 1320.135636][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12165'.
[ 1320.138557][T17893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12165'.
[ 1320.143680][T17893] 8021q: VLANs not supported on syzkaller1
[ 1320.245395][T17895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12166'.
[ 1320.354287][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12169'.
[ 1320.410049][T17910] xt_hashlimit: size too large, truncated to 1048576
[ 1320.615773][T17924] bond27 (unregistering): Released all slaves
[ 1320.686335][T17924] syzkaller0: entered promiscuous mode
[ 1320.688317][T17924] syzkaller0: entered allmulticast mode
[ 1320.748483][T17934] lo speed is unknown, defaulting to 1000
[ 1320.849193][T17934] lo speed is unknown, defaulting to 1000
[ 1320.944941][T17950] xt_hashlimit: size too large, truncated to 1048576
[ 1321.794247][T17964] validate_nla: 1 callbacks suppressed
[ 1321.794264][T17964] netlink: 'syz.0.12185': attribute type 12 has an invalid length.
[ 1323.461263][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 42 seconds
[ 1323.464681][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 42 seconds
[ 1323.468027][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 42 seconds
[ 1323.471627][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 42 seconds
[ 1324.034207][T17954] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1324.196233][T17985] netlink: 'syz.2.12189': attribute type 1 has an invalid length.
[ 1324.248042][T17989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12191'.
[ 1324.308733][T17999] lo speed is unknown, defaulting to 1000
[ 1324.348294][T18002] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1324.406628][T17999] lo speed is unknown, defaulting to 1000
[ 1324.541844][T18017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12198'.
[ 1324.735528][T18035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12201'.
[ 1325.615425][T18067] syzkaller1: entered promiscuous mode
[ 1325.617314][T18067] syzkaller1: entered allmulticast mode
[ 1325.770021][T18069] syzkaller1: entered promiscuous mode
[ 1325.772139][T18069] syzkaller1: entered allmulticast mode
[ 1326.073992][T18089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12217'.
[ 1326.078378][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12217'.
[ 1326.821456][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 44 seconds
[ 1326.825964][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 44 seconds
[ 1326.830395][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 44 seconds
[ 1326.835173][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 44 seconds
[ 1326.853405][T18096] bond0: Caught tx_queue_len zero misconfig
[ 1326.973972][T18105] netlink: 'syz.0.12223': attribute type 4 has an invalid length.
[ 1327.002376][T18107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12224'.
[ 1327.469281][T18130] xt_hashlimit: size too large, truncated to 1048576
[ 1327.658750][T18136] syzkaller1: entered promiscuous mode
[ 1327.661475][T18136] syzkaller1: entered allmulticast mode
[ 1327.896037][T18151] netlink: 'syz.0.12239': attribute type 9 has an invalid length.
[ 1327.898795][T18151] netlink: 'syz.0.12239': attribute type 6 has an invalid length.
[ 1327.903462][T18151] netlink: 'syz.0.12239': attribute type 7 has an invalid length.
[ 1327.906646][T18151] netlink: 'syz.0.12239': attribute type 8 has an invalid length.
[ 1328.001676][T18163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12242'.
[ 1328.026445][T18163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12242'.
[ 1328.041367][T18163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12242'.
[ 1328.046050][T18163] netlink: 'syz.0.12242': attribute type 2 has an invalid length.
[ 1328.048679][T18163] netlink: 'syz.0.12242': attribute type 2 has an invalid length.
[ 1328.053437][T18163] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12242'.
[ 1328.056632][T18163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12242'.
[ 1328.060359][T18163] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12242'.
[ 1329.268155][T18192] lo speed is unknown, defaulting to 1000
[ 1329.348516][T18192] lo speed is unknown, defaulting to 1000
[ 1330.181873][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 46 seconds
[ 1330.185318][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 46 seconds
[ 1330.188708][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 46 seconds
[ 1330.193651][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 46 seconds
[ 1331.096812][T18174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1331.195889][T18204] netlink: 'syz.1.12252': attribute type 2 has an invalid length.
[ 1331.203996][T18204] netlink: 'syz.1.12252': attribute type 2 has an invalid length.
[ 1331.215241][T18204] __nla_validate_parse: 66 callbacks suppressed
[ 1331.215260][T18204] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12252'.
[ 1331.297774][T18218] xt_hashlimit: size too large, truncated to 1048576
[ 1331.325273][T18222] xt_hashlimit: size too large, truncated to 1048576
[ 1331.660208][T18244] tap0: tun_chr_ioctl cmd 2147767520
[ 1331.662841][T18243] tap0: tun_chr_ioctl cmd 1074025673
[ 1331.733197][T18251] Cannot find set identified by id 3 to match
[ 1332.210676][T18298] netlink: 'syz.0.12278': attribute type 1 has an invalid length.
[ 1332.261545][T18298] 8021q: adding VLAN 0 to HW filter on device bond59
[ 1332.424734][T18314] xt_hashlimit: size too large, truncated to 1048576
[ 1332.452005][T18316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12280'.
[ 1332.649155][T18324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12284'.
[ 1332.653912][T18324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12284'.
[ 1332.656965][T18324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12284'.
[ 1332.660034][T18324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12284'.
[ 1332.663915][T18324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12284'.
[ 1332.667238][T18324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12284'.
[ 1332.670155][T18324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12284'.
[ 1332.673172][T18324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12284'.
[ 1333.220554][T18340] netlink: 'syz.2.12289': attribute type 1 has an invalid length.
[ 1333.541182][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 48 seconds
[ 1333.544621][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 48 seconds
[ 1333.548157][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 48 seconds
[ 1333.551656][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 48 seconds
[ 1336.240177][T18435] netlink: 'syz.0.12316': attribute type 1 has an invalid length.
[ 1336.243502][T18435] netlink: 'syz.0.12316': attribute type 4 has an invalid length.
[ 1336.246235][T18435] __nla_validate_parse: 81 callbacks suppressed
[ 1336.246278][T18435] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.12316'.
[ 1336.593212][T18451] netlink: 'syz.1.12320': attribute type 1 has an invalid length.
[ 1336.595991][T18451] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12320'.
[ 1336.901399][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 50 seconds
[ 1336.904773][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 50 seconds
[ 1336.908266][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 50 seconds
[ 1336.911813][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 50 seconds
[ 1337.169654][T18453] syzkaller1: entered promiscuous mode
[ 1337.171951][T18453] syzkaller1: entered allmulticast mode
[ 1337.552085][T18473] syzkaller1: entered promiscuous mode
[ 1337.555357][T18473] syzkaller1: entered allmulticast mode
[ 1337.687555][T18490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12332'.
[ 1337.702061][T18490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12332'.
[ 1337.704964][T18490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12332'.
[ 1337.709763][T18490] netlink: 'syz.1.12332': attribute type 2 has an invalid length.
[ 1337.716935][T18490] netlink: 'syz.1.12332': attribute type 2 has an invalid length.
[ 1337.727062][T18490] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12332'.
[ 1337.830483][T18502] syzkaller1: entered promiscuous mode
[ 1337.832938][T18502] syzkaller1: entered allmulticast mode
[ 1337.974784][T18509] syzkaller1: entered promiscuous mode
[ 1337.976991][T18509] syzkaller1: entered allmulticast mode
[ 1338.286297][T18523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12344'.
[ 1338.362166][T18526] xt_hashlimit: size too large, truncated to 1048576
[ 1338.416697][T18531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12345'.
[ 1338.429787][T18531] syzkaller0: entered promiscuous mode
[ 1338.436077][T18531] syzkaller0: entered allmulticast mode
[ 1338.761078][T18550] netlink: 'syz.1.12353': attribute type 1 has an invalid length.
[ 1338.763733][T18550] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12353'.
[ 1338.799770][T18552] tipc: New replicast peer: 255.255.255.255
[ 1338.802669][T18552] tipc: Enabled bearer <udp:syz2>, priority 5
[ 1338.810451][T18552] pim6reg1: entered promiscuous mode
[ 1338.813396][T18552] pim6reg1: entered allmulticast mode
[ 1339.172449][T18568] dummy0: mtu less than device minimum
[ 1339.421522][T18581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12362'.
[ 1339.425315][T18580] netlink: 'syz.2.12363': attribute type 28 has an invalid length.
[ 1339.429115][T18580] netlink: 'syz.2.12363': attribute type 28 has an invalid length.
[ 1339.444562][T18580] bond0: Caught tx_queue_len zero misconfig
[ 1340.262392][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 52 seconds
[ 1340.265991][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 52 seconds
[ 1340.269701][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 52 seconds
[ 1340.274057][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 52 seconds
[ 1340.436038][T18606] syzkaller1: entered promiscuous mode
[ 1340.437915][T18606] syzkaller1: entered allmulticast mode
[ 1340.475406][T18608] syzkaller1: entered promiscuous mode
[ 1340.477185][T18608] syzkaller1: entered allmulticast mode
[ 1341.348185][T18625] xt_hashlimit: size too large, truncated to 1048576
[ 1341.525398][T18636] __nla_validate_parse: 6 callbacks suppressed
[ 1341.525412][T18636] netlink: 220 bytes leftover after parsing attributes in process `syz.1.12380'.
[ 1341.532023][T18636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12380'.
[ 1341.547390][T18638] xt_hashlimit: size too large, truncated to 1048576
[ 1342.142058][T18691] IPVS: Error connecting to the multicast addr
[ 1342.466650][T18715] syzkaller1: entered promiscuous mode
[ 1342.469150][T18715] syzkaller1: entered allmulticast mode
[ 1342.750391][T18734] netlink: 'syz.2.12394': attribute type 1 has an invalid length.
[ 1342.753177][T18734] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12394'.
[ 1342.756179][T18735] netlink: 'syz.2.12394': attribute type 1 has an invalid length.
[ 1342.758925][T18735] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12394'.
[ 1343.038897][T18744] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12397'.
[ 1343.609682][T18763] x_tables: duplicate underflow at hook 4
[ 1343.621240][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 54 seconds
[ 1343.625168][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 54 seconds
[ 1343.629009][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 54 seconds
[ 1343.632972][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 54 seconds
[ 1343.779912][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12407'.
[ 1343.790400][T18776] SET target dimension over the limit!
[ 1343.796417][T18776] syzkaller0: entered promiscuous mode
[ 1343.798166][T18776] syzkaller0: entered allmulticast mode
[ 1344.038510][T18797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12414'.
[ 1344.184701][T18814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12418'.
[ 1344.574077][T18837] xt_addrtype: ipv6 BLACKHOLE matching not supported
[ 1344.583738][T18837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12424'.
[ 1344.738155][T18849] xt_hashlimit: size too large, truncated to 1048576
[ 1344.898850][T18853] sctp: [Deprecated]: syz.2.12429 (pid 18853) Use of int in maxseg socket option.
[ 1344.898850][T18853] Use struct sctp_assoc_value instead
[ 1344.905869][T18853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12429'.
[ 1344.935048][T18855] veth0_macvtap: Caught tx_queue_len zero misconfig
[ 1344.939728][T18855] netlink: 'syz.2.12430': attribute type 1 has an invalid length.
[ 1345.104514][T18867] syzkaller0: entered promiscuous mode
[ 1345.106479][T18867] syzkaller0: entered allmulticast mode
[ 1345.216765][T18869] xt_hashlimit: size too large, truncated to 1048576
[ 1345.504286][T18883] netlink: 'syz.2.12439': attribute type 2 has an invalid length.
[ 1345.506829][T18883] netlink: 'syz.2.12439': attribute type 2 has an invalid length.
[ 1345.713754][T18896] netlink: 'syz.2.12442': attribute type 1 has an invalid length.
[ 1345.898854][T18904] syzkaller0: entered promiscuous mode
[ 1345.902991][T18904] syzkaller0: entered allmulticast mode
[ 1346.704726][T18926] __nla_validate_parse: 7 callbacks suppressed
[ 1346.704740][T18926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12449'.
[ 1346.815128][T18938] syzkaller1: entered promiscuous mode
[ 1346.817356][T18938] syzkaller1: entered allmulticast mode
[ 1346.984669][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 56 seconds
[ 1346.990578][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 56 seconds
[ 1346.995529][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 56 seconds
[ 1346.999896][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 56 seconds
[ 1347.036086][T18945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12454'.
[ 1347.152784][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12455'.
[ 1347.156575][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12455'.
[ 1347.319293][T18957] netlink: 'syz.0.12457': attribute type 1 has an invalid length.
[ 1347.322892][T18957] netlink: 224 bytes leftover after parsing attributes in process `syz.0.12457'.
[ 1348.126112][T18978] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[ 1348.276184][T18995] syzkaller1: entered promiscuous mode
[ 1348.282536][T18995] syzkaller1: entered allmulticast mode
[ 1348.475942][T19002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12470'.
[ 1348.489196][T19003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12470'.
[ 1348.492416][T19003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12470'.
[ 1348.556384][T19012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12473'.
[ 1348.619363][T19015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12473'.
[ 1348.787660][T19022] netlink: 'syz.2.12476': attribute type 1 has an invalid length.
[ 1348.947301][T19026] xt_hashlimit: size too large, truncated to 1048576
[ 1350.342097][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 58 seconds
[ 1350.345688][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 58 seconds
[ 1350.349901][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 58 seconds
[ 1350.353684][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 58 seconds
[ 1350.728038][T19082] xt_hashlimit: size too large, truncated to 1048576
[ 1353.701290][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 60 seconds
[ 1353.704982][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 60 seconds
[ 1353.708498][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 60 seconds
[ 1353.712954][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 60 seconds
[ 1354.180764][T19098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1354.313593][T19122] Unsupported ieee802154 address type: 0
[ 1354.375831][T19133] xt_hashlimit: size too large, truncated to 1048576
[ 1354.498800][T19142] syzkaller1: entered promiscuous mode
[ 1354.500746][T19142] syzkaller1: entered allmulticast mode
[ 1354.726136][T19156] __nla_validate_parse: 10 callbacks suppressed
[ 1354.726156][T19156] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12513'.
[ 1354.733161][T19156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12513'.
[ 1354.737040][T19156] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12513'.
[ 1354.747350][T19156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12513'.
[ 1354.752529][T19156] netlink: 88 bytes leftover after parsing attributes in process `syz.0.12513'.
[ 1354.756331][T19156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12513'.
[ 1354.759285][T19156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12513'.
[ 1354.765837][T19156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12513'.
[ 1354.768831][T19156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12513'.
[ 1354.773581][T19156] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12513'.
[ 1355.666473][T19168] syzkaller1: entered promiscuous mode
[ 1355.669249][T19168] syzkaller1: entered allmulticast mode
[ 1355.703813][T19164] syzkaller1: entered promiscuous mode
[ 1355.706386][T19164] syzkaller1: entered allmulticast mode
[ 1355.786052][T19171] sctp: [Deprecated]: syz.0.12518 (pid 19171) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1355.786052][T19171] Use struct sctp_sack_info instead
[ 1355.869959][T19174] netlink: 'syz.1.12519': attribute type 1 has an invalid length.
[ 1355.878784][T19176] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20001
[ 1356.093426][T19193] xt_hashlimit: size too large, truncated to 1048576
[ 1356.258703][T19205] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1356.369885][T19209] bpq0: entered promiscuous mode
[ 1356.832520][T19238] xt_hashlimit: size too large, truncated to 1048576
[ 1357.064057][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 62 seconds
[ 1357.067410][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 62 seconds
[ 1357.070750][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 62 seconds
[ 1357.075351][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 62 seconds
[ 1357.119759][T19253] xt_hashlimit: size too large, truncated to 1048576
[ 1357.130444][T19252] xt_hashlimit: size too large, truncated to 1048576
[ 1357.282155][T19268] xt_hashlimit: size too large, truncated to 1048576
[ 1357.366859][T19281] gtp5: entered allmulticast mode
[ 1360.374681][T19283] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1360.433847][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 64 seconds
[ 1360.438833][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 64 seconds
[ 1360.443184][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 64 seconds
[ 1360.446673][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 64 seconds
[ 1360.510475][T19310] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1360.806826][T19350] __nla_validate_parse: 27 callbacks suppressed
[ 1360.806837][T19350] netlink: 112 bytes leftover after parsing attributes in process `syz.2.12565'.
[ 1361.628264][T19371] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12569'.
[ 1361.878371][T19386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12574'.
[ 1361.903254][T19386] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12574'.
[ 1361.985201][T19392] netlink: 'syz.1.12575': attribute type 1 has an invalid length.
[ 1361.988388][T19392] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12575'.
[ 1362.709758][T19404] xt_hashlimit: size too large, truncated to 1048576
[ 1362.831682][ T5836] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1362.882322][T19419] netlink: 'syz.1.12581': attribute type 12 has an invalid length.
[ 1363.405397][T19440] xt_hashlimit: size too large, truncated to 1048576
[ 1363.781228][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 66 seconds
[ 1363.784653][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 66 seconds
[ 1363.788166][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 66 seconds
[ 1363.791923][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 66 seconds
[ 1366.541641][T19456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1366.646497][T19481] xt_hashlimit: size too large, truncated to 1048576
[ 1366.666079][T19486] netlink: 'syz.0.12592': attribute type 1 has an invalid length.
[ 1366.778009][T19491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12596'.
[ 1366.854389][T19494] lo speed is unknown, defaulting to 1000
[ 1366.891703][T19496] netlink: 'syz.1.12597': attribute type 1 has an invalid length.
[ 1366.929165][T19496] 8021q: adding VLAN 0 to HW filter on device bond16
[ 1366.947460][T19496] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12597'.
[ 1366.992227][T19494] lo speed is unknown, defaulting to 1000
[ 1367.141260][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 68 seconds
[ 1367.145095][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 68 seconds
[ 1367.148585][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 68 seconds
[ 1367.152770][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 68 seconds
[ 1367.480357][T19506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12599'.
[ 1367.723103][T19517] netlink: 'syz.1.12601': attribute type 89 has an invalid length.
[ 1367.733173][T19515] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1368.674916][T19534] nbd: must specify a device to reconfigure
[ 1369.259125][T19552] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[ 1369.359968][T19557] xt_hashlimit: size too large, truncated to 1048576
[ 1369.549261][T19565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12616'.
[ 1369.573795][T19566] netlink: 34 bytes leftover after parsing attributes in process `syz.0.12616'.
[ 1369.580421][T19565] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12616'.
[ 1369.815927][T19580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12621'.
[ 1369.837294][T19580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12621'.
[ 1369.840505][T19580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12621'.
[ 1369.845608][T19580] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12621'.
[ 1369.975089][T19589] ipt_REJECT: ECHOREPLY no longer supported.
[ 1370.046444][T19596] netlink: 'syz.0.12627': attribute type 12 has an invalid length.
[ 1370.501737][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 70 seconds
[ 1370.505475][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 70 seconds
[ 1370.509114][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 70 seconds
[ 1370.513141][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 70 seconds
[ 1370.942191][T19625] : renamed from team_slave_1
[ 1373.647172][T19618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1373.726588][T19641] syzkaller0: entered promiscuous mode
[ 1373.728466][T19641] syzkaller0: entered allmulticast mode
[ 1373.834737][T19646] __nla_validate_parse: 7 callbacks suppressed
[ 1373.834756][T19646] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12639'.
[ 1373.845595][T19646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12639'.
[ 1373.861517][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 72 seconds
[ 1373.865991][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 72 seconds
[ 1373.871310][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 72 seconds
[ 1373.875841][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 72 seconds
[ 1374.200203][T19654] xt_limit: Overflow, try lower: 28676/2147483648
[ 1374.204168][T19654] netlink: 'syz.1.12642': attribute type 2 has an invalid length.
[ 1374.206881][T19654] netlink: 'syz.1.12642': attribute type 2 has an invalid length.
[ 1374.842666][T19678] xt_hashlimit: size too large, truncated to 1048576
[ 1374.916591][T19680] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12647'.
[ 1374.973504][T19692] syzkaller1: entered promiscuous mode
[ 1374.975387][T19692] syzkaller1: entered allmulticast mode
[ 1375.108851][T19698] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12654'.
[ 1375.261585][T19707] syzkaller1: entered promiscuous mode
[ 1375.263473][T19707] syzkaller1: entered allmulticast mode
[ 1375.293843][T19708] "syz.2.12653" (19708) uses obsolete ecb(arc4) skcipher
[ 1375.393791][T19716] netlink: 'syz.2.12660': attribute type 1 has an invalid length.
[ 1375.464403][T19726] syzkaller1: entered promiscuous mode
[ 1375.467817][T19726] syzkaller1: entered allmulticast mode
[ 1375.474479][T19725] netlink: 'syz.1.12662': attribute type 1 has an invalid length.
[ 1375.674709][T19730] netlink: 76 bytes leftover after parsing attributes in process `syz.1.12663'.
[ 1376.045683][T19763] lo speed is unknown, defaulting to 1000
[ 1376.147310][T19763] lo speed is unknown, defaulting to 1000
[ 1376.353298][T19787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12678'.
[ 1376.560202][T19797] xt_hashlimit: size too large, truncated to 1048576
[ 1376.754808][T19810] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002
[ 1376.939451][T19817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12684'.
[ 1377.222972][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 74 seconds
[ 1377.226903][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 74 seconds
[ 1377.230765][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 74 seconds
[ 1377.236324][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 74 seconds
[ 1377.248693][T19819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12685'.
[ 1377.608698][T19822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12686'.
[ 1377.697425][T19828] xt_hashlimit: size too large, truncated to 1048576
[ 1377.801479][T19831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12690'.
[ 1378.056102][T19845] delete_channel: no stack
[ 1378.130293][T19855] syzkaller1: entered promiscuous mode
[ 1378.132775][T19855] syzkaller1: entered allmulticast mode
[ 1378.352777][T19871] netlink: 'syz.2.12702': attribute type 10 has an invalid length.
[ 1378.566043][T19896] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[ 1378.754972][T19902] netlink: 'syz.1.12711': attribute type 1 has an invalid length.
[ 1378.794915][T19909] xt_hashlimit: size too large, truncated to 1048576
[ 1378.914972][T19919] __nla_validate_parse: 9 callbacks suppressed
[ 1378.914991][T19919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12716'.
[ 1378.924252][T19920] 
[ 1378.925351][T19920] ======================================================
[ 1378.928235][T19920] WARNING: possible circular locking dependency detected
[ 1378.930988][T19920] syzkaller #0 Not tainted
[ 1378.932958][T19920] ------------------------------------------------------
[ 1378.935783][T19920] syz.1.12715/19920 is trying to acquire lock:
[ 1378.937867][T19920] ffff88810368a0e8 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}, at: hugetlb_fault+0x3d8/0x1510
[ 1378.941526][T19920] 
[ 1378.941526][T19920] but task is already holding lock:
[ 1378.944421][T19920] ffff88811f059bb8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[ 1378.948352][T19920] 
[ 1378.948352][T19920] which lock already depends on the new lock.
[ 1378.948352][T19920] 
[ 1378.952582][T19920] 
[ 1378.952582][T19920] the existing dependency chain (in reverse order) is:
[ 1378.956237][T19920] 
[ 1378.956237][T19920] -> #8 (&mm->mmap_lock){++++}-{4:4}:
[ 1378.959259][T19920]        __might_fault+0xcb/0x130
[ 1378.961347][T19920]        _copy_from_user+0x28/0xb0
[ 1378.963507][T19920]        csum_and_copy_from_iter_full+0x1e7/0x1f00
[ 1378.966203][T19920]        ip_generic_getfrag+0x149/0x2d0
[ 1378.968493][T19920]        __ip6_append_data+0x3902/0x3e90
[ 1378.970823][T19920]        ip6_append_data+0x10f/0x280
[ 1378.972988][T19920]        rawv6_sendmsg+0x12d3/0x18e0
[ 1378.975166][T19920]        ____sys_sendmsg+0x80a/0x9f0
[ 1378.977351][T19920]        ___sys_sendmsg+0x2a5/0x360
[ 1378.979271][T19920]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1378.981025][T19920]        do_syscall_64+0x15f/0xf80
[ 1378.982696][T19920]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1378.984724][T19920] 
[ 1378.984724][T19920] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}:
[ 1378.987095][T19920]        lock_sock_nested+0x41/0x100
[ 1378.988752][T19920]        inet_shutdown+0x6a/0x390
[ 1378.990392][T19920]        nbd_mark_nsock_dead+0x2e9/0x560
[ 1378.992696][T19920]        recv_work+0x1c2e/0x1d40
[ 1378.994698][T19920]        process_scheduled_works+0xb5d/0x1860
[ 1378.996621][T19920]        worker_thread+0xa53/0xfc0
[ 1378.998242][T19920]        kthread+0x388/0x470
[ 1378.999674][T19920]        ret_from_fork+0x514/0xb70
[ 1379.001585][T19920]        ret_from_fork_asm+0x1a/0x30
[ 1379.003742][T19920] 
[ 1379.003742][T19920] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1379.006850][T19920]        __mutex_lock+0x1a3/0x1550
[ 1379.008961][T19920]        nbd_queue_rq+0x37b/0x1100
[ 1379.010675][T19920]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1379.012672][T19920]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1379.014982][T19920]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1379.017069][T19920]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1379.018866][T19920]        blk_mq_dispatch_list+0xd16/0xe10
[ 1379.020749][T19920]        blk_mq_flush_plug_list+0x48d/0x570
[ 1379.022691][T19920]        __blk_flush_plug+0x3ed/0x4d0
[ 1379.024468][T19920]        __submit_bio+0x28d/0x580
[ 1379.026165][T19920]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1379.028371][T19920]        block_read_full_folio+0x599/0x830
[ 1379.030748][T19920]        filemap_read_folio+0x137/0x3b0
[ 1379.032905][T19920]        do_read_cache_folio+0x358/0x590
[ 1379.034830][T19920]        read_part_sector+0xb6/0x2b0
[ 1379.036597][T19920]        adfspart_check_ICS+0xb1/0x960
[ 1379.038419][T19920]        bdev_disk_changed+0x817/0x1770
[ 1379.040187][T19920]        blkdev_get_whole+0x380/0x510
[ 1379.042028][T19920]        bdev_open+0x31e/0xd30
[ 1379.043591][T19920]        blkdev_open+0x470/0x610
[ 1379.045310][T19920]        do_dentry_open+0x785/0x14e0
[ 1379.047210][T19920]        vfs_open+0x3b/0x340
[ 1379.049063][T19920]        path_openat+0x2e08/0x3860
[ 1379.051141][T19920]        do_file_open+0x23e/0x4a0
[ 1379.053230][T19920]        do_sys_openat2+0x113/0x200
[ 1379.055377][T19920]        __x64_sys_openat+0x138/0x170
[ 1379.057514][T19920]        do_syscall_64+0x15f/0xf80
[ 1379.059591][T19920]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1379.062237][T19920] 
[ 1379.062237][T19920] -> #5 (&cmd->lock){+.+.}-{4:4}:
[ 1379.065134][T19920]        __mutex_lock+0x1a3/0x1550
[ 1379.067200][T19920]        nbd_queue_rq+0xc6/0x1100
[ 1379.069263][T19920]        blk_mq_dispatch_rq_list+0xa70/0x1910
[ 1379.071792][T19920]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[ 1379.074592][T19920]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1379.077260][T19920]        blk_mq_run_hw_queue+0x348/0x4f0
[ 1379.079541][T19920]        blk_mq_dispatch_list+0xd16/0xe10
[ 1379.081874][T19920]        blk_mq_flush_plug_list+0x48d/0x570
[ 1379.084260][T19920]        __blk_flush_plug+0x3ed/0x4d0
[ 1379.086366][T19920]        __submit_bio+0x28d/0x580
[ 1379.088384][T19920]        submit_bio_noacct_nocheck+0x2f4/0xa40
[ 1379.090921][T19920]        block_read_full_folio+0x599/0x830
[ 1379.093181][T19920]        filemap_read_folio+0x137/0x3b0
[ 1379.095072][T19920]        do_read_cache_folio+0x358/0x590
[ 1379.096909][T19920]        read_part_sector+0xb6/0x2b0
[ 1379.098905][T19920]        adfspart_check_ICS+0xb1/0x960
[ 1379.101022][T19920]        bdev_disk_changed+0x817/0x1770
[ 1379.103099][T19920]        blkdev_get_whole+0x380/0x510
[ 1379.105288][T19920]        bdev_open+0x31e/0xd30
[ 1379.107289][T19920]        blkdev_open+0x470/0x610
[ 1379.109319][T19920]        do_dentry_open+0x785/0x14e0
[ 1379.111499][T19920]        vfs_open+0x3b/0x340
[ 1379.113397][T19920]        path_openat+0x2e08/0x3860
[ 1379.115495][T19920]        do_file_open+0x23e/0x4a0
[ 1379.117160][T19920]        do_sys_openat2+0x113/0x200
[ 1379.118963][T19920]        __x64_sys_openat+0x138/0x170
[ 1379.120636][T19920]        do_syscall_64+0x15f/0xf80
[ 1379.122362][T19920]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1379.124586][T19920] 
[ 1379.124586][T19920] -> #4 (set->srcu){.+.+}-{0:0}:
[ 1379.127271][T19920]        __synchronize_srcu+0xca/0x300
[ 1379.129376][T19920]        elevator_switch+0x1e8/0x7a0
[ 1379.131458][T19920]        elevator_change+0x2cc/0x450
[ 1379.133331][T19920]        elevator_set_default+0x36c/0x430
[ 1379.135259][T19920]        blk_register_queue+0x3e9/0x4e0
[ 1379.137062][T19920]        __add_disk+0x677/0xd50
[ 1379.138817][T19920]        add_disk_fwnode+0xfb/0x480
[ 1379.140774][T19920]        nbd_dev_add+0x72c/0xb50
[ 1379.142440][T19920]        nbd_init+0x168/0x1f0
[ 1379.144119][T19920]        do_one_initcall+0x250/0x870
[ 1379.145952][T19920]        do_initcall_level+0x104/0x190
[ 1379.147713][T19920]        do_initcalls+0x59/0xa0
[ 1379.149417][T19920]        kernel_init_freeable+0x2a6/0x3e0
[ 1379.151582][T19920]        kernel_init+0x1d/0x1d0
[ 1379.153322][T19920]        ret_from_fork+0x514/0xb70
[ 1379.154988][T19920]        ret_from_fork_asm+0x1a/0x30
[ 1379.156723][T19920] 
[ 1379.156723][T19920] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[ 1379.159433][T19920]        __mutex_lock+0x1a3/0x1550
[ 1379.161320][T19920]        elevator_change+0x1b3/0x450
[ 1379.163051][T19920]        elevator_set_none+0xb5/0x140
[ 1379.164850][T19920]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[ 1379.167091][T19920]        nbd_start_device+0x17f/0xb10
[ 1379.169282][T19920]        nbd_genl_connect+0x165b/0x1cf0
[ 1379.171435][T19920]        genl_family_rcv_msg_doit+0x22a/0x330
[ 1379.173857][T19920]        genl_rcv_msg+0x61c/0x7a0
[ 1379.175687][T19920]        netlink_rcv_skb+0x232/0x4b0
[ 1379.177633][T19920]        genl_rcv+0x28/0x40
[ 1379.179090][T19920]        netlink_unicast+0x75c/0x8e0
[ 1379.180790][T19920]        netlink_sendmsg+0x813/0xb40
[ 1379.182583][T19920]        ____sys_sendmsg+0x972/0x9f0
[ 1379.184369][T19920]        ___sys_sendmsg+0x2a5/0x360
[ 1379.186239][T19920]        __x64_sys_sendmsg+0x1bd/0x2a0
[ 1379.187978][T19920]        do_syscall_64+0x15f/0xf80
[ 1379.189619][T19920]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1379.191810][T19920] 
[ 1379.191810][T19920] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[ 1379.194843][T19920]        blk_alloc_queue+0x546/0x680
[ 1379.196552][T19920]        __blk_mq_alloc_disk+0x197/0x390
[ 1379.198583][T19920]        nbd_dev_add+0x499/0xb50
[ 1379.200718][T19920]        nbd_init+0x168/0x1f0
[ 1379.202596][T19920]        do_one_initcall+0x250/0x870
[ 1379.204783][T19920]        do_initcall_level+0x104/0x190
[ 1379.207063][T19920]        do_initcalls+0x59/0xa0
[ 1379.209032][T19920]        kernel_init_freeable+0x2a6/0x3e0
[ 1379.211341][T19920]        kernel_init+0x1d/0x1d0
[ 1379.213431][T19920]        ret_from_fork+0x514/0xb70
[ 1379.215438][T19920]        ret_from_fork_asm+0x1a/0x30
[ 1379.217100][T19920] 
[ 1379.217100][T19920] -> #1 (fs_reclaim){+.+.}-{0:0}:
[ 1379.219475][T19920]        fs_reclaim_acquire+0x71/0x100
[ 1379.221404][T19920]        kmem_cache_alloc_noprof+0x40/0x650
[ 1379.223308][T19920]        __anon_vma_prepare+0xcb/0x4a0
[ 1379.225124][T19920]        __vmf_anon_prepare+0xe1/0x1b0
[ 1379.226846][T19920]        hugetlb_no_page+0x399/0x2100
[ 1379.228554][T19920]        hugetlb_fault+0x747/0x1510
[ 1379.230215][T19920]        handle_mm_fault+0x2007/0x3170
[ 1379.231997][T19920]        __get_user_pages+0x1683/0x2720
[ 1379.233833][T19920]        populate_vma_page_range+0x2be/0x3c0
[ 1379.236030][T19920]        __mm_populate+0x25f/0x390
[ 1379.238032][T19920]        vm_mmap_pgoff+0x3aa/0x4f0
[ 1379.239645][T19920]        ksys_mmap_pgoff+0x586/0x760
[ 1379.241426][T19920]        do_syscall_64+0x15f/0xf80
[ 1379.243223][T19920]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1379.245357][T19920] 
[ 1379.245357][T19920] -> #0 (&hugetlb_fault_mutex_table[i]){+.+.}-{4:4}:
[ 1379.248256][T19920]        __lock_acquire+0x15a5/0x2cf0
[ 1379.250003][T19920]        lock_acquire+0x106/0x350
[ 1379.252100][T19920]        __mutex_lock+0x1a3/0x1550
[ 1379.254101][T19920]        hugetlb_fault+0x3d8/0x1510
[ 1379.256051][T19920]        handle_mm_fault+0x2007/0x3170
[ 1379.258094][T19920]        do_user_addr_fault+0x75b/0x1340
[ 1379.259871][T19920]        exc_page_fault+0x6a/0xc0
[ 1379.261556][T19920]        asm_exc_page_fault+0x26/0x30
[ 1379.263259][T19920]        rep_movs_alternative+0xf/0x90
[ 1379.265349][T19920]        _copy_from_user+0x7a/0xb0
[ 1379.267392][T19920]        rds_setsockopt+0x886/0xe00
[ 1379.269155][T19920]        do_sock_setsockopt+0x17c/0x1b0
[ 1379.270874][T19920]        __x64_sys_setsockopt+0x13d/0x1b0
[ 1379.272652][T19920]        do_syscall_64+0x15f/0xf80
[ 1379.274411][T19920]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1379.276737][T19920] 
[ 1379.276737][T19920] other info that might help us debug this:
[ 1379.276737][T19920] 
[ 1379.279952][T19920] Chain exists of:
[ 1379.279952][T19920]   &hugetlb_fault_mutex_table[i] --> sk_lock-AF_INET6 --> &mm->mmap_lock
[ 1379.279952][T19920] 
[ 1379.284425][T19920]  Possible unsafe locking scenario:
[ 1379.284425][T19920] 
[ 1379.286832][T19920]        CPU0                    CPU1
[ 1379.288517][T19920]        ----                    ----
[ 1379.290237][T19920]   rlock(&mm->mmap_lock);
[ 1379.291652][T19920]                                lock(sk_lock-AF_INET6);
[ 1379.293859][T19920]                                lock(&mm->mmap_lock);
[ 1379.295995][T19920]   lock(&hugetlb_fault_mutex_table[i]);
[ 1379.297746][T19920] 
[ 1379.297746][T19920]  *** DEADLOCK ***
[ 1379.297746][T19920] 
[ 1379.300591][T19920] 2 locks held by syz.1.12715/19920:
[ 1379.302707][T19920]  #0: ffff888110b62ce0 (sk_lock-AF_RDS){+.+.}-{0:0}, at: rds_setsockopt+0x2a3/0xe00
[ 1379.305956][T19920]  #1: ffff88811f059bb8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[ 1379.309717][T19920] 
[ 1379.309717][T19920] stack backtrace:
[ 1379.312074][T19920] CPU: 0 UID: 0 PID: 19920 Comm: syz.1.12715 Not tainted syzkaller #0 PREEMPT(full) 
[ 1379.312096][T19920] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1379.312105][T19920] Call Trace:
[ 1379.312114][T19920]  <TASK>
[ 1379.312124][T19920]  dump_stack_lvl+0xe8/0x150
[ 1379.312151][T19920]  print_circular_bug+0x2e1/0x300
[ 1379.312168][T19920]  check_noncircular+0x12e/0x150
[ 1379.312182][T19920]  __lock_acquire+0x15a5/0x2cf0
[ 1379.312208][T19920]  ? do_raw_spin_unlock+0x4d/0x210
[ 1379.312223][T19920]  ? hugetlb_fault+0x3d8/0x1510
[ 1379.312238][T19920]  lock_acquire+0x106/0x350
[ 1379.312255][T19920]  ? hugetlb_fault+0x3d8/0x1510
[ 1379.312274][T19920]  __mutex_lock+0x1a3/0x1550
[ 1379.312288][T19920]  ? hugetlb_fault+0x3d8/0x1510
[ 1379.312305][T19920]  ? __lock_acquire+0x6b5/0x2cf0
[ 1379.312322][T19920]  ? hugetlb_fault+0x3d8/0x1510
[ 1379.312340][T19920]  ? __pfx___mutex_lock+0x10/0x10
[ 1379.312356][T19920]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1379.312373][T19920]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1379.312390][T19920]  hugetlb_fault+0x3d8/0x1510
[ 1379.312410][T19920]  ? __pfx_hugetlb_fault+0x10/0x10
[ 1379.312434][T19920]  handle_mm_fault+0x2007/0x3170
[ 1379.312449][T19920]  ? __pfx_mt_find+0x10/0x10
[ 1379.312465][T19920]  ? handle_mm_fault+0xee/0x3170
[ 1379.312478][T19920]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1379.312491][T19920]  ? find_vma+0xed/0x160
[ 1379.312503][T19920]  ? __pfx_find_vma+0x10/0x10
[ 1379.312514][T19920]  ? register_lock_class+0x31/0x2e0
[ 1379.312533][T19920]  ? __lock_acquire+0x6b5/0x2cf0
[ 1379.312552][T19920]  ? lock_mm_and_find_vma+0xa7/0x340
[ 1379.312567][T19920]  do_user_addr_fault+0x75b/0x1340
[ 1379.312591][T19920]  exc_page_fault+0x6a/0xc0
[ 1379.312605][T19920]  asm_exc_page_fault+0x26/0x30
[ 1379.312619][T19920] RIP: 0010:rep_movs_alternative+0xf/0x90
[ 1379.312638][T19920] Code: c4 10 e9 14 52 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e
[ 1379.312649][T19920] RSP: 0018:ffffc90004c97cb8 EFLAGS: 00010202
[ 1379.312662][T19920] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004
[ 1379.312671][T19920] RDX: 0000000000000001 RSI: 00002000000008c0 RDI: ffffc90004c97d60
[ 1379.312679][T19920] RBP: ffffc90004c97e48 R08: 0000000000000003 R09: 0000000000000004
[ 1379.312687][T19920] R10: dffffc0000000000 R11: fffff52000992fac R12: ffff8881752f0000
[ 1379.312696][T19920] R13: 1ffff11023a40e4b R14: ffffc90004c97d60 R15: 00002000000008c0
[ 1379.312724][T19920]  _copy_from_user+0x7a/0xb0
[ 1379.312740][T19920]  rds_setsockopt+0x886/0xe00
[ 1379.312761][T19920]  ? __pfx_rds_setsockopt+0x10/0x10
[ 1379.312778][T19920]  ? __fget_files+0x2a/0x420
[ 1379.312789][T19920]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1379.312805][T19920]  ? __fget_files+0x2a/0x420
[ 1379.312814][T19920]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1379.312824][T19920]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1379.312836][T19920]  ? __pfx_rds_setsockopt+0x10/0x10
[ 1379.312849][T19920]  do_sock_setsockopt+0x17c/0x1b0
[ 1379.312867][T19920]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1379.312881][T19920]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1379.312890][T19920]  do_syscall_64+0x15f/0xf80
[ 1379.312902][T19920]  ? trace_irq_disable+0x3b/0x140
[ 1379.312916][T19920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1379.312961][T19920] RIP: 0033:0x7fe61e19c819
[ 1379.312974][T19920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1379.312984][T19920] RSP: 002b:00007fe61f0a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1379.312996][T19920] RAX: ffffffffffffffda RBX: 00007fe61e416090 RCX: 00007fe61e19c819
[ 1379.313006][T19920] RDX: 0000000000000008 RSI: 0000000000000114 RDI: 0000000000000003
[ 1379.313013][T19920] RBP: 00007fe61e232c91 R08: 0000000000000004 R09: 0000000000000000
[ 1379.313021][T19920] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000
[ 1379.313030][T19920] R13: 00007fe61e416128 R14: 00007fe61e416090 R15: 00007ffe2385eba8
[ 1379.313041][T19920]  </TASK>
[ 1380.581472][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 76 seconds
[ 1380.585192][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 76 seconds
[ 1380.588946][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 76 seconds
[ 1380.592809][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 76 seconds
[ 1383.941350][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 78 seconds
[ 1383.945785][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 78 seconds
[ 1383.949442][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 78 seconds
[ 1383.953175][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 78 seconds
[ 1387.301481][   T74] block nbd0: Possible stuck request ffff88810f868000: control (read@0,1024B). Runtime 80 seconds
[ 1387.305844][   T74] block nbd0: Possible stuck request ffff88810f868200: control (read@1024,1024B). Runtime 80 seconds
[ 1387.310064][   T74] block nbd0: Possible stuck request ffff88810f868400: control (read@2048,1024B). Runtime 80 seconds
[ 1387.314600][   T74] block nbd0: Possible stuck request ffff88810f868600: control (read@3072,1024B). Runtime 80 seconds
